This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft File: PRLRHJogPV58gmPt9URH47c1i38.mft (raw, json) Hash identifier: GTcBie3d6jMbwz+/3aRDwaYk7S09S/YMSLCD7gu4AV0= Subject key identifier: 40:6A:CC:05:37:DB:12:17:99:95:69:66:4A:95:37:96:BE:8B:1F:C4 Authority key identifier: 3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F Certificate issuer: /CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f Certificate serial: 019B5C09333209FABD1A9D7423A26E2F3065 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft Manifest number: 12BF Signing time: Fri 26 Dec 2025 19:01:05 +0000 Manifest this update: Fri 26 Dec 2025 19:01:05 +0000 Manifest next update: Sat 27 Dec 2025 19:01:05 +0000 Files and hashes: 1: IFYqWjpdJxRaG3uyQLqw79JLTGo.roa (hash: alQatZzeYH3fzwBxC+QNB+5aLjO5V+OfKBsHgM/Tlv8=) 2: PRLRHJogPV58gmPt9URH47c1i38.crl (hash: qWyDU6hXllxsMdAg7hMMLziF0nbmwk+uYwrJdTntYiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:09:33:32:09:fa:bd:1a:9d:74:23:a2:6e:2f:30:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f Validity Not Before: Dec 26 19:01:05 2025 GMT Not After : Dec 27 19:01:05 2025 GMT Subject: CN=406acc0537db1217999569664a953796be8b1fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5c:c7:2c:6d:f7:c6:9a:06:34:36:bf:cc:ea: 97:26:b9:82:6d:3f:aa:4b:25:56:14:3b:c5:75:59: 30:2c:ca:63:30:8c:f1:02:89:df:2d:42:f8:03:b3: 19:52:73:f1:46:ff:97:93:84:1e:67:b6:38:42:80: cf:53:ee:5b:df:09:8b:35:98:c3:c2:ee:b5:ea:1c: 9d:3c:e3:6c:e8:88:5a:d0:7c:cc:6a:35:f8:5f:c7: dd:27:84:6c:06:f3:46:b5:01:4f:a8:cd:7a:d1:ff: 32:78:c5:8c:57:51:b2:9c:e1:1e:26:8c:4c:97:b9: bb:79:50:92:34:9e:6e:03:2e:58:12:13:00:7c:83: 9e:1c:ce:b7:fa:73:18:cf:9c:a8:c8:c0:b1:4d:d9: e0:af:30:70:a6:2f:ba:9a:85:eb:8d:a8:31:84:80: ab:13:71:91:b6:3c:3d:68:82:d5:d5:6a:1a:9e:0e: 14:2f:ec:f8:32:1f:bf:36:6a:fa:f6:44:40:2a:e2: 58:c3:55:72:06:5c:0d:c1:9c:ae:43:1d:ed:c1:f4: e7:dd:39:78:87:0f:6a:7f:ab:90:85:b7:c8:d2:f8: 3e:25:3f:79:8d:be:cb:7a:9c:b5:e2:34:79:c0:d0: e9:49:15:df:b5:79:5c:35:e6:f2:ca:30:63:b6:f3: c6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6A:CC:05:37:DB:12:17:99:95:69:66:4A:95:37:96:BE:8B:1F:C4 X509v3 Authority Key Identifier: keyid:3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:81:9c:32:16:e0:fd:d6:01:4c:2a:a1:ae:80:5f:05:22:a6: 46:f5:7e:0e:75:63:ef:5b:ef:02:e1:b5:66:3e:13:d1:97:0f: 