This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft File: a15HDpDV693Mqpz2uyLoneDZ8gc.mft (raw, json) Hash identifier: 67SjXC5d5en+yo1yl/ywqp4dzDHfAqbcnnb87EMr9fI= Subject key identifier: AE:BC:C6:2E:56:AF:13:E9:84:0B:34:55:60:05:8B:4C:04:BC:86:6B Authority key identifier: 6B:5E:47:0E:90:D5:EB:DD:CC:AA:9C:F6:BB:22:E8:9D:E0:D9:F2:07 Certificate issuer: /CN=6b5e470e90d5ebddccaa9cf6bb22e89de0d9f207 Certificate serial: 019B5A1A61A2D3AE1DC7F26BA34A29CFE003 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft Manifest number: 0DD4 Signing time: Fri 26 Dec 2025 10:00:36 +0000 Manifest this update: Fri 26 Dec 2025 10:00:36 +0000 Manifest next update: Sat 27 Dec 2025 10:00:36 +0000 Files and hashes: 1: IpPxqrkAJLVsXHeB04cvVHAP5Fg.roa (hash: VtX3ApkZgzYiR7CYiCSZq34MU+2YZHhoSAVs9vYdqbA=) 2: a15HDpDV693Mqpz2uyLoneDZ8gc.crl (hash: 95xgo26ux41wIKx+IiiuPX/TuEG5yWfBxei8ENzmlZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:61:a2:d3:ae:1d:c7:f2:6b:a3:4a:29:cf:e0:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5e470e90d5ebddccaa9cf6bb22e89de0d9f207 Validity Not Before: Dec 26 10:00:36 2025 GMT Not After : Dec 27 10:00:36 2025 GMT Subject: CN=aebcc62e56af13e9840b345560058b4c04bc866b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:41:7d:99:21:75:1e:d0:b3:06:a8:3c:81:74: 61:6f:38:3b:fa:46:9a:27:56:a4:70:bf:a2:32:ea: 36:42:00:6c:6d:da:29:ee:75:ba:aa:7d:66:5e:76: e2:65:6d:f3:a9:21:2a:2a:43:3f:d0:bd:29:60:76: 96:05:1d:33:ad:33:80:d6:a0:76:29:13:2e:c1:ac: 67:4c:99:33:62:76:66:c1:5b:82:54:af:31:a0:21: cc:7d:41:68:a7:7d:69:86:f0:21:d4:22:30:7e:8d: 12:ea:a6:e6:6b:1e:fa:9b:ba:76:c7:1d:95:f0:b8: c9:7f:58:99:c3:64:d5:26:9b:14:16:fa:7d:5e:f9: 54:39:e2:d1:89:a2:7d:dc:09:41:0f:8a:1b:a6:d5: 11:9b:2b:f2:e6:a2:12:c7:d7:72:c3:ff:86:a0:98: 48:c9:73:07:a0:fb:3b:e1:be:60:d6:1a:6b:ca:c6: 00:a2:6d:6d:25:d4:7d:ef:5f:0a:23:62:84:24:41: cc:9f:08:ea:2e:51:1e:91:f9:f9:03:f7:b8:e6:ff: 01:49:2b:e4:46:b9:aa:f7:f4:cf:d0:3d:92:4b:f2: 8f:e1:c0:bb:da:c9:2a:30:df:57:30:b5:8c:b8:04: 7d:ef:3e:c3:57:f4:22:05:0f:a7:00:2d:de:48:ed: 7c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BC:C6:2E:56:AF:13:E9:84:0B:34:55:60:05:8B:4C:04:BC:86:6B X509v3 Authority Key Identifier: keyid:6B:5E:47:0E:90:D5:EB:DD:CC:AA:9C:F6:BB:22:E8:9D:E0:D9:F2:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:2d:31:b4:f2:b3:f9:46:bb:38:f1:95:f3:4e:91:c3:f8:0f: fa:ad:de:60:cf:5f:38:4d:ff:cf:d9:c3:01:53:c6:90:ea:7f: db:dd:c4:c2:3e:4f:26:10:10:76:64:a6:bc:70:ef:d6:7d:e8: 1e:64:6b:d6:af:b7:a2:2f:97:2f:31:ee:c4:1c:cf:54:ae:48: 1e:a0:7e:6a:b1:d5:a8:91:a5:cd:ac:d5:80:da:73:c9:d1:0a: 2e:64:ef:92:f1:a1:f4:87:ec:8f:a1:1c:f9:4c:51:c5:23:4d: b2:b9:80:76:ab:3f:59:62:ba:08:f2:3d:d8:b6:cc:60:58:aa: cc:df:d9:30:3d:5d:b6:39:98:b5:57:b1:7b:35:4a:cc:ef:04: 49:fd:60:e2:58:f3:5a:c1:85:58:49:55:88:9d:78:8b:b2:c7: 5e:20:75:90:8e:d0:78:9b:f2:67:88:e4:90:74:a4:67:56:30: f5:b4:3f:c1:2a:86:70:18:40:90:96:c5:75:51:24:c4:b4:3d: e6:c3:e9:ec:e1:89:85:c4:bb:e0:a3:b2:a6:c2:c7:5e:ec:15: bc:55:8d:66:c9:47:c4:bf:48:a4:fd:51:3f:1b:7a:78:78:bd: 2f:8f:8f:93:ef:78:9e:d1:2e:3c:3e:75:bd:7e:10:b5:bc:55: 29:b6:09:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGmGi064dx/Jro0opz+ADMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWU0NzBlOTBkNWViZGRjY2FhOWNmNmJiMjJlODlkZTBk OWYyMDcwHhcNMjUxMjI2MTAwMDM2WhcNMjUxMjI3MTAwMDM2WjAzMTEwLwYDVQQD EyhhZWJjYzYyZTU2YWYxM2U5ODQwYjM0NTU2MDA1OGI0YzA0YmM4NjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEF9mSF1HtCzBqg8gXRhbzg7+kaa J1akcL+iMuo2QgBsbdop7nW6qn1mXnbiZW3zqSEqKkM/0L0pYHaWBR0zrTOA1qB2 KRMuwaxnTJkzYnZmwVuCVK8xoCHMfUFop31phvAh1CIwfo0S6qbmax76m7p2xx2V 8LjJf1iZw2TVJpsUFvp9XvlUOeLRiaJ93AlBD4obptURmyvy5qISx9dyw/+GoJhI yXMHoPs74b5g1hprysYAom1tJdR9718KI2KEJEHMnwjqLlEekfn5A/e45v8BSSvk Rrmq9/TP0D2SS/KP4cC72skqMN9XMLWMuAR97z7DV/QiBQ+nAC3eSO18nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK68xi5WrxPphAs0VWAFi0wEvIZrMB8GA1UdIwQY MBaAFGteRw6Q1evdzKqc9rsi6J3g2fIHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTE1SERwRFY2OTNNcXB6MnV5TG9uZURaOGdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hODJjMTAtNTIxOC00N2E3LWE3YzQt ZWViNmRhYTc1ZWM1LzEvYTE1SERwRFY2OTNNcXB6MnV5TG9uZURaOGdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hODJjMTAtNTIxOC00N2E3LWE3YzQtZWViNmRhYTc1ZWM1 LzEvYTE1SERwRFY2OTNNcXB6MnV5TG9uZURaOGdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJC0xtPKz +Ua7OPGV806Rw/gP+q3eYM9fOE3/z9nDAVPGkOp/293Ewj5PJhAQdmSmvHDv1n3o HmRr1q+3oi+XLzHuxBzPVK5IHqB+arHVqJGlzazVgNpzydEKLmTvkvGh9Ifsj6Ec +UxRxSNNsrmAdqs/WWK6CPI92LbMYFiqzN/ZMD1dtjmYtVexezVKzO8ESf1g4ljz WsGFWElViJ14i7LHXiB1kI7QeJvyZ4jkkHSkZ1Yw9bQ/wSqGcBhAkJbFdVEkxLQ9 5sPp7OGJhcS74KOypsLHXuwVvFWNZslHxL9IpP1RPxt6eHi9L4+Pk+94ntEuPD51 vX4QtbxVKbYJNA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:22 2025 by rpki-client