This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft File: 1i15SeaYRB2-mrxWCcSerKc8l5Y.mft (raw, json) Hash identifier: +STS2a/Ei3K4mlTSvt7iks9QZTJFGdRpTqnLungvsi8= Subject key identifier: C9:98:EC:C1:CF:BF:FE:E9:6D:E0:35:32:2A:5F:EE:23:89:4A:84:3E Authority key identifier: D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96 Certificate issuer: /CN=d62d7949e698441dbe9abc5609c49eaca73c9796 Certificate serial: 019AF12D3791ED18947D396CE6D5D6C685D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft Manifest number: 10CD Signing time: Sat 06 Dec 2025 01:01:03 +0000 Manifest this update: Sat 06 Dec 2025 01:01:03 +0000 Manifest next update: Sun 07 Dec 2025 01:01:03 +0000 Files and hashes: 1: 1i15SeaYRB2-mrxWCcSerKc8l5Y.crl (hash: odhVUZmZO11QoQtRx2A60OjSALyg8earUDCCkbczlBk=) 2: d6njcJAvU5XAKbAJO-1stP-sI3c.roa (hash: Qb51F1ZjPbC9UkzfA0CmXmJOGj7X7JIQuEBdAlbn5BM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:37:91:ed:18:94:7d:39:6c:e6:d5:d6:c6:85:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d62d7949e698441dbe9abc5609c49eaca73c9796 Validity Not Before: Dec 6 01:01:03 2025 GMT Not After : Dec 7 01:01:03 2025 GMT Subject: CN=c998ecc1cfbffee96de035322a5fee23894a843e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ff:f6:c0:79:c5:93:b0:c3:0b:68:0e:b5:99: 5c:69:96:1a:6d:37:32:a4:5e:b0:aa:2c:7a:97:a1: 42:8f:a2:a7:0c:a7:92:8b:73:3d:e9:4c:3e:78:fd: 06:e1:fe:f8:3e:44:77:53:3c:ad:c5:38:f5:fe:32: 65:96:5c:57:cd:b0:3e:a6:78:97:e6:28:a2:90:63: 24:78:0e:0b:29:e3:86:e1:d3:b2:31:75:0c:9b:36: 56:7f:66:3f:7d:9d:c9:f9:e8:40:c0:61:29:54:2a: c7:53:5f:11:48:e6:44:ef:2f:da:4c:27:f4:13:4a: 16:ad:af:5f:96:7d:22:7e:bf:cc:cd:d2:1c:bb:a5: 9f:49:5f:ff:4f:8e:d8:e2:6b:33:ec:ad:93:ab:2d: 01:92:26:4a:cd:c7:2c:4f:8e:1f:04:58:5a:94:7e: ac:b1:7b:f6:bc:eb:bc:28:4d:e4:99:9d:d5:b8:f7: a3:23:79:86:1a:6c:17:cf:7c:cd:a6:94:ce:22:8a: df:c0:cc:d2:9f:e3:4f:57:a1:b5:0c:26:c3:a4:58: a1:ca:21:4a:0a:cb:50:6e:3f:3a:fb:77:6b:11:39: e8:fd:27:0e:2e:e6:15:77:fa:0a:56:f0:7f:e7:be: f9:69:7a:74:d0:8d:f0:d1:ba:ac:0e:40:bc:e2:1d: 95:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:98:EC:C1:CF:BF:FE:E9:6D:E0:35:32:2A:5F:EE:23:89:4A:84:3E X509v3 Authority Key Identifier: keyid:D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ea:67:65:3e:99:56:3b:c0:73:08:99:51:0d:88:6d:3e:5e: 