This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft File: aL0515MSXGhN_ycviGIrrEMhgPA.mft (raw, json) Hash identifier: 1T424iOzNItfp5BFW9f04WnMPytHUzgNqvGEGJYhbrk= Subject key identifier: 55:76:42:B0:AF:C0:C4:0E:39:B2:D2:DA:C8:AF:76:1B:D8:7F:DE:7B Authority key identifier: 68:BD:39:D7:93:12:5C:68:4D:FF:27:2F:88:62:2B:AC:43:21:80:F0 Certificate issuer: /CN=68bd39d793125c684dff272f88622bac432180f0 Certificate serial: 019AF23FF1421980444652AF32BAA7373CBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 06:01:07 +0000 Manifest this update: Sat 06 Dec 2025 06:01:07 +0000 Manifest next update: Sun 07 Dec 2025 06:01:07 +0000 Files and hashes: 1: aL0515MSXGhN_ycviGIrrEMhgPA.crl (hash: DV/4hZV74bZiBN7OdzoBmptfsHVJ3nYaiJNWMwnTfOM=) 2: aUKOJrnyNsDVraosl-1-341781M.roa (hash: omnP8BEQZ4v0uR+9FGHR3kGU8+xYRsRiJd27fBInyzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f1:42:19:80:44:46:52:af:32:ba:a7:37:3c:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68bd39d793125c684dff272f88622bac432180f0 Validity Not Before: Dec 6 06:01:07 2025 GMT Not After : Dec 7 06:01:07 2025 GMT Subject: CN=557642b0afc0c40e39b2d2dac8af761bd87fde7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:99:38:0d:b9:97:3f:79:fb:48:bd:72:96:51: d1:7f:7a:c8:3d:ae:35:5c:1b:48:5f:bd:d0:9e:c5: fa:ba:a0:30:78:a7:45:fd:e1:a6:91:c8:bf:b4:df: 7c:1f:e7:f1:7a:6a:2b:39:3b:4d:83:b7:cb:98:d0: 3a:30:c5:f6:b7:74:9b:f4:a1:6d:2e:17:de:22:b6: 94:70:fa:24:fc:d0:63:97:35:b1:20:2e:34:9d:20: ac:f8:ef:f0:77:bd:59:e2:df:c0:41:d5:63:57:f9: 2d:8d:29:06:57:d0:91:5d:df:bd:f3:cf:f9:fa:22: 74:e3:84:12:f7:f0:0a:7d:46:e4:43:8d:bb:a9:82: d1:d1:8b:fc:a6:24:b1:f3:fd:eb:d0:57:2c:7b:cf: 13:8f:9a:4e:19:0e:bc:cc:06:a0:1e:f3:b9:30:6b: 01:8c:c1:75:67:21:b5:cd:f2:cd:23:1b:de:ac:50: 96:cf:05:a9:c0:3e:86:81:81:37:2f:e1:f7:0e:8e: 6e:d2:a9:99:bc:45:1a:96:5f:a9:d0:11:35:d5:5c: 02:9b:f6:bd:1a:6b:46:3a:ed:87:d4:b2:38:7b:77: 8d:4c:69:35:b7:ff:58:2a:cd:c9:fa:36:8f:b0:75: 6f:ae:57:78:96:76:91:ab:9a:4e:58:fc:7e:33:57: 76:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:76:42:B0:AF:C0:C4:0E:39:B2:D2:DA:C8:AF:76:1B:D8:7F:DE:7B X509v3 Authority Key Identifier: keyid:68:BD:39:D7:93:12:5C:68:4D:FF:27:2F:88:62:2B:AC:43:21:80:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:7b:dc:ab:93:17:a7:39:3e:0e:47:44:53:32:9a:3b:89:09: 80:0b:72:4f:17:9f:73:c6:d6:11:ca:87:b9:b4:40:00:4a:75: 