This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft File: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft (raw, json) Hash identifier: RRi+ESBZnOrMhoh97HmFEAahooUbjSZyXI29tCl5JRE= Subject key identifier: 7C:B6:76:F8:9F:9A:32:5E:92:68:EE:AE:4C:01:35:F5:AF:79:D6:89 Authority key identifier: D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC Certificate issuer: /CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc Certificate serial: 019AF540A9384FE1340949F8C2D99775D935 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft Manifest number: 0EED Signing time: Sat 06 Dec 2025 20:00:46 +0000 Manifest this update: Sat 06 Dec 2025 20:00:46 +0000 Manifest next update: Sun 07 Dec 2025 20:00:46 +0000 Files and hashes: 1: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl (hash: M5K1CM7hcnD5PxRH0w4VibCjmgQzDwmKi//K2GPbzRg=) 2: 4nov_nt6GEsQWCkcquH9SVS1bMU.roa (hash: Ylgq5sDsdH7k78HDH4UBmheF5iyrFEvrHVeDharXE+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:a9:38:4f:e1:34:09:49:f8:c2:d9:97:75:d9:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc Validity Not Before: Dec 6 20:00:46 2025 GMT Not After : Dec 7 20:00:46 2025 GMT Subject: CN=7cb676f89f9a325e9268eeae4c0135f5af79d689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:54:1a:d1:1b:52:bd:4a:1a:d1:18:ef:be:73: 0e:fa:ff:20:6b:5b:37:47:07:7d:49:41:c3:44:21: 9f:2f:d2:17:d7:c3:0c:df:2a:07:f5:ed:b0:cf:ad: d6:18:5a:ce:56:54:d2:45:34:94:31:c5:1f:89:d2: da:f2:2c:d1:7d:eb:d6:86:bb:31:8b:06:dd:2e:c9: 46:89:f6:61:50:8f:c1:ef:dd:02:ee:b0:56:4a:1e: 61:39:ca:8a:8e:e7:e0:a0:47:70:2b:b5:49:08:3a: 7d:07:a9:ac:94:95:54:a7:3a:d5:07:14:f9:31:af: 3b:b9:56:78:c6:23:dd:c2:45:ad:a0:24:e0:4c:b0: c7:75:d3:4d:f8:4c:8d:7f:e5:85:6d:bc:8a:f8:49: 5b:00:94:68:be:94:d4:59:90:aa:07:c0:82:4b:f1: 9b:ee:35:14:86:29:5f:69:35:ff:7b:79:28:97:b0: fd:98:38:d1:76:ae:da:6b:1b:a1:05:73:32:90:45: 2f:1e:a9:d4:95:a6:47:e8:50:d2:39:dc:9a:5b:17: bb:e0:e9:c0:eb:b1:95:66:11:a3:53:1f:23:93:75: b4:dc:f3:68:f7:40:02:06:b7:3d:0e:a6:32:af:34: 0d:14:06:5d:ab:d7:42:82:60:bb:d9:28:1c:10:72: 81:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B6:76:F8:9F:9A:32:5E:92:68:EE:AE:4C:01:35:F5:AF:79:D6:89 X509v3 Authority Key Identifier: keyid:D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:30:91:23:a6:42:63:dd:bf:08:03:bd:57:82:87:86:aa:7a: b5:7d:5a:81:73:4c:71:ab:bd:b2:65:8a:64:5a:ee:f7:2c:ff: 62:18:77:e9:1e:42:c9:27:5f:a5:f0:87:22:11:e4:cd:59:42: 96:be:0a:af:bc:8c:8b:fa:92:03:5a:2a:2d:4e:43:ff:da:a1: 70:e6:75:c5:d9:c1:ac:8e:5c:4f:a3:c6:12:07:eb:47:8b:f4: 56:91:a8:61:18:4c:b3:cf:b5:d2:e7:df:bf:04:4a:27:20:0d: 84:b4:18:50:8d:10:f4:bf:89:f4:68:ea:0e:dd:77:85:01:57: 65:14:b9:6c:2b:79:e2:7f:51:6b:7c:18:fb:6c:a8:88:5d:00: c4:8b:b5:6e:a8:26:83:c1:d3:32:23:fd:eb:22:a4:73:3c:7d: 68:ae:ae:f1:7f:87:dc:3d:e1:42:ff:5f:9f:05:01:5e:2c:56: 51:b7:fe:8c:f8:f9:fd:c4:99:10:d5:4b:23:a7:92:2e:00:d3: 9b:a8:0a:95:2e:18:fa:5d:23:5b:42:11:f8:88:cf:d0:72:cb: c4:72:ec:b4:7f:c5:be:c8:10:b9:88:00:a9:4e:7f:f7:64:a2: 15:08:50:3d:b8:9e:68:19:11:0e:bd:77:2d:96:5b:c9:f5:ad: 30:7e:e8:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QKk4T+E0CUn4wtmXddk1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OTZhZmM1NGZlNjNlZDE3NDBkNWU4OTZiM2Y1OTFiMTE4 NGY2ZGMwHhcNMjUxMjA2MjAwMDQ2WhcNMjUxMjA3MjAwMDQ2WjAzMTEwLwYDVQQD Eyg3Y2I2NzZmODlmOWEzMjVlOTI2OGVlYWU0YzAxMzVmNWFmNzlkNjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlQa0RtSvUoa0RjvvnMO+v8ga1s3 Rwd9SUHDRCGfL9IX18MM3yoH9e2wz63WGFrOVlTSRTSUMcUfidLa8izRfevWhrsx iwbdLslGifZhUI/B790C7rBWSh5hOcqKjufgoEdwK7VJCDp9B6mslJVUpzrVBxT5 Ma87uVZ4xiPdwkWtoCTgTLDHddNN+EyNf+WFbbyK+ElbAJRovpTUWZCqB8CCS/Gb 7jUUhilfaTX/e3kol7D9mDjRdq7aaxuhBXMykEUvHqnUlaZH6FDSOdyaWxe74OnA 67GVZhGjUx8jk3W03PNo90ACBrc9DqYyrzQNFAZdq9dCgmC72SgcEHKB+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHy2dvifmjJekmjurkwBNfWvedaJMB8GA1UdIwQY MBaAFNeWr8VP5j7RdA1eiWs/WRsRhPbcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zMmFiMTYtOGY2ZC00MTRkLTgwY2Yt MGE4NjM1OGU5Yzg0LzEvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8zMmFiMTYtOGY2ZC00MTRkLTgwY2YtMGE4NjM1OGU5Yzg0 LzEvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGzCRI6ZC Y92/CAO9V4KHhqp6tX1agXNMcau9smWKZFru9yz/Yhh36R5CySdfpfCHIhHkzVlC lr4Kr7yMi/qSA1oqLU5D/9qhcOZ1xdnBrI5cT6PGEgfrR4v0VpGoYRhMs8+10uff vwRKJyANhLQYUI0Q9L+J9GjqDt13hQFXZRS5bCt54n9Ra3wY+2yoiF0AxIu1bqgm g8HTMiP96yKkczx9aK6u8X+H3D3hQv9fnwUBXixWUbf+jPj5/cSZENVLI6eSLgDT m6gKlS4Y+l0jW0IR+IjP0HLLxHLstH/FvsgQuYgAqU5/92SiFQhQPbieaBkRDr13 LZZbyfWtMH7ofA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:30:30 2025 by rpki-client