This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft File: 156keuFhy7Pa75d4lzDXDEy6idA.mft (raw, json) Hash identifier: 5eekCeD1u38Nj0xFHdnZaod71dlnYxilbKdRsJqKAMs= Subject key identifier: 11:17:86:A5:21:8B:4E:56:AB:BD:8A:A9:EB:9C:7C:EE:75:C4:33:FC Authority key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0 Certificate issuer: /CN=d79ea47ae161cbb3daef97789730d70c4cba89d0 Certificate serial: 019B39EAC523E1136E459698A60659798064 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft Manifest number: 0E2E Signing time: Sat 20 Dec 2025 04:00:45 +0000 Manifest this update: Sat 20 Dec 2025 04:00:45 +0000 Manifest next update: Sun 21 Dec 2025 04:00:45 +0000 Files and hashes: 1: 156keuFhy7Pa75d4lzDXDEy6idA.crl (hash: trxiWn0moqvIBhnhSM5VuOjqtD+cKOOAgAF1LcEZj+I=) 2: BYLPzOMe1DxWdpXNE62DtzO9Fb0.roa (hash: SqdsHTomHrhRooCsvxMkFhbSdd3KRws8NQEmMcUSL9s=) 3: L0_IW031V8glRQi2qCV5oPEf9Ro.roa (hash: AA7xAguXYqxswXW6tTMsC/xh3FPMqVeiLIYHUXm73pU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:c5:23:e1:13:6e:45:96:98:a6:06:59:79:80:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0 Validity Not Before: Dec 20 04:00:45 2025 GMT Not After : Dec 21 04:00:45 2025 GMT Subject: CN=111786a5218b4e56abbd8aa9eb9c7cee75c433fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1e:e0:b1:a9:96:9c:e1:3d:fe:af:24:f7:30: 30:46:14:83:1f:32:af:6e:4e:ef:67:ce:19:31:f9: 84:37:c6:be:46:12:08:59:29:55:b8:d5:a2:a4:87: 11:c6:6b:e7:0e:65:91:f1:75:17:8f:60:67:48:99: ff:d2:c9:02:25:73:b2:c0:c6:f8:62:a3:53:f8:9f: cf:6d:3e:c7:d2:b2:1e:f2:82:6b:cf:1e:d5:f3:80: 2f:f5:21:4b:2c:d6:7f:07:ad:3e:6d:d0:e0:67:51: c8:70:c9:05:9a:e8:e8:4f:42:61:f5:d4:bb:77:45: 4f:a2:66:f1:4a:ae:f0:5a:7f:94:89:1d:7e:fe:0d: 9b:ae:4c:f0:e5:f0:ba:6d:96:ac:f3:9e:8f:48:ba: 1c:aa:fe:18:b9:ca:4c:30:78:35:d1:bb:80:50:3b: 90:55:b6:c8:c2:03:1c:c3:3f:ad:ee:90:91:73:67: d7:4e:79:e7:d1:3d:73:8f:42:03:5d:08:aa:30:c6: 3e:fd:e6:0c:5f:8d:f5:42:2b:ea:d0:a5:55:30:83: c1:77:43:c6:37:05:54:ba:99:b5:45:7c:d4:ac:64: e6:61:d7:3d:70:9a:5a:c3:41:fb:b3:e8:61:d2:2f: a2:12:62:76:df:93:a6:02:dd:4e:12:e8:a3:60:4b: 2c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:17:86:A5:21:8B:4E:56:AB:BD:8A:A9:EB:9C:7C:EE:75:C4:33:FC X509v3 Authority Key Identifier: keyid:D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:d2:90:a2:c1:8c:38:b0:3e:1a:13:5e:6e:7f:2f:c6:6a:b1: 84:d1:e4:fe:1c:4d:4e:02:c2:b8:23:89:c9:3b:82:13:0c:72: 6a:06:5c:2c:48:a6:ed:5f:63:bf:b4:10:f2:53:be:0a:3c:ca: 12:23:57:71:ed:85:a5:d5:8d:f4:75:62:4a:17:dc:ea:94:27: b7:df:cf:fd:3f:51:51:04:d3:3f:74:24:da:62:f5:53:98:e4: f0:54:4a:2c:f2:3d:f4:36:96:6e:bb:cb:19:d2:e9:70:03:88: c5:ed:6d:be:52:74:ce:f7:d0:17:08:47:b3:ea:97:aa:ee:33: 0c:30:59:94:3f:93:b9:31:89:36:bc:50:ca:7c:3a:ac:48:7d: 66:3d:2e:d0:9b:7d:22:7f:0d:da:c7:af:c8:9a:5b:b0:a5:91: ac:a4:fd:3c:29:b1:2f:bb:c6:51:37:aa:0f:26:eb:50:be:4f: a5:92:10:f5:4e:1e:c6:32:88:39:81:4e:4e:74:b8:9d:31:95: 3a:cd:84:0b:4e:35:0f:0a:bd:de:7d:9c:2a:d0:e1:b1:1f:44: ad:2a:e4:02:e9:b0:e6:51:f9:fa:7c:32:d1:4c:2d:73:1a:0c: 1f:53:41:a5:2b:20:7f:42:f2:6e:a6:a9:30:c4:8d:03:fd:9d: 60:a7:d0:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56sUj4RNuRZaYpgZZeYBkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OWVhNDdhZTE2MWNiYjNkYWVmOTc3ODk3MzBkNzBjNGNi YTg5ZDAwHhcNMjUxMjIwMDQwMDQ1WhcNMjUxMjIxMDQwMDQ1WjAzMTEwLwYDVQQD EygxMTE3ODZhNTIxOGI0ZTU2YWJiZDhhYTllYjljN2NlZTc1YzQzM2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh7gsamWnOE9/q8k9zAwRhSDHzKv bk7vZ84ZMfmEN8a+RhIIWSlVuNWipIcRxmvnDmWR8XUXj2BnSJn/0skCJXOywMb4 YqNT+J/PbT7H0rIe8oJrzx7V84Av9SFLLNZ/B60+bdDgZ1HIcMkFmujoT0Jh9dS7 d0VPombxSq7wWn+UiR1+/g2brkzw5fC6bZas856PSLocqv4YucpMMHg10buAUDuQ VbbIwgMcwz+t7pCRc2fXTnnn0T1zj0IDXQiqMMY+/eYMX431Qivq0KVVMIPBd0PG NwVUupm1RXzUrGTmYdc9cJpaw0H7s+hh0i+iEmJ235OmAt1OEuijYEssPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEXhqUhi05Wq72KqeucfO51xDP8MB8GA1UdIwQY MBaAFNeepHrhYcuz2u+XeJcw1wxMuonQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTU2a2V1Rmh5N1BhNzVkNGx6RFhERXk2aWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kOWNiNDEtMWMzYi00NmFiLWE5OTMt M2MzZTUwZGRhNmNjLzEvMTU2a2V1Rmh5N1BhNzVkNGx6RFhERXk2aWRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9kOWNiNDEtMWMzYi00NmFiLWE5OTMtM2MzZTUwZGRhNmNj LzEvMTU2a2V1Rmh5N1BhNzVkNGx6RFhERXk2aWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdKQosGM OLA+GhNebn8vxmqxhNHk/hxNTgLCuCOJyTuCEwxyagZcLEim7V9jv7QQ8lO+CjzK EiNXce2FpdWN9HViShfc6pQnt9/P/T9RUQTTP3Qk2mL1U5jk8FRKLPI99DaWbrvL GdLpcAOIxe1tvlJ0zvfQFwhHs+qXqu4zDDBZlD+TuTGJNrxQynw6rEh9Zj0u0Jt9 In8N2sevyJpbsKWRrKT9PCmxL7vGUTeqDybrUL5PpZIQ9U4exjKIOYFOTnS4nTGV Os2EC041Dwq93n2cKtDhsR9ErSrkAumw5lH5+nwy0UwtcxoMH1NBpSsgf0Lybqap MMSNA/2dYKfQjg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:33:49 2025 by rpki-client