This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.mft File: 1l15-Y5wsirX12oghap7hRqhhIM.mft (raw, json) Hash identifier: dRHYSHk68QLk5VSE1NV/5S1zrAxeyGpj4TQdXnkfkCs= Subject key identifier: 2A:F1:2C:7A:53:2C:87:34:20:E5:97:D8:FC:0F:B2:EB:EB:DC:38:22 Authority key identifier: D6:5D:79:F9:8E:70:B2:2A:D7:D7:6A:20:85:AA:7B:85:1A:A1:84:83 Certificate issuer: /CN=d65d79f98e70b22ad7d76a2085aa7b851aa18483 Certificate serial: 019B5977705C5E9584D14D8AF0797A789206 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1l15-Y5wsirX12oghap7hRqhhIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.mft Manifest number: 17 Signing time: Fri 26 Dec 2025 07:02:38 +0000 Manifest this update: Fri 26 Dec 2025 07:02:38 +0000 Manifest next update: Sat 27 Dec 2025 07:02:38 +0000 Files and hashes: 1: 1l15-Y5wsirX12oghap7hRqhhIM.crl (hash: /fvph6ZfPbj1NYjibyP1GAhniwdkDb/wBdIvaaPudRY=) 2: rf-2AjrADnCTKylGVxnPCu282dA.roa (hash: V9W3NsQtuzHtmHu/wb6rWjq5cO2tLpUMthvdcTU49tg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.mft rsync://rpki.ripe.net/repository/DEFAULT/1l15-Y5wsirX12oghap7hRqhhIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:70:5c:5e:95:84:d1:4d:8a:f0:79:7a:78:92:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65d79f98e70b22ad7d76a2085aa7b851aa18483 Validity Not Before: Dec 26 07:02:38 2025 GMT Not After : Dec 27 07:02:38 2025 GMT Subject: CN=2af12c7a532c873420e597d8fc0fb2ebebdc3822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e4:11:cd:50:89:db:3f:11:64:6b:e2:e5:53: 75:60:11:91:c6:a7:71:ff:b4:50:9f:f3:de:d3:f1: 4d:c9:24:1b:1e:b3:5f:31:c7:56:52:3e:eb:bd:50: 8e:da:60:19:2f:85:d7:dd:71:5a:e9:f8:78:3e:da: e3:59:cd:cf:b3:e2:9e:e4:bb:74:31:4c:68:a5:f6: 91:2e:32:d5:97:88:4c:28:7d:14:6c:69:ac:ca:37: 57:ab:67:6d:64:74:8b:c6:8d:1b:23:a7:3d:50:46: 1d:e6:57:0f:06:09:82:8e:b3:63:ee:56:f3:30:26: ae:d0:33:ac:69:ef:17:7e:37:8a:70:03:2d:51:3d: 04:42:c1:8d:18:3b:04:26:f2:60:f1:c5:57:1e:2a: 7f:cb:0f:42:57:7d:3a:40:8f:83:03:a0:79:95:1e: d6:13:60:9e:a7:7b:9f:03:d6:44:e6:3e:fc:61:25: 4e:b0:ad:b6:cb:7e:b1:dd:d7:f6:45:27:a4:fc:99: bb:eb:96:75:89:28:86:20:9b:c6:16:a0:15:92:06: 76:62:e7:c9:3f:60:80:d0:79:79:3b:e6:ae:32:ef: 52:7e:e3:83:6e:15:e6:89:b0:23:fc:52:8d:3c:d2: 6e:7d:e5:45:bd:cf:02:1d:eb:0d:59:7d:9d:b0:87: 19:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F1:2C:7A:53:2C:87:34:20:E5:97:D8:FC:0F:B2:EB:EB:DC:38:22 X509v3 Authority Key Identifier: keyid:D6:5D:79:F9:8E:70:B2:2A:D7:D7:6A:20:85:AA:7B:85:1A:A1:84:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1l15-Y5wsirX12oghap7hRqhhIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/908fb1-af29-41ce-b1f8-17123fe37be9/1/1l15-Y5wsirX12oghap7hRqhhIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:cb:6b:25:d8:b2:08:90:d4:a6:69:53:0d:a0:c9:70:9e:17: 98:f3:1e:62:cb:e6:ad:d3:b0:bc:26:a0:f8:b4:9f:be:c7:69: 78:6a:13:19:af:91:0b:10:5a:8b:40:9c:06:bb:93:c1:49:57: 95:46:f3:22:9c:2c:1d:b2:02:50:cd:0c:be:0e:65:dd:d2:54: 7c:47:4c:ab:20:ef:d3:0c:d8:af:7e:78:3b:fd:ff:62:d5:4f: 5d:e5:f9:70:e4:78:1a:5c:14:b6:10:6d:6a:0d:cd:e5:30:37: 0b:3d:cc:fd:a2:48:b2:30:59:19:f4:54:c6:96:76:6d:ca:ae: 3b:62:92:5e:df:20:98:9e:e2:ed:33:6c:e3:2c:1f:94:9e:92: af:96:c3:40:09:3d:cd:fe:8b:d1:1c:91:f2:9c:aa:a1:34:ac: 75:cc:25:95:21:9f:8a:2b:1e:88:35:00:2a:1e:b2:64:79:9a: 01:79:72:8d:e1:06:57:04:65:83:0a:ed:09:b5:05:8a:05:39: 3d:94:2f:45:20:21:62:46:83:f8:1f:c7:48:59:86:1e:ac:55: 54:73:aa:c1:52:78:da:3e:e9:65:ff:2b:aa:49:aa:1c:75:fd: cc:5b:76:5a:d5:47:63:67:7c:e7:71:0e:b0:8c:54:ed:dc:c2: 0c:10:f3:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd3BcXpWE0U2K8Hl6eJIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NWQ3OWY5OGU3MGIyMmFkN2Q3NmEyMDg1YWE3Yjg1MWFh MTg0ODMwHhcNMjUxMjI2MDcwMjM4WhcNMjUxMjI3MDcwMjM4WjAzMTEwLwYDVQQD EygyYWYxMmM3YTUzMmM4NzM0MjBlNTk3ZDhmYzBmYjJlYmViZGMzODIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeQRzVCJ2z8RZGvi5VN1YBGRxqdx /7RQn/Pe0/FNySQbHrNfMcdWUj7rvVCO2mAZL4XX3XFa6fh4PtrjWc3Ps+Ke5Lt0 MUxopfaRLjLVl4hMKH0UbGmsyjdXq2dtZHSLxo0bI6c9UEYd5lcPBgmCjrNj7lbz MCau0DOsae8XfjeKcAMtUT0EQsGNGDsEJvJg8cVXHip/yw9CV306QI+DA6B5lR7W E2Cep3ufA9ZE5j78YSVOsK22y36x3df2RSek/Jm765Z1iSiGIJvGFqAVkgZ2YufJ P2CA0Hl5O+auMu9SfuODbhXmibAj/FKNPNJufeVFvc8CHesNWX2dsIcZPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrxLHpTLIc0IOWX2PwPsuvr3DgiMB8GA1UdIwQY MBaAFNZdefmOcLIq19dqIIWqe4UaoYSDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWwxNS1ZNXdzaXJYMTJvZ2hhcDdoUnFoaElNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85MDhmYjEtYWYyOS00MWNlLWIxZjgt MTcxMjNmZTM3YmU5LzEvMWwxNS1ZNXdzaXJYMTJvZ2hhcDdoUnFoaElNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS85MDhmYjEtYWYyOS00MWNlLWIxZjgtMTcxMjNmZTM3YmU5 LzEvMWwxNS1ZNXdzaXJYMTJvZ2hhcDdoUnFoaElNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZMtrJdiy CJDUpmlTDaDJcJ4XmPMeYsvmrdOwvCag+LSfvsdpeGoTGa+RCxBai0CcBruTwUlX lUbzIpwsHbICUM0Mvg5l3dJUfEdMqyDv0wzYr354O/3/YtVPXeX5cOR4GlwUthBt ag3N5TA3Cz3M/aJIsjBZGfRUxpZ2bcquO2KSXt8gmJ7i7TNs4ywflJ6Sr5bDQAk9 zf6L0RyR8pyqoTSsdcwllSGfiiseiDUAKh6yZHmaAXlyjeEGVwRlgwrtCbUFigU5 PZQvRSAhYkaD+B/HSFmGHqxVVHOqwVJ42j7pZf8rqkmqHHX9zFt2WtVHY2d853EO sIxU7dzCDBDzmA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:38 2025 by rpki-client