This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft File: 156keuFhy7Pa75d4lzDXDEy6idA.mft (raw, json) Hash identifier: yIqj8c2FHVRcFxgvlyDyUmxo8gyKXH9rihbbaEp8O0U= Subject key identifier: FC:07:9B:05:D9:9A:C3:9A:5E:C5:CD:D0:37:DE:FC:EF:CC:DB:47:21 Authority key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0 Certificate issuer: /CN=d79ea47ae161cbb3daef97789730d70c4cba89d0 Certificate serial: 019B41A450C73C7B8501D40D0F118A53948C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft Manifest number: 0E32 Signing time: Sun 21 Dec 2025 16:00:46 +0000 Manifest this update: Sun 21 Dec 2025 16:00:46 +0000 Manifest next update: Mon 22 Dec 2025 16:00:46 +0000 Files and hashes: 1: 156keuFhy7Pa75d4lzDXDEy6idA.crl (hash: 3jR3ZatbxJosaYy/mzAavUWZN2xiPbamgLVGPzqgbhM=) 2: BYLPzOMe1DxWdpXNE62DtzO9Fb0.roa (hash: SqdsHTomHrhRooCsvxMkFhbSdd3KRws8NQEmMcUSL9s=) 3: L0_IW031V8glRQi2qCV5oPEf9Ro.roa (hash: AA7xAguXYqxswXW6tTMsC/xh3FPMqVeiLIYHUXm73pU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 16:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:50:c7:3c:7b:85:01:d4:0d:0f:11:8a:53:94:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0 Validity Not Before: Dec 21 16:00:46 2025 GMT Not After : Dec 22 16:00:46 2025 GMT Subject: CN=fc079b05d99ac39a5ec5cdd037defcefccdb4721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e2:e6:04:4c:76:1a:63:9c:00:e6:e3:49:e9: 8b:04:39:98:a9:9c:5d:6f:57:a5:30:b6:05:81:37: e9:d6:97:67:8e:ba:b1:1a:58:7f:df:0f:0e:dd:38: 8f:cc:25:43:24:7d:13:95:2f:85:87:90:55:97:80: cd:4f:f5:82:07:5a:37:1a:96:88:0c:ad:7d:a7:89: 52:cd:79:6b:1c:00:14:4f:64:2e:9e:31:ea:f5:2a: e0:a9:41:46:4f:32:f9:f9:8d:9c:98:25:92:e1:22: cc:e7:96:f7:fd:79:16:3e:87:e4:af:4a:93:d9:27: 2e:50:e0:01:16:35:ed:19:10:8d:bf:9f:ba:71:01: b6:15:5d:66:f1:69:11:d8:95:88:ba:d3:92:62:4e: 02:cf:9a:a6:3e:6d:92:d4:2f:9e:b1:86:3b:d4:4c: d3:be:d4:bc:76:63:3f:db:01:cf:94:bc:6a:5b:2f: 9c:f3:23:ee:53:9b:b3:08:23:24:cf:7e:10:35:d2: fe:00:78:28:cc:ea:81:82:29:ae:78:16:61:9d:63: 94:52:67:97:d8:e2:74:a8:eb:d9:a4:ce:8a:42:9f: 26:19:e8:74:9e:e9:01:0c:15:dd:df:84:0f:25:c3: 00:35:1b:82:e3:fe:5b:6f:e2:fd:aa:9b:cd:9e:34: 85:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:07:9B:05:D9:9A:C3:9A:5E:C5:CD:D0:37:DE:FC:EF:CC:DB:47:21 X509v3 Authority Key Identifier: keyid:D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d6:31:7f:19:f3:ea:aa:e2:3f:55:eb:76:78:e3:6e:5b:dc: 