This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft File: I15QLDFNUQT3xgzNaXicuEj_Xgc.mft (raw, json) Hash identifier: VaeB41o+gV2CeMB6y62PUCl8K4/DpcS7YKGoR2aG9MU= Subject key identifier: 9E:5B:4D:BF:C8:38:8E:EF:86:9C:29:F5:F5:3F:21:96:30:2D:EC:D8 Authority key identifier: 23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07 Certificate issuer: /CN=235e502c314d5104f7c60ccd69789cb848ff5e07 Certificate serial: 019AF20997622CF115AF451FEDFF4BF473E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft Manifest number: 0287 Signing time: Sat 06 Dec 2025 05:01:45 +0000 Manifest this update: Sat 06 Dec 2025 05:01:45 +0000 Manifest next update: Sun 07 Dec 2025 05:01:45 +0000 Files and hashes: 1: GLkcEMe4eneYkegJdDsN96p2G5w.roa (hash: a+Y+AIr4ILwMbtFOtGWppkOOeW987wrq4kOZaYCKOMI=) 2: I15QLDFNUQT3xgzNaXicuEj_Xgc.crl (hash: ZlvsebY95f5pdQ8TdyJkiMgKsKiaUpH7cDi/lfeZhKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:97:62:2c:f1:15:af:45:1f:ed:ff:4b:f4:73:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=235e502c314d5104f7c60ccd69789cb848ff5e07 Validity Not Before: Dec 6 05:01:45 2025 GMT Not After : Dec 7 05:01:45 2025 GMT Subject: CN=9e5b4dbfc8388eef869c29f5f53f2196302decd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9f:69:2f:99:69:2a:52:ff:d4:c3:3c:62:df: 56:28:e2:15:cf:61:61:a2:e7:ff:61:3d:6a:af:3e: 87:a3:72:d6:d1:07:16:67:9f:50:b8:48:66:5b:f3: 0e:42:b2:3e:1c:bc:40:42:c4:4c:a9:ac:27:dc:51: cf:f4:b3:a2:5b:54:8c:c2:b1:38:a0:91:f3:ed:64: 72:c3:a6:79:b0:99:2a:ab:9f:03:23:8e:51:f7:55: 68:51:59:dc:c6:cb:e6:58:28:cf:0c:f0:93:12:db: 2c:55:9a:7b:4a:5a:b1:c1:7c:bd:3d:ad:2d:52:63: 24:7f:0e:0c:44:a7:31:74:87:15:47:0b:34:fc:dc: 96:b6:94:5a:0b:2f:10:89:96:f2:45:95:8b:3c:17: c3:53:fc:39:9b:86:23:90:38:3e:21:7d:95:0e:77: 01:b7:e9:6c:c5:97:b8:4b:2c:2d:e6:b8:8a:1e:17: ef:10:f6:c5:f6:f4:38:d3:ee:46:c7:fc:92:dd:22: b4:2d:65:fe:a3:a6:27:d0:98:b4:0f:f4:19:4e:90: 76:d3:eb:2a:15:ff:23:99:71:90:d9:ed:7c:6d:7d: fc:59:7f:ba:59:2c:e9:61:ab:ce:30:9c:83:5a:9b: 78:45:e5:6f:9e:01:e9:de:a8:b4:3e:2d:e1:51:f8: 47:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5B:4D:BF:C8:38:8E:EF:86:9C:29:F5:F5:3F:21:96:30:2D:EC:D8 X509v3 Authority Key Identifier: keyid:23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:96:d3:23:4d:e4:25:a7:79:8c:85:83:0d:49:31:c0:d2:36: b2:84:5f:f5:bd:37:7c:fe:d6:2d:8d:0e:49:fa:7c:8a:08:4d: 