This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft File: p2_PrZZq5-gXHPzibbP2V3bSb-g.mft (raw, json) Hash identifier: vIMnRHFqW8hAnF6QTz+edNtrejMu487Go0WelLVFWD4= Subject key identifier: B6:5A:48:36:AA:21:E8:63:7F:F9:AB:1C:92:06:77:87:90:B7:F5:15 Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8 Certificate issuer: /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8 Certificate serial: 019B439320089BA85DF390BD75DCB7BE5AEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft Manifest number: 087B Signing time: Mon 22 Dec 2025 01:01:14 +0000 Manifest this update: Mon 22 Dec 2025 01:01:14 +0000 Manifest next update: Tue 23 Dec 2025 01:01:14 +0000 Files and hashes: 1: ChDs0vPKHYXjmSRKvkz2qLqd3Rw.roa (hash: ThMIkvoH8p8/FHDDQvYXCmb7VtUAbCIv++31C7wNSNA=) 2: YH9rgvwa_c5tkfoIds2w3LcyxQU.roa (hash: O5b96K5UqDPwtmiTY4ipuOfWppIds6W4j/eFK50+Z/0=) 3: p2_PrZZq5-gXHPzibbP2V3bSb-g.crl (hash: Ed5JHk0bW75JJfxEEymwe6mqx36ZdT2X6HzZxiInx/Q=) 4: uu0B_lRFC2FFj-k7cmY35eNucIA.roa (hash: 45P7jNAbs5p5AqN2mETxLIaycHEKNPfSa4PeOiqxcQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:93:20:08:9b:a8:5d:f3:90:bd:75:dc:b7:be:5a:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8 Validity Not Before: Dec 22 01:01:14 2025 GMT Not After : Dec 23 01:01:14 2025 GMT Subject: CN=b65a4836aa21e8637ff9ab1c9206778790b7f515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f6:55:f4:c7:69:30:1f:da:a9:c0:36:bd:a9: 53:2f:f7:c4:43:2e:3b:55:55:bc:54:86:68:a7:58: 08:3a:a8:79:54:fb:1e:ad:db:e0:37:2a:70:e3:a0: 08:71:e6:45:5b:cb:b9:7a:66:5a:07:33:5d:fa:52: c9:a9:ee:db:fe:a8:6d:aa:8b:89:ef:67:4c:9c:5d: 13:a4:f0:88:64:8e:bd:d0:78:6b:58:35:6f:22:3a: 5a:1e:b4:eb:b3:b5:ed:b8:7e:13:75:1d:b8:f9:e3: 97:d3:2f:0a:07:27:e5:00:f9:9e:8f:64:ad:3d:f7: d8:56:c2:1a:22:43:6e:2f:61:f5:e3:3f:ff:c1:ea: 32:8a:b2:a8:16:d8:51:f9:09:84:0f:cd:0e:a0:da: 84:85:1d:2f:d5:c2:88:2e:af:48:8f:57:a5:fb:cf: e2:6b:64:7a:68:5f:71:57:8a:09:5e:d3:d5:b7:8c: c0:7c:a4:8c:fa:e4:5b:99:92:1f:3e:36:05:1c:4a: 1a:4b:d6:ae:aa:6c:b8:3e:e3:83:58:9f:a7:51:9c: 1d:9f:0c:03:23:f0:e8:e8:62:dd:99:16:f9:46:31: 4d:ae:45:b8:d8:ea:63:20:28:70:63:28:f6:26:2d: 6b:61:0e:c6:08:63:4d:82:78:98:33:6a:9b:7b:c3: 65:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5A:48:36:AA:21:E8:63:7F:F9:AB:1C:92:06:77:87:90:B7:F5:15 X509v3 Authority Key Identifier: keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:19:72:96:0e:fd:60:8e:c3:c0:85:40:71:9d:54:c2:14:1e: 07:45:bd:59:39:3b:7a:46:f3:cb:8e:7a:3f:ca:5b:bb:a6:6e: 33:81:cc:2f:40:6f:71:b9:14:32:f3:5e:02:74:1e:da:2a:0a: ad:1a:ad:18:9e:be:0d:50:c0:3d:a5:0e:a3:ca:85:12:a7:9b: c8:39:c3:ed:5a:eb:e7:7a:f6:f1:22:c3:fb:2b:07:c5:71:e8: 6a:70:d2:80:30:9e:fa:8d:43:d4:eb:50:6f:1a:37:22:56:03: 46:bc:b5:9a:7c:1e:88:5e:2e:0b:6e:00:47:c6:48:17:86:dc: 08:1f:bf:32:49:2e:33:45:86:78:8a:49:db:d9:59:b3:ab:52: a0:87:eb:05:ee:d2:32:c0:02:ea:f4:20:4e:ed:ee:07:7e:41: a5:70:3e:9a:82:58:d8:69:f9:37:c7:41:53:7f:aa:46:16:df: 16:ba:a1:5a:e8:ea:94:06:c6:f2:84:c8:e7:40:1a:5f:ca:e5: f2:3d:4c:36:cc:84:04:ea:a8:eb:46:88:98:13:09:2c:99:60: 33:a7:90:d7:3c:24:0a:21:39:88:83:1f:0a:cb:25:8b:72:cf: 35:5c:92:d8:f7:54:e7:ad:11:dd:16:31:e5:18:58:69:02:95: 1b:04:ef:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkyAIm6hd85C9ddy3vlrsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmZjZmFkOTY2YWU3ZTgxNzFjZmNlMjZkYjNmNjU3NzZk MjZmZTgwHhcNMjUxMjIyMDEwMTE0WhcNMjUxMjIzMDEwMTE0WjAzMTEwLwYDVQQD EyhiNjVhNDgzNmFhMjFlODYzN2ZmOWFiMWM5MjA2Nzc4NzkwYjdmNTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPZV9MdpMB/aqcA2valTL/fEQy47 VVW8VIZop1gIOqh5VPserdvgNypw46AIceZFW8u5emZaBzNd+lLJqe7b/qhtqouJ 72dMnF0TpPCIZI690HhrWDVvIjpaHrTrs7XtuH4TdR24+eOX0y8KByflAPmej2St PffYVsIaIkNuL2H14z//weoyirKoFthR+QmED80OoNqEhR0v1cKILq9Ij1el+8/i a2R6aF9xV4oJXtPVt4zAfKSM+uRbmZIfPjYFHEoaS9auqmy4PuODWJ+nUZwdnwwD I/Do6GLdmRb5RjFNrkW42OpjIChwYyj2Ji1rYQ7GCGNNgniYM2qbe8NlqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZaSDaqIehjf/mrHJIGd4eQt/UVMB8GA1UdIwQY MBaAFKdvz62WaufoFxz84m2z9ld20m/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDJfUHJaWnE1LWdYSFB6aWJiUDJWM2JTYi1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kYjg3NTItODRiMi00MzhhLTliYzEt YzU0MDFmNmQ5MWQxLzEvcDJfUHJaWnE1LWdYSFB6aWJiUDJWM2JTYi1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9kYjg3NTItODRiMi00MzhhLTliYzEtYzU0MDFmNmQ5MWQx LzEvcDJfUHJaWnE1LWdYSFB6aWJiUDJWM2JTYi1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRlylg79 YI7DwIVAcZ1UwhQeB0W9WTk7ekbzy456P8pbu6ZuM4HML0BvcbkUMvNeAnQe2ioK rRqtGJ6+DVDAPaUOo8qFEqebyDnD7Vrr53r28SLD+ysHxXHoanDSgDCe+o1D1OtQ bxo3IlYDRry1mnweiF4uC24AR8ZIF4bcCB+/MkkuM0WGeIpJ29lZs6tSoIfrBe7S MsAC6vQgTu3uB35BpXA+moJY2Gn5N8dBU3+qRhbfFrqhWujqlAbG8oTI50AaX8rl 8j1MNsyEBOqo60aImBMJLJlgM6eQ1zwkCiE5iIMfCssli3LPNVyS2PdU560R3RYx 5RhYaQKVGwTv9Q== -----END CERTIFICATE-----Generated at Mon Dec 22 07:53:58 2025 by rpki-client