This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft File: l15fSPU6jbnKYPqPGDfQfzGREE8.mft (raw, json) Hash identifier: BZMYKs6x8lGTlCHk60rAcnsyB+UeNErNGfsVbc06T74= Subject key identifier: 95:4A:6C:EA:ED:87:95:BA:E2:A7:48:37:A2:13:FB:0C:4C:88:6B:BA Authority key identifier: 97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F Certificate issuer: /CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f Certificate serial: 019B07B53F9D6204D25EA10D1C4252E81425 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft Manifest number: 03EA Signing time: Wed 10 Dec 2025 10:01:17 +0000 Manifest this update: Wed 10 Dec 2025 10:01:17 +0000 Manifest next update: Thu 11 Dec 2025 10:01:17 +0000 Files and hashes: 1: VmXkaG5WzI9Vz_7xcXFAL06DAoc.roa (hash: uKPs/SrJH/MnTw4fYsxVa8cqGkMc8R9CKa5VOSutc0U=) 2: l15fSPU6jbnKYPqPGDfQfzGREE8.crl (hash: YVeKlXzfTaDRTIJrCR8Jv80kpLpHJeEXS1DMeLAo3xE=) 3: t42bTlVzekO4_zka2dM08NYoS0o.roa (hash: k4lNjjF23Ae3Sbhg3LYDkwgC4ol0mKxgVNJCg94oeiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b5:3f:9d:62:04:d2:5e:a1:0d:1c:42:52:e8:14:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f Validity Not Before: Dec 10 10:01:17 2025 GMT Not After : Dec 11 10:01:17 2025 GMT Subject: CN=954a6ceaed8795bae2a74837a213fb0c4c886bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:39:f5:9f:49:4c:16:e3:f8:ac:44:cb:ce:fb: d3:b5:6d:c9:2e:65:2d:62:59:69:d4:64:a8:28:b7: ea:f8:1d:e7:b5:88:a4:68:24:b2:9b:c8:0e:fe:5e: af:41:32:1b:bc:06:b7:b0:1d:7d:fc:84:0e:9d:f9: 86:32:99:74:64:05:6d:b7:dc:6a:0f:ca:09:7c:89: 2d:50:cd:91:00:54:58:b4:30:a9:0d:16:22:aa:ca: c6:b3:67:51:c2:36:ea:67:15:87:99:cc:de:5c:bf: cd:d5:71:fb:95:7a:b5:61:2e:e3:62:e5:02:0d:94: 4d:1d:a0:61:ae:ed:5d:52:07:25:e7:c0:83:a1:32: bb:bd:79:d3:bb:83:9c:18:c5:04:f4:a7:c8:b9:5c: 92:29:60:a1:05:c4:66:ab:93:24:d2:91:f3:66:50: 94:bd:64:b3:e7:70:17:24:a0:17:a0:64:00:6f:7e: ab:e4:b5:07:e0:cc:92:47:5a:52:0f:b8:38:35:62: 2a:ec:46:11:71:15:23:e4:fa:f2:fc:8f:bf:49:f7: 08:53:c3:e0:ab:45:9d:cb:ac:fa:17:40:75:5b:c7: c4:c2:9c:a2:04:82:db:14:7d:9f:21:44:f8:68:6a: 89:24:53:a2:e4:67:28:93:aa:14:4a:08:b3:90:93: f4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4A:6C:EA:ED:87:95:BA:E2:A7:48:37:A2:13:FB:0C:4C:88:6B:BA X509v3 Authority Key Identifier: keyid:97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:95:43:df:6d:54:a5:a5:d7:09:c8:74:12:59:a0:62:a4:cb: be:20:b6:35:66:88:3f:58:57:ab:01:ca:fe:08:3c:2c:9c:56: c6:6b:82:53:9b:54:88:a2:cd:83:94:34:72:d3:ee:47:29:b7: 94:c7:d7:1c:d5:b9:b6:ac:e3:ba:99:20:f3:d9:d2:a0:e1:b9: 33:81:1c:83:80:b9:c8:b9:96:a9:5d:d6:30:44:df:e2:ab:43: 19:10:61:67:24:8c:b7:26:b0:41:c2:e7:29:bd:85:f4:71:f8: 34:9a:1d:eb:8a:14:21:68:d8:34:5c:15:7f:15:f4:06:4a:9b: f1:b0:92:3d:a1:12:a7:d9:a9:6c:ac:c3:72:7d:2e:5b:3d:09: f8:08:54:5a:34:b2:cc:9c:76:5b:e6:ff:dd:c3:25:54:87:a2: 83:87:df:ff:e4:a7:d1:3d:db:3c:17:e6:bf:a9:08:46:db:6c: 6b:e9:81:2b:c2:7d:27:17:8f:92:78:97:d7:df:36:b3:9e:5b: 8d:05:82:49:09:1f:d2:b8:ee:6d:b6:57:1e:19:9e:8a:69:d9: 1c:b9:4a:39:7d:c5:47:ed:6d:89:36:be:00:83:b9:d8:0a:74: 3b:33:4d:cf:b2:21:a0:27:3d:a6:43:1e:bb:4a:85:6c:26:f8: 8f:3d:53:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHtT+dYgTSXqENHEJS6BQlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NWU1ZjQ4ZjUzYThkYjljYTYwZmE4ZjE4MzdkMDdmMzE5 MTEwNGYwHhcNMjUxMjEwMTAwMTE3WhcNMjUxMjExMTAwMTE3WjAzMTEwLwYDVQQD Eyg5NTRhNmNlYWVkODc5NWJhZTJhNzQ4MzdhMjEzZmIwYzRjODg2YmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Dn1n0lMFuP4rETLzvvTtW3JLmUt Yllp1GSoKLfq+B3ntYikaCSym8gO/l6vQTIbvAa3sB19/IQOnfmGMpl0ZAVtt9xq D8oJfIktUM2RAFRYtDCpDRYiqsrGs2dRwjbqZxWHmczeXL/N1XH7lXq1YS7jYuUC DZRNHaBhru1dUgcl58CDoTK7vXnTu4OcGMUE9KfIuVySKWChBcRmq5Mk0pHzZlCU vWSz53AXJKAXoGQAb36r5LUH4MySR1pSD7g4NWIq7EYRcRUj5Pry/I+/SfcIU8Pg q0Wdy6z6F0B1W8fEwpyiBILbFH2fIUT4aGqJJFOi5Gcok6oUSgizkJP0VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVKbOrth5W64qdIN6IT+wxMiGu6MB8GA1UdIwQY MBaAFJdeX0j1Oo25ymD6jxg30H8xkRBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDE1ZlNQVTZqYm5LWVBxUEdEZlFmekdSRUU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lMGIxYjUtZWRlZi00YWViLTgzNmIt NjNmNTAzNWYzNDQ2LzEvbDE1ZlNQVTZqYm5LWVBxUEdEZlFmekdSRUU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9lMGIxYjUtZWRlZi00YWViLTgzNmItNjNmNTAzNWYzNDQ2 LzEvbDE1ZlNQVTZqYm5LWVBxUEdEZlFmekdSRUU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpVD321U paXXCch0ElmgYqTLviC2NWaIP1hXqwHK/gg8LJxWxmuCU5tUiKLNg5Q0ctPuRym3 lMfXHNW5tqzjupkg89nSoOG5M4Ecg4C5yLmWqV3WMETf4qtDGRBhZySMtyawQcLn Kb2F9HH4NJod64oUIWjYNFwVfxX0Bkqb8bCSPaESp9mpbKzDcn0uWz0J+AhUWjSy zJx2W+b/3cMlVIeig4ff/+Sn0T3bPBfmv6kIRttsa+mBK8J9JxePkniX1982s55b jQWCSQkf0rjubbZXHhmeimnZHLlKOX3FR+1tiTa+AIO52Ap0OzNNz7IhoCc9pkMe u0qFbCb4jz1T5A== -----END CERTIFICATE-----Generated at Wed Dec 10 18:09:14 2025 by rpki-client