This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft File: 152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json) Hash identifier: LihFQ/MH6pHJNVJXCfyIBzVQHOTwAstjLJc/cglbGq8= Subject key identifier: 02:DE:9F:70:83:56:86:17:F5:CE:B9:FA:E5:BA:0E:4C:AA:F1:E9:46 Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef Certificate serial: 019B39EB31C456C01BC4AA250AB9E952E0B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 04:01:13 +0000 Manifest this update: Sat 20 Dec 2025 04:01:13 +0000 Manifest next update: Sun 21 Dec 2025 04:01:13 +0000 Files and hashes: 1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: ijOKKUYyvOykcR+1cZ/v+yf1zEP08rsBMR7y3j5XBV8=) 2: D6tQMtTrcrX-gfAb6Oldi--cuH0.roa (hash: hSrHBvCFCmXDyAQnKcTo97bjwp9R955PaX/sDtrTv8s=) 3: u1fNRyXyMUiOEFJEZY8QmByB7E8.roa (hash: ZcFES+4nNrRKAxBfx+5gDYNJV+7c5V3Qx9m+LvRk+bg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:31:c4:56:c0:1b:c4:aa:25:0a:b9:e9:52:e0:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d79da465615c60094370833892da84c886e1c4ef Validity Not Before: Dec 20 04:01:13 2025 GMT Not After : Dec 21 04:01:13 2025 GMT Subject: CN=02de9f7083568617f5ceb9fae5ba0e4caaf1e946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:15:c1:f8:d3:5f:5a:22:1e:6a:72:26:8f:7a: e8:f2:df:88:10:61:b9:85:03:b4:f1:54:88:86:c6: c5:97:1b:df:20:8d:c6:d4:ef:1a:e5:fe:6d:b7:32: 44:b5:2c:20:ed:cd:57:04:18:56:9e:17:16:7b:9e: 2f:b2:4e:52:de:44:77:14:c5:b5:88:57:94:9a:1c: 50:56:11:90:78:aa:29:9c:11:84:86:22:9c:d1:fd: 9b:27:4c:ff:28:06:90:61:05:01:12:6c:60:b0:0d: 41:e9:d9:72:9e:8d:7c:44:1e:f1:98:c2:fb:7d:a7: 76:05:b0:e9:25:a9:ef:ea:90:a5:bb:ad:fb:c4:86: 9c:e6:c3:14:b6:69:5d:18:e1:dc:2e:a6:ce:0a:41: 68:b5:8f:a8:cc:60:c6:89:df:69:cb:70:f0:07:5f: 61:52:56:bb:08:08:4d:f5:8b:e9:cb:8f:cc:39:f3: 73:d1:34:6f:73:99:49:22:75:2e:c6:45:83:fa:a9: ad:da:ff:1a:55:b3:09:33:fa:70:b9:40:dc:32:34: 12:25:e5:96:09:9f:69:16:32:26:e1:bc:b2:93:d6: 76:62:9f:28:84:11:12:bf:27:1f:f0:04:da:11:91: ce:33:a4:6a:bd:f4:93:9e:8d:15:d4:c3:f1:9c:c3: 24:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DE:9F:70:83:56:86:17:F5:CE:B9:FA:E5:BA:0E:4C:AA:F1:E9:46 X509v3 Authority Key Identifier: keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:a6:1d:6d:ad:7b:6b:ef:de:73:a1:5a:46:0d:f3:e5:5b:af: b5:93:48:cb:0c:4c:50:3f:c1:d5:a6:00:34:61:95:7d:b3:13: 