This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft File: 15WKlFA6cEIXSd7wXv5joxfRisI.mft (raw, json) Hash identifier: k0MIR12OnxAJGARDZSVJSEHYJFgVUQmqRgOZ1nAN9nM= Subject key identifier: B5:A7:0C:3E:12:7D:6C:7D:70:86:4C:85:CB:4E:78:DC:F6:EE:84:08 Authority key identifier: D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2 Certificate issuer: /CN=d7958a94503a70421749def05efe63a317d18ac2 Certificate serial: 019AF208E3B7BFE1B140887CCEBAF5B8BED2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft Manifest number: 0870 Signing time: Sat 06 Dec 2025 05:01:00 +0000 Manifest this update: Sat 06 Dec 2025 05:01:00 +0000 Manifest next update: Sun 07 Dec 2025 05:01:00 +0000 Files and hashes: 1: 15WKlFA6cEIXSd7wXv5joxfRisI.crl (hash: llg0F4Fdu93lzjuUH1lFN49kgmKJN6duSsE4z2vJ9M8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e3:b7:bf:e1:b1:40:88:7c:ce:ba:f5:b8:be:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7958a94503a70421749def05efe63a317d18ac2 Validity Not Before: Dec 6 05:01:00 2025 GMT Not After : Dec 7 05:01:00 2025 GMT Subject: CN=b5a70c3e127d6c7d70864c85cb4e78dcf6ee8408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:13:ae:79:80:ef:d7:94:c3:b6:cc:0e:cb:b8: 5f:dc:e5:b4:fb:61:a3:b8:de:23:85:dc:a3:2d:05: b7:0e:15:f8:c8:bb:68:b6:22:54:39:63:64:b4:9a: 1b:5b:22:52:23:96:d2:fd:22:7c:ff:e2:2a:7b:b6: f5:05:46:70:2a:8f:58:47:2d:53:c2:af:e3:97:da: 83:cc:88:92:50:66:63:8c:41:29:ab:28:4e:90:c1: 64:1d:d0:76:1e:1f:1d:76:c4:85:41:b3:57:01:f7: a6:de:81:79:46:a6:d2:a1:66:28:08:c9:39:9a:95: a6:c1:a3:fd:56:9a:51:48:c5:c3:4d:e5:73:9f:65: ae:57:7e:bb:58:51:49:12:50:e1:35:0b:52:60:b2: 42:bb:5c:c0:cd:88:0e:9a:a8:c6:d0:ce:44:99:75: ec:a8:bb:87:35:6d:70:8d:42:77:82:56:11:cd:f2: 95:10:2b:9c:af:fd:dc:10:c5:a2:2a:0e:2c:d3:df: 74:39:49:5a:f6:0a:69:e4:ad:4e:3e:e7:9e:25:63: a8:18:4d:93:b0:75:df:1c:f4:e7:16:56:97:99:08: 1b:f6:f2:ae:c8:50:6e:49:16:c3:34:3a:be:96:05: d2:6d:ac:be:a6:e1:b4:cc:65:41:b5:33:23:2d:9e: 65:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A7:0C:3E:12:7D:6C:7D:70:86:4C:85:CB:4E:78:DC:F6:EE:84:08 X509v3 Authority Key Identifier: keyid:D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:a6:9b:7e:f2:3b:08:c8:62:ad:86:ac:60:5e:51:e7:ec:cc: 5d:7a:08:1c:0f:12:47:ef:09:66:e3:39:02:01:ce:85:d9:39: 32:d7:ee:7a:05:c5:68:a3:86:28:dc:22:d0:ab:4c:84:72:d1: