This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft File: p2_PrZZq5-gXHPzibbP2V3bSb-g.mft (raw, json) Hash identifier: AWokya7g6hzp7gHyLyzf5ezkLDYTuGLYaZt6yJN7Z58= Subject key identifier: 42:DB:48:6E:E0:AE:7A:8D:C9:76:CE:20:C1:F7:12:01:72:DD:A6:3A Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8 Certificate issuer: /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8 Certificate serial: 019B20D01DBC110A3C633B8C7FFD616107EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft Manifest number: 0869 Signing time: Mon 15 Dec 2025 07:01:08 +0000 Manifest this update: Mon 15 Dec 2025 07:01:08 +0000 Manifest next update: Tue 16 Dec 2025 07:01:08 +0000 Files and hashes: 1: ChDs0vPKHYXjmSRKvkz2qLqd3Rw.roa (hash: ThMIkvoH8p8/FHDDQvYXCmb7VtUAbCIv++31C7wNSNA=) 2: YH9rgvwa_c5tkfoIds2w3LcyxQU.roa (hash: O5b96K5UqDPwtmiTY4ipuOfWppIds6W4j/eFK50+Z/0=) 3: p2_PrZZq5-gXHPzibbP2V3bSb-g.crl (hash: YYLQ72AZsJPyj7WPhEH4L1kyRpsuCtyVSOanIMAMrxs=) 4: uu0B_lRFC2FFj-k7cmY35eNucIA.roa (hash: 45P7jNAbs5p5AqN2mETxLIaycHEKNPfSa4PeOiqxcQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:d0:1d:bc:11:0a:3c:63:3b:8c:7f:fd:61:61:07:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8 Validity Not Before: Dec 15 07:01:08 2025 GMT Not After : Dec 16 07:01:08 2025 GMT Subject: CN=42db486ee0ae7a8dc976ce20c1f7120172dda63a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5b:dd:16:b3:06:a2:31:6d:2a:5a:ce:6b:f3: be:21:25:24:48:80:9d:d2:98:d1:19:ca:4d:30:85: 4d:ef:87:66:49:9a:07:e3:f5:ba:9a:80:a7:f5:91: cb:ac:41:35:00:98:f9:4f:5a:69:79:e5:3a:f3:9b: 34:c1:9a:82:5b:31:87:dc:78:bb:b6:26:be:ae:fc: c2:e5:91:29:08:88:ab:6d:2e:53:02:76:2a:80:62: 32:73:96:b3:47:2b:bf:3d:d7:f2:ca:63:fe:06:f7: d6:e8:0c:ba:53:fe:1c:e0:8e:a6:2f:f1:e3:1a:e1: fc:37:61:ba:ca:e6:7c:71:ed:44:1f:bd:70:8f:7f: 9c:ed:d7:64:1c:29:25:1f:f6:11:a3:50:ef:8d:d0: c8:d2:4e:fa:d9:74:42:7a:b8:59:d3:9f:b3:30:40: 4c:e1:dc:3a:02:60:f6:73:fe:f1:6b:bb:e3:93:92: b6:c5:f8:57:65:09:96:e8:38:33:94:62:95:fa:67: b3:bd:c4:17:4f:36:23:74:b2:51:62:4e:9e:3f:e3: 44:70:cb:22:ac:d9:21:9a:07:5c:57:b1:f4:98:a7: 4b:c3:aa:76:21:0f:6f:c7:ae:4a:2c:ea:23:82:84: 61:55:22:0f:b2:1c:c4:7e:b5:f6:ff:d9:07:b9:8e: 57:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DB:48:6E:E0:AE:7A:8D:C9:76:CE:20:C1:F7:12:01:72:DD:A6:3A X509v3 Authority Key Identifier: keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:d4:d6:e2:48:34:f2:e4:bb:5d:3e:d3:d4:a1:5b:bc:05:72: 