This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft File: l15fSPU6jbnKYPqPGDfQfzGREE8.mft (raw, json) Hash identifier: lD+S6GnBxf7f8a5TAi6Odky2o2CLNlXQ7mFwH4HRmCI= Subject key identifier: 40:7B:EC:AF:BB:C0:39:50:4A:9A:3C:44:DF:C9:22:0C:67:DA:18:97 Authority key identifier: 97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F Certificate issuer: /CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f Certificate serial: 019B115CB387DA3DE5AC279AE028A9833A24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft Manifest number: 03EF Signing time: Fri 12 Dec 2025 07:00:46 +0000 Manifest this update: Fri 12 Dec 2025 07:00:46 +0000 Manifest next update: Sat 13 Dec 2025 07:00:46 +0000 Files and hashes: 1: VmXkaG5WzI9Vz_7xcXFAL06DAoc.roa (hash: uKPs/SrJH/MnTw4fYsxVa8cqGkMc8R9CKa5VOSutc0U=) 2: l15fSPU6jbnKYPqPGDfQfzGREE8.crl (hash: e9dbsVDxS1tpQ5aP6JlclWCwBH7WrIr4dfkABq6nn6k=) 3: t42bTlVzekO4_zka2dM08NYoS0o.roa (hash: k4lNjjF23Ae3Sbhg3LYDkwgC4ol0mKxgVNJCg94oeiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5c:b3:87:da:3d:e5:ac:27:9a:e0:28:a9:83:3a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f Validity Not Before: Dec 12 07:00:46 2025 GMT Not After : Dec 13 07:00:46 2025 GMT Subject: CN=407becafbbc039504a9a3c44dfc9220c67da1897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bf:ce:24:fa:bf:de:42:50:f2:34:c5:0c:f1: 58:f0:db:1a:bc:3c:06:5a:33:a3:bb:27:06:1a:aa: 79:54:9d:25:e5:bf:c7:9d:5f:d4:b9:6b:c8:25:c9: 0c:a9:d1:26:dc:fb:af:b0:77:9b:4e:58:04:ad:d7: e2:65:da:f7:5b:37:06:15:aa:9d:68:bd:d8:02:f5: 2b:4e:5a:f8:80:0d:33:25:d2:30:8e:e6:80:71:a7: a5:ec:c7:8d:dc:5b:b1:18:71:f6:5d:f1:af:fa:3b: 0b:68:18:39:dd:f6:53:a6:22:91:6b:27:97:44:4e: 53:67:27:33:58:ca:5c:f5:c9:61:9a:7a:f0:c2:8e: 2e:43:b2:5a:43:8b:6b:c0:1c:8d:98:a3:de:7e:46: 5c:16:e2:64:28:04:43:c3:af:de:a7:c9:9f:eb:55: 99:c5:c5:fc:30:25:79:1c:80:25:cd:11:1c:11:c2: 60:f1:7f:d5:af:cb:36:a1:07:9b:42:11:ed:1a:13: 8f:3b:01:27:a0:26:d3:a5:63:cd:a0:7c:ea:52:82: 02:0a:fe:ba:79:04:82:16:6c:ea:31:ee:e9:49:7b: e3:95:a2:50:a4:5a:b3:a8:b7:a1:91:a5:0d:48:73: e6:4a:e3:99:b5:14:d0:2f:a5:98:76:6d:e2:98:98: 39:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7B:EC:AF:BB:C0:39:50:4A:9A:3C:44:DF:C9:22:0C:67:DA:18:97 X509v3 Authority Key Identifier: keyid:97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:ac:f0:cc:6b:25:52:17:ff:ce:9a:6a:db:cb:fc:5b:86:8b: 