94:97:86:0c:3f:80:1c:04:2e:c6:8a:e8:4b:7e:60:6d:94:18: 9a:01:b0:d2:1c:31:37:aa:9a:ef:0d:6e:bc:eb:89:1c:03:f3: 5b:35:cc:91:ff:ed:26:95:cd:c8:13:49:ae:9c:e0:cc:ef:40: 9d:55:be:7a:67:40:71:f1:d8:fb:d4:34:f1:73:8b:0f:97:9e: b4:16:bb:5a:6b:3f:89:4d:71:ab:d3:4b:52:cc:33:3f:14:c9: 2d:86:2c:ca:02:90:29:3b:2b:d5:44:5f:02:af:ef:ed:f5:32: 02:ee:12:8d:09:94:3f:bc:26:06:a5:83:fe:54:b5:9e:78:80: a5:96:1a:10:2f:46:01:af:49:89:c6:f1:e8:73:9a:07:93:75: c6:3a:7c:9f:0b:0f:26:55:e2:3c:52:0f:b8:25:ae:70:9a:b4: f0:9e:a7:a8:0f:96:82:8b:09:ff:80:b1:fe:74:da:66:7d:1b: ae:42:69:cf:0a:23:45:e8:e8:a4:6d:5a:4c:cb:7a:2e:7f:25: d4:e3:10:70:12:69:85:64:4b:8a:f5:eb:b4:cf:6f:1c:be:33: 5f:ff:95:be:0d:ff:bd:c8:06:db:ef:f1:1d:3f:de:bf:eb:12: 19:03:03:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTeR7RiUfTls5tXWxoXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MmQ3OTQ5ZTY5ODQ0MWRiZTlhYmM1NjA5YzQ5ZWFjYTcz Yzk3OTYwHhcNMjUxMjA2MDEwMTAzWhcNMjUxMjA3MDEwMTAzWjAzMTEwLwYDVQQD EyhjOTk4ZWNjMWNmYmZmZWU5NmRlMDM1MzIyYTVmZWUyMzg5NGE4NDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv/2wHnFk7DDC2gOtZlcaZYabTcy pF6wqix6l6FCj6KnDKeSi3M96Uw+eP0G4f74PkR3UzytxTj1/jJlllxXzbA+pniX 5iiikGMkeA4LKeOG4dOyMXUMmzZWf2Y/fZ3J+ehAwGEpVCrHU18RSOZE7y/aTCf0 E0oWra9fln0ifr/MzdIcu6WfSV//T47Y4msz7K2Tqy0BkiZKzccsT44fBFhalH6s sXv2vOu8KE3kmZ3VuPejI3mGGmwXz3zNppTOIorfwMzSn+NPV6G1DCbDpFihyiFK CstQbj86+3drETno/ScOLuYVd/oKVvB/5775aXp00I3w0bqsDkC84h2VJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMmY7MHPv/7pbeA1Mipf7iOJSoQ+MB8GA1UdIwQY MBaAFNYteUnmmEQdvpq8VgnEnqynPJeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hYzA5MjMtN2ViMS00YTVmLTkxMDUt MTViMjFhOWI0MzI1LzEvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9hYzA5MjMtN2ViMS00YTVmLTkxMDUtMTViMjFhOWI0MzI1 LzEvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfupnZT6Z VjvAcwiZUQ2IbT5elJeGDD+AHAQuxoroS35gbZQYmgGw0hwxN6qa7w1uvOuJHAPz WzXMkf/tJpXNyBNJrpzgzO9AnVW+emdAcfHY+9Q08XOLD5eetBa7Wms/iU1xq9NL UswzPxTJLYYsygKQKTsr1URfAq/v7fUyAu4SjQmUP7wmBqWD/lS1nniApZYaEC9G Aa9Jicbx6HOaB5N1xjp8nwsPJlXiPFIPuCWucJq08J6nqA+WgosJ/4Cx/nTaZn0b rkJpzwojRejopG1aTMt6Ln8l1OMQcBJphWRLivXrtM9vHL4zX/+Vvg3/vcgG2+/x HT/ev+sSGQMDFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:03 2025 by rpki-client