This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft File: 152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json) Hash identifier: B92X0gPmvpbfzMhP3iSMwKqH0PPBDADJqscrZqgEbc4= Subject key identifier: 9D:9A:8D:58:AC:DE:F8:35:75:B5:61:52:DF:6E:C0:4F:F2:EC:77:6C Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e Certificate serial: 019B33B1EF5C2CD33BEE17AB01EC7951A41E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft Manifest number: 113E Signing time: Thu 18 Dec 2025 23:00:57 +0000 Manifest this update: Thu 18 Dec 2025 23:00:57 +0000 Manifest next update: Fri 19 Dec 2025 23:00:57 +0000 Files and hashes: 1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: uCmIr+f0XUo5iDv3Sdv2ASWvicbCo3ZKdYvgbFLNWc8=) 2: 94BJXR3Uo1I8suMedxF8KSUQqKc.roa (hash: vsbbxp7WNMO8VB3ChL2ZEv1wwVeFWV4G1csg/XaauZ0=) 3: y4gQpfTPRcitVr25VP-twnptmvE.roa (hash: OvMK6obtD8GE0uGeIeGjeBIL4CSoip9fhbcWHpqNnSY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:ef:5c:2c:d3:3b:ee:17:ab:01:ec:79:51:a4:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e Validity Not Before: Dec 18 23:00:57 2025 GMT Not After : Dec 19 23:00:57 2025 GMT Subject: CN=9d9a8d58acdef83575b56152df6ec04ff2ec776c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:46:28:a9:2a:b8:b0:6d:b8:b4:64:60:11:91: 86:4a:37:40:a4:7e:02:18:86:25:39:0e:60:6d:69: 27:cd:c3:51:d4:e0:9e:a2:cf:7f:6f:4f:eb:01:af: f9:53:7c:fa:a6:96:51:e8:de:dc:77:5f:c6:65:5c: a7:81:ec:f0:f4:34:13:3d:50:76:ba:cc:9c:8a:8f: c6:c1:a4:22:5e:04:43:17:25:46:59:86:19:7a:58: 5b:31:5e:3e:4f:ad:72:33:f4:43:83:39:c4:96:9a: 04:f1:aa:54:fe:64:25:2d:94:f8:77:23:d4:81:af: c3:8c:6a:60:e9:93:24:cd:9a:82:52:5b:b9:e2:54: 01:dc:87:c6:14:45:14:6d:5b:3f:1f:33:08:a2:6c: 34:d8:b1:1d:91:71:15:c3:ab:d7:f9:61:bc:4b:5b: 51:f6:72:8b:56:ed:80:19:ce:99:82:dd:b7:99:31: 4b:f7:35:61:cc:8c:37:c6:e8:d0:12:79:f3:57:f9: fa:f2:95:31:ce:c2:21:48:c8:6d:c4:d3:7e:bc:52: 44:ea:5d:8f:3f:56:55:b7:9d:d1:c0:bb:52:d0:00: 6d:86:bc:f6:6a:a5:e3:7d:de:73:1c:9f:9e:bd:98: 3e:e2:11:13:e1:ee:0a:76:c9:e4:86:7b:7d:b9:66: e6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9A:8D:58:AC:DE:F8:35:75:B5:61:52:DF:6E:C0:4F:F2:EC:77:6C X509v3 Authority Key Identifier: keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:08:81:08:8b:d4:52:63:76:08:4f:c6:5b:7c:99:c2:9b:8a: af:95:d1:7e:d9:53:4b:76:9f:19:19:5e:f4:a4:d2:e8:dc:bd: 08:c7:fc:04:17:d7:17:b5:7b:59:58:5f:ec:69:62:f7:4f:f9: c1:fa:5b:8c:03:df:c5:06:17:ff:cb:0b:63:44:6d:fd:b3:cd: 90:53:93:39:98:76:69:a7:87:9e:80:be:17:4e:8a:07:bb:d7: fb:76:7a:67:3a:46:5a:28:5d:a8:0b:cd:19:34:02:e6:fd:b3: 5f:88:af:29:54:32:05:5d:15:7f:1e:dc:c0:ef:bc:f8:c6:4b: 2a:56:3f:21:73:1f:10:0e:1b:72:26:c3:74:c6:2f:be:0c:7e: 54:b6:cb:b7:91:1b:b4:2d:24:b9:b8:55:ef:8f:44:3b:5a:bb: 36:88:1a:2a:63:0a:d0:63:f5:7c:77:65:23:b8:d9:1e:51:80: 20:47:89:38:ed:b7:c6:4f:8f:6f:73:dc:6e:09:07:9a:2d:fe: 49:f0:d6:b2:12:0d:f2:33:5d:3c:cd:77:66:9a:d0:f9:88:7d: 8a:45:06:c1:eb:4b:67:d9:50:e0:c3:ee:a5:76:13:d0:a8:2e: 1a:a3:5e:2e:27:e0:fe:40:8a:05:8d:30:95:97:7b:7e:ef:a6: da:26:33:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszse9cLNM77herAex5UaQeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OWQ4NTZhYWE5ZWFkMTJmNzVjYjY4Y2RhZTk2YTBkMmM4 ZGRlMWUwHhcNMjUxMjE4MjMwMDU3WhcNMjUxMjE5MjMwMDU3WjAzMTEwLwYDVQQD Eyg5ZDlhOGQ1OGFjZGVmODM1NzViNTYxNTJkZjZlYzA0ZmYyZWM3NzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUYoqSq4sG24tGRgEZGGSjdApH4C GIYlOQ5gbWknzcNR1OCeos9/b0/rAa/5U3z6ppZR6N7cd1/GZVyngezw9DQTPVB2 usycio/GwaQiXgRDFyVGWYYZelhbMV4+T61yM/RDgznElpoE8apU/mQlLZT4dyPU ga/DjGpg6ZMkzZqCUlu54lQB3IfGFEUUbVs/HzMIomw02LEdkXEVw6vX+WG8S1tR 9nKLVu2AGc6Zgt23mTFL9zVhzIw3xujQEnnzV/n68pUxzsIhSMhtxNN+vFJE6l2P P1ZVt53RwLtS0ABthrz2aqXjfd5zHJ+evZg+4hET4e4Kdsnkhnt9uWbm2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2ajVis3vg1dbVhUt9uwE/y7HdsMB8GA1UdIwQY MBaAFNedhWqqnq0S91y2jNrpag0sjd4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hNWJhYTItMmEzNS00Yzc2LWE5NDAt NTk5MGNkNGRlODhiLzEvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9hNWJhYTItMmEzNS00Yzc2LWE5NDAtNTk5MGNkNGRlODhi LzEvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlAiBCIvU UmN2CE/GW3yZwpuKr5XRftlTS3afGRle9KTS6Ny9CMf8BBfXF7V7WVhf7Gli90/5 wfpbjAPfxQYX/8sLY0Rt/bPNkFOTOZh2aaeHnoC+F06KB7vX+3Z6ZzpGWihdqAvN GTQC5v2zX4ivKVQyBV0Vfx7cwO+8+MZLKlY/IXMfEA4bcibDdMYvvgx+VLbLt5Eb tC0kubhV749EO1q7NogaKmMK0GP1fHdlI7jZHlGAIEeJOO23xk+Pb3PcbgkHmi3+ SfDWshIN8jNdPM13ZprQ+Yh9ikUGwetLZ9lQ4MPupXYT0KguGqNeLifg/kCKBY0w lZd7fu+m2iYz2A== -----END CERTIFICATE-----Generated at Fri Dec 19 07:50:26 2025 by rpki-client