80:db:16:4c:91:a7:92:56:d1:85:80:22:ed:e4:be:02:37:8c: 1e:ba:36:54:12:c0:1b:1c:45:c9:43:cd:d8:4f:18:eb:9a:8f: bb:41:42:da:49:62:d2:2a:32:94:c5:35:c7:80:94:db:6f:ff: 53:6a:ac:25:f2:53:47:bb:87:3a:4b:16:01:fd:47:9e:77:96: e4:96:24:d7:cb:33:b7:61:42:91:4c:57:aa:b7:e6:28:0e:35: a7:fd:0d:63:b4:80:0e:e5:ae:d3:c8:8f:41:2c:95:5f:a4:a7: 1f:e3:ad:c0:38:6c:7b:d9:c0:67:05:09:a1:68:0b:a9:b1:8e: 25:f2:c6:4c:91:e8:80:09:4a:5a:af:0b:2c:a8:68:84:3e:89: 9f:42:2d:e5:b6:aa:37:82:9e:d4:4c:30:4f:6a:95:47:90:a8: f6:33:e6:4c:ec:dd:e5:da:3f:9d:e1:0d:29:81:39:fd:98:af: 9d:16:c1:db:58:8d:27:37:08:8c:c0:d0:c0:96:7e:2b:d7:97: b6:59:7b:7c:f7:ba:86:ac:dd:ed:35:6b:a8:21:3f:34:82:f9: f1:69:1b:1f:93:c8:8b:b8:98:db:3e:da:20:42:64:12:df:d0: fa:82:86:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXLOH2j3lrCea4CipgzokMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NWU1ZjQ4ZjUzYThkYjljYTYwZmE4ZjE4MzdkMDdmMzE5 MTEwNGYwHhcNMjUxMjEyMDcwMDQ2WhcNMjUxMjEzMDcwMDQ2WjAzMTEwLwYDVQQD Eyg0MDdiZWNhZmJiYzAzOTUwNGE5YTNjNDRkZmM5MjIwYzY3ZGExODk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7/OJPq/3kJQ8jTFDPFY8NsavDwG WjOjuycGGqp5VJ0l5b/HnV/UuWvIJckMqdEm3PuvsHebTlgErdfiZdr3WzcGFaqd aL3YAvUrTlr4gA0zJdIwjuaAcael7MeN3FuxGHH2XfGv+jsLaBg53fZTpiKRayeX RE5TZyczWMpc9clhmnrwwo4uQ7JaQ4trwByNmKPefkZcFuJkKARDw6/ep8mf61WZ xcX8MCV5HIAlzREcEcJg8X/Vr8s2oQebQhHtGhOPOwEnoCbTpWPNoHzqUoICCv66 eQSCFmzqMe7pSXvjlaJQpFqzqLehkaUNSHPmSuOZtRTQL6WYdm3imJg5YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEB77K+7wDlQSpo8RN/JIgxn2hiXMB8GA1UdIwQY MBaAFJdeX0j1Oo25ymD6jxg30H8xkRBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDE1ZlNQVTZqYm5LWVBxUEdEZlFmekdSRUU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lMGIxYjUtZWRlZi00YWViLTgzNmIt NjNmNTAzNWYzNDQ2LzEvbDE1ZlNQVTZqYm5LWVBxUEdEZlFmekdSRUU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9lMGIxYjUtZWRlZi00YWViLTgzNmItNjNmNTAzNWYzNDQ2 LzEvbDE1ZlNQVTZqYm5LWVBxUEdEZlFmekdSRUU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw6zwzGsl Uhf/zppq28v8W4aLgNsWTJGnklbRhYAi7eS+AjeMHro2VBLAGxxFyUPN2E8Y65qP u0FC2kli0ioylMU1x4CU22//U2qsJfJTR7uHOksWAf1HnneW5JYk18szt2FCkUxX qrfmKA41p/0NY7SADuWu08iPQSyVX6SnH+OtwDhse9nAZwUJoWgLqbGOJfLGTJHo gAlKWq8LLKhohD6Jn0It5baqN4Ke1EwwT2qVR5Co9jPmTOzd5do/neENKYE5/Ziv nRbB21iNJzcIjMDQwJZ+K9eXtll7fPe6hqzd7TVrqCE/NIL58WkbH5PIi7iY2z7a IEJkEt/Q+oKGbA== -----END CERTIFICATE-----Generated at Fri Dec 12 09:25:24 2025 by rpki-client