This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft File: 156keuFhy7Pa75d4lzDXDEy6idA.mft (raw, json) Hash identifier: KBux0cQQLT0mNyzB8q7ISD10hjwC30mvueFPLBDgBfM= Subject key identifier: C9:91:10:5D:06:00:92:9A:28:81:0A:9D:9A:A0:EF:27:27:3F:41:0F Authority key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0 Certificate issuer: /CN=d79ea47ae161cbb3daef97789730d70c4cba89d0 Certificate serial: 019B269B0BF47B1389FCCBB5ECA6C3727BC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft Manifest number: 0E24 Signing time: Tue 16 Dec 2025 10:00:53 +0000 Manifest this update: Tue 16 Dec 2025 10:00:53 +0000 Manifest next update: Wed 17 Dec 2025 10:00:53 +0000 Files and hashes: 1: 156keuFhy7Pa75d4lzDXDEy6idA.crl (hash: IQO1oFVVgBN8WV3gw9lZjg6eYX6HL9LnFCmNdkJHPUA=) 2: BYLPzOMe1DxWdpXNE62DtzO9Fb0.roa (hash: SqdsHTomHrhRooCsvxMkFhbSdd3KRws8NQEmMcUSL9s=) 3: L0_IW031V8glRQi2qCV5oPEf9Ro.roa (hash: AA7xAguXYqxswXW6tTMsC/xh3FPMqVeiLIYHUXm73pU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:9b:0b:f4:7b:13:89:fc:cb:b5:ec:a6:c3:72:7b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0 Validity Not Before: Dec 16 10:00:53 2025 GMT Not After : Dec 17 10:00:53 2025 GMT Subject: CN=c991105d0600929a28810a9d9aa0ef27273f410f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:93:b8:63:c1:5a:ff:6a:6a:04:28:71:fd:77: 51:da:aa:66:91:30:86:b3:65:28:48:b9:92:e8:15: 44:85:b4:48:fd:e6:82:f0:5c:30:de:3f:d9:b2:62: 1e:43:17:35:2b:4a:31:e7:93:59:c5:fd:f0:2c:c3: f7:cd:0c:5c:54:c8:11:36:21:74:8b:d2:0e:bf:8e: f4:70:27:61:14:fe:fa:bf:94:45:d0:6f:08:0e:27: ce:0f:e4:44:85:ae:df:8b:db:83:34:84:b1:ed:df: 87:d7:76:ef:09:fe:e7:40:6c:f1:c4:99:c3:1d:4a: 5b:f1:d2:d5:6c:bd:57:79:a7:39:cb:7a:be:0d:63: 05:ba:cd:76:54:92:dd:67:f3:3e:97:ca:d0:37:ca: 25:ed:40:94:b6:20:0c:7f:4a:ac:a6:8a:4d:c4:f4: 81:bb:be:c4:21:0d:84:bb:43:21:3c:2f:93:b9:35: 7d:3b:f5:34:07:14:68:a7:eb:48:98:bf:f2:d1:7a: af:b9:e1:3b:da:39:46:81:bc:9d:48:f7:ff:58:be: 0b:e3:32:b2:21:b4:36:51:5c:97:07:49:31:b8:68: 85:38:61:9d:84:b1:83:bb:e7:0f:82:ca:f0:d5:a5: d2:12:3c:b8:7d:9d:81:d2:f8:06:ed:49:bd:06:32: 84:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:91:10:5D:06:00:92:9A:28:81:0A:9D:9A:A0:EF:27:27:3F:41:0F X509v3 Authority Key Identifier: keyid:D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:18:8a:5e:7a:83:e7:f1:75:92:3d:44:1a:8e:29:a5:18:79: 65:9e:d4:a1:05:81:6c:65:32:66:22:ea:b9:cf:a8:66:bd:19: c2:e7:e1:3f:c9:02:06:46:6b:fc:ed:18:7f:da:8a:19:7c:a1: 4a:ed:14:56:b8:cd:4b:d5:3d:fe:06:7f:59:4c:d8:c4:13:28: eb:93:5d:25:e7:c2:c0:8a:d2:26:17:1f:2e:67:91:ea:24:53: e8:2c:44:54:d0:73:b5:3c:00:94:e9:17:e8:12:5d:32:d7:f2: 9e:6e:e7:30:f4:ea:1e:14:5d:40:82:57:39:c0:e1:8e:1c:ce: 33:fe:0a:00:fb:3b:5d:e4:54:20:b2:bc:bc:f0:2a:05:b1:61: c9:38:96:5c:46:54:78:e5:9c:f1:36:57:f5:db:93:1d:32:11: 9b:3b:b8:90:ce:0a:91:27:f5:53:73:ed:89:00:91:01:28:a3: 45:a7:b2:f4:57:60:07:0f:92:85:cf:bb:d6:fb:3a:ba:6f:cc: e7:0b:03:b7:21:d5:eb:d1:35:4b:99:fd:96:57:37:bc:09:29: 72:aa:69:89:57:4c:ce:e4:82:a2:74:88:b8:08:32:a4:fe:ea: 10:ce:36:5e:17:84:28:d0:d2:83:fb:06:4c:9d:64:00:63:5a: 96:d0:b4:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmmwv0exOJ/Mu17KbDcnvGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OWVhNDdhZTE2MWNiYjNkYWVmOTc3ODk3MzBkNzBjNGNi YTg5ZDAwHhcNMjUxMjE2MTAwMDUzWhcNMjUxMjE3MTAwMDUzWjAzMTEwLwYDVQQD EyhjOTkxMTA1ZDA2MDA5MjlhMjg4MTBhOWQ5YWEwZWYyNzI3M2Y0MTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZO4Y8Fa/2pqBChx/XdR2qpmkTCG s2UoSLmS6BVEhbRI/eaC8Fww3j/ZsmIeQxc1K0ox55NZxf3wLMP3zQxcVMgRNiF0 i9IOv470cCdhFP76v5RF0G8IDifOD+REha7fi9uDNISx7d+H13bvCf7nQGzxxJnD HUpb8dLVbL1Xeac5y3q+DWMFus12VJLdZ/M+l8rQN8ol7UCUtiAMf0qspopNxPSB u77EIQ2Eu0MhPC+TuTV9O/U0BxRop+tImL/y0XqvueE72jlGgbydSPf/WL4L4zKy IbQ2UVyXB0kxuGiFOGGdhLGDu+cPgsrw1aXSEjy4fZ2B0vgG7Um9BjKEZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMmREF0GAJKaKIEKnZqg7ycnP0EPMB8GA1UdIwQY MBaAFNeepHrhYcuz2u+XeJcw1wxMuonQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTU2a2V1Rmh5N1BhNzVkNGx6RFhERXk2aWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kOWNiNDEtMWMzYi00NmFiLWE5OTMt M2MzZTUwZGRhNmNjLzEvMTU2a2V1Rmh5N1BhNzVkNGx6RFhERXk2aWRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9kOWNiNDEtMWMzYi00NmFiLWE5OTMtM2MzZTUwZGRhNmNj LzEvMTU2a2V1Rmh5N1BhNzVkNGx6RFhERXk2aWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVhiKXnqD 5/F1kj1EGo4ppRh5ZZ7UoQWBbGUyZiLquc+oZr0ZwufhP8kCBkZr/O0Yf9qKGXyh Su0UVrjNS9U9/gZ/WUzYxBMo65NdJefCwIrSJhcfLmeR6iRT6CxEVNBztTwAlOkX 6BJdMtfynm7nMPTqHhRdQIJXOcDhjhzOM/4KAPs7XeRUILK8vPAqBbFhyTiWXEZU eOWc8TZX9duTHTIRmzu4kM4KkSf1U3PtiQCRASijRaey9FdgBw+Shc+71vs6um/M 5wsDtyHV69E1S5n9llc3vAkpcqppiVdMzuSConSIuAgypP7qEM42XheEKNDSg/sG TJ1kAGNaltC06A== -----END CERTIFICATE-----Generated at Tue Dec 16 17:11:22 2025 by rpki-client