This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft File: 15-SXhc4vDUrxrXPX_lRs9gTrjk.mft (raw, json) Hash identifier: mEWCwYPYRb5KBidfSYWYy7Rl61hMdey8KBShvRUFYe4= Subject key identifier: FD:D9:BF:16:21:F8:59:A1:19:90:63:E7:15:40:73:0F:D0:80:E3:4F Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39 Certificate issuer: /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39 Certificate serial: 019B608A5331657B644781EC41F09837667E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft Manifest number: 081D Signing time: Sat 27 Dec 2025 16:00:36 +0000 Manifest this update: Sat 27 Dec 2025 16:00:36 +0000 Manifest next update: Sun 28 Dec 2025 16:00:36 +0000 Files and hashes: 1: 15-SXhc4vDUrxrXPX_lRs9gTrjk.crl (hash: 03hFSl2pXnKGkLxDFJ4pf0nv5UYKVrbeR+wlJw9Qosc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 15:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:8a:53:31:65:7b:64:47:81:ec:41:f0:98:37:66:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39 Validity Not Before: Dec 27 16:00:36 2025 GMT Not After : Dec 28 16:00:36 2025 GMT Subject: CN=fdd9bf1621f859a1199063e71540730fd080e34f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:21:68:77:40:21:8e:ca:8f:24:89:4d:bd:5a: 05:4a:ac:ad:d0:0a:7a:8f:1d:95:1b:f8:3f:d4:35: d8:bf:a3:22:c5:73:be:56:53:50:0a:b9:3f:29:b9: 9a:01:13:be:13:c5:fa:6a:ed:9a:7c:9c:a7:4e:cb: 79:20:06:fc:d4:73:fd:8e:61:4e:4c:9a:ef:91:7f: e3:04:d0:13:ee:b2:93:ad:43:59:a8:e8:9b:aa:17: f9:8c:72:7e:17:c1:3c:37:96:36:65:45:23:d8:d4: d7:a6:bd:57:4e:db:74:c1:ac:5a:19:7d:36:50:51: b5:05:63:83:a9:7c:1d:62:6a:f0:29:01:69:99:d9: fa:24:3d:aa:41:8e:dd:13:27:2e:79:53:ea:08:7a: 59:79:4a:17:d9:23:14:32:3e:4b:1d:16:9d:f0:f7: c2:15:b6:6b:89:5e:3a:3f:08:5c:f9:0e:8f:87:44: 29:32:51:44:62:b3:e4:b6:c3:09:91:1b:36:79:bb: 7c:41:b7:97:36:31:ad:6c:94:a5:0a:c4:fe:63:d6: 8d:13:37:de:5e:53:f2:c3:b2:fe:9d:87:7a:ba:65: bc:6a:ac:6f:e7:c9:55:f1:46:07:b4:cc:9e:8e:c2: 24:e2:58:db:17:44:43:a6:c1:c7:f6:84:5e:ec:d0: 8c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D9:BF:16:21:F8:59:A1:19:90:63:E7:15:40:73:0F:D0:80:E3:4F X509v3 Authority Key Identifier: keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:29:10:bd:70:92:9f:08:e7:2d:56:d1:f2:69:5e:9c:27:bc: 14:f6:1a:ea:17:6e:d9:5d:6d:1f:0e:cc:1f:f4:39:e6:62:5e: 62:bf:d5:66:c2:80:94:d0:51:26:ba:eb:93:00:1c:b3:73:c1: 77:c7:37:78:66:3e:6a:50:6e:28:db:ac:41:01:1c:e5:bd:e7: f0:08:63:db:ac:0e:3b:c4:64:b8:44:a5:ed:1e:69:47:71:db: c9:68:f8:af:9f:b4:20:ae:2a:b0:e7:98:79:ff:37:71:a6:ea: 27:c2:a1:f6:ea:b4:f5:f3:b4:64:9f:cf:16:e9:5d:fb:cb:6b: 2e:87:30:cc:70:83:cd:75:6a:4e:18:07:c5:d6:a5:9f:ad:17: 0b:36:c3:2a:6b:06:b4:eb:b0:50:55:24:79:98:84:25:65:7a: 2f:3c:f0:10:54:63:04:8e:34:e4:76:03:9e:99:19:f8:e3:36: 56:bb:c1:a3:7e:69:cf:a5:33:a7:aa:12:52:ff:3d:a7:13:ba: 6f:d1:52:72:83:8c:33:3f:96:d3:da:a1:b1:58:5e:05:cd:44: 8d:d1:22:ee:3e:fd:5d:53:3f:0a:b4:3d:de:8a:a4:9d:8b:c4: c7:cc:c0:4d:7f:29:5b:ce:7f:cb:b5:52:d3:24:6f:29:cc:03: 6d:93:70:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgilMxZXtkR4HsQfCYN2Z+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OWY5MjVlMTczOGJjMzUyYmM2YjVjZjVmZjk1MWIzZDgx M2FlMzkwHhcNMjUxMjI3MTYwMDM2WhcNMjUxMjI4MTYwMDM2WjAzMTEwLwYDVQQD EyhmZGQ5YmYxNjIxZjg1OWExMTk5MDYzZTcxNTQwNzMwZmQwODBlMzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiFod0AhjsqPJIlNvVoFSqyt0Ap6 jx2VG/g/1DXYv6MixXO+VlNQCrk/KbmaARO+E8X6au2afJynTst5IAb81HP9jmFO TJrvkX/jBNAT7rKTrUNZqOibqhf5jHJ+F8E8N5Y2ZUUj2NTXpr1XTtt0waxaGX02 UFG1BWODqXwdYmrwKQFpmdn6JD2qQY7dEycueVPqCHpZeUoX2SMUMj5LHRad8PfC FbZriV46Pwhc+Q6Ph0QpMlFEYrPktsMJkRs2ebt8QbeXNjGtbJSlCsT+Y9aNEzfe XlPyw7L+nYd6umW8aqxv58lV8UYHtMyejsIk4ljbF0RDpsHH9oRe7NCM+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3ZvxYh+FmhGZBj5xVAcw/QgONPMB8GA1UdIwQY MBaAFNefkl4XOLw1K8a1z1/5UbPYE645MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTUtU1hoYzR2RFVyeHJYUFhfbFJzOWdUcmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zYjJjMDAtOTRiNi00MzRkLWIzNjIt OTZhMzRiMDIyZjg5LzEvMTUtU1hoYzR2RFVyeHJYUFhfbFJzOWdUcmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8zYjJjMDAtOTRiNi00MzRkLWIzNjItOTZhMzRiMDIyZjg5 LzEvMTUtU1hoYzR2RFVyeHJYUFhfbFJzOWdUcmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjSkQvXCS nwjnLVbR8mlenCe8FPYa6hdu2V1tHw7MH/Q55mJeYr/VZsKAlNBRJrrrkwAcs3PB d8c3eGY+alBuKNusQQEc5b3n8Ahj26wOO8RkuESl7R5pR3HbyWj4r5+0IK4qsOeY ef83cabqJ8Kh9uq09fO0ZJ/PFuld+8trLocwzHCDzXVqThgHxdaln60XCzbDKmsG tOuwUFUkeZiEJWV6LzzwEFRjBI405HYDnpkZ+OM2VrvBo35pz6Uzp6oSUv89pxO6 b9FScoOMMz+W09qhsVheBc1EjdEi7j79XVM/CrQ93oqknYvEx8zATX8pW85/y7VS 0yRvKcwDbZNwxw== -----END CERTIFICATE-----Generated at Sat Dec 27 21:03:27 2025 by rpki-client