This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft File: A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json) Hash identifier: J2xCzzNdhZF1mwE6dma705vS5k+nt17KVlJKxSCae54= Subject key identifier: 6E:21:12:F4:02:BA:36:3F:00:C7:7A:05:2F:1D:0F:08:52:41:7D:11 Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04 Certificate issuer: /CN=035e5285dedc35ab63527048b366ee553806ce04 Certificate serial: 019B08C81F28B0C99A51648380C2B0846084 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft Manifest number: 176D Signing time: Wed 10 Dec 2025 15:01:31 +0000 Manifest this update: Wed 10 Dec 2025 15:01:31 +0000 Manifest next update: Thu 11 Dec 2025 15:01:31 +0000 Files and hashes: 1: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: tkeSRT6b0TOUxaakTJECh16FsZ7pUq4hTfcV6IgCDL0=) 2: QaI9DSrZz7ee9hIU4DnZspjDIV0.roa (hash: Z9nnRdcq5IZHSc4H5xkykoFIJ1oSyMHuKk3P+4Nf+Ko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:c8:1f:28:b0:c9:9a:51:64:83:80:c2:b0:84:60:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04 Validity Not Before: Dec 10 15:01:31 2025 GMT Not After : Dec 11 15:01:31 2025 GMT Subject: CN=6e2112f402ba363f00c77a052f1d0f0852417d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3b:40:4b:97:74:58:7f:7e:8c:8d:d5:95:f4: 28:16:70:aa:cb:90:6f:51:c8:3b:1a:78:78:15:10: f1:a5:34:81:b1:a5:d3:83:c3:71:49:38:2d:25:ad: 59:f3:c0:f2:aa:cb:e3:51:9b:fc:d7:85:9c:22:86: 80:67:34:66:9c:65:81:61:11:ee:f7:11:88:16:b9: 05:16:67:c4:18:f9:62:9a:25:31:58:20:1e:99:58: 62:2c:ba:56:87:d3:9a:e6:ed:c3:db:47:3c:bb:70: dc:2b:62:da:72:f6:cc:dc:c7:54:89:51:17:6b:5b: 22:93:47:ce:05:28:c2:50:38:a3:50:58:54:d0:e0: a2:3e:67:42:17:f2:de:2a:1a:41:ee:eb:8d:1a:cd: 90:90:a0:3c:3c:15:c3:a8:9b:65:86:ae:6f:b9:f7: ae:a1:59:ef:9e:60:65:01:03:71:80:80:9e:34:75: d5:74:d1:16:41:a2:31:f4:79:3e:56:da:3d:f9:87: c5:49:83:92:e9:87:58:74:d1:66:90:fc:b8:55:76: de:04:41:cd:66:c7:b7:56:9b:b4:43:b2:4c:09:13: 27:4f:77:0a:0f:67:3e:0a:35:a4:49:d9:dd:c1:36: ba:ae:f9:23:6b:cb:94:e5:f2:f4:fa:d6:69:42:8c: 92:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:21:12:F4:02:BA:36:3F:00:C7:7A:05:2F:1D:0F:08:52:41:7D:11 X509v3 Authority Key Identifier: keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:5c:1a:c9:f1:96:b2:96:30:bb:03:3c:08:6a:42:fa:68:78: d0:7b:ca:5e:d3:76:96:fc:33:81:13:85:6f:c8:75:fd:af:a3: 1c:64:a3:83:34:f7:d8:4d:44:a1:68:34:31:c3:2e:2e:af:8e: dd:4d:70:d2:68:4f:b4:ff:e2:ca:24:7d:49:98:ea:3b:b7:a7: 4f:4a:d7:90:97:2f:65:59:cb:50:5b:39:36:ef:a7:70:80:89: 03:b4:4d:74:f0:e3:fe:3e:65:b7:e3:64:71:a2:f0:1b:79:fc: ad:99:13:32:cc:8f:a5:62:49:9b:a4:43:da:3a:ca:dc:c1:b2: e1:3f:ad:09:f0:f9:a2:11:39:f2:64:c6:9f:05:61:37:37:ff: ed:8d:f5:d0:df:ce:f9:43:3d:a4:05:f6:fe:b6:75:af:f5:bd: ec:32:65:e9:2d:65:a4:48:9d:12:73:7d:a8:6b:8f:26:5b:ae: 54:2a:89:8c:eb:61:7b:29:46:42:a5:0b:44:ab:16:4d:c3:9b: c8:c7:65:a1:b3:4d:74:0c:21:3b:f8:5d:ef:60:dd:77:2b:87: 09:91:01:c0:97:b9:59:5b:cf:57:9d:6e:dc:47:3b:86:09:5c: 96:46:31:4b:3c:bd:c6:31:ae:e5:cb:e1:9e:73:57:44:42:89: 17:91:31:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIyB8osMmaUWSDgMKwhGCEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNWU1Mjg1ZGVkYzM1YWI2MzUyNzA0OGIzNjZlZTU1Mzgw NmNlMDQwHhcNMjUxMjEwMTUwMTMxWhcNMjUxMjExMTUwMTMxWjAzMTEwLwYDVQQD Eyg2ZTIxMTJmNDAyYmEzNjNmMDBjNzdhMDUyZjFkMGYwODUyNDE3ZDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ztAS5d0WH9+jI3VlfQoFnCqy5Bv Ucg7Gnh4FRDxpTSBsaXTg8NxSTgtJa1Z88DyqsvjUZv814WcIoaAZzRmnGWBYRHu 9xGIFrkFFmfEGPlimiUxWCAemVhiLLpWh9Oa5u3D20c8u3DcK2LacvbM3MdUiVEX a1sik0fOBSjCUDijUFhU0OCiPmdCF/LeKhpB7uuNGs2QkKA8PBXDqJtlhq5vufeu oVnvnmBlAQNxgICeNHXVdNEWQaIx9Hk+Vto9+YfFSYOS6YdYdNFmkPy4VXbeBEHN Zse3Vpu0Q7JMCRMnT3cKD2c+CjWkSdndwTa6rvkja8uU5fL0+tZpQoySnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4hEvQCujY/AMd6BS8dDwhSQX0RMB8GA1UdIwQY MBaAFANeUoXe3DWrY1JwSLNm7lU4Bs4EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTE1U2hkN2NOYXRqVW5CSXMyYnVWVGdHemdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mMTk0NGItMTAxYS00MTgxLWEzNmIt MmMyNzA3NzM2ZmRiLzEvQTE1U2hkN2NOYXRqVW5CSXMyYnVWVGdHemdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mMTk0NGItMTAxYS00MTgxLWEzNmItMmMyNzA3NzM2ZmRi LzEvQTE1U2hkN2NOYXRqVW5CSXMyYnVWVGdHemdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFwayfGW spYwuwM8CGpC+mh40HvKXtN2lvwzgROFb8h1/a+jHGSjgzT32E1EoWg0McMuLq+O 3U1w0mhPtP/iyiR9SZjqO7enT0rXkJcvZVnLUFs5Nu+ncICJA7RNdPDj/j5lt+Nk caLwG3n8rZkTMsyPpWJJm6RD2jrK3MGy4T+tCfD5ohE58mTGnwVhNzf/7Y310N/O +UM9pAX2/rZ1r/W97DJl6S1lpEidEnN9qGuPJluuVCqJjOtheylGQqULRKsWTcOb yMdlobNNdAwhO/hd72DddyuHCZEBwJe5WVvPV51u3Ec7hglclkYxSzy9xjGu5cvh nnNXREKJF5ExYw== -----END CERTIFICATE-----Generated at Wed Dec 10 17:21:05 2025 by rpki-client