9f:0d:23:3d:17:18:14:dc:96:a4:7c:7b:34:bd:78:6c:d4:6e: 31:0d:76:1d:6d:bc:2d:58:10:a1:4e:33:9e:ea:b0:9c:52:12: 03:16:c4:53:da:16:a9:e2:dc:98:af:b9:39:27:37:67:08:eb: bb:45:16:3e:f6:92:11:b8:ea:ee:4e:bf:2b:4c:3f:5f:0c:d8: 79:ae:4a:f0:73:86:24:2d:ce:3d:2a:4d:1a:e2:23:a9:71:dd: a4:74:0f:32:38:e7:ac:9b:0d:83:ed:c5:70:05:dd:d1:85:1d: de:61:01:4c:6a:2a:97:12:b0:9e:31:97:40:d3:ab:69:cf:8b: da:91:74:a9:3c:89:6f:e5:09:ca:89:2a:9e:55:26:a3:6f:c6: 48:20:17:67:37:20:a1:b7:39:ef:fb:27:72:fb:55:ee:c0:86: 6c:0e:1d:2f:2a:82:68:52:b2:91:e6:0c:80:c9:78:63:09:b8: fa:40:6d:e0:b0:54:18:3e:41:d0:29:f1:f5:3e:cb:51:50:e5: c3:ca:5e:78:6d:31:bc:15:25:df:7d:2d:45:12:92:38:35:f9: 2b:4b:13:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcCTMyCfq9Gp10I6JuLzBlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMTJkMTFjOWEyMDNkNWU3YzgyNjNlZGY1NDQ0N2UzYjcz NThiN2YwHhcNMjUxMjI2MTkwMTA1WhcNMjUxMjI3MTkwMTA1WjAzMTEwLwYDVQQD Eyg0MDZhY2MwNTM3ZGIxMjE3OTk5NTY5NjY0YTk1Mzc5NmJlOGIxZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlzHLG33xpoGNDa/zOqXJrmCbT+q SyVWFDvFdVkwLMpjMIzxAonfLUL4A7MZUnPxRv+Xk4QeZ7Y4QoDPU+5b3wmLNZjD wu616hydPONs6Iha0HzMajX4X8fdJ4RsBvNGtQFPqM160f8yeMWMV1GynOEeJoxM l7m7eVCSNJ5uAy5YEhMAfIOeHM63+nMYz5yoyMCxTdngrzBwpi+6moXrjagxhICr E3GRtjw9aILV1Woang4UL+z4Mh+/Nmr69kRAKuJYw1VyBlwNwZyuQx3twfTn3Tl4 hw9qf6uQhbfI0vg+JT95jb7Lepy14jR5wNDpSRXftXlcNebyyjBjtvPGnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBqzAU32xIXmZVpZkqVN5a+ix/EMB8GA1UdIwQY MBaAFD0S0RyaID1efIJj7fVER+O3NYt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFJMUkhKb2dQVjU4Z21QdDlVUkg0N2MxaTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xNjkzYmYtNmQ0MC00NjljLWIwNTYt NWE4NDU3MTIxYTBiLzEvUFJMUkhKb2dQVjU4Z21QdDlVUkg0N2MxaTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8xNjkzYmYtNmQ0MC00NjljLWIwNTYtNWE4NDU3MTIxYTBi LzEvUFJMUkhKb2dQVjU4Z21QdDlVUkg0N2MxaTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4GcMhbg /dYBTCqhroBfBSKmRvV+DnVj71vvAuG1Zj4T0ZcPnw0jPRcYFNyWpHx7NL14bNRu MQ12HW28LVgQoU4znuqwnFISAxbEU9oWqeLcmK+5OSc3Zwjru0UWPvaSEbjq7k6/ K0w/XwzYea5K8HOGJC3OPSpNGuIjqXHdpHQPMjjnrJsNg+3FcAXd0YUd3mEBTGoq lxKwnjGXQNOrac+L2pF0qTyJb+UJyokqnlUmo2/GSCAXZzcgobc57/sncvtV7sCG bA4dLyqCaFKykeYMgMl4Ywm4+kBt4LBUGD5B0Cnx9T7LUVDlw8peeG0xvBUl330t RRKSODX5K0sTJQ== -----END CERTIFICATE-----Generated at Fri Dec 26 21:05:29 2025 by rpki-client