This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft File: 1i15SeaYRB2-mrxWCcSerKc8l5Y.mft (raw, json) Hash identifier: UYjUfCