This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft File: 15-SXhc4vDUrxrXPX_lRs9gTrjk.mft (raw, json) Hash identifier: AAXGaKtYKCsKygQ+zr4JpRox8FT7O2FgjaETLeP2t1g= Subject key identifier: 1B:7A:D9:88:0B:18:3A:EC:EF:8A:91:EC:D6:D6:FA:5A:84:5F:2B:19 Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39 Certificate issuer: /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39 Certificate serial: 019B37FC6EC22468EBFA9EFD724707B19795 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft Manifest number: 0808 Signing time: Fri 19 Dec 2025 19:00:48 +0000 Manifest this update: Fri 19 Dec 2025 19:00:48 +0000 Manifest next update: Sat 20 Dec 2025 19:00:48 +0000 Files and hashes: 1: 15-SXhc4vDUrxrXPX_lRs9gTrjk.crl (hash: RGfA/GPra9R/r6D9tfln/ZmDRIAXkuLzgVeP8birQuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:6e:c2:24:68:eb:fa:9e:fd:72:47:07:b1:97:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39 Validity Not Before: Dec 19 19:00:48 2025 GMT Not After : Dec 20 19:00:48 2025 GMT Subject: CN=1b7ad9880b183aecef8a91ecd6d6fa5a845f2b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:60:9a:6f:1d:cb:c5:ba:77:a1:23:7e:81: ca:f6:d7:d3:13:a2:5d:96:7d:83:95:ea:c6:42:f6: 4b:b4:d8:70:b9:cb:6e:31:45:00:8b:a9:f4:3b:d6: 7f:bc:69:d8:31:a2:3e:42:0a:63:84:d4:3c:e8:ea: 5c:ad:5c:29:38:21:7d:54:be:f9:7b:d9:bf:96:27: 7d:76:8d:63:40:52:61:6a:8a:4c:a2:09:c9:c6:02: 26:b9:7d:27:b2:3d:81:94:95:01:30:84:a7:0d:0a: 48:75:65:47:4e:16:05:77:a2:81:30:05:c8:59:0c: 62:51:be:4b:85:25:c9:73:b6:e7:82:88:2c:03:dd: 78:17:d1:df:27:e6:b0:a5:c7:df:d7:02:07:53:fa: bc:9c:9b:4c:55:0f:7d:d4:d6:26:5f:72:cf:45:dd: 54:ec:9e:01:3c:0a:cb:38:d0:1b:46:c0:86:c5:85: 8f:2b:c6:ca:30:22:ad:3f:d4:09:ed:94:b4:e0:d6: 2a:07:61:40:d1:db:92:a5:b8:6f:4c:89:15:b1:66: cb:6f:3b:d1:5c:b8:8c:99:86:2f:b4:e5:a1:2a:e2: 60:83:69:63:c6:d2:e1:d5:7e:28:b4:65:90:eb:bb: 23:50:67:e6:0f:cc:0b:34:fd:1a:d5:56:5e:55:33: ca:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7A:D9:88:0B:18:3A:EC:EF:8A:91:EC:D6:D6:FA:5A:84:5F:2B:19 X509v3 Authority Key Identifier: keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:9c:73:c3:ec:ec:34:1d:60:f1:30:0d:76:85:9f:90:a6:1f: bb:84:5e:49:1f:a8:40:54:27:30:4e:05:c1:a4:32:1c:39:6a: 49:64:6e:e6:ef:be:9b:c3:f5:b9:43:92:d9:1d:25:5d:75:cd: c1:6f:22:0a:c8:74:b4:77:d3:db:1b:ee:17:83:24:87:fc:9e: a8:3a:25:91:c8:4d:fa:a1:80:94:6e:e8:f7:bc:50:a8:89:91: ec:7d:bd:0a:f8:be:32:4e:ff:7e:dd:9c:a0:69:02:49:1c:68: 79:a6:07:40:6d:87:e6:84:a0:0a:89:5e:88:69:52:d6:6f:95: ca:29:13:2d:af:ef:59:ae:20:a4:39:7d:43:0a:5b:60:56:09: 09:49:47:27:6b:27:0b:68:08:49:f1:f6:3b:2c:a3:d4:47:b2: 82:9d:11:14:56:49:02:a1:3f:fa:90:9c:63:ec:42:d9:47:0a: b3:30:08:12:74:3a:2b:da:03:a5:27:79:7b:f6:6e:65:fa:8b: 2f:5a:4a:3c:cc:d2:6f:0d:fd:5b:b3:10:d0:bf:8b:25:68:25: 7b:b5:48:72:9d:0b:58:47:09:da:8e:a0:02:8f:90:2e:37:de: 36:97:5a:7a:06:5c:2d:a9:24:2e:ed:2b:c6:9e:59:c3:a2:bd: a2:17:61:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/G7CJGjr+p79ckcHsZeVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OWY5MjVlMTczOGJjMzUyYmM2YjVjZjVmZjk1MWIzZDgx M2FlMzkwHhcNMjUxMjE5MTkwMDQ4WhcNMjUxMjIwMTkwMDQ4WjAzMTEwLwYDVQQD EygxYjdhZDk4ODBiMTgzYWVjZWY4YTkxZWNkNmQ2ZmE1YTg0NWYyYjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuddgmm8dy8W6d6EjfoHK9tfTE6Jd ln2DlerGQvZLtNhwuctuMUUAi6n0O9Z/vGnYMaI+QgpjhNQ86OpcrVwpOCF9VL75 e9m/lid9do1jQFJhaopMognJxgImuX0nsj2BlJUBMISnDQpIdWVHThYFd6KBMAXI WQxiUb5LhSXJc7bngogsA914F9HfJ+awpcff1wIHU/q8nJtMVQ991NYmX3LPRd1U 7J4BPArLONAbRsCGxYWPK8bKMCKtP9QJ7ZS04NYqB2FA0duSpbhvTIkVsWbLbzvR XLiMmYYvtOWhKuJgg2ljxtLh1X4otGWQ67sjUGfmD8wLNP0a1VZeVTPKuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBt62YgLGDrs74qR7NbW+lqEXysZMB8GA1UdIwQY MBaAFNefkl4XOLw1K8a1z1/5UbPYE645MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTUtU1hoYzR2RFVyeHJYUFhfbFJzOWdUcmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zYjJjMDAtOTRiNi00MzRkLWIzNjIt OTZhMzRiMDIyZjg5LzEvMTUtU1hoYzR2RFVyeHJYUFhfbFJzOWdUcmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8zYjJjMDAtOTRiNi00MzRkLWIzNjItOTZhMzRiMDIyZjg5 LzEvMTUtU1hoYzR2RFVyeHJYUFhfbFJzOWdUcmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZxzw+zs NB1g8TANdoWfkKYfu4ReSR+oQFQnME4FwaQyHDlqSWRu5u++m8P1uUOS2R0lXXXN wW8iCsh0tHfT2xvuF4Mkh/yeqDolkchN+qGAlG7o97xQqImR7H29Cvi+Mk7/ft2c oGkCSRxoeaYHQG2H5oSgColeiGlS1m+VyikTLa/vWa4gpDl9QwpbYFYJCUlHJ2sn C2gISfH2Oyyj1Eeygp0RFFZJAqE/+pCcY+xC2UcKszAIEnQ6K9oDpSd5e/ZuZfqL L1pKPMzSbw39W7MQ0L+LJWgle7VIcp0LWEcJ2o6gAo+QLjfeNpdaegZcLakkLu0r xp5Zw6K9ohdh7w== -----END CERTIFICATE-----Generated at Sat Dec 20 01:55:43 2025 by rpki-client