3b:36:94:19:35:b0:22:e3:6e:24:3a:aa:19:41:8c:ed:9e:b4: 99:d7:da:39:43:33:59:09:9c:7a:42:1a:74:f3:16:12:d9:38: 57:9c:62:55:ba:44:fc:de:f0:e1:2b:97:0b:fe:19:60:85:0b: 63:17:04:3a:e0:1c:c3:e6:8f:2f:4b:e1:de:9c:9b:3c:3c:c7: f3:94:01:aa:fb:6e:e3:00:b4:bd:65:ca:c5:79:96:e8:03:1a: d9:5d:9d:95:4b:c3:51:63:0b:49:0d:4d:e6:db:02:17:8c:ec: fa:22:5f:29:da:d7:08:f2:38:2d:ad:b1:2c:d8:22:78:cf:36: 5b:42:a0:22:fa:05:3f:d9:28:1d:93:f2:b2:42:e5:8f:7d:14: bb:f6:64:24:18:0c:1c:7f:54:34:a5:20:b7:46:cb:87:9c:84: c4:ae:2f:25:b6:20:cf:50:59:cc:1b:4e:35:4a:71:d2:ac:f7: b8:e8:60:a0:0a:7b:bf:93:21:59:5d:79:23:d4:e5:55:d6:f3: dd:b3:8d:d9:07:b6:a5:d4:3f:ef:06:31:dc:b2:96:61:01:6b: c1:06:30:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZdiLPEVr0Uf7f9L9HPhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNWU1MDJjMzE0ZDUxMDRmN2M2MGNjZDY5Nzg5Y2I4NDhm ZjVlMDcwHhcNMjUxMjA2MDUwMTQ1WhcNMjUxMjA3MDUwMTQ1WjAzMTEwLwYDVQQD Eyg5ZTViNGRiZmM4Mzg4ZWVmODY5YzI5ZjVmNTNmMjE5NjMwMmRlY2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ9pL5lpKlL/1MM8Yt9WKOIVz2Fh ouf/YT1qrz6Ho3LW0QcWZ59QuEhmW/MOQrI+HLxAQsRMqawn3FHP9LOiW1SMwrE4 oJHz7WRyw6Z5sJkqq58DI45R91VoUVncxsvmWCjPDPCTEtssVZp7SlqxwXy9Pa0t UmMkfw4MRKcxdIcVRws0/NyWtpRaCy8QiZbyRZWLPBfDU/w5m4YjkDg+IX2VDncB t+lsxZe4Sywt5riKHhfvEPbF9vQ40+5Gx/yS3SK0LWX+o6Yn0Ji0D/QZTpB20+sq Ff8jmXGQ2e18bX38WX+6WSzpYavOMJyDWpt4ReVvngHp3qi0Pi3hUfhHkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5bTb/IOI7vhpwp9fU/IZYwLezYMB8GA1UdIwQY MBaAFCNeUCwxTVEE98YMzWl4nLhI/14HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTE1UUxERk5VUVQzeGd6TmFYaWN1RWpfWGdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mYTI0NWYtZGM3NC00OTc0LTgyZTAt YTU2ZTY3ODQ4ZjExLzEvSTE1UUxERk5VUVQzeGd6TmFYaWN1RWpfWGdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mYTI0NWYtZGM3NC00OTc0LTgyZTAtYTU2ZTY3ODQ4ZjEx LzEvSTE1UUxERk5VUVQzeGd6TmFYaWN1RWpfWGdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJbTI03k Jad5jIWDDUkxwNI2soRf9b03fP7WLY0OSfp8ighNOzaUGTWwIuNuJDqqGUGM7Z60 mdfaOUMzWQmcekIadPMWEtk4V5xiVbpE/N7w4SuXC/4ZYIULYxcEOuAcw+aPL0vh 3pybPDzH85QBqvtu4wC0vWXKxXmW6AMa2V2dlUvDUWMLSQ1N5tsCF4zs+iJfKdrX CPI4La2xLNgieM82W0KgIvoFP9koHZPyskLlj30Uu/ZkJBgMHH9UNKUgt0bLh5yE xK4vJbYgz1BZzBtONUpx0qz3uOhgoAp7v5MhWV15I9TlVdbz3bON2Qe2pdQ/7wYx 3LKWYQFrwQYwuw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:20:13 2025 by rpki-client