This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft File: C155jbbo9XxfSkRRUJAd7oqW1eU.mft (raw, json) Hash identifier: dkUIYyrf5g1tK2NMZ0OrVla+4VatNVEldfNddK1t/1g= Subject key identifier: 28:D1:1B:FE:E4:94:7B:DF:4C:5C:AD:EE:38:E5:58:81:68:76:9B:A6 Authority key identifier: 0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5 Certificate issuer: /CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5 Certificate serial: 019B5418C226EF65DD3941B82AC81EF7311A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft Manifest number: 0D82 Signing time: Thu 25 Dec 2025 06:01:07 +0000 Manifest this update: Thu 25 Dec 2025 06:01:07 +0000 Manifest next update: Fri 26 Dec 2025 06:01:07 +0000 Files and hashes: 1: C155jbbo9XxfSkRRUJAd7oqW1eU.crl (hash: /yEuLOuzvviw8s8iFAn6Iv31qgjG8NqEOyz87jlC2n4=) 2: c7WoeWfnIdPF1gkZ7r90pN58Y2c.roa (hash: wpEquj9Ig8LsCQE7Y+MbSVtYeoDlqqJ8cepm+207hA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:c2:26:ef:65:dd:39:41:b8:2a:c8:1e:f7:31:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5 Validity Not Before: Dec 25 06:01:07 2025 GMT Not After : Dec 26 06:01:07 2025 GMT Subject: CN=28d11bfee4947bdf4c5cadee38e5588168769ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:32:33:86:27:c9:43:f9:c1:29:fa:9f:4d:bb: 7e:21:e0:ca:94:9f:5b:e3:4a:41:c9:65:ac:2d:7a: 9e:1d:67:25:b0:79:6c:e2:b4:88:8f:99:1a:39:a6: 49:93:65:d5:05:e0:b1:46:7a:a1:bb:47:e8:fa:6a: 43:26:c1:42:ad:15:f7:49:9f:0a:05:22:d6:41:57: fe:1e:ab:22:08:21:f5:71:f7:8c:5b:55:0b:39:61: e6:07:d1:4b:41:47:9e:63:1c:f8:b2:f5:03:c1:d6: cf:fe:61:04:d3:e6:9f:f6:e0:52:00:b6:43:7c:64: c0:c7:b8:02:09:8d:98:61:52:25:ba:94:67:b4:cc: 33:93:45:8d:4d:bb:11:06:1e:74:ea:79:78:f6:e4: 3b:cd:29:87:e4:1b:3f:1b:f2:2e:db:f3:86:1a:a7: ba:d3:36:63:92:fc:6d:51:ff:72:3f:25:cc:3e:18: 47:c0:0b:51:53:ea:79:9b:d0:d8:a2:79:05:13:a7: 5c:3f:7e:be:00:22:b2:40:95:02:74:d5:b7:0f:cf: 23:f7:1e:b0:2c:ce:bd:a5:b0:1b:75:45:22:d6:9f: 87:c6:e4:22:23:88:09:98:c1:2d:0e:3c:d0:79:9f: b2:6d:34:3a:46:5b:bc:2d:75:a9:6d:ae:94:96:48: 0b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D1:1B:FE:E4:94:7B:DF:4C:5C:AD:EE:38:E5:58:81:68:76:9B:A6 X509v3 Authority Key Identifier: keyid:0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:dc:4f:74:88:37:10:41:5a:8f:f3:a0:91:91:92:7d:ec:69: d1:07:c4:23:c6:d7:5a:e2:3f:85:1a:7c:54:43:9d:2c:3b:54: 