This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft File: p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft (raw, json) Hash identifier: 7asR4+nVKqz4d9wc29ZnPN26Fw8BM27au5kZ5E1hBBc= Subject key identifier: BE:A9:0F:4B:0A:D4:7D:4C:E1:86:CF:AD:4F:31:10:50:A3:8B:F9:4D Authority key identifier: A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64 Certificate issuer: /CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764 Certificate serial: 019AF31CA3A2EA6B31B0045C2099DC615AC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:02:11 +0000 Manifest this update: Sat 06 Dec 2025 10:02:11 +0000 Manifest next update: Sun 07 Dec 2025 10:02:11 +0000 Files and hashes: 1: 1-iNy3jh1NFZXcxAiKeiVx48NW6M.roa (hash: exM+KStZhJxdlJqEmPR+3n9NcBPaEAtgOuwOgKWeJq0=) 2: p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl (hash: eVD9XsBkdfRHjTL7j5wWWQQFeNfl21icptY3TamBlDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:a3:a2:ea:6b:31:b0:04:5c:20:99:dc:61:5a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a79da2a5bd8778db6221d7bf6612db0e0fef1764 Validity Not Before: Dec 6 10:02:11 2025 GMT Not After : Dec 7 10:02:11 2025 GMT Subject: CN=bea90f4b0ad47d4ce186cfad4f311050a38bf94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6a:4f:81:12:53:68:b5:36:ac:0d:3a:45:9c: 00:ae:71:b9:2d:ac:12:c8:42:78:c5:a1:57:9b:cd: ea:41:a9:b2:04:7b:83:d4:e0:04:9d:55:2f:ea:eb: 27:a3:87:0f:1f:c9:c0:72:6c:dc:5f:09:2d:a0:00: a8:d9:8c:43:22:c6:b3:e0:5c:9e:ca:ba:11:86:cc: c5:6d:ad:47:21:59:e8:4c:f5:b2:c8:99:83:72:e2: 69:89:38:db:1e:02:da:63:6b:44:cc:a5:ec:06:e6: 4a:84:f3:44:51:ca:84:53:d5:2d:b1:d4:a4:ad:72: c5:59:f7:04:cd:41:08:5e:db:ad:cc:da:c0:e1:4b: c5:19:c4:c3:d3:c1:24:9f:6d:9b:95:c3:93:43:16: c1:0a:99:c3:2d:d1:45:d4:c1:26:a8:fe:2c:f5:72: fa:a7:9f:b9:74:29:dd:bc:ad:45:dc:b7:94:3b:ff: bd:68:62:48:db:cf:52:a3:62:29:d2:05:58:13:e5: f9:70:05:81:a7:d4:4a:72:23:be:f9:04:77:a3:47: 34:a5:a9:18:14:a1:2d:a4:06:fd:b8:ca:80:c1:72: ce:e5:09:21:b5:3c:65:b1:96:f0:59:b0:0d:de:71: 7c:8e:6f:1e:a7:47:fe:5c:ee:a8:32:e2:43:f0:1e: be:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A9:0F:4B:0A:D4:7D:4C:E1:86:CF:AD:4F:31:10:50:A3:8B:F9:4D X509v3 Authority Key Identifier: keyid:A7:9D:A2:A5:BD:87:78:DB:62:21:D7:BF:66:12:DB:0E:0F:EF:17:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p52ipb2HeNtiIde_ZhLbDg_vF2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b8415-c876-46c6-a9f6-e6bbef5d5e3e/1/p52ipb2HeNtiIde_ZhLbDg_vF2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:cb:be:c8:38:ed:40:61:c2:e2:f0:4d:dd:16:84:96:32:be: bc:4c:0e:65:25:6d:58:a2:0d:74:01:2d:f5:5c:71:d3:fd:9c: 2b:9b:5a:40:00:44:bc:e7:90:e6:77:da:e3:70:92:c7:12:cd: b2:76:22:f8:a4:02:5c:75:c9:e6:53:6a:6b:a3:65:45:f6:e4: 7b:91:70:b6:18:d1:46:fd:18:96:d3:e3:38:27:e6:b9:5a:56: 55:33:0a:d2:67:ea:91:a5:6c:e1:ce:ad:21:29:09:ef:46:11: 19:9a:24:79:b3:b7:fb:98:27:98:a5:40:2a:f9:d6:fd:7f:05: 99:67:c2:6e:5a:09:f8:36:25:50:a9:fb:ad:33:69:aa:5b:ee: 7d:1d:0c:92:d1:2d:ee:24:2a:35:39:09:b4:28:ab:88:6d:f2: 6f:4f:60:60:22:5a:5d:ad:59:9f:51:82:48:06:63:27:0f:50: e7:ed:f7:3e:45:a0:dd:ad:4e:51:56:14:30:a6:d4:aa:70:50: 9f:6f:f8:ec:c7:11:f1:14:b5:d6:27:99:7d:78:1e:99:23:8b: 7e:3d:03:37:89:f2:ea:24:01:cb:17:c6:e7:ee:14:b0:10:15: 2e:61:bd:1d:4c:cc:10:a0:6a:36:52:d4:9b:84:b4:72:96:8d: a6:18:d1:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHKOi6msxsARcIJncYVrJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OWRhMmE1YmQ4Nzc4ZGI2MjIxZDdiZjY2MTJkYjBlMGZl ZjE3NjQwHhcNMjUxMjA2MTAwMjExWhcNMjUxMjA3MTAwMjExWjAzMTEwLwYDVQQD EyhiZWE5MGY0YjBhZDQ3ZDRjZTE4NmNmYWQ0ZjMxMTA1MGEzOGJmOTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mpPgRJTaLU2rA06RZwArnG5LawS yEJ4xaFXm83qQamyBHuD1OAEnVUv6usno4cPH8nAcmzcXwktoACo2YxDIsaz4Fye yroRhszFba1HIVnoTPWyyJmDcuJpiTjbHgLaY2tEzKXsBuZKhPNEUcqEU9UtsdSk rXLFWfcEzUEIXtutzNrA4UvFGcTD08Ekn22blcOTQxbBCpnDLdFF1MEmqP4s9XL6 p5+5dCndvK1F3LeUO/+9aGJI289So2Ip0gVYE+X5cAWBp9RKciO++QR3o0c0pakY FKEtpAb9uMqAwXLO5QkhtTxlsZbwWbAN3nF8jm8ep0f+XO6oMuJD8B6+RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6pD0sK1H1M4YbPrU8xEFCji/lNMB8GA1UdIwQY MBaAFKedoqW9h3jbYiHXv2YS2w4P7xdkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDUyaXBiMkhlTnRpSWRlX1poTGJEZ192RjJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82Yjg0MTUtYzg3Ni00NmM2LWE5ZjYt ZTZiYmVmNWQ1ZTNlLzEvcDUyaXBiMkhlTnRpSWRlX1poTGJEZ192RjJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82Yjg0MTUtYzg3Ni00NmM2LWE5ZjYtZTZiYmVmNWQ1ZTNl LzEvcDUyaXBiMkhlTnRpSWRlX1poTGJEZ192RjJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsu+yDjt QGHC4vBN3RaEljK+vEwOZSVtWKINdAEt9Vxx0/2cK5taQABEvOeQ5nfa43CSxxLN snYi+KQCXHXJ5lNqa6NlRfbke5FwthjRRv0YltPjOCfmuVpWVTMK0mfqkaVs4c6t ISkJ70YRGZokebO3+5gnmKVAKvnW/X8FmWfCbloJ+DYlUKn7rTNpqlvufR0MktEt 7iQqNTkJtCiriG3yb09gYCJaXa1Zn1GCSAZjJw9Q5+33PkWg3a1OUVYUMKbUqnBQ n2/47McR8RS11ieZfXgemSOLfj0DN4ny6iQByxfG5+4UsBAVLmG9HUzMEKBqNlLU m4S0cpaNphjRvA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:56 2025 by rpki-client