This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft File: 152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json) Hash identifier: RdIWYYy4xrPM84qq+Eliw0ox+xC3/LJPWBrAxSXpbqg= Subject key identifier: 16:1C:36:96:D1:EA:D9:53:FA:58:23:D1:01:FD:08:9B:B2:D2:D7:AE Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e Certificate serial: 019B397DD640E380D2700E2CBD7402CCBBF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft Manifest number: 1141 Signing time: Sat 20 Dec 2025 02:01:46 +0000 Manifest this update: Sat 20 Dec 2025 02:01:46 +0000 Manifest next update: Sun 21 Dec 2025 02:01:46 +0000 Files and hashes: 1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: ded4IDFqF0irx+Roim0zJUKZUzCUpjSa/6D544SfUmQ=) 2: 94BJXR3Uo1I8suMedxF8KSUQqKc.roa (hash: vsbbxp7WNMO8VB3ChL2ZEv1wwVeFWV4G1csg/XaauZ0=) 3: y4gQpfTPRcitVr25VP-twnptmvE.roa (hash: OvMK6obtD8GE0uGeIeGjeBIL4CSoip9fhbcWHpqNnSY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:d6:40:e3:80:d2:70:0e:2c:bd:74:02:cc:bb:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e Validity Not Before: Dec 20 02:01:46 2025 GMT Not After : Dec 21 02:01:46 2025 GMT Subject: CN=161c3696d1ead953fa5823d101fd089bb2d2d7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:59:c3:7e:7e:0b:59:8e:98:22:e4:47:9c: 06:87:04:ab:50:8f:e0:f5:30:de:c1:eb:d4:73:18: 5e:4c:54:63:22:46:3f:96:cf:5a:eb:75:8d:8e:21: 74:2d:55:79:05:2b:dc:28:66:5a:44:9b:f3:86:64: d6:a9:f3:7f:30:11:f9:02:c9:00:77:9b:ef:87:8c: c5:75:43:50:bf:ab:ad:08:ae:07:cb:e1:42:85:87: 1f:23:11:bb:3b:22:54:9c:3f:e6:f4:69:33:74:cd: 3b:64:9b:8d:e2:cb:5e:b6:ca:fd:cc:34:13:ff:b0: 68:8e:eb:d9:aa:41:fa:07:9a:75:be:da:97:11:92: 89:2c:9c:9f:54:73:8d:98:c1:00:9a:60:b8:d4:91: de:e4:4e:1a:3e:9c:59:30:65:7f:66:4f:51:57:87: a9:2d:f8:38:d9:e5:53:2f:0c:4e:41:ec:b1:28:54: af:ec:88:52:58:e5:1a:a1:b3:5f:b1:9f:48:2b:d5: 28:10:53:ba:99:8c:95:06:5a:0a:96:14:4e:1e:0a: d9:bf:15:d8:b2:7b:a4:9c:55:8a:96:47:df:a8:57: e1:f8:07:fe:6c:9d:4f:5d:95:fe:49:75:35:1f:f4: e5:3e:fb:6d:fa:40:54:b8:02:06:e2:99:e2:66:24: 6b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1C:36:96:D1:EA:D9:53:FA:58:23:D1:01:FD:08:9B:B2:D2:D7:AE X509v3 Authority Key Identifier: keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:de:21:a2:13:db:fe:c8:cc:49:9a:ae:da:f2:2f:5b:dc:e1: 74:cf:c1:9f:bf:a9:99:b4:31:c9:99:3b:ca:9e:62:3a:8d:43: 1b:4f:fd:22:1b:f9:87:e9:2c:21:24:8a:32:2c:90:50:2c:09: a3:02:4a:3a:f7:1c:a1:4a:23:8a:4f:72:93:5f:f5:52:05:8e: b9:4c:ee:ae:55:73:76:36:02:27:75:fc:3e:d1:e1:13:69:60: 84:19:a4:a4:30:f4:9d:75:3a:fa:c7:24:65:7c:c2:a2:f5:49: 23:55:48:99:7d:8b:5c:28:0d:f1:c5:69:4b:fe:79:5f:92:c7: cf:ab:33:7f:27:96:c2:10:f5:c8:dd:fc:67:4e:e1:8c:6e:4f: a8:7d:7a:5c:95:dd:65:d0:dc:98:ca:23:82:2b:2f:fc:f0:60: ed:98:f1:14:0b:6d:e7:33:13:68:e5:30:6e:79:78:34:bd:80: 4c:d0:f1:d8:66:08:0f:28:c2:a9:b9:bf:8f:8e:82:0e:05:d4: ac:93:80:ee:fe:01:dc:73:87:78:00:69:57:88:77:3e:4f:43: df:c1:3f:fe:6f:2d:8b:9c:32:ae:73:57:c2:71:fa:d5:28:18: 05:43:f7:2b:fd:43:8e:b3:5d:93:7e:00:51:c0:e6:18:0b:ce: fe:72:9a:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fdZA44DScA4svXQCzLvyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OWQ4NTZhYWE5ZWFkMTJmNzVjYjY4Y2RhZTk2YTBkMmM4 ZGRlMWUwHhcNMjUxMjIwMDIwMTQ2WhcNMjUxMjIxMDIwMTQ2WjAzMTEwLwYDVQQD EygxNjFjMzY5NmQxZWFkOTUzZmE1ODIzZDEwMWZkMDg5YmIyZDJkN2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXhZw35+C1mOmCLkR5wGhwSrUI/g 9TDewevUcxheTFRjIkY/ls9a63WNjiF0LVV5BSvcKGZaRJvzhmTWqfN/MBH5AskA d5vvh4zFdUNQv6utCK4Hy+FChYcfIxG7OyJUnD/m9GkzdM07ZJuN4stetsr9zDQT /7BojuvZqkH6B5p1vtqXEZKJLJyfVHONmMEAmmC41JHe5E4aPpxZMGV/Zk9RV4ep Lfg42eVTLwxOQeyxKFSv7IhSWOUaobNfsZ9IK9UoEFO6mYyVBloKlhROHgrZvxXY snuknFWKlkffqFfh+Af+bJ1PXZX+SXU1H/TlPvtt+kBUuAIG4pniZiRr4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYcNpbR6tlT+lgj0QH9CJuy0teuMB8GA1UdIwQY MBaAFNedhWqqnq0S91y2jNrpag0sjd4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hNWJhYTItMmEzNS00Yzc2LWE5NDAt NTk5MGNkNGRlODhiLzEvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9hNWJhYTItMmEzNS00Yzc2LWE5NDAtNTk5MGNkNGRlODhi LzEvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi94hohPb /sjMSZqu2vIvW9zhdM/Bn7+pmbQxyZk7yp5iOo1DG0/9Ihv5h+ksISSKMiyQUCwJ owJKOvccoUojik9yk1/1UgWOuUzurlVzdjYCJ3X8PtHhE2lghBmkpDD0nXU6+sck ZXzCovVJI1VImX2LXCgN8cVpS/55X5LHz6szfyeWwhD1yN38Z07hjG5PqH16XJXd ZdDcmMojgisv/PBg7ZjxFAtt5zMTaOUwbnl4NL2ATNDx2GYIDyjCqbm/j46CDgXU rJOA7v4B3HOHeABpV4h3Pk9D38E//m8ti5wyrnNXwnH61SgYBUP3K/1DjrNdk34A UcDmGAvO/nKaHg== -----END CERTIFICATE-----Generated at Sat Dec 20 09:50:13 2025 by rpki-client