2e:1e:e2:4f:15:b6:13:21:a1:c7:d4:64:7e:87:5b:79:5b:d8: 62:c5:b0:95:cd:ca:0a:15:9b:f1:36:27:42:0d:18:36:c9:56: 6c:9e:04:f5:b7:54:10:84:24:19:d2:7c:bb:1f:f4:76:19:17: ae:00:84:8c:54:10:99:be:f8:ac:74:57:2e:5d:26:43:6a:68: 17:a0:be:14:ae:97:8b:9d:f2:21:ef:60:e3:b0:70:3e:b3:71: 9f:76:fe:5c:e6:fa:74:c4:09:5c:cb:e6:eb:44:5f:a7:18:2a: f2:4c:51:c3:b4:b5:a2:8d:22:90:90:fc:f0:a4:cd:9c:f1:64: 5b:ed:46:5e:70:68:73:10:95:1e:b9:8d:3a:c8:f4:16:32:19: 65:18:7c:ae:4b:51:23:f8:78:4f:40:70:a1:dd:e8:b5:52:89: 90:28:b7:dd:cb:e7:db:07:d8:0d:03:70:01:47:31:c2:6b:46: d1:34:06:0f:e1:d5:a1:b1:fe:c4:27:8e:f1:1d:38:a5:ec:c8: c5:88:27:eb:46:aa:29:6d:4b:f0:24:b7:50:a5:ee:87:75:86: 3a:d2:d2:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGMIm72XdOUG4Ksge9zEaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNWU3OThkYjZlOGY1N2M1ZjRhNDQ1MTUwOTAxZGVlOGE5 NmQ1ZTUwHhcNMjUxMjI1MDYwMTA3WhcNMjUxMjI2MDYwMTA3WjAzMTEwLwYDVQQD EygyOGQxMWJmZWU0OTQ3YmRmNGM1Y2FkZWUzOGU1NTg4MTY4NzY5YmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTIzhifJQ/nBKfqfTbt+IeDKlJ9b 40pByWWsLXqeHWclsHls4rSIj5kaOaZJk2XVBeCxRnqhu0fo+mpDJsFCrRX3SZ8K BSLWQVf+HqsiCCH1cfeMW1ULOWHmB9FLQUeeYxz4svUDwdbP/mEE0+af9uBSALZD fGTAx7gCCY2YYVIlupRntMwzk0WNTbsRBh506nl49uQ7zSmH5Bs/G/Iu2/OGGqe6 0zZjkvxtUf9yPyXMPhhHwAtRU+p5m9DYonkFE6dcP36+ACKyQJUCdNW3D88j9x6w LM69pbAbdUUi1p+HxuQiI4gJmMEtDjzQeZ+ybTQ6Rlu8LXWpba6UlkgLJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjRG/7klHvfTFyt7jjlWIFodpumMB8GA1UdIwQY MBaAFAteeY226PV8X0pEUVCQHe6KltXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzE1NWpiYm85WHhmU2tSUlVKQWQ3b3FXMWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kNjc5ZjItNDE0ZS00NTM4LTljNjAt Mjk1NjExYWE3ZTkyLzEvQzE1NWpiYm85WHhmU2tSUlVKQWQ3b3FXMWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kNjc5ZjItNDE0ZS00NTM4LTljNjAtMjk1NjExYWE3ZTky LzEvQzE1NWpiYm85WHhmU2tSUlVKQWQ3b3FXMWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjNxPdIg3 EEFaj/OgkZGSfexp0QfEI8bXWuI/hRp8VEOdLDtULh7iTxW2EyGhx9RkfodbeVvY YsWwlc3KChWb8TYnQg0YNslWbJ4E9bdUEIQkGdJ8ux/0dhkXrgCEjFQQmb74rHRX Ll0mQ2poF6C+FK6Xi53yIe9g47BwPrNxn3b+XOb6dMQJXMvm60Rfpxgq8kxRw7S1 oo0ikJD88KTNnPFkW+1GXnBocxCVHrmNOsj0FjIZZRh8rktRI/h4T0Bwod3otVKJ kCi33cvn2wfYDQNwAUcxwmtG0TQGD+HVobH+xCeO8R04pezIxYgn60aqKW1L8CS3 UKXuh3WGOtLSMQ== -----END CERTIFICATE-----Generated at Thu Dec 25 07:16:29 2025 by rpki-client