3c:6f:84:b4:f6:b9:b3:7b:fb:9b:8a:91:3d:47:75:3b:9b:02: af:95:05:be:bf:08:cd:70:85:8a:13:b1:1c:9d:53:33:d2:7f: 83:92:4f:6e:60:33:4f:76:80:84:ec:21:a6:9d:6c:88:c1:9a: ac:ab:8b:e0:99:6b:1c:68:d0:8a:ae:53:c3:e3:19:4e:4d:ea: 89:6b:93:97:42:bc:15:b8:fb:00:83:59:88:2f:4b:fa:e4:d9: bb:6c:b9:bf:4b:66:4c:78:17:5e:f8:86:a6:49:64:8f:78:64: fb:3d:9e:5c:f3:9f:a7:06:8a:ec:be:0c:42:c3:63:55:c0:71: 53:da:76:d4:87:a9:a1:23:8d:27:bd:b1:5e:02:b9:25:98:72: a0:6d:f2:19:1b:e7:dc:60:5b:00:da:61:74:b5:6b:ac:00:25: df:a3:8c:16:da:f0:42:df:64:0d:82:f3:66:ee:89:e9:92:49: 16:7b:4c:48:df:69:42:1e:2c:0d:2a:30:d6:72:23:ef:11:36: e1:4c:73:90:35:01:4b:44:bd:37:67:6b:a5:40:06:21:b1:8a: 01:19:4d:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56zHEVsAbxKolCrnpUuCzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OWRhNDY1NjE1YzYwMDk0MzcwODMzODkyZGE4NGM4ODZl MWM0ZWYwHhcNMjUxMjIwMDQwMTEzWhcNMjUxMjIxMDQwMTEzWjAzMTEwLwYDVQQD EygwMmRlOWY3MDgzNTY4NjE3ZjVjZWI5ZmFlNWJhMGU0Y2FhZjFlOTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBXB+NNfWiIeanImj3ro8t+IEGG5 hQO08VSIhsbFlxvfII3G1O8a5f5ttzJEtSwg7c1XBBhWnhcWe54vsk5S3kR3FMW1 iFeUmhxQVhGQeKopnBGEhiKc0f2bJ0z/KAaQYQUBEmxgsA1B6dlyno18RB7xmML7 fad2BbDpJanv6pClu637xIac5sMUtmldGOHcLqbOCkFotY+ozGDGid9py3DwB19h Ula7CAhN9Yvpy4/MOfNz0TRvc5lJInUuxkWD+qmt2v8aVbMJM/pwuUDcMjQSJeWW CZ9pFjIm4byyk9Z2Yp8ohBESvycf8ATaEZHOM6RqvfSTno0V1MPxnMMkRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALen3CDVoYX9c65+uW6Dkyq8elGMB8GA1UdIwQY MBaAFNedpGVhXGAJQ3CDOJLahMiG4cTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTUya1pXRmNZQWxEY0lNNGt0cUV5SWJoeE84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9kNzljOTgtYzI3ZC00NWIzLTg2ZDkt ZGFkM2JiMTNjMGEyLzEvMTUya1pXRmNZQWxEY0lNNGt0cUV5SWJoeE84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9kNzljOTgtYzI3ZC00NWIzLTg2ZDktZGFkM2JiMTNjMGEy LzEvMTUya1pXRmNZQWxEY0lNNGt0cUV5SWJoeE84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKYdba17 a+/ec6FaRg3z5VuvtZNIywxMUD/B1aYANGGVfbMTPG+EtPa5s3v7m4qRPUd1O5sC r5UFvr8IzXCFihOxHJ1TM9J/g5JPbmAzT3aAhOwhpp1siMGarKuL4JlrHGjQiq5T w+MZTk3qiWuTl0K8Fbj7AINZiC9L+uTZu2y5v0tmTHgXXviGpklkj3hk+z2eXPOf pwaK7L4MQsNjVcBxU9p21IepoSONJ72xXgK5JZhyoG3yGRvn3GBbANphdLVrrAAl 36OMFtrwQt9kDYLzZu6J6ZJJFntMSN9pQh4sDSow1nIj7xE24UxzkDUBS0S9N2dr pUAGIbGKARlNIQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:21:21 2025 by rpki-client