This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft File: p2_PrZZq5-gXHPzibbP2V3bSb-g.mft (raw, json) Hash identifier: 9LDqtvbkqC+X+4OuzFCt/kOGZ+lfee9yBUXHDWSZMQo= Subject key identifier: 21:AC:CB:97:15:D9:F1:BE:F8:8A:95:46:B4:B8:92:6F:5B:2D:81:D9 Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8 Certificate issuer: /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8 Certificate serial: 019B39EB22A93E5ACF17C0D8806949F24148 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft Manifest number: 0876 Signing time: Sat 20 Dec 2025 04:01:09 +0000 Manifest this update: Sat 20 Dec 2025 04:01:09 +0000 Manifest next update: Sun 21 Dec 2025 04:01:09 +0000 Files and hashes: 1: ChDs0vPKHYXjmSRKvkz2qLqd3Rw.roa (hash: ThMIkvoH8p8/FHDDQvYXCmb7VtUAbCIv++31C7wNSNA=) 2: YH9rgvwa_c5tkfoIds2w3LcyxQU.roa (hash: O5b96K5UqDPwtmiTY4ipuOfWppIds6W4j/eFK50+Z/0=) 3: p2_PrZZq5-gXHPzibbP2V3bSb-g.crl (hash: 8LVcCkAjtOzHDZipPsnMHrsZ4HTQnHCDLGgrnkaiST8=) 4: uu0B_lRFC2FFj-k7cmY35eNucIA.roa (hash: 45P7jNAbs5p5AqN2mETxLIaycHEKNPfSa4PeOiqxcQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:22:a9:3e:5a:cf:17:c0:d8:80:69:49:f2:41:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8 Validity Not Before: Dec 20 04:01:09 2025 GMT Not After : Dec 21 04:01:09 2025 GMT Subject: CN=21accb9715d9f1bef88a9546b4b8926f5b2d81d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a1:95:1b:95:08:25:f8:ee:b1:d7:f1:d3:dd: 2c:20:59:30:a1:99:9a:81:95:d7:22:35:5b:ec:01: 43:69:17:37:3e:ec:ba:e9:4c:70:fb:4b:1c:ac:c9: fc:6a:d4:e2:97:7e:60:52:d4:67:19:b5:fb:26:5b: 0e:3d:a4:6a:3e:f7:bf:99:a9:16:9e:dc:31:30:cb: 9e:01:21:ac:89:4d:e2:29:7b:81:28:fe:b7:01:2f: ea:10:53:41:b5:eb:6e:09:ed:2a:ec:30:cd:96:e7: bd:a2:0e:75:2d:b1:77:33:5f:fa:8d:60:ad:70:b2: 0e:7a:13:e0:e5:4c:56:59:16:1f:8a:e9:47:30:6c: d0:69:3d:28:91:4d:01:52:33:6e:b4:fe:6a:3e:2b: 80:a4:77:69:05:e2:99:15:68:1c:94:1f:31:15:3c: b2:9b:03:ed:15:26:69:79:42:45:36:96:13:99:e4: bc:8a:c5:03:ca:ec:14:10:1a:52:b3:62:0a:4b:4c: 85:a6:09:b5:d6:ea:a9:98:8b:ce:83:86:cb:9e:7b: a8:64:fa:e5:af:16:2a:5e:94:24:7a:e6:a6:1a:d6: bb:87:8d:4d:e2:20:3e:5d:3d:b3:8f:b6:29:3d:b6: 4d:ca:a5:ec:af:a2:b8:4b:90:32:d7:2e:82:27:b3: 95:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:AC:CB:97:15:D9:F1:BE:F8:8A:95:46:B4:B8:92:6F:5B:2D:81:D9 X509v3 Authority Key Identifier: keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:a1:5a:e3:ec:fc:8a:84:91:c2:53:1f:ec:f3:db:1e:a9:ec: fa:e1:13:90:a4:35:b1:b8:7a:13:58:3a:e9:86:8d:78:31:25: 31:a9:c2:7b:b9:c1:b7:e0:9c:3b:f0:56:62:57:26:75:06:24: 65:50:84:77:95:23:ae:32:e5:5a:9f:d0:a7:aa:17:94:5c:96: ce:38:1b:44:a3:90:01:60:87:da:e1:9e:a4:6d:de:db:89:5d: 7d:57:92:8f:fd:f6:3f:44:0c:06:8c:3a:63:3f:44:42:71:59: 62:83:d6:69:1e:67:c3:fc:bc:82:e0:74:b5:fb:c3:95:ba:45: a8:3e:36:ff:2d:cf:e1:2d:1e:1c:c4:39:0b:27:0c:28:68:70: 95:8d:20:6f:8f:54:ad:1a:bf:57:77:dd:5b:6d:5c:08:cf:00: 8f:7e:93:77:86:fe:15:55:0d:1e:1d:61:f7:39:f5:56:05:12: 49:0a:be:45:de:58:39:c5:00:22:db:98:30:ca:55:03:f3:5c: 4a:27:22:16:ca:ef:18:73:42:ec:fc:2a:10:eb:52:5e:17:84: 96:15:ac:04:14:5b:05:ea:f7:77:db:98:ce:5e:30:26:bb:6f: c8:15:64:4a:4d:bd:15:7b:ca:71:1b:73:4c:90:b9:c3:93:fb: a4:66:8e:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56yKpPlrPF8DYgGlJ8kFIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmZjZmFkOTY2YWU3ZTgxNzFjZmNlMjZkYjNmNjU3NzZk MjZmZTgwHhcNMjUxMjIwMDQwMTA5WhcNMjUxMjIxMDQwMTA5WjAzMTEwLwYDVQQD EygyMWFjY2I5NzE1ZDlmMWJlZjg4YTk1NDZiNGI4OTI2ZjViMmQ4MWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6GVG5UIJfjusdfx090sIFkwoZma gZXXIjVb7AFDaRc3Puy66Uxw+0scrMn8atTil35gUtRnGbX7JlsOPaRqPve/makW ntwxMMueASGsiU3iKXuBKP63AS/qEFNBtetuCe0q7DDNlue9og51LbF3M1/6jWCt cLIOehPg5UxWWRYfiulHMGzQaT0okU0BUjNutP5qPiuApHdpBeKZFWgclB8xFTyy mwPtFSZpeUJFNpYTmeS8isUDyuwUEBpSs2IKS0yFpgm11uqpmIvOg4bLnnuoZPrl rxYqXpQkeuamGta7h41N4iA+XT2zj7YpPbZNyqXsr6K4S5Ay1y6CJ7OVDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGsy5cV2fG++IqVRrS4km9bLYHZMB8GA1UdIwQY MBaAFKdvz62WaufoFxz84m2z9ld20m/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDJfUHJaWnE1LWdYSFB6aWJiUDJWM2JTYi1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kYjg3NTItODRiMi00MzhhLTliYzEt YzU0MDFmNmQ5MWQxLzEvcDJfUHJaWnE1LWdYSFB6aWJiUDJWM2JTYi1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9kYjg3NTItODRiMi00MzhhLTliYzEtYzU0MDFmNmQ5MWQx LzEvcDJfUHJaWnE1LWdYSFB6aWJiUDJWM2JTYi1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1aFa4+z8 ioSRwlMf7PPbHqns+uETkKQ1sbh6E1g66YaNeDElManCe7nBt+CcO/BWYlcmdQYk ZVCEd5UjrjLlWp/Qp6oXlFyWzjgbRKOQAWCH2uGepG3e24ldfVeSj/32P0QMBow6 Yz9EQnFZYoPWaR5nw/y8guB0tfvDlbpFqD42/y3P4S0eHMQ5CycMKGhwlY0gb49U rRq/V3fdW21cCM8Aj36Td4b+FVUNHh1h9zn1VgUSSQq+Rd5YOcUAItuYMMpVA/Nc SiciFsrvGHNC7PwqEOtSXheElhWsBBRbBer3d9uYzl4wJrtvyBVkSk29FXvKcRtz TJC5w5P7pGaORg== -----END CERTIFICATE-----Generated at Sat Dec 20 08:18:27 2025 by rpki-client