This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft File: 152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json) Hash identifier: uNS+14B2HkqAGdF9u1VERdIbPXx93P/MXDICRNxUWEY= Subject key identifier: AB:11:26:40:C7:D7:10:CF:22:4F:84:E3:F8:11:5E:C0:B7:6B:FF:69 Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef Certificate serial: 019AACF0665CD80B83B1512FC2867E489A50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft Manifest number: 1743 Signing time: Sat 22 Nov 2025 19:00:27 +0000 Manifest this update: Sat 22 Nov 2025 19:00:27 +0000 Manifest next update: Sun 23 Nov 2025 19:00:27 +0000 Files and hashes: 1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: u3Fbz5u53Pz8ioOdKUcQPlM9J8QZ/U9s/z/G1uA+cWk=) 2: D6tQMtTrcrX-gfAb6Oldi--cuH0.roa (hash: hSrHBvCFCmXDyAQnKcTo97bjwp9R955PaX/sDtrTv8s=) 3: u1fNRyXyMUiOEFJEZY8QmByB7E8.roa (hash: ZcFES+4nNrRKAxBfx+5gDYNJV+7c5V3Qx9m+LvRk+bg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:f0:66:5c:d8:0b:83:b1:51:2f:c2:86:7e:48:9a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d79da465615c60094370833892da84c886e1c4ef Validity Not Before: Nov 22 19:00:27 2025 GMT Not After : Nov 23 19:00:27 2025 GMT Subject: CN=ab112640c7d710cf224f84e3f8115ec0b76bff69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:30:c9:22:0c:79:ad:e5:28:88:67:6e:86:ee: 04:8b:33:4b:93:1c:4c:42:7b:c2:b2:d4:41:74:b9: 84:9d:d7:82:f5:f7:aa:66:50:1a:12:dc:70:63:95: df:a1:39:dd:fe:49:5a:8a:54:bd:7c:e6:a0:72:f1: 84:7c:df:2a:a8:d9:87:8e:13:a3:e5:0d:13:0d:86: 42:50:ae:fc:fb:0e:dd:23:dc:e7:86:37:09:bd:04: 4a:66:ab:b5:d7:13:41:94:8b:d7:94:0a:2b:40:79: 0c:59:01:58:e7:3f:16:67:be:6c:af:d9:ec:25:9f: 87:3d:4a:e9:c9:47:e3:71:ad:5e:40:74:68:07:84: da:55:06:4f:e8:89:a0:66:6e:ee:e6:36:cf:da:d9: 8f:75:31:bf:69:ad:42:aa:c5:dc:d1:37:8b:87:44: ca:c9:5b:2f:17:13:7a:6b:b3:10:97:4e:64:de:2a: 8a:5e:cb:e4:29:d3:59:94:5e:7c:b4:3c:36:28:4c: 2b:02:9b:25:5d:7d:7f:27:00:18:c8:1a:f6:3c:24: cf:c5:8f:1a:a9:e6:4f:67:ed:17:16:70:35:31:a0: f9:0d:e3:0a:4a:41:76:b4:1c:7b:1e:23:13:fb:c5: 5d:59:69:b3:f0:fc:84:2a:54:b0:50:19:6e:f0:c9: a0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:11:26:40:C7:D7:10:CF:22:4F:84:E3:F8:11:5E:C0:B7:6B:FF:69 X509v3 Authority Key Identifier: keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:8e:d4:23:8e:a1:41:ee:57:f5:5f:df:97:2c:57:0f:fb:e5: 4a:c8:4e:b5:20:0d:cc:19:09:ba:f7:86:34:ca:8b:59:ec:e8: dc:c2:9e:70:0c:90:15:ba:99:68:50:a0:a2:2f:e8:ee:cf:f2: ac:9f:8f:a2:9b:0e:8e:0a:8b:2b:f7:41:33:d0:c1:4f:88:81: 39:62:6f:42:ba:72:0d:68:09:d9:7b:4f:49:9e:38:51:2d:eb: 4c:39:32:4b:2d:71:ff:7d:f0:da:13:97:36:ab:23:f7:1f:28: 54:ee:fb:fe:5b:4c:f6:53:6b:11:2c:b8:44:6c:0e:e9:dc:ab: 4f:0a:79:e5:84:ba:5d:7c:d6:7f:74:1f:84:99:b8:b7:62:b5: 1d:4e:c2:d5:38:54:03:80:9c:3c:49:f5:58:5f:f7:bb:66:5b: 3c:1e:e3:d4:d0:9f:62:53:50:38:0d:3d:24:a3:ef:f7:f5:d5: 0d:75:a6:1d:61:27:9c:73:c9:f8:b8:82:07:fd:10:b8:7c:2a: 6c:55:1d:f0:aa:40:1d:25:d7:48:0c:f4:ab:95:e7:ce:8f:eb: c7:2f:0e:b1:2c:68:db:41:0c:1c:eb:ef:12:f8:be:67:5c:79: 86:2b:70:df:82:f4:7a:f9:56:5b:a5:e1:af:f1:c3:df:f4:08: 44:68:ec:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqs8GZc2AuDsVEvwoZ+SJpQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OWRhNDY1NjE1YzYwMDk0MzcwODMzODkyZGE4NGM4ODZl MWM0ZWYwHhcNMjUxMTIyMTkwMDI3WhcNMjUxMTIzMTkwMDI3WjAzMTEwLwYDVQQD EyhhYjExMjY0MGM3ZDcxMGNmMjI0Zjg0ZTNmODExNWVjMGI3NmJmZjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjDJIgx5reUoiGduhu4EizNLkxxM QnvCstRBdLmEndeC9feqZlAaEtxwY5XfoTnd/klailS9fOagcvGEfN8qqNmHjhOj 5Q0TDYZCUK78+w7dI9znhjcJvQRKZqu11xNBlIvXlAorQHkMWQFY5z8WZ75sr9ns JZ+HPUrpyUfjca1eQHRoB4TaVQZP6ImgZm7u5jbP2tmPdTG/aa1CqsXc0TeLh0TK yVsvFxN6a7MQl05k3iqKXsvkKdNZlF58tDw2KEwrApslXX1/JwAYyBr2PCTPxY8a qeZPZ+0XFnA1MaD5DeMKSkF2tBx7HiMT+8VdWWmz8PyEKlSwUBlu8Mmg5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsRJkDH1xDPIk+E4/gRXsC3a/9pMB8GA1UdIwQY MBaAFNedpGVhXGAJQ3CDOJLahMiG4cTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTUya1pXRmNZQWxEY0lNNGt0cUV5SWJoeE84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9kNzljOTgtYzI3ZC00NWIzLTg2ZDkt ZGFkM2JiMTNjMGEyLzEvMTUya1pXRmNZQWxEY0lNNGt0cUV5SWJoeE84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9kNzljOTgtYzI3ZC00NWIzLTg2ZDktZGFkM2JiMTNjMGEy LzEvMTUya1pXRmNZQWxEY0lNNGt0cUV5SWJoeE84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfo7UI46h Qe5X9V/flyxXD/vlSshOtSANzBkJuveGNMqLWezo3MKecAyQFbqZaFCgoi/o7s/y rJ+PopsOjgqLK/dBM9DBT4iBOWJvQrpyDWgJ2XtPSZ44US3rTDkySy1x/33w2hOX Nqsj9x8oVO77/ltM9lNrESy4RGwO6dyrTwp55YS6XXzWf3QfhJm4t2K1HU7C1ThU A4CcPEn1WF/3u2ZbPB7j1NCfYlNQOA09JKPv9/XVDXWmHWEnnHPJ+LiCB/0QuHwq bFUd8KpAHSXXSAz0q5Xnzo/rxy8OsSxo20EMHOvvEvi+Z1x5hitw34L0evlWW6Xh r/HD3/QIRGjsHg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:47:14 2025 by rpki-client