This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft File: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft (raw, json) Hash identifier: I6b5shpFE/7rI9YfY2siz+tR5HmptEeZbuAHWPWIe4U= Subject key identifier: 48:72:83:7E:EE:3E:D8:BF:A3:05:11:05:80:EE:4A:7A:AE:6C:C6:F5 Authority key identifier: D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC Certificate issuer: /CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc Certificate serial: 019B4092047AF1D59DDE2BA365716F6A7995 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft Manifest number: 0F14 Signing time: Sun 21 Dec 2025 11:01:09 +0000 Manifest this update: Sun 21 Dec 2025 11:01:09 +0000 Manifest next update: Mon 22 Dec 2025 11:01:09 +0000 Files and hashes: 1: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl (hash: C/8hYIGbWbAMF+gTdL/ouif9xOZwb/BZKqqqR/TaWug=) 2: 4nov_nt6GEsQWCkcquH9SVS1bMU.roa (hash: Ylgq5sDsdH7k78HDH4UBmheF5iyrFEvrHVeDharXE+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:92:04:7a:f1:d5:9d:de:2b:a3:65:71:6f:6a:79:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc Validity Not Before: Dec 21 11:01:09 2025 GMT Not After : Dec 22 11:01:09 2025 GMT Subject: CN=4872837eee3ed8bfa305110580ee4a7aae6cc6f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7d:7f:07:fd:e1:58:d2:2c:a7:b9:b6:b8:22: 4f:45:a0:fb:7b:fc:28:4f:81:9d:3e:a9:55:f0:76: 89:86:09:fd:bf:79:36:32:78:cd:79:c8:0f:0e:52: 5c:5f:8a:6e:90:17:9a:1f:7c:9f:82:29:53:ee:4e: d8:09:95:7e:79:c3:b3:1a:01:7f:c7:4e:11:f5:b5: 91:92:f4:f4:90:b6:1f:76:3e:e1:ee:7a:bd:4c:f0: ee:61:aa:db:6f:88:76:72:34:e8:28:96:a3:7e:7d: 09:c3:2e:7a:d0:1d:ca:22:bd:b7:76:e1:58:2c:8d: 14:80:54:1b:24:ea:58:52:a2:7f:99:30:14:be:82: 5f:f6:41:b2:bf:c3:f6:65:b0:33:12:79:18:88:56: 25:b9:52:01:92:cb:91:b6:27:b1:c4:57:fb:58:11: 61:02:22:b3:91:fa:40:5c:b8:75:27:5c:00:87:b2: 99:e2:b5:4f:8f:43:65:47:18:81:eb:73:5f:ef:5f: 01:cf:19:86:81:b9:82:75:3d:b6:9e:ed:0f:f8:78: dc:f5:f3:b9:b2:1e:f7:be:b4:6e:9d:d5:4e:18:60: 98:4b:28:02:20:9a:99:67:09:f2:a3:de:e5:3b:b2: e7:d7:d0:23:09:ca:7c:7f:f7:5d:9f:be:03:45:21: cf:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:72:83:7E:EE:3E:D8:BF:A3:05:11:05:80:EE:4A:7A:AE:6C:C6:F5 X509v3 Authority Key Identifier: keyid:D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:19:ec:6b:67:73:9c:63:07:ae:4a:83:86:ca:78:1d:17:60: cc:49:d5:e6:9e:d9:ed:f3:5f:eb:ff:d5:f7:2f:f1:bf:12:5d: d1:10:6b:dd:29:a4:7d:4f:dd:54:98:74:24:84:1f:a9:45:bd: 41:10:34:2b:38:ea:29:2a:b8:6d:f4:5f:4f:70:14:3e:92:d6: da:22:02:66:c7:3f:67:7b:03:72:80:0c:4c:c6:e5:19:aa:cc: 77:93:9f:c7:f8:21:9a:64:38:eb:4c:ec:bc:fc:dd:3e:19:c1: 62:e1:64:51:b4:9a:1d:81:40:76:0c:35:77:38:f8:7a:aa:83: b4:72:0d:20:79:7d:48:7a:c9:65:d9:aa:79:33:07:d9:11:23: df:e3:f4:20:bf:57:83:12:cd:43:2f:d3:cc:e4:dc:8b:2d:3a: 1d:4f:ac:d7:b6:b2:47:21:6e:1d:9a:1c:d8:df:1e:53:62:11: 94:da:72:3e:73:92:e4:f3:c2:a2:65:c7:25:11:12:36:97:38: 7e:cd:99:d1:02:f4:c1:a5:6d:d4:cc:48:6a:36:52:ac:21:45: 5b:ba:7b:55:19:a1:3b:05:3d:1a:45:c1:1f:73:a2:bd:8e:b7: b0:8e:7b:14:01:00:53:bb:fd:34:5c:89:a6:01:93:d9:9d:13: 7e:22:f7:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkgR68dWd3iujZXFvanmVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OTZhZmM1NGZlNjNlZDE3NDBkNWU4OTZiM2Y1OTFiMTE4 NGY2ZGMwHhcNMjUxMjIxMTEwMTA5WhcNMjUxMjIyMTEwMTA5WjAzMTEwLwYDVQQD Eyg0ODcyODM3ZWVlM2VkOGJmYTMwNTExMDU4MGVlNGE3YWFlNmNjNmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX1/B/3hWNIsp7m2uCJPRaD7e/wo T4GdPqlV8HaJhgn9v3k2MnjNecgPDlJcX4pukBeaH3yfgilT7k7YCZV+ecOzGgF/ x04R9bWRkvT0kLYfdj7h7nq9TPDuYarbb4h2cjToKJajfn0Jwy560B3KIr23duFY LI0UgFQbJOpYUqJ/mTAUvoJf9kGyv8P2ZbAzEnkYiFYluVIBksuRtiexxFf7WBFh AiKzkfpAXLh1J1wAh7KZ4rVPj0NlRxiB63Nf718BzxmGgbmCdT22nu0P+Hjc9fO5 sh73vrRundVOGGCYSygCIJqZZwnyo97lO7Ln19AjCcp8f/ddn74DRSHP9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhyg37uPti/owURBYDuSnqubMb1MB8GA1UdIwQY MBaAFNeWr8VP5j7RdA1eiWs/WRsRhPbcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zMmFiMTYtOGY2ZC00MTRkLTgwY2Yt MGE4NjM1OGU5Yzg0LzEvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8zMmFiMTYtOGY2ZC00MTRkLTgwY2YtMGE4NjM1OGU5Yzg0 LzEvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRnsa2dz nGMHrkqDhsp4HRdgzEnV5p7Z7fNf6//V9y/xvxJd0RBr3SmkfU/dVJh0JIQfqUW9 QRA0KzjqKSq4bfRfT3AUPpLW2iICZsc/Z3sDcoAMTMblGarMd5Ofx/ghmmQ460zs vPzdPhnBYuFkUbSaHYFAdgw1dzj4eqqDtHINIHl9SHrJZdmqeTMH2REj3+P0IL9X gxLNQy/TzOTciy06HU+s17ayRyFuHZoc2N8eU2IRlNpyPnOS5PPComXHJRESNpc4 fs2Z0QL0waVt1MxIajZSrCFFW7p7VRmhOwU9GkXBH3OivY63sI57FAEAU7v9NFyJ pgGT2Z0TfiL3Yg== -----END CERTIFICATE-----Generated at Sun Dec 21 18:02:15 2025 by rpki-client