This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft File: 153OHAWhQ_3YWEdABMR_bzv_90k.mft (raw, json) Hash identifier: aS/YF7gR92kgD6PhShGmEl2Usxd+1E92tOmg5gdyDwo= Subject key identifier: 9E:58:A3:97:55:EE:31:10:FA:59:D8:38:99:D8:DC:8D:AF:16:30:79 Authority key identifier: D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49 Certificate issuer: /CN=d79dce1c05a143fdd858474004c47f6f3bfff749 Certificate serial: 019AF208A19F478656BE3247B7875F325A4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft Manifest number: 0604 Signing time: Sat 06 Dec 2025 05:00:43 +0000 Manifest this update: Sat 06 Dec 2025 05:00:43 +0000 Manifest next update: Sun 07 Dec 2025 05:00:43 +0000 Files and hashes: 1: 153OHAWhQ_3YWEdABMR_bzv_90k.crl (hash: WulSoyrMWrPa2fu9LCqsrABSzdw89brzt5h+JsMww0k=) 2: QB5FpuPpmowESfKF6nGgHMXmFsg.roa (hash: 4U84FI9f905V3/Hwf++fcBDHdTLLsUUQSR6ku8lze+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a1:9f:47:86:56:be:32:47:b7:87:5f:32:5a:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d79dce1c05a143fdd858474004c47f6f3bfff749 Validity Not Before: Dec 6 05:00:43 2025 GMT Not After : Dec 7 05:00:43 2025 GMT Subject: CN=9e58a39755ee3110fa59d83899d8dc8daf163079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:28:ea:93:fd:48:5d:ea:7a:37:2f:c0:dc:a0: 88:aa:07:cd:dd:8f:09:a0:f1:43:31:87:5c:64:c2: 30:f2:f2:0c:44:db:7e:c4:c8:cb:35:81:4e:c2:2f: 23:ce:30:87:35:31:ff:85:5a:d9:49:5d:63:1d:ca: 34:1b:60:23:38:eb:6b:fe:c9:e6:bc:ac:c3:95:ae: fe:c9:47:96:39:cd:56:35:28:89:39:a3:92:b1:f0: 23:79:c3:da:b0:43:e4:1f:b3:4a:62:a0:3b:12:d0: 0c:f0:ea:a5:22:88:95:d3:db:c8:95:36:f8:e5:9b: 97:0a:ae:1f:a2:13:7f:8e:92:80:3d:05:86:42:9d: b6:66:68:70:ba:9c:8c:d2:22:3d:29:55:a0:bb:5d: b1:3e:c4:49:5e:e8:62:a4:80:1c:58:2e:20:92:7b: db:0b:e6:f8:f6:b0:22:8f:cd:ec:92:10:5f:1a:ab: e0:0b:fe:ef:c8:e7:74:35:74:e1:c7:60:3e:94:39: a4:38:24:58:83:8f:5a:27:13:00:8a:df:da:c9:70: 90:3e:6e:b6:69:c9:57:b9:cb:86:79:56:81:f5:23: b5:59:c0:a0:39:d6:ae:62:fc:99:85:f0:12:cb:44: 21:a0:67:73:ab:bc:f9:6a:90:de:94:39:9c:c3:8f: 20:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:58:A3:97:55:EE:31:10:FA:59:D8:38:99:D8:DC:8D:AF:16:30:79 X509v3 Authority Key Identifier: keyid:D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:3d:45:25:bb:53:c5:f9:11:f1:2b:14:66:38:a9:eb:e1:ab: fc:0c:30:66:8c:66:a3:46:7f:bc:eb:73:c3:d2:84:b0:48:a6: 