92:fe:b4:ca:99:c2:05:16:0a:f7:5a:0e:9c:69:f9:c9:34:a1: 7f:ab:ff:a6:0f:5f:50:6d:52:c3:81:06:4d:64:12:53:9e:08: 9a:e7:3b:c0:f4:36:88:f8:d0:03:f7:ae:20:94:72:24:97:6a: 75:62:7f:d2:03:fe:cd:36:5a:b3:3b:0c:be:7c:0e:fb:6b:b5: 36:22:4b:ca:07:98:28:ff:3d:4f:8b:b2:a5:6d:8d:59:65:24: 8f:a8:9f:dc:b3:59:e0:ec:04:07:53:81:07:e2:73:51:65:f4: 8e:5f:fb:0b:85:4b:a7:aa:47:0c:15:73:75:d5:01:ba:b4:e1: 82:10:63:cf:fd:56:e7:e5:a6:b8:0f:2a:b9:ed:94:d5:7b:48: c3:f1:3d:c9:96:b0:16:d4:a1:54:53:8f:d4:14:14:22:cc:ff: 4a:da:b0:77:5f:46:71:99:18:9a:de:21:28:eb:08:00:21:d4: 4e:f1:91:aa:75:96:03:1a:3c:37:00:db:86:a0:61:eb:fb:78: d0:71:02:7b:1d:f6:57:69:c9:5d:cf:cf:45:82:3d:e3:b4:d1: 87:d1:e0:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/FCGYBERlKvMrqnNzy7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YmQzOWQ3OTMxMjVjNjg0ZGZmMjcyZjg4NjIyYmFjNDMy MTgwZjAwHhcNMjUxMjA2MDYwMTA3WhcNMjUxMjA3MDYwMTA3WjAzMTEwLwYDVQQD Eyg1NTc2NDJiMGFmYzBjNDBlMzliMmQyZGFjOGFmNzYxYmQ4N2ZkZTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5k4DbmXP3n7SL1yllHRf3rIPa41 XBtIX73QnsX6uqAweKdF/eGmkci/tN98H+fxemorOTtNg7fLmNA6MMX2t3Sb9KFt LhfeIraUcPok/NBjlzWxIC40nSCs+O/wd71Z4t/AQdVjV/ktjSkGV9CRXd+988/5 +iJ044QS9/AKfUbkQ427qYLR0Yv8piSx8/3r0Fcse88Tj5pOGQ68zAagHvO5MGsB jMF1ZyG1zfLNIxverFCWzwWpwD6GgYE3L+H3Do5u0qmZvEUall+p0BE11VwCm/a9 GmtGOu2H1LI4e3eNTGk1t/9YKs3J+jaPsHVvrld4lnaRq5pOWPx+M1d2oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFV2QrCvwMQOObLS2sivdhvYf957MB8GA1UdIwQY MBaAFGi9OdeTElxoTf8nL4hiK6xDIYDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUwwNTE1TVNYR2hOX3ljdmlHSXJyRU1oZ1BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80MjRiOTQtZTcwMi00YjIyLWFlMmUt MDg5MDUyMGI4ODQ2LzEvYUwwNTE1TVNYR2hOX3ljdmlHSXJyRU1oZ1BBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy80MjRiOTQtZTcwMi00YjIyLWFlMmUtMDg5MDUyMGI4ODQ2 LzEvYUwwNTE1TVNYR2hOX3ljdmlHSXJyRU1oZ1BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHvcq5MX pzk+DkdEUzKaO4kJgAtyTxefc8bWEcqHubRAAEp1kv60ypnCBRYK91oOnGn5yTSh f6v/pg9fUG1Sw4EGTWQSU54Imuc7wPQ2iPjQA/euIJRyJJdqdWJ/0gP+zTZaszsM vnwO+2u1NiJLygeYKP89T4uypW2NWWUkj6if3LNZ4OwEB1OBB+JzUWX0jl/7C4VL p6pHDBVzddUBurThghBjz/1W5+WmuA8que2U1XtIw/E9yZawFtShVFOP1BQUIsz/ Stqwd19GcZkYmt4hKOsIACHUTvGRqnWWAxo8NwDbhqBh6/t40HECex32V2nJXc/P RYI947TRh9Hg5g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:30 2025 by rpki-client