This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft File: C155jbbo9XxfSkRRUJAd7oqW1eU.mft (raw, json) Hash identifier: sLRoRDmcxzPUEphIPuhokIo5hLtzbCPJZV5Ob8VBPL8= Subject key identifier: 78:97:58:DF:84:0F:31:7E:A0:43:9B:53:E3:C6:21:98:CF:D5:5B:07 Authority key identifier: 0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5 Certificate issuer: /CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5 Certificate serial: 019B59E444D4C0DD68750E42315EEA34AC0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft Manifest number: 0D85 Signing time: Fri 26 Dec 2025 09:01:30 +0000 Manifest this update: Fri 26 Dec 2025 09:01:30 +0000 Manifest next update: Sat 27 Dec 2025 09:01:30 +0000 Files and hashes: 1: C155jbbo9XxfSkRRUJAd7oqW1eU.crl (hash: 21sxQD69Tc03IoD6KTc1icrnHiD0Q/gxhrRAYNc17+Y=) 2: c7WoeWfnIdPF1gkZ7r90pN58Y2c.roa (hash: wpEquj9Ig8LsCQE7Y+MbSVtYeoDlqqJ8cepm+207hA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 09:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:44:d4:c0:dd:68:75:0e:42:31:5e:ea:34:ac:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5 Validity Not Before: Dec 26 09:01:30 2025 GMT Not After : Dec 27 09:01:30 2025 GMT Subject: CN=789758df840f317ea0439b53e3c62198cfd55b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f6:a1:c9:aa:65:8d:ba:57:19:bd:29:f7:90: a1:00:4e:78:ea:c8:fb:fd:67:de:81:0d:65:8c:42: 00:d1:5d:5f:91:38:45:f8:59:54:fa:9b:ac:3a:3b: 66:82:6b:4f:1a:bc:dc:f9:c4:9c:56:e3:54:bd:3b: 47:97:4f:24:44:2b:29:fd:8a:82:10:e9:fe:a3:42: 0c:21:4b:96:d0:03:25:8b:84:99:a3:21:6a:8d:90: b8:cc:42:f5:fd:6a:7d:a9:46:61:99:a8:ce:df:74: 5e:ed:7c:67:f7:d3:4a:b5:77:e2:4b:97:a8:7d:76: b3:b8:2e:b8:4c:50:1c:6b:5d:c4:0b:9d:38:4f:6a: 15:7c:20:7b:85:b0:52:f2:65:12:5d:ff:4d:93:84: 5d:2d:a3:43:23:f7:1e:72:a1:29:77:fb:60:ea:32: 04:b4:cc:33:c5:62:b9:a3:44:af:98:12:b5:55:30: e4:0b:ef:65:8f:46:4a:b8:66:fb:9b:90:84:22:9a: c7:49:a5:02:e9:92:b9:66:c2:19:7c:ff:69:70:5d: 85:86:47:05:3c:22:d8:f5:a3:eb:fb:13:96:87:1e: 7c:d7:f6:df:08:fa:f2:45:e3:51:22:a2:cd:6e:73: 9a:bd:62:87:b5:4b:bd:f2:f9:5c:b8:ff:b0:57:cd: 24:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:97:58:DF:84:0F:31:7E:A0:43:9B:53:E3:C6:21:98:CF:D5:5B:07 X509v3 Authority Key Identifier: keyid:0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:d4:0f:24:de:cc:a7:85:aa:d3:0f:29:d0:17:a4:23:73:1c: 7f:33:3a:a2:1e:76:26:9f:b4:64:5f:ec:fe:63:33:f4:a3:05: 