80:c1:3b:bd:b2:50:19:aa:4d:96:d7:11:fd:9e:4a:f1:dd:d2: b4:3c:9a:27:65:32:62:10:f0:c2:13:55:19:d4:ac:c2:93:6e: a0:2d:1f:63:67:a9:0c:0d:c6:b1:b1:1b:f3:f6:99:6f:aa:b9: 7d:81:4e:23:3f:f7:81:4b:d1:7f:a6:b3:59:82:c9:dc:9c:3b: cd:d4:11:90:b3:f1:1a:76:ce:2e:9c:97:21:38:a9:f9:16:e3: bb:ee:d1:87:fa:01:68:8b:01:db:98:cd:ac:4c:27:d8:a1:98: 29:9c:b1:cf:6c:03:e6:d2:5c:51:2d:7c:62:34:a0:a5:5c:36: 9b:34:ec:8d:7b:a2:68:4d:0c:61:e6:b1:3d:5f:9b:6e:72:d9: ff:d3:1d:74:be:30:b0:4d:44:cb:ef:4e:c0:f9:cb:15:cb:01: 2c:cc:75:d1:31:74:56:b2:56:57:2d:9f:c3:74:49:6a:dd:b9: 6e:5b:9c:ce:c8:90:aa:aa:0d:18:12:de:42:01:11:57:7d:4c: 83:c7:52:54:ac:ba:ab:9e:31:21:ae:4b:d3:1f:04:c0:b0:b3: 96:9e:a4:22:e6:e8:c6:6a:48:42:b3:19:11:84:2c:46:65:8d: 12:9e:4a:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpFDHPHuFAdQNDxGKU5SMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OWVhNDdhZTE2MWNiYjNkYWVmOTc3ODk3MzBkNzBjNGNi YTg5ZDAwHhcNMjUxMjIxMTYwMDQ2WhcNMjUxMjIyMTYwMDQ2WjAzMTEwLwYDVQQD EyhmYzA3OWIwNWQ5OWFjMzlhNWVjNWNkZDAzN2RlZmNlZmNjZGI0NzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOLmBEx2GmOcAObjSemLBDmYqZxd b1elMLYFgTfp1pdnjrqxGlh/3w8O3TiPzCVDJH0TlS+Fh5BVl4DNT/WCB1o3GpaI DK19p4lSzXlrHAAUT2QunjHq9SrgqUFGTzL5+Y2cmCWS4SLM55b3/XkWPofkr0qT 2ScuUOABFjXtGRCNv5+6cQG2FV1m8WkR2JWIutOSYk4Cz5qmPm2S1C+esYY71EzT vtS8dmM/2wHPlLxqWy+c8yPuU5uzCCMkz34QNdL+AHgozOqBgimueBZhnWOUUmeX 2OJ0qOvZpM6KQp8mGeh0nukBDBXd34QPJcMANRuC4/5bb+L9qpvNnjSFEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwHmwXZmsOaXsXN0Dfe/O/M20chMB8GA1UdIwQY MBaAFNeepHrhYcuz2u+XeJcw1wxMuonQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTU2a2V1Rmh5N1BhNzVkNGx6RFhERXk2aWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kOWNiNDEtMWMzYi00NmFiLWE5OTMt M2MzZTUwZGRhNmNjLzEvMTU2a2V1Rmh5N1BhNzVkNGx6RFhERXk2aWRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9kOWNiNDEtMWMzYi00NmFiLWE5OTMtM2MzZTUwZGRhNmNj LzEvMTU2a2V1Rmh5N1BhNzVkNGx6RFhERXk2aWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNYxfxnz 6qriP1XrdnjjblvcgME7vbJQGapNltcR/Z5K8d3StDyaJ2UyYhDwwhNVGdSswpNu oC0fY2epDA3GsbEb8/aZb6q5fYFOIz/3gUvRf6azWYLJ3Jw7zdQRkLPxGnbOLpyX ITip+Rbju+7Rh/oBaIsB25jNrEwn2KGYKZyxz2wD5tJcUS18YjSgpVw2mzTsjXui aE0MYeaxPV+bbnLZ/9MddL4wsE1Ey+9OwPnLFcsBLMx10TF0VrJWVy2fw3RJat25 bluczsiQqqoNGBLeQgERV31Mg8dSVKy6q54xIa5L0x8EwLCzlp6kIuboxmpIQrMZ EYQsRmWNEp5KZg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:11:14 2025 by rpki-client