This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft File: 152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json) Hash identifier: zOLtPofChQmcAiUwz0ZaZRO4TJ4u/r7AokbMnIwY7Ns= Subject key identifier: D9:1F:ED:2B:9F:33:D5:CB:0C:98:A1:6F:CC:A6:DA:21:7B:06:48:C4 Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e Certificate serial: 019AF209ADC37DF54944B40072A61E1E538A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft Manifest number: 111C Signing time: Sat 06 Dec 2025 05:01:51 +0000 Manifest this update: Sat 06 Dec 2025 05:01:51 +0000 Manifest next update: Sun 07 Dec 2025 05:01:51 +0000 Files and hashes: 1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: S72m2Dou+6B1Wfg+tGMRhiNE/W5BjW9KCWt841i54EE=) 2: 94BJXR3Uo1I8suMedxF8KSUQqKc.roa (hash: vsbbxp7WNMO8VB3ChL2ZEv1wwVeFWV4G1csg/XaauZ0=) 3: y4gQpfTPRcitVr25VP-twnptmvE.roa (hash: OvMK6obtD8GE0uGeIeGjeBIL4CSoip9fhbcWHpqNnSY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:ad:c3:7d:f5:49:44:b4:00:72:a6:1e:1e:53:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e Validity Not Before: Dec 6 05:01:51 2025 GMT Not After : Dec 7 05:01:51 2025 GMT Subject: CN=d91fed2b9f33d5cb0c98a16fcca6da217b0648c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:04:9a:ec:0c:7c:71:f6:3d:4a:f8:6b:9b:31: e1:d3:e7:58:9c:00:c1:09:8b:5e:99:fc:4c:a0:80: fe:cb:f9:a0:55:01:1b:f4:2c:8e:55:1c:4a:d7:3f: d4:74:54:3b:1a:7e:23:5f:2b:31:47:a0:0e:76:a9: bf:e7:06:a0:8e:7b:c8:8f:05:76:d8:6c:89:7a:a1: 81:cd:bd:2d:9c:88:41:dd:aa:07:68:30:f6:5c:43: 6d:3b:b1:31:f3:17:6e:82:e5:4f:2a:33:f5:bf:50: 7b:7b:4e:c9:2c:52:60:07:e8:64:f9:dc:16:0c:ec: 84:ea:05:dd:2b:bc:92:ae:24:25:41:10:0e:0d:55: 73:76:d7:82:a1:c5:f6:8b:36:ec:2f:fa:f6:68:db: 37:fe:d5:39:6c:e0:2e:c2:e3:80:e0:3d:e8:bb:a8: 72:09:18:27:b6:7a:a8:8a:10:54:bb:8c:5c:9e:a4: bf:f0:4d:bd:fb:a0:36:81:42:83:5d:fc:b5:aa:ba: 7f:77:e4:5e:0c:cb:97:8b:52:29:7e:9a:95:d0:fb: aa:8d:19:d1:1d:0a:32:9e:fd:e6:be:00:29:3d:b1: 76:58:80:ef:f1:1d:9f:b2:1f:51:ed:d0:0f:f6:1b: 58:b6:a2:36:cc:aa:14:44:e2:61:7c:b7:8f:01:63: 10:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1F:ED:2B:9F:33:D5:CB:0C:98:A1:6F:CC:A6:DA:21:7B:06:48:C4 X509v3 Authority Key Identifier: keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:36:d9:77:54:66:40:30:07:8b:55:c1:bb:83:32:d6:8d:c6: ca:4a:00:77:be:8d:98:f0:fe:87:8c:c8:c9:ac:ff:98:c6:2e: 8f:78:65:91:78:20:57:21:ed:81:c1:2f:65:97:9a:72:7c:bd: 04:c3:1f:6e:5d:b9:a9:28:3e:41:fc:74:7b:84:95:69:a0:87: 9f:ad:e5:f8:95:1e:e5:83:e1:9c:a2:c2:ea:79:3e:32:88:3e: d5:df:ae:b9:44:a1:62:a5:7b:a1:f5:00:b9:30:46:c9:e5:0f: ef:5c:f3:a7:fa:88:3d:75:ff:ea:7b:77:c8:55:b0:c0:ab:ff: e8:0a:f6:15:69:a0:c7:2e:18:78:e2:36:9f:80:bd:40:a1:d7: da:22:ee:bb:aa:ca:63:93:74:85:60:c3:18:2c:b2:d2:3d:ab: dd:ad:20:27:7d:91:69:28:b4:57:69:36:25:5a:71:7a:c3:66: c4:8f:f0:ed:7f:64:6f:78:20:c4:3f:0f:e3:48:a4:3b:b8:5d: e4:77:0a:e2:9b:86:e8:d0:40:1e:36:60:f5:cc:b8:f1:da:bb: b7:d1:d4:f2:26:aa:fb:61:fa:f7:f0:b6:74:f3:e5:69:d7:b6: 3b:50:66:96:e8:84:f2:74:4b:0b:b1:04:fe:ed:01:3f:63:d4: 92:c9:df:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCa3DffVJRLQAcqYeHlOKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OWQ4NTZhYWE5ZWFkMTJmNzVjYjY4Y2RhZTk2YTBkMmM4 ZGRlMWUwHhcNMjUxMjA2MDUwMTUxWhcNMjUxMjA3MDUwMTUxWjAzMTEwLwYDVQQD EyhkOTFmZWQyYjlmMzNkNWNiMGM5OGExNmZjY2E2ZGEyMTdiMDY0OGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQSa7Ax8cfY9SvhrmzHh0+dYnADB CYtemfxMoID+y/mgVQEb9CyOVRxK1z/UdFQ7Gn4jXysxR6AOdqm/5wagjnvIjwV2 2GyJeqGBzb0tnIhB3aoHaDD2XENtO7Ex8xduguVPKjP1v1B7e07JLFJgB+hk+dwW DOyE6gXdK7ySriQlQRAODVVzdteCocX2izbsL/r2aNs3/tU5bOAuwuOA4D3ou6hy CRgntnqoihBUu4xcnqS/8E29+6A2gUKDXfy1qrp/d+ReDMuXi1IpfpqV0PuqjRnR HQoynv3mvgApPbF2WIDv8R2fsh9R7dAP9htYtqI2zKoUROJhfLePAWMQyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkf7SufM9XLDJihb8ym2iF7BkjEMB8GA1UdIwQY MBaAFNedhWqqnq0S91y2jNrpag0sjd4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hNWJhYTItMmEzNS00Yzc2LWE5NDAt NTk5MGNkNGRlODhiLzEvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9hNWJhYTItMmEzNS00Yzc2LWE5NDAtNTk5MGNkNGRlODhi LzEvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjbZd1Rm QDAHi1XBu4My1o3GykoAd76NmPD+h4zIyaz/mMYuj3hlkXggVyHtgcEvZZeacny9 BMMfbl25qSg+Qfx0e4SVaaCHn63l+JUe5YPhnKLC6nk+Mog+1d+uuUShYqV7ofUA uTBGyeUP71zzp/qIPXX/6nt3yFWwwKv/6Ar2FWmgxy4YeOI2n4C9QKHX2iLuu6rK Y5N0hWDDGCyy0j2r3a0gJ32RaSi0V2k2JVpxesNmxI/w7X9kb3ggxD8P40ikO7hd 5HcK4puG6NBAHjZg9cy48dq7t9HU8iaq+2H69/C2dPPlade2O1BmluiE8nRLC7EE /u0BP2PUksnfHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:38:15 2025 by rpki-client