83:3b:10:a7:ec:06:6f:ef:71:b9:8e:53:5f:c2:20:08:e2:ca: e1:6b:a9:48:f2:2f:61:78:60:1e:08:d5:85:10:28:4b:2d:40: 48:3d:a4:cd:ff:30:4e:c3:99:35:b7:32:55:30:06:b5:96:81: 5e:3f:e0:25:1a:a0:73:ae:3e:c1:a0:f6:44:54:0b:3f:f4:9f: 61:08:cf:e5:e0:69:e0:75:23:2c:5c:0e:2f:92:ce:e2:d0:17: ae:f3:0c:92:19:53:b8:24:6e:d4:af:48:e2:b9:8a:19:53:f8: 2c:14:a5:b1:10:21:43:c0:84:35:23:23:5c:6d:1c:19:88:6c: 13:22:1a:40:8b:fe:2a:a2:f7:1e:21:82:8e:10:7c:7d:63:79: cb:d8:34:e0:5d:b9:b6:79:88:68:57:65:91:af:d6:69:22:87: 5c:77:c2:c1:6e:71:b8:ae:e3:36:4d:74:e2:55:cb:e6:20:d4: f2:b9:cd:69:2f:12:c7:1b:8a:88:b8:08:59:f7:5d:9c:e6:0c: c8:a1:69:15:9c:24:9a:ca:40:71:73:42:ed:20:d7:2d:69:75: 88:99:9d:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5ETUwN1odQ5CMV7qNKwOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNWU3OThkYjZlOGY1N2M1ZjRhNDQ1MTUwOTAxZGVlOGE5 NmQ1ZTUwHhcNMjUxMjI2MDkwMTMwWhcNMjUxMjI3MDkwMTMwWjAzMTEwLwYDVQQD Eyg3ODk3NThkZjg0MGYzMTdlYTA0MzliNTNlM2M2MjE5OGNmZDU1YjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovahyapljbpXGb0p95ChAE546sj7 /WfegQ1ljEIA0V1fkThF+FlU+pusOjtmgmtPGrzc+cScVuNUvTtHl08kRCsp/YqC EOn+o0IMIUuW0AMli4SZoyFqjZC4zEL1/Wp9qUZhmajO33Re7Xxn99NKtXfiS5eo fXazuC64TFAca13EC504T2oVfCB7hbBS8mUSXf9Nk4RdLaNDI/cecqEpd/tg6jIE tMwzxWK5o0SvmBK1VTDkC+9lj0ZKuGb7m5CEIprHSaUC6ZK5ZsIZfP9pcF2FhkcF PCLY9aPr+xOWhx581/bfCPryReNRIqLNbnOavWKHtUu98vlcuP+wV80kLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHiXWN+EDzF+oEObU+PGIZjP1VsHMB8GA1UdIwQY MBaAFAteeY226PV8X0pEUVCQHe6KltXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzE1NWpiYm85WHhmU2tSUlVKQWQ3b3FXMWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kNjc5ZjItNDE0ZS00NTM4LTljNjAt Mjk1NjExYWE3ZTkyLzEvQzE1NWpiYm85WHhmU2tSUlVKQWQ3b3FXMWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kNjc5ZjItNDE0ZS00NTM4LTljNjAtMjk1NjExYWE3ZTky LzEvQzE1NWpiYm85WHhmU2tSUlVKQWQ3b3FXMWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAptQPJN7M p4Wq0w8p0BekI3McfzM6oh52Jp+0ZF/s/mMz9KMFgzsQp+wGb+9xuY5TX8IgCOLK 4WupSPIvYXhgHgjVhRAoSy1ASD2kzf8wTsOZNbcyVTAGtZaBXj/gJRqgc64+waD2 RFQLP/SfYQjP5eBp4HUjLFwOL5LO4tAXrvMMkhlTuCRu1K9I4rmKGVP4LBSlsRAh Q8CENSMjXG0cGYhsEyIaQIv+KqL3HiGCjhB8fWN5y9g04F25tnmIaFdlka/WaSKH XHfCwW5xuK7jNk104lXL5iDU8rnNaS8SxxuKiLgIWfddnOYMyKFpFZwkmspAcXNC 7SDXLWl1iJmd+g== -----END CERTIFICATE-----Generated at Fri Dec 26 17:41:19 2025 by rpki-client