This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft File: C155jbbo9XxfSkRRUJAd7oqW1eU.mft (raw, json) Hash identifier: fjf5B1o2jy4/DyDuHC3mO8AW/Gn30CwhpWD3u8Yvdpw= Subject key identifier: A6:78:75:5C:36:E7:59:BF:E1:E1:37:8A:19:B0:FF:A6:B9:58:5B:10 Authority key identifier: 0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5 Certificate issuer: /CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5 Certificate serial: 019AF389B22ABCBE21906C358458867339C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft Manifest number: 0D50 Signing time: Sat 06 Dec 2025 12:01:18 +0000 Manifest this update: Sat 06 Dec 2025 12:01:18 +0000 Manifest next update: Sun 07 Dec 2025 12:01:18 +0000 Files and hashes: 1: C155jbbo9XxfSkRRUJAd7oqW1eU.crl (hash: oZyh6Md3pSrGAiiDKNydX7oWI16FDbFVKYFI5O7sejM=) 2: c7WoeWfnIdPF1gkZ7r90pN58Y2c.roa (hash: wpEquj9Ig8LsCQE7Y+MbSVtYeoDlqqJ8cepm+207hA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:b2:2a:bc:be:21:90:6c:35:84:58:86:73:39:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5 Validity Not Before: Dec 6 12:01:18 2025 GMT Not After : Dec 7 12:01:18 2025 GMT Subject: CN=a678755c36e759bfe1e1378a19b0ffa6b9585b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:01:3f:9a:38:6a:6f:65:7a:c4:2e:45:2f:c2: de:dc:6f:ae:68:3e:7a:da:fe:67:ee:ff:f8:b4:d6: 18:ba:66:44:11:62:cf:ac:96:cc:ea:16:fc:07:8f: 7b:f2:da:47:c6:79:8b:47:03:40:65:66:26:33:62: 30:71:ab:91:36:44:19:6e:de:fa:03:1a:e5:b0:0c: be:9f:bb:33:ab:c1:e6:a6:ef:09:4c:7c:f7:d2:03: 73:31:70:92:77:57:e1:f7:75:74:9b:86:5a:74:f4: 4a:70:7a:4c:6c:51:be:1f:e8:03:ae:40:44:7d:27: 17:b5:89:cc:ae:83:cd:35:97:f9:d1:41:85:94:09: c0:3f:17:6e:78:29:ce:c5:27:2f:bb:7a:20:27:5f: 65:07:f3:73:d5:7f:0a:21:d7:72:8e:b7:96:1d:c6: 16:08:42:14:5c:86:37:7e:cd:37:c7:95:85:5a:5e: 2e:5c:cf:7a:71:8f:ed:78:76:59:3c:17:0d:d0:f0: 00:3e:41:ce:26:37:fc:ec:0c:5e:a2:63:c4:27:6f: 8f:9f:05:c5:61:4b:bc:e1:5a:a4:50:2c:d6:88:71: 8a:8a:ae:8e:11:a1:a8:38:c6:e9:0c:6b:8d:05:28: 8b:42:24:ba:ae:ce:f4:c2:2d:0a:fd:30:cf:7a:32: 6a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:78:75:5C:36:E7:59:BF:E1:E1:37:8A:19:B0:FF:A6:B9:58:5B:10 X509v3 Authority Key Identifier: keyid:0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:0d:8b:ff:76:2f:1a:1a:3a:8f:0c:4a:5d:39:8d:b8:c1:5a: c1:c6:34:ae:5c:4c:d5:91:b1:35:a2:be:9c:88:ea:d5:48:2a: 3e:6c:14:f2:23:35:25:6b:4e:51:04:4b:47:0b:c6:01:1e:ca: cc:10:ba:dc:b0:1b:7c:79:c4:a0:5b:ef:88:cb:02:09:b6:ca: e4:65:57:16:24:1a:cc:10:72:da:93:b2:02:75:8f:ad:be:af: 5a:76:07:44:5d:35:d0:55:75:61:4f:7d:2a:65:66:ff:24:62: 17:4b:06:b6:d8:49:64:0f:a9:85:0a:53:78:6a:61:f6:2f:3c: 1c:26:ff:c3:23:75:7e:35:d4:8e:d9:79:36:92:d2:ab:e4:97: 1e:68:b2:95:60:91:82:ad:ac:df:27:c1:aa:d4:f3:56:e1:fb: e6:a9:da:55:ba:16:fb:59:63:d7:cd:64:67:92:c6:25:d8:48: 61:28:5a:59:b9:48:c6:e4:51:db:b3:4e:b0:f0:39:e9:e9:84: 80:19:6d:fb:6d:64:5d:cb:fa:1c:44:ec:4a:a1:9e:de:ab:d9: c9:db:a9:62:d1:fb:95:9d:b5:56:1c:3f:e0:52:88:b6:f7:bf: f2:ec:13:33:b3:e8:99:d0:4b:da:d1:d9:50:f6:9d:0f:a2:16: c1:16:8b:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzibIqvL4hkGw1hFiGcznFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNWU3OThkYjZlOGY1N2M1ZjRhNDQ1MTUwOTAxZGVlOGE5 NmQ1ZTUwHhcNMjUxMjA2MTIwMTE4WhcNMjUxMjA3MTIwMTE4WjAzMTEwLwYDVQQD EyhhNjc4NzU1YzM2ZTc1OWJmZTFlMTM3OGExOWIwZmZhNmI5NTg1YjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QE/mjhqb2V6xC5FL8Le3G+uaD56 2v5n7v/4tNYYumZEEWLPrJbM6hb8B4978tpHxnmLRwNAZWYmM2IwcauRNkQZbt76 AxrlsAy+n7szq8Hmpu8JTHz30gNzMXCSd1fh93V0m4ZadPRKcHpMbFG+H+gDrkBE fScXtYnMroPNNZf50UGFlAnAPxdueCnOxScvu3ogJ19lB/Nz1X8KIddyjreWHcYW CEIUXIY3fs03x5WFWl4uXM96cY/teHZZPBcN0PAAPkHOJjf87AxeomPEJ2+PnwXF YUu84VqkUCzWiHGKiq6OEaGoOMbpDGuNBSiLQiS6rs70wi0K/TDPejJq6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZ4dVw251m/4eE3ihmw/6a5WFsQMB8GA1UdIwQY MBaAFAteeY226PV8X0pEUVCQHe6KltXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzE1NWpiYm85WHhmU2tSUlVKQWQ3b3FXMWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kNjc5ZjItNDE0ZS00NTM4LTljNjAt Mjk1NjExYWE3ZTkyLzEvQzE1NWpiYm85WHhmU2tSUlVKQWQ3b3FXMWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kNjc5ZjItNDE0ZS00NTM4LTljNjAtMjk1NjExYWE3ZTky LzEvQzE1NWpiYm85WHhmU2tSUlVKQWQ3b3FXMWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeg2L/3Yv Gho6jwxKXTmNuMFawcY0rlxM1ZGxNaK+nIjq1UgqPmwU8iM1JWtOUQRLRwvGAR7K zBC63LAbfHnEoFvviMsCCbbK5GVXFiQazBBy2pOyAnWPrb6vWnYHRF010FV1YU99 KmVm/yRiF0sGtthJZA+phQpTeGph9i88HCb/wyN1fjXUjtl5NpLSq+SXHmiylWCR gq2s3yfBqtTzVuH75qnaVboW+1lj181kZ5LGJdhIYShaWblIxuRR27NOsPA56emE gBlt+21kXcv6HETsSqGe3qvZydupYtH7lZ21Vhw/4FKItve/8uwTM7PomdBL2tHZ UPadD6IWwRaLqA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:13:47 2025 by rpki-client