This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft File: 15-SXhc4vDUrxrXPX_lRs9gTrjk.mft (raw, json) Hash identifier: 7DWy3zan0WeVazgYJVLZE0PJN5FLQUYVVFruka7fAc8= Subject key identifier: 42:24:73:8D:D5:F5:71:93:AC:A4:21:75:F3:64:D1:F7:7B:A3:BF:61 Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39 Certificate issuer: /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39 Certificate serial: 019AF08846F5F5B0D3F986BE8086DE019C9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft Manifest number: 07E3 Signing time: Fri 05 Dec 2025 22:00:53 +0000 Manifest this update: Fri 05 Dec 2025 22:00:53 +0000 Manifest next update: Sat 06 Dec 2025 22:00:53 +0000 Files and hashes: 1: 15-SXhc4vDUrxrXPX_lRs9gTrjk.crl (hash: V/dLsU2bW63v4BLWU4W/Kr5jKgU1WvqXrsC+4b5FbII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:46:f5:f5:b0:d3:f9:86:be:80:86:de:01:9c:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39 Validity Not Before: Dec 5 22:00:53 2025 GMT Not After : Dec 6 22:00:53 2025 GMT Subject: CN=4224738dd5f57193aca42175f364d1f77ba3bf61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e5:4f:8c:95:bd:4b:8b:4d:ec:88:61:a6:6c: df:65:2c:54:06:1f:9d:2f:b4:60:7a:af:2b:86:0e: 5b:51:9f:df:02:02:44:06:00:b4:52:98:c0:ef:af: e1:9b:eb:bb:55:b4:05:2a:61:5a:d6:1c:57:76:1a: 1a:2d:7f:cc:bf:82:ff:08:43:7d:88:8a:4a:9f:0c: 99:b7:9a:86:b1:75:db:3a:5f:31:0d:8c:9c:01:b2: 14:a1:57:52:71:3d:d3:9c:4f:08:b4:d2:b4:d3:cd: 5e:f5:9a:93:8a:51:a5:a8:d7:a8:ce:f7:74:1b:d7: 26:c0:14:5e:9a:1f:95:33:83:a3:0d:89:4f:70:3b: c5:06:88:b9:d7:6a:7d:fb:86:21:1b:b0:d2:99:40: b3:32:9f:d9:c4:7a:48:e5:f1:13:a6:04:74:71:21: 3a:61:46:10:77:91:47:bf:5e:fd:8c:ed:e0:b0:14: 1c:61:0f:e5:77:0c:4f:9d:48:44:19:48:b6:0d:86: 81:0f:0c:0b:30:1c:ac:52:f0:33:85:7c:cb:bc:e2: fe:d9:1f:84:de:e9:98:53:9b:65:a2:5d:58:2d:29: 16:6e:56:0a:7a:0e:2e:f3:99:d6:f5:6d:e3:9e:3a: 6a:5b:3d:89:42:d6:cd:e8:d7:34:66:96:13:d7:f8: 8f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:24:73:8D:D5:F5:71:93:AC:A4:21:75:F3:64:D1:F7:7B:A3:BF:61 X509v3 Authority Key Identifier: keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:0c:89:98:34:18:51:64:9b:6b:7e:57:51:95:55:1c:99:25: 1d:5b:aa:d2:51:24:4c:a7:75:8e:30:08:3a:aa:ca:53:19:a9: ad:5d:ab:b8:dc:be:29:df:7e:4e:e6:42:3e:56:22:dc:6f:d4: 91:99:be:ae:f3:6f:d3:4a:87:ba:7c:b9:2c:7a:b9:45:e7:9a: 41:bd:00:aa:1d:75:a6:68:7b:fa:41:af:7c:50:5d:96:1f:d1: dc:00:fc:8c:ec:7b:af:c5:77:cc:69:74:cb:49:4c:63:e8:c5: 17:03:b6:2d:f2:88:b6:2a:42:db:90:fc:c2:6d:42:62:0d:d6: 26:76:fd:38:92:8d:4d:fc:95:f0:c4:9a:1b:12:12:25:51:73: 59:7a:c3:2d:75:59:0b:cd:34:ad:b6:89:1c:3c:cc:82:76:c0: a3:74:da:f7:b2:18:97:4e:58:54:fb:27:b9:31:b7:85:f2:da: 2e:de:dc:30:1a:14:f0:48:76:2e:02:c5:e6:3b:65:58:91:b1: 4d:35:0f:c1:32:8a:ab:15:77:13:d3:81:3d:ac:01:a3:a4:7e: ad:e7:d3:af:7e:98:57:91:34:9f:a0:55:da:a3:eb:7f:7a:dd: bc:64:b0:d5:05:8c:43:eb:be:2a:46:2b:f6:19:4f:8b:70:8e: b1:f4:42:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiEb19bDT+Ya+gIbeAZydMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OWY5MjVlMTczOGJjMzUyYmM2YjVjZjVmZjk1MWIzZDgx M2FlMzkwHhcNMjUxMjA1MjIwMDUzWhcNMjUxMjA2MjIwMDUzWjAzMTEwLwYDVQQD Eyg0MjI0NzM4ZGQ1ZjU3MTkzYWNhNDIxNzVmMzY0ZDFmNzdiYTNiZjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eVPjJW9S4tN7IhhpmzfZSxUBh+d L7Rgeq8rhg5bUZ/fAgJEBgC0UpjA76/hm+u7VbQFKmFa1hxXdhoaLX/Mv4L/CEN9 iIpKnwyZt5qGsXXbOl8xDYycAbIUoVdScT3TnE8ItNK0081e9ZqTilGlqNeozvd0 G9cmwBRemh+VM4OjDYlPcDvFBoi512p9+4YhG7DSmUCzMp/ZxHpI5fETpgR0cSE6 YUYQd5FHv179jO3gsBQcYQ/ldwxPnUhEGUi2DYaBDwwLMBysUvAzhXzLvOL+2R+E 3umYU5tlol1YLSkWblYKeg4u85nW9W3jnjpqWz2JQtbN6Nc0ZpYT1/iP1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIkc43V9XGTrKQhdfNk0fd7o79hMB8GA1UdIwQY MBaAFNefkl4XOLw1K8a1z1/5UbPYE645MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTUtU1hoYzR2RFVyeHJYUFhfbFJzOWdUcmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zYjJjMDAtOTRiNi00MzRkLWIzNjIt OTZhMzRiMDIyZjg5LzEvMTUtU1hoYzR2RFVyeHJYUFhfbFJzOWdUcmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8zYjJjMDAtOTRiNi00MzRkLWIzNjItOTZhMzRiMDIyZjg5 LzEvMTUtU1hoYzR2RFVyeHJYUFhfbFJzOWdUcmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQyJmDQY UWSba35XUZVVHJklHVuq0lEkTKd1jjAIOqrKUxmprV2ruNy+Kd9+TuZCPlYi3G/U kZm+rvNv00qHuny5LHq5ReeaQb0Aqh11pmh7+kGvfFBdlh/R3AD8jOx7r8V3zGl0 y0lMY+jFFwO2LfKItipC25D8wm1CYg3WJnb9OJKNTfyV8MSaGxISJVFzWXrDLXVZ C800rbaJHDzMgnbAo3Ta97IYl05YVPsnuTG3hfLaLt7cMBoU8Eh2LgLF5jtlWJGx TTUPwTKKqxV3E9OBPawBo6R+refTr36YV5E0n6BV2qPrf3rdvGSw1QWMQ+u+KkYr 9hlPi3COsfRC3g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:39 2025 by rpki-client