74:af:92:24:26:40:df:79:de:68:f0:c8:bb:bf:c8:fe:93:4f: 8a:6e:2c:2f:19:4f:29:8e:31:b2:f1:5b:e2:3f:85:b4:cd:67: 94:f2:13:b6:b2:f4:03:a7:6b:2c:c9:6f:8a:ea:d5:09:0d:df: 95:d9:85:84:36:56:8c:07:4c:f1:ce:d9:62:d7:ef:ff:57:5b: c0:4b:4c:e1:8c:83:85:d4:c9:33:fd:30:99:47:f9:c3:7d:d5: 9b:54:6d:94:9a:3f:b0:cf:5a:9d:f8:01:0f:b8:c4:41:be:38: 59:01:23:68:3f:09:87:d8:31:92:89:bf:ec:c1:e8:f5:06:c7: 93:8b:e0:ce:cb:d9:0b:53:e4:df:9f:cd:8a:37:1f:c8:31:7a: 42:30:85:e9:11:61:6b:19:b0:f3:25:44:b1:18:92:cf:18:c2: a2:95:23:13:38:e8:19:08:6c:cd:4f:1d:c5:c5:32:fc:16:16: e7:2b:06:ec:16:f6:17:fb:fd:25:02:cf:bb:8a:95:72:b8:66: cf:60:fd:4a:30:5f:41:9c:7b:b6:05:d6:f6:fc:ed:a9:33:05: c6:c7:1b:e8:0f:99:69:4c:25:3a:f7:22:55:4c:51:4d:75:ba: 71:3d:da:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsg0B28EQo8YzuMf/1hYQfsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmZjZmFkOTY2YWU3ZTgxNzFjZmNlMjZkYjNmNjU3NzZk MjZmZTgwHhcNMjUxMjE1MDcwMTA4WhcNMjUxMjE2MDcwMTA4WjAzMTEwLwYDVQQD Eyg0MmRiNDg2ZWUwYWU3YThkYzk3NmNlMjBjMWY3MTIwMTcyZGRhNjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlvdFrMGojFtKlrOa/O+ISUkSICd 0pjRGcpNMIVN74dmSZoH4/W6moCn9ZHLrEE1AJj5T1ppeeU685s0wZqCWzGH3Hi7 tia+rvzC5ZEpCIirbS5TAnYqgGIyc5azRyu/PdfyymP+BvfW6Ay6U/4c4I6mL/Hj GuH8N2G6yuZ8ce1EH71wj3+c7ddkHCklH/YRo1DvjdDI0k762XRCerhZ05+zMEBM 4dw6AmD2c/7xa7vjk5K2xfhXZQmW6DgzlGKV+mezvcQXTzYjdLJRYk6eP+NEcMsi rNkhmgdcV7H0mKdLw6p2IQ9vx65KLOojgoRhVSIPshzEfrX2/9kHuY5XgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELbSG7grnqNyXbOIMH3EgFy3aY6MB8GA1UdIwQY MBaAFKdvz62WaufoFxz84m2z9ld20m/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDJfUHJaWnE1LWdYSFB6aWJiUDJWM2JTYi1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kYjg3NTItODRiMi00MzhhLTliYzEt YzU0MDFmNmQ5MWQxLzEvcDJfUHJaWnE1LWdYSFB6aWJiUDJWM2JTYi1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9kYjg3NTItODRiMi00MzhhLTliYzEtYzU0MDFmNmQ5MWQx LzEvcDJfUHJaWnE1LWdYSFB6aWJiUDJWM2JTYi1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdTW4kg0 8uS7XT7T1KFbvAVydK+SJCZA33neaPDIu7/I/pNPim4sLxlPKY4xsvFb4j+FtM1n lPITtrL0A6drLMlviurVCQ3fldmFhDZWjAdM8c7ZYtfv/1dbwEtM4YyDhdTJM/0w mUf5w33Vm1RtlJo/sM9anfgBD7jEQb44WQEjaD8Jh9gxkom/7MHo9QbHk4vgzsvZ C1Pk35/NijcfyDF6QjCF6RFhaxmw8yVEsRiSzxjCopUjEzjoGQhszU8dxcUy/BYW 5ysG7Bb2F/v9JQLPu4qVcrhmz2D9SjBfQZx7tgXW9vztqTMFxscb6A+ZaUwlOvci VUxRTXW6cT3a+g== -----END CERTIFICATE-----Generated at Mon Dec 15 14:52:18 2025 by rpki-client