This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft File: a15HDpDV693Mqpz2uyLoneDZ8gc.mft (raw, json) Hash identifier: lFdjF69DDffKyO9F69yLJ+Z/aIijIUkCF3t9vQj2dT0= Subject key identifier: BC:48:C4:AB:33:39:1B:19:0C:52:3E:A1:A1:48:BF:E8:FB:AB:F3:70 Authority key identifier: 6B:5E:47:0E:90:D5:EB:DD:CC:AA:9C:F6:BB:22:E8:9D:E0:D9:F2:07 Certificate issuer: /CN=6b5e470e90d5ebddccaa9cf6bb22e89de0d9f207 Certificate serial: 019AF1D211BDA25FAA00550A037260307E17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft Manifest number: 0D9E Signing time: Sat 06 Dec 2025 04:01:07 +0000 Manifest this update: Sat 06 Dec 2025 04:01:07 +0000 Manifest next update: Sun 07 Dec 2025 04:01:07 +0000 Files and hashes: 1: IpPxqrkAJLVsXHeB04cvVHAP5Fg.roa (hash: VtX3ApkZgzYiR7CYiCSZq34MU+2YZHhoSAVs9vYdqbA=) 2: a15HDpDV693Mqpz2uyLoneDZ8gc.crl (hash: uzlory4AfT4GeFmXiG4DAAzBS400beZPMjgnYiJ0le8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:11:bd:a2:5f:aa:00:55:0a:03:72:60:30:7e:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5e470e90d5ebddccaa9cf6bb22e89de0d9f207 Validity Not Before: Dec 6 04:01:07 2025 GMT Not After : Dec 7 04:01:07 2025 GMT Subject: CN=bc48c4ab33391b190c523ea1a148bfe8fbabf370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7d:fd:0a:9e:44:82:38:43:b2:f2:bd:ec:26: 8c:fe:e5:bb:22:d4:ec:e3:c1:df:5a:44:00:b8:88: b1:38:8f:a2:fe:68:40:9c:cf:b0:42:af:33:f6:c5: 26:33:ed:a8:a2:67:6c:91:b1:f0:28:0f:2e:6d:ec: 94:9c:4b:20:56:7e:8b:a0:f2:35:53:e7:a1:c9:cb: 16:27:44:c7:38:5d:68:9b:3f:52:d2:cb:f4:79:a3: 74:2d:6a:d7:1d:1c:45:f0:6e:8b:e7:3a:a6:4a:7a: 05:ae:8a:46:5a:26:4f:15:06:2d:7e:82:ad:2d:76: 7b:e0:ed:99:9c:81:8d:40:84:8c:02:40:77:3b:42: f6:12:08:8b:1c:f0:e5:dc:cb:5d:81:dc:41:39:7b: 2a:ca:d8:db:76:11:79:fb:47:b1:37:26:bd:30:67: 4f:27:3b:0b:57:0d:84:97:a1:51:66:18:67:40:be: 62:6f:7f:a7:77:82:63:44:d5:86:25:52:5c:43:18: dc:dc:1a:6c:9d:33:45:ed:f6:7f:45:8f:35:d4:1c: 52:7f:fa:7b:c4:0e:64:6d:b0:6a:cf:36:10:0c:b2: e5:92:0f:58:94:58:22:cd:09:39:31:bc:ee:4a:26: d7:45:d9:1c:06:77:d6:31:c0:a3:22:bd:32:58:32: c6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:48:C4:AB:33:39:1B:19:0C:52:3E:A1:A1:48:BF:E8:FB:AB:F3:70 X509v3 Authority Key Identifier: keyid:6B:5E:47:0E:90:D5:EB:DD:CC:AA:9C:F6:BB:22:E8:9D:E0:D9:F2:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:2f:a4:17:91:8b:87:f3:49:54:b5:59:c7:e7:a0:f9:06:09: a8:4d:31:44:9c:3e:d3:e2:65:f5:25:b3:dc:37:15:d8:77:0f: 04:c9:c3:69:f8:5f:a0:48:3d:ef:73:da:70:c5:35:87:50:4b: 82:90:d5:72:64:7e:7b:79:92:c9:3d:39:b4:9f:5c:c7:36:32: 3b:33:40:18:5c:c9:6e:05:e5:49:aa:1d:84:8a:1e:b4:01:ff: 54:35:bc:6b:80:2c:71:38:69:e8:27:a0:3a:d2:01:ae:59:29: 66:c7:48:20:65:dc:cd:6e:5a:6c:f0:0f:92:cd:c3:80:25:85: d2:80:75:79:b1:68:4b:8a:37:d7:8f:c8:44:00:c3:d0:4b:ef: 2e:83:dc:0b:40:f1:43:da:b9:9d:9a:37:00:be:7c:e3:bf:57: c4:7b:66:a8:3d:c1:68:42:4e:71:b1:06:b6:1c:05:0c:db:8b: 39:5e:dd:db:7e:ed:9c:ab:ca:98:9b:ad:31:58:d9:00:2f:a1: 1a:05:33:69:ad:f0:68:fd:a2:3a:dc:13:08:6f:34:5e:5e:c7: 8f:f0:0e:b6:74:13:cc:33:e8:cb:fb:2d:c7:25:1f:e7:2f:75: 93:2a:2f:d7:dd:88:c6:e9:96:65:92:93:40:42:7a:74:ab:ef: ed:a1:80:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hG9ol+qAFUKA3JgMH4XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWU0NzBlOTBkNWViZGRjY2FhOWNmNmJiMjJlODlkZTBk OWYyMDcwHhcNMjUxMjA2MDQwMTA3WhcNMjUxMjA3MDQwMTA3WjAzMTEwLwYDVQQD EyhiYzQ4YzRhYjMzMzkxYjE5MGM1MjNlYTFhMTQ4YmZlOGZiYWJmMzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4H39Cp5EgjhDsvK97CaM/uW7ItTs 48HfWkQAuIixOI+i/mhAnM+wQq8z9sUmM+2oomdskbHwKA8ubeyUnEsgVn6LoPI1 U+ehycsWJ0THOF1omz9S0sv0eaN0LWrXHRxF8G6L5zqmSnoFropGWiZPFQYtfoKt LXZ74O2ZnIGNQISMAkB3O0L2EgiLHPDl3MtdgdxBOXsqytjbdhF5+0exNya9MGdP JzsLVw2El6FRZhhnQL5ib3+nd4JjRNWGJVJcQxjc3BpsnTNF7fZ/RY811BxSf/p7 xA5kbbBqzzYQDLLlkg9YlFgizQk5MbzuSibXRdkcBnfWMcCjIr0yWDLGUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxIxKszORsZDFI+oaFIv+j7q/NwMB8GA1UdIwQY MBaAFGteRw6Q1evdzKqc9rsi6J3g2fIHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTE1SERwRFY2OTNNcXB6MnV5TG9uZURaOGdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hODJjMTAtNTIxOC00N2E3LWE3YzQt ZWViNmRhYTc1ZWM1LzEvYTE1SERwRFY2OTNNcXB6MnV5TG9uZURaOGdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hODJjMTAtNTIxOC00N2E3LWE3YzQtZWViNmRhYTc1ZWM1 LzEvYTE1SERwRFY2OTNNcXB6MnV5TG9uZURaOGdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAly+kF5GL h/NJVLVZx+eg+QYJqE0xRJw+0+Jl9SWz3DcV2HcPBMnDafhfoEg973PacMU1h1BL gpDVcmR+e3mSyT05tJ9cxzYyOzNAGFzJbgXlSaodhIoetAH/VDW8a4AscThp6Ceg OtIBrlkpZsdIIGXczW5abPAPks3DgCWF0oB1ebFoS4o314/IRADD0EvvLoPcC0Dx Q9q5nZo3AL58479XxHtmqD3BaEJOcbEGthwFDNuLOV7d237tnKvKmJutMVjZAC+h GgUzaa3waP2iOtwTCG80Xl7Hj/AOtnQTzDPoy/stxyUf5y91kyov192IxumWZZKT QEJ6dKvv7aGA9A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:33 2025 by rpki-client