e8:99:36:94:6f:0b:e5:c0:83:3e:01:53:83:1c:30:6a:e3:4e: 39:4f:17:80:bb:2b:4a:2e:bb:8b:be:4d:bf:9f:d3:8c:8b:b6: 0b:fa:7a:3d:f2:61:91:77:46:89:6b:62:1c:ef:60:3f:72:82: 34:8b:b6:5e:60:03:f5:98:dc:4d:a8:c5:e2:a1:9c:14:fa:a2: 22:e2:9e:1a:77:fc:b2:e3:bc:0c:26:e1:8e:e5:ce:16:52:8e: 2f:b8:ad:c4:18:a8:04:b0:1b:6c:1b:37:69:85:4b:f2:f0:17: 79:fc:5e:1f:5c:95:8b:12:6d:f9:78:e4:38:a7:35:1a:80:3d: 6d:07:36:71:0b:51:af:ff:b5:d7:7d:da:eb:47:dd:9c:59:41: 1a:e9:52:44:5b:25:92:d0:e6:77:b5:9d:ff:78:97:67:7e:5b: 44:23:83:38:9c:9d:b5:e9:c8:75:d5:89:94:16:29:90:33:d2: 02:73:dd:70:d6:56:62:af:12:29:be:5c:02:01:9f:e1:9a:5e: 9a:7f:ed:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOO3v+GxQIh8zrr1uL7SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OTU4YTk0NTAzYTcwNDIxNzQ5ZGVmMDVlZmU2M2EzMTdk MThhYzIwHhcNMjUxMjA2MDUwMTAwWhcNMjUxMjA3MDUwMTAwWjAzMTEwLwYDVQQD EyhiNWE3MGMzZTEyN2Q2YzdkNzA4NjRjODVjYjRlNzhkY2Y2ZWU4NDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBOueYDv15TDtswOy7hf3OW0+2Gj uN4jhdyjLQW3DhX4yLtotiJUOWNktJobWyJSI5bS/SJ8/+Iqe7b1BUZwKo9YRy1T wq/jl9qDzIiSUGZjjEEpqyhOkMFkHdB2Hh8ddsSFQbNXAfem3oF5RqbSoWYoCMk5 mpWmwaP9VppRSMXDTeVzn2WuV367WFFJElDhNQtSYLJCu1zAzYgOmqjG0M5EmXXs qLuHNW1wjUJ3glYRzfKVECucr/3cEMWiKg4s0990OUla9gpp5K1OPueeJWOoGE2T sHXfHPTnFlaXmQgb9vKuyFBuSRbDNDq+lgXSbay+puG0zGVBtTMjLZ5lEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWnDD4SfWx9cIZMhctOeNz27oQIMB8GA1UdIwQY MBaAFNeVipRQOnBCF0ne8F7+Y6MX0YrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTVXS2xGQTZjRUlYU2Q3d1h2NWpveGZSaXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9iNzdlNTUtOWZhMy00N2E4LTkxOWEt YWQ0MDA0YWE3NmMzLzEvMTVXS2xGQTZjRUlYU2Q3d1h2NWpveGZSaXNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9iNzdlNTUtOWZhMy00N2E4LTkxOWEtYWQ0MDA0YWE3NmMz LzEvMTVXS2xGQTZjRUlYU2Q3d1h2NWpveGZSaXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd6abfvI7 CMhirYasYF5R5+zMXXoIHA8SR+8JZuM5AgHOhdk5MtfuegXFaKOGKNwi0KtMhHLR 6Jk2lG8L5cCDPgFTgxwwauNOOU8XgLsrSi67i75Nv5/TjIu2C/p6PfJhkXdGiWti HO9gP3KCNIu2XmAD9ZjcTajF4qGcFPqiIuKeGnf8suO8DCbhjuXOFlKOL7itxBio BLAbbBs3aYVL8vAXefxeH1yVixJt+XjkOKc1GoA9bQc2cQtRr/+1133a60fdnFlB GulSRFslktDmd7Wd/3iXZ35bRCODOJydtenIddWJlBYpkDPSAnPdcNZWYq8SKb5c AgGf4Zpemn/toQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:28 2025 by rpki-client