This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft File: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft (raw, json) Hash identifier: XkIM3RZfNf74QwndqSjEnIM1wxrq2Vj6wDnrKohH5U8= Subject key identifier: 55:02:A8:C9:9B:09:8A:DC:83:1C:84:42:C8:28:C4:D8:C5:56:CA:4D Authority key identifier: D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90 Certificate issuer: /CN=d47d79c78a830699781b3e4331be092597c34b90 Certificate serial: 019AF5E5AE8D4EBDAA6C1E3A604EC6D6ECD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 23:01:01 +0000 Manifest this update: Sat 06 Dec 2025 23:01:01 +0000 Manifest next update: Sun 07 Dec 2025 23:01:01 +0000 Files and hashes: 1: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl (hash: nfznRQBcaJ7PlsTkqY51sjMs49MCn6+O2cRj4zniIKo=) 2: oP_NZCckorWlK08uLtq1ZhjEmNw.roa (hash: TmGRTgVUIXQXGjYy9QqbbgsvjEEm+TAtLS3xKb+xEyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:ae:8d:4e:bd:aa:6c:1e:3a:60:4e:c6:d6:ec:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d47d79c78a830699781b3e4331be092597c34b90 Validity Not Before: Dec 6 23:01:01 2025 GMT Not After : Dec 7 23:01:01 2025 GMT Subject: CN=5502a8c99b098adc831c8442c828c4d8c556ca4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:90:61:bc:d8:3a:1b:76:6a:17:17:4f:de:43: 4c:92:f6:2a:d4:c4:a4:14:2d:1d:53:4a:b9:b4:0b: 18:b8:50:dd:7e:04:07:6f:fe:66:25:32:91:cf:3d: fd:26:a2:93:4a:95:f2:ff:4b:2f:06:a0:dc:3c:d4: ef:15:b0:88:04:b9:7f:c7:ec:22:16:ee:80:db:6a: ea:ea:ad:22:b8:70:55:44:7e:e9:a1:0b:c1:b0:2e: bd:d9:72:62:7d:bf:5c:e0:f4:4f:55:61:3f:13:46: 78:f3:a5:17:4f:34:82:00:f3:28:b7:1d:3f:d1:65: bc:54:9d:2f:0b:bd:88:ce:94:2d:b7:b1:ba:d6:e8: 13:37:68:f8:81:02:aa:20:ef:21:c1:a6:65:67:07: 6d:9c:60:87:15:38:9f:72:f6:f7:63:99:b5:42:57: a2:e9:3c:47:0e:a2:88:40:27:fc:8e:78:7e:4e:3b: c4:4d:bd:e1:f5:5f:62:13:b1:2a:a0:97:81:f8:81: 33:bb:e3:2b:13:57:94:08:8b:58:b5:75:49:57:af: ff:91:5b:6c:69:06:23:68:57:e7:17:fa:6f:bd:ab: 39:dc:e8:7a:59:97:11:d4:9b:fa:46:48:1b:7c:9c: 4c:12:41:ab:50:22:2f:f0:43:45:1d:56:e3:af:a5: bd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:02:A8:C9:9B:09:8A:DC:83:1C:84:42:C8:28:C4:D8:C5:56:CA:4D X509v3 Authority Key Identifier: keyid:D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:92:65:00:1b:96:6f:b9:c3:9d:cd:90:56:2d:aa:0a:af:7d: 82:19:ba:f3:b4:56:df:74:12:36:8e:e7:96:90:00:92:f0:dc: d7:7e:ed:69:d7:7a:02:74:33:0b:cc:41:f3:f6:b0:12:0b:e1: 5e:73:ef:8a:11:fc:4a:68:36:c6:29:ea:50:69:0d:8b:fa:2a: 84:db:db:86:11:39:c1:a4:65:45:60:b0:ab:d1:e9:bc:cd:bd: b5:ff:89:45:10:36:0a:53:9a:18:de:de:6d:9f:2d:be:3f:4f: a1:91:80:f9:a2:13:89:03:e8:e6:ed:cd:29:0e:54:80:34:be: b9:40:f2:45:13:fa:e8:c8:80:de:0b:32:2c:c8:c2:9b:55:da: ee:8d:08:18:07:61:5c:d8:68:e7:49:45:87:6d:af:50:c7:ee: c2:2d:77:e2:2f:9a:3b:fe:30:e4:18:2e:de:46:e1:5f:dd:21: bd:de:ee:2a:d2:39:7b:c4:77:cd:1e:c9:b4:ce:04:80:64:90: d8:40:3c:45:3a:b6:75:14:0d:6d:82:13:32:dc:7c:13:b0:a0: 48:e2:7b:d9:85:39:c9:fc:03:4e:64:2b:c1:b8:11:15:a4:e1: 92:fc:46:0c:fd:71:8c:3b:83:ca:1e:17:68:27:1f:f7:b2:eb: 12:f9:3e:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15a6NTr2qbB46YE7G1uzRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0N2Q3OWM3OGE4MzA2OTk3ODFiM2U0MzMxYmUwOTI1OTdj MzRiOTAwHhcNMjUxMjA2MjMwMTAxWhcNMjUxMjA3MjMwMTAxWjAzMTEwLwYDVQQD Eyg1NTAyYThjOTliMDk4YWRjODMxYzg0NDJjODI4YzRkOGM1NTZjYTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypBhvNg6G3ZqFxdP3kNMkvYq1MSk FC0dU0q5tAsYuFDdfgQHb/5mJTKRzz39JqKTSpXy/0svBqDcPNTvFbCIBLl/x+wi Fu6A22rq6q0iuHBVRH7poQvBsC692XJifb9c4PRPVWE/E0Z486UXTzSCAPMotx0/ 0WW8VJ0vC72IzpQtt7G61ugTN2j4gQKqIO8hwaZlZwdtnGCHFTifcvb3Y5m1Qlei 6TxHDqKIQCf8jnh+TjvETb3h9V9iE7EqoJeB+IEzu+MrE1eUCItYtXVJV6//kVts aQYjaFfnF/pvvas53Oh6WZcR1Jv6RkgbfJxMEkGrUCIv8ENFHVbjr6W9uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUCqMmbCYrcgxyEQsgoxNjFVspNMB8GA1UdIwQY MBaAFNR9eceKgwaZeBs+QzG+CSWXw0uQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUgxNXg0cURCcGw0R3o1RE1iNEpKWmZEUzVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lMzlhNDItNjdiNy00NzNjLTgzY2Qt MTk2NDU1NTI0YTYyLzEvMUgxNXg0cURCcGw0R3o1RE1iNEpKWmZEUzVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lMzlhNDItNjdiNy00NzNjLTgzY2QtMTk2NDU1NTI0YTYy LzEvMUgxNXg0cURCcGw0R3o1RE1iNEpKWmZEUzVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpJlABuW b7nDnc2QVi2qCq99ghm687RW33QSNo7nlpAAkvDc137tadd6AnQzC8xB8/awEgvh XnPvihH8Smg2xinqUGkNi/oqhNvbhhE5waRlRWCwq9HpvM29tf+JRRA2ClOaGN7e bZ8tvj9PoZGA+aITiQPo5u3NKQ5UgDS+uUDyRRP66MiA3gsyLMjCm1Xa7o0IGAdh XNho50lFh22vUMfuwi134i+aO/4w5Bgu3kbhX90hvd7uKtI5e8R3zR7JtM4EgGSQ 2EA8RTq2dRQNbYITMtx8E7CgSOJ72YU5yfwDTmQrwbgRFaThkvxGDP1xjDuDyh4X aCcf97LrEvk+Mg== -----END CERTIFICATE-----Generated at Sun Dec 7 05:18:02 2025 by rpki-client