This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft File: p2_PrZZq5-gXHPzibbP2V3bSb-g.mft (raw, json) Hash identifier: Cx6XISWM4r1Seh+KzSm1qg+GuvZzCB/32Zt9SCcsKBU= Subject key identifier: 58:3D:77:21:EB:A1:4E:81:BE:39:9D:1A:65:1E:A0:BE:1A:52:1D:FA Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8 Certificate issuer: /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8 Certificate serial: 019AF276ED2C8DB2A50E590FB63D7AD457C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft Manifest number: 0851 Signing time: Sat 06 Dec 2025 07:01:11 +0000 Manifest this update: Sat 06 Dec 2025 07:01:11 +0000 Manifest next update: Sun 07 Dec 2025 07:01:11 +0000 Files and hashes: 1: ChDs0vPKHYXjmSRKvkz2qLqd3Rw.roa (hash: ThMIkvoH8p8/FHDDQvYXCmb7VtUAbCIv++31C7wNSNA=) 2: YH9rgvwa_c5tkfoIds2w3LcyxQU.roa (hash: O5b96K5UqDPwtmiTY4ipuOfWppIds6W4j/eFK50+Z/0=) 3: p2_PrZZq5-gXHPzibbP2V3bSb-g.crl (hash: 00jLJwoFYLZVl17mdfqkDSNg/TE4CHwI2xqrnvHILPE=) 4: uu0B_lRFC2FFj-k7cmY35eNucIA.roa (hash: 45P7jNAbs5p5AqN2mETxLIaycHEKNPfSa4PeOiqxcQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ed:2c:8d:b2:a5:0e:59:0f:b6:3d:7a:d4:57:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8 Validity Not Before: Dec 6 07:01:11 2025 GMT Not After : Dec 7 07:01:11 2025 GMT Subject: CN=583d7721eba14e81be399d1a651ea0be1a521dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a0:00:1a:88:b7:d9:67:cb:c0:61:70:0e:9a: c2:46:c4:6a:2c:b7:1e:38:97:89:62:78:75:a8:c3: 82:5b:84:16:f4:a6:19:2e:e7:16:e8:c5:2f:de:19: 2f:1c:68:b0:96:c8:65:c1:3c:cc:c7:3a:00:c7:72: 80:7d:6f:b6:22:b3:c7:58:b9:64:95:42:e5:ec:ad: 88:fe:49:91:80:82:ee:52:8e:d1:c6:97:0b:7d:e4: 1b:7d:ff:23:c7:1e:df:45:4a:4b:e0:77:01:4a:85: ae:91:1b:b8:fc:56:ca:53:c2:65:d9:3e:06:00:2a: 29:13:ac:12:37:57:4a:fb:c5:d3:e3:e4:20:0d:26: 8f:b9:93:6b:a4:1e:08:62:b9:6e:32:e9:c4:1f:a4: aa:22:24:1a:a7:5d:8b:5a:8d:22:b8:bc:30:89:af: eb:43:83:e0:3d:de:60:7e:e9:24:6b:d0:58:6a:13: 57:57:18:a8:79:4c:1b:cc:2f:c4:ed:a4:b0:21:e8: d5:7f:b3:b3:e6:66:d1:24:83:3f:e3:94:7f:87:ec: b5:e2:a2:16:89:e4:b3:32:73:5a:15:ec:9d:9f:79: 85:3a:c5:a5:23:74:e4:89:3f:08:dc:f0:be:d7:2f: 01:b7:53:b0:06:03:91:2c:dc:31:4a:75:b0:1e:a5: 40:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3D:77:21:EB:A1:4E:81:BE:39:9D:1A:65:1E:A0:BE:1A:52:1D:FA X509v3 Authority Key Identifier: keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:58:b8:a4:32:a6:63:07:64:f8:41:f5:16:16:b2:47:6c:5c: f5:09:e7:84:6e:12:95:3c:42:6a:dd:f7:50:65:ab:9c:55:ac: d2:2b:e7:c3:23:34:7d:dd:8a:74:08:8b:ac:f7:44:ac:2b:ba: 62:c3:9c:df:6b:c6:41:bb:6a:aa:83:eb:a3:30:c8:17:b2:05: 02:1e:04:db:b2:be:0f:2e:88:24:4e:7d:33:f2:1b:59:0a:9c: e9:c1:b0:51:c4:dc:a9:27:f4:83:f7:cd:41:3d:3a:e6:cb:5f: 37:6d:05:87:74:7d:b3:7d:bc:70:08:fd:1c:e8:44:45:84:9f: 86:98:7e:02:a8:8e:32:49:90:4b:9a:5a:8c:1e:ae:ba:a0:d2: 6b:99:8c:44:a0:93:16:ce:ac:9f:ca:6a:73:04:26:40:39:6f: 49:2c:f8:fc:36:d2:74:ac:68:b6:b3:6d:45:6f:d0:1d:49:18: 4f:87:fb:5e:fe:a0:fb:a3:07:0c:19:3a:68:03:6b:65:02:33: be:34:21:59:ee:d9:33:f0:15:98:51:a4:94:ee:ed:f9:2b:67: 17:bd:11:70:7d:eb:91:d9:b6:4d:3a:30:18:1c:72:bf:73:ec: 15:86:9a:56:25:40:4c:ab:fa:f5:81:00:7e:cf:22:0a:73:91: e8:cb:bc:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydu0sjbKlDlkPtj161FfHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmZjZmFkOTY2YWU3ZTgxNzFjZmNlMjZkYjNmNjU3NzZk MjZmZTgwHhcNMjUxMjA2MDcwMTExWhcNMjUxMjA3MDcwMTExWjAzMTEwLwYDVQQD Eyg1ODNkNzcyMWViYTE0ZTgxYmUzOTlkMWE2NTFlYTBiZTFhNTIxZGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6AAGoi32WfLwGFwDprCRsRqLLce OJeJYnh1qMOCW4QW9KYZLucW6MUv3hkvHGiwlshlwTzMxzoAx3KAfW+2IrPHWLlk lULl7K2I/kmRgILuUo7RxpcLfeQbff8jxx7fRUpL4HcBSoWukRu4/FbKU8Jl2T4G ACopE6wSN1dK+8XT4+QgDSaPuZNrpB4IYrluMunEH6SqIiQap12LWo0iuLwwia/r Q4PgPd5gfukka9BYahNXVxioeUwbzC/E7aSwIejVf7Oz5mbRJIM/45R/h+y14qIW ieSzMnNaFeydn3mFOsWlI3TkiT8I3PC+1y8Bt1OwBgORLNwxSnWwHqVA2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFg9dyHroU6BvjmdGmUeoL4aUh36MB8GA1UdIwQY MBaAFKdvz62WaufoFxz84m2z9ld20m/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDJfUHJaWnE1LWdYSFB6aWJiUDJWM2JTYi1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kYjg3NTItODRiMi00MzhhLTliYzEt YzU0MDFmNmQ5MWQxLzEvcDJfUHJaWnE1LWdYSFB6aWJiUDJWM2JTYi1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9kYjg3NTItODRiMi00MzhhLTliYzEtYzU0MDFmNmQ5MWQx LzEvcDJfUHJaWnE1LWdYSFB6aWJiUDJWM2JTYi1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVi4pDKm Ywdk+EH1FhayR2xc9QnnhG4SlTxCat33UGWrnFWs0ivnwyM0fd2KdAiLrPdErCu6 YsOc32vGQbtqqoProzDIF7IFAh4E27K+Dy6IJE59M/IbWQqc6cGwUcTcqSf0g/fN QT065stfN20Fh3R9s328cAj9HOhERYSfhph+AqiOMkmQS5pajB6uuqDSa5mMRKCT Fs6sn8pqcwQmQDlvSSz4/DbSdKxotrNtRW/QHUkYT4f7Xv6g+6MHDBk6aANrZQIz vjQhWe7ZM/AVmFGklO7t+StnF70RcH3rkdm2TTowGBxyv3PsFYaaViVATKv69YEA fs8iCnOR6Mu8fQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:59:14 2025 by rpki-client