66:09:1e:bf:7f:c0:92:22:e3:2d:43:45:81:b9:d1:60:9a:a5: 07:2f:c9:cb:5b:24:fb:d1:ec:61:2a:7a:50:fb:8d:3f:f9:0e: 37:e3:9f:12:fd:bf:79:e1:1f:d3:95:5d:f1:7b:1b:20:b6:bc: 7b:49:d2:a1:be:2a:3d:e3:29:03:59:00:ab:02:ef:4c:99:99: c5:9f:d8:d8:8c:fe:a0:b5:18:f8:6e:d9:4f:3f:ed:4b:c3:59: 69:d8:50:9c:be:ee:58:64:ea:d5:be:80:34:ec:f4:5d:af:ec: 38:36:38:81:22:a2:1d:6d:af:47:07:97:a5:91:62:e1:67:8c: fe:83:e5:1d:5d:9a:09:6a:16:68:63:23:54:e0:0f:91:3a:45: 30:cd:b4:f0:3a:0e:cb:f3:78:81:b7:44:9d:05:78:bc:87:a4: 5b:18:56:e6:5e:e4:0b:98:5c:31:bf:b4:64:f0:e4:6c:3c:88: cf:23:44:c1:4b:f4:75:74:10:97:48:fe:5b:27:a3:0a:48:9b: de:53:70:9d:8b:d3:c0:8a:76:b6:b8:66:a8:e3:01:28:45:79: 4d:5e:56:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKGfR4ZWvjJHt4dfMlpKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OWRjZTFjMDVhMTQzZmRkODU4NDc0MDA0YzQ3ZjZmM2Jm ZmY3NDkwHhcNMjUxMjA2MDUwMDQzWhcNMjUxMjA3MDUwMDQzWjAzMTEwLwYDVQQD Eyg5ZTU4YTM5NzU1ZWUzMTEwZmE1OWQ4Mzg5OWQ4ZGM4ZGFmMTYzMDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSjqk/1IXep6Ny/A3KCIqgfN3Y8J oPFDMYdcZMIw8vIMRNt+xMjLNYFOwi8jzjCHNTH/hVrZSV1jHco0G2AjOOtr/snm vKzDla7+yUeWOc1WNSiJOaOSsfAjecPasEPkH7NKYqA7EtAM8OqlIoiV09vIlTb4 5ZuXCq4fohN/jpKAPQWGQp22ZmhwupyM0iI9KVWgu12xPsRJXuhipIAcWC4gknvb C+b49rAij83skhBfGqvgC/7vyOd0NXThx2A+lDmkOCRYg49aJxMAit/ayXCQPm62 aclXucuGeVaB9SO1WcCgOdauYvyZhfASy0QhoGdzq7z5apDelDmcw48gRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5Yo5dV7jEQ+lnYOJnY3I2vFjB5MB8GA1UdIwQY MBaAFNedzhwFoUP92FhHQATEf287//dJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTUzT0hBV2hRXzNZV0VkQUJNUl9ienZfOTBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zZjk5ZTQtOGRkNS00ZTVmLWJlYWEt YTc1NjkyOWE4ZGM4LzEvMTUzT0hBV2hRXzNZV0VkQUJNUl9ienZfOTBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zZjk5ZTQtOGRkNS00ZTVmLWJlYWEtYTc1NjkyOWE4ZGM4 LzEvMTUzT0hBV2hRXzNZV0VkQUJNUl9ienZfOTBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApj1FJbtT xfkR8SsUZjip6+Gr/AwwZoxmo0Z/vOtzw9KEsEimZgkev3/AkiLjLUNFgbnRYJql By/Jy1sk+9HsYSp6UPuNP/kON+OfEv2/eeEf05Vd8XsbILa8e0nSob4qPeMpA1kA qwLvTJmZxZ/Y2Iz+oLUY+G7ZTz/tS8NZadhQnL7uWGTq1b6ANOz0Xa/sODY4gSKi HW2vRweXpZFi4WeM/oPlHV2aCWoWaGMjVOAPkTpFMM208DoOy/N4gbdEnQV4vIek WxhW5l7kC5hcMb+0ZPDkbDyIzyNEwUv0dXQQl0j+WyejCkib3lNwnYvTwIp2trhm qOMBKEV5TV5Wig== -----END CERTIFICATE-----Generated at Sat Dec 6 09:56:57 2025 by rpki-client