This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft File: 152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json) Hash identifier: TVJsAIwe5md50vF2MZwTyLUHni6SEBD8KmJkVLFvk/Q= Subject key identifier: 3E:1D:AE:AA:A4:64:AB:57:9C:88:E2:92:5E:1A:54:0F:3F:0D:78:CA Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e Certificate serial: 019B3B6B67D7B9177339E04CE53885996C71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft Manifest number: 1142 Signing time: Sat 20 Dec 2025 11:00:53 +0000 Manifest this update: Sat 20 Dec 2025 11:00:53 +0000 Manifest next update: Sun 21 Dec 2025 11:00:53 +0000 Files and hashes: 1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: ye7NYbbG3VAW8dlUtFLi+wKpqkSMlAzADLW6bemaRDI=) 2: 94BJXR3Uo1I8suMedxF8KSUQqKc.roa (hash: vsbbxp7WNMO8VB3ChL2ZEv1wwVeFWV4G1csg/XaauZ0=) 3: y4gQpfTPRcitVr25VP-twnptmvE.roa (hash: OvMK6obtD8GE0uGeIeGjeBIL4CSoip9fhbcWHpqNnSY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:67:d7:b9:17:73:39:e0:4c:e5:38:85:99:6c:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e Validity Not Before: Dec 20 11:00:53 2025 GMT Not After : Dec 21 11:00:53 2025 GMT Subject: CN=3e1daeaaa464ab579c88e2925e1a540f3f0d78ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:97:b4:11:58:41:f4:8d:03:cb:69:84:fc:db: 31:23:7e:38:be:50:2f:6c:b9:d0:e0:5b:27:73:9c: 57:b2:ba:c1:93:65:77:7a:96:bf:e9:6f:3a:01:16: 1e:7a:c3:3f:c6:c2:a9:25:19:2f:6b:a4:e0:52:94: 55:09:09:22:75:91:d1:4d:c6:e4:16:25:a8:1c:3b: 9f:21:14:a6:1f:51:7a:63:70:d1:fd:1f:22:0f:6c: da:33:c2:27:2b:2c:52:de:28:94:17:34:62:5c:e6: bf:4f:ed:3a:b4:bc:da:11:8c:a5:06:4d:50:18:6d: ba:58:fe:49:85:58:66:08:25:17:e7:c4:56:14:01: f4:f6:06:16:4e:ee:fe:88:09:fd:9b:c2:49:1c:a3: 02:4a:0e:b7:4f:01:3b:fe:75:5a:c4:16:f2:90:a3: 46:6c:70:e4:06:63:5f:b9:07:f8:69:e8:68:57:28: ed:9e:34:40:70:5e:06:48:44:21:da:1c:e1:b8:6a: bc:32:88:78:57:a3:1c:17:42:32:cb:62:74:85:78: 4e:b2:5d:dd:50:e3:be:72:fc:e4:81:72:7b:db:7d: b8:5f:87:cd:1f:76:13:cc:b7:ba:61:65:11:f9:5c: bb:4e:3f:fe:39:ac:ff:01:5b:00:33:0a:95:8f:00: a3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1D:AE:AA:A4:64:AB:57:9C:88:E2:92:5E:1A:54:0F:3F:0D:78:CA X509v3 Authority Key Identifier: keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f4:bc:be:14:9d:22:63:e3:26:3f:19:45:d7:a2:0e:ae:12: bb:5a:e7:92:19:b2:31:8e:ca:15:de:d5:6b:72:74:7f:91:84: 0c:01:3d:01:80:49:57:2a:dc:c0:47:97:b7:8e:1f:dc:0d:a1: fa:1d:fc:7e:55:d8:b4:ec:b9:e7:e7:ff:fc:b0:b5:25:e3:3b: c3:de:03:73:40:92:68:59:46:b1:b0:0d:b2:8a:e2:c2:ac:ca: 4b:a2:8f:64:08:e8:96:43:d0:84:8d:e0:63:88:ac:0a:b8:96: 38:22:01:ca:b3:ac:b9:ec:01:ce:4b:56:8f:f8:56:5c:50:73: 33:9c:76:ed:02:90:23:17:15:d4:ed:15:05:26:00:31:bb:b0: f8:3e:77:58:9f:36:2e:c7:c1:a5:e4:05:35:2d:39:ce:9e:b4: b4:7f:5a:4a:14:20:08:d9:74:1f:34:9b:81:9f:e9:34:ce:f8: 69:21:f5:15:70:a1:07:97:e2:68:5b:8b:0c:b4:48:62:57:64: 0b:0b:05:1d:0d:cc:3c:3b:f8:87:38:87:12:af:71:24:e6:6a: 2f:0e:22:7a:12:42:48:2b:e1:27:fc:1a:3d:10:4a:48:c0:ca: 3b:12:c1:c1:80:0c:2e:71:41:3e:c7:f1:32:bb:3a:30:47:92: 19:75:37:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a2fXuRdzOeBM5TiFmWxxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OWQ4NTZhYWE5ZWFkMTJmNzVjYjY4Y2RhZTk2YTBkMmM4 ZGRlMWUwHhcNMjUxMjIwMTEwMDUzWhcNMjUxMjIxMTEwMDUzWjAzMTEwLwYDVQQD EygzZTFkYWVhYWE0NjRhYjU3OWM4OGUyOTI1ZTFhNTQwZjNmMGQ3OGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZe0EVhB9I0Dy2mE/NsxI344vlAv bLnQ4Fsnc5xXsrrBk2V3epa/6W86ARYeesM/xsKpJRkva6TgUpRVCQkidZHRTcbk FiWoHDufIRSmH1F6Y3DR/R8iD2zaM8InKyxS3iiUFzRiXOa/T+06tLzaEYylBk1Q GG26WP5JhVhmCCUX58RWFAH09gYWTu7+iAn9m8JJHKMCSg63TwE7/nVaxBbykKNG bHDkBmNfuQf4aehoVyjtnjRAcF4GSEQh2hzhuGq8Moh4V6McF0Iyy2J0hXhOsl3d UOO+cvzkgXJ72324X4fNH3YTzLe6YWUR+Vy7Tj/+Oaz/AVsAMwqVjwCjqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4drqqkZKtXnIjikl4aVA8/DXjKMB8GA1UdIwQY MBaAFNedhWqqnq0S91y2jNrpag0sjd4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hNWJhYTItMmEzNS00Yzc2LWE5NDAt NTk5MGNkNGRlODhiLzEvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9hNWJhYTItMmEzNS00Yzc2LWE5NDAtNTk5MGNkNGRlODhi LzEvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPS8vhSd ImPjJj8ZRdeiDq4Su1rnkhmyMY7KFd7Va3J0f5GEDAE9AYBJVyrcwEeXt44f3A2h +h38flXYtOy55+f//LC1JeM7w94Dc0CSaFlGsbANsoriwqzKS6KPZAjolkPQhI3g Y4isCriWOCIByrOsuewBzktWj/hWXFBzM5x27QKQIxcV1O0VBSYAMbuw+D53WJ82 LsfBpeQFNS05zp60tH9aShQgCNl0HzSbgZ/pNM74aSH1FXChB5fiaFuLDLRIYldk CwsFHQ3MPDv4hziHEq9xJOZqLw4iehJCSCvhJ/waPRBKSMDKOxLBwYAMLnFBPsfx Mrs6MEeSGXU30Q== -----END CERTIFICATE-----Generated at Sat Dec 20 20:52:46 2025 by rpki-client