This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft File: I15QLDFNUQT3xgzNaXicuEj_Xgc.mft (raw, json) Hash identifier: iC9Obime3eaIJTE/zb/Rq+FW3QMmUqH8NfVJNOXTODc= Subject key identifier: A5:17:4A:C3:18:85:CB:32:24:E1:CF:FD:B6:68:B4:65:72:DE:91:6A Authority key identifier: 23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07 Certificate issuer: /CN=235e502c314d5104f7c60ccd69789cb848ff5e07 Certificate serial: 019B14CC571CFF1DBA74CE2BE0CEE837B73D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft Manifest number: 0299 Signing time: Fri 12 Dec 2025 23:01:34 +0000 Manifest this update: Fri 12 Dec 2025 23:01:34 +0000 Manifest next update: Sat 13 Dec 2025 23:01:34 +0000 Files and hashes: 1: GLkcEMe4eneYkegJdDsN96p2G5w.roa (hash: a+Y+AIr4ILwMbtFOtGWppkOOeW987wrq4kOZaYCKOMI=) 2: I15QLDFNUQT3xgzNaXicuEj_Xgc.crl (hash: sgr8DW/GxfSDIxNcwLGcB7itNfulo5hHP5vWzJcmCZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 23:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:14:cc:57:1c:ff:1d:ba:74:ce:2b:e0:ce:e8:37:b7:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=235e502c314d5104f7c60ccd69789cb848ff5e07 Validity Not Before: Dec 12 23:01:34 2025 GMT Not After : Dec 13 23:01:34 2025 GMT Subject: CN=a5174ac31885cb3224e1cffdb668b46572de916a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e9:b0:fa:cc:43:a8:07:0d:5b:e2:a4:e2:f7: 06:8f:49:bf:1b:9b:de:14:37:34:aa:ce:8f:7a:38: 8b:52:ef:88:fe:ef:f5:6d:25:b4:f7:db:65:29:24: f2:6c:44:c0:51:1e:2e:57:17:a6:98:a5:22:42:63: cd:92:be:6e:4f:1b:bd:60:6d:85:c3:89:86:cf:b3: 11:7a:60:94:7d:b7:51:90:0b:ec:b0:51:40:53:a5: db:4a:df:fe:12:d4:b0:7f:e4:e3:d8:be:e8:b8:39: 16:18:55:df:b9:47:9d:fa:8d:03:61:dc:a4:17:60: 0c:13:78:ce:cc:88:0c:0b:e5:b9:2e:a2:fb:2b:c7: 67:05:34:8c:c3:6f:dc:f1:dd:a8:ac:78:46:ce:56: e3:82:f7:e7:a6:58:ad:bf:cb:6b:d0:cc:ac:59:a3: f4:c3:83:ac:f6:e9:de:95:12:5a:b4:f4:1f:e6:d1: bb:d1:b6:ca:5e:d7:6e:a6:25:c7:d0:cf:e1:75:6f: 0a:64:f6:91:3d:09:b2:0b:21:48:2d:c7:be:12:fd: 69:50:bd:f8:50:ec:db:8c:1d:30:c6:3b:bd:0c:88: 7d:19:73:53:f7:1a:d5:f1:69:87:53:cf:d9:c5:49: dd:22:9e:16:38:4f:01:99:fb:67:cd:84:f7:6e:3e: fa:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:17:4A:C3:18:85:CB:32:24:E1:CF:FD:B6:68:B4:65:72:DE:91:6A X509v3 Authority Key Identifier: keyid:23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:91:fb:7f:fd:95:4d:9d:a4:b9:57:8b:33:e0:7a:de:c5:a0: 68:9a:7c:2c:dd:81:22:d5:77:a2:be:a5:2b:23:ff:e0:2c:e9: 21:54:a5:60:c2:9a:cd:70:35:4a:7b:20:68:93:49:da:80:73: 4d:da:5e:4a:6d:ce:9e:a0:8c:c2:a0:04:f2:1b:04:62:61:be: 80:da:2b:e3:c9:ea:35:ad:65:db:07:aa:d7:e3:54:01:2d:f4: d6:eb:cb:50:2e:76:f4:75:c9:62:49:93:2d:1b:e4:a7:44:66: cd:fe:88:17:dd:0b:78:81:64:d7:de:ed:c0:b3:12:9e:1f:84: 48:9b:e4:a8:2f:ea:e9:ad:dc:6a:f6:bc:f4:8b:b2:b7:ef:c6: 5a:35:5a:ba:5c:04:c3:9e:1b:f5:0a:89:82:55:89:1d:aa:49: 29:78:a9:dd:80:c9:a5:6d:90:3e:60:ac:ea:90:b5:10:0f:8a: fe:3d:a0:df:14:5a:4c:07:4c:b6:b4:de:54:d6:33:d2:f7:2e: 99:06:3d:a6:f4:b3:91:0d:8b:b5:7f:a2:95:23:2f:ae:11:86: 17:c7:07:b5:ad:02:45:7d:4e:4f:4a:b9:ad:3e:1c:6a:40:2e: 15:da:01:03:54:71:99:b4:4c:df:3f:c0:51:85:fb:0e:4a:d9: ed:d5:43:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsUzFcc/x26dM4r4M7oN7c9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNWU1MDJjMzE0ZDUxMDRmN2M2MGNjZDY5Nzg5Y2I4NDhm ZjVlMDcwHhcNMjUxMjEyMjMwMTM0WhcNMjUxMjEzMjMwMTM0WjAzMTEwLwYDVQQD EyhhNTE3NGFjMzE4ODVjYjMyMjRlMWNmZmRiNjY4YjQ2NTcyZGU5MTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvumw+sxDqAcNW+Kk4vcGj0m/G5ve FDc0qs6PejiLUu+I/u/1bSW099tlKSTybETAUR4uVxemmKUiQmPNkr5uTxu9YG2F w4mGz7MRemCUfbdRkAvssFFAU6XbSt/+EtSwf+Tj2L7ouDkWGFXfuUed+o0DYdyk F2AME3jOzIgMC+W5LqL7K8dnBTSMw2/c8d2orHhGzlbjgvfnplitv8tr0MysWaP0 w4Os9unelRJatPQf5tG70bbKXtdupiXH0M/hdW8KZPaRPQmyCyFILce+Ev1pUL34 UOzbjB0wxju9DIh9GXNT9xrV8WmHU8/ZxUndIp4WOE8BmftnzYT3bj76+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUXSsMYhcsyJOHP/bZotGVy3pFqMB8GA1UdIwQY MBaAFCNeUCwxTVEE98YMzWl4nLhI/14HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTE1UUxERk5VUVQzeGd6TmFYaWN1RWpfWGdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mYTI0NWYtZGM3NC00OTc0LTgyZTAt YTU2ZTY3ODQ4ZjExLzEvSTE1UUxERk5VUVQzeGd6TmFYaWN1RWpfWGdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mYTI0NWYtZGM3NC00OTc0LTgyZTAtYTU2ZTY3ODQ4ZjEx LzEvSTE1UUxERk5VUVQzeGd6TmFYaWN1RWpfWGdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5H7f/2V TZ2kuVeLM+B63sWgaJp8LN2BItV3or6lKyP/4CzpIVSlYMKazXA1SnsgaJNJ2oBz TdpeSm3OnqCMwqAE8hsEYmG+gNor48nqNa1l2weq1+NUAS301uvLUC529HXJYkmT LRvkp0Rmzf6IF90LeIFk197twLMSnh+ESJvkqC/q6a3cava89Iuyt+/GWjVaulwE w54b9QqJglWJHapJKXip3YDJpW2QPmCs6pC1EA+K/j2g3xRaTAdMtrTeVNYz0vcu mQY9pvSzkQ2LtX+ilSMvrhGGF8cHta0CRX1OT0q5rT4cakAuFdoBA1RxmbRM3z/A UYX7DkrZ7dVDXQ== -----END CERTIFICATE-----Generated at Sat Dec 13 04:59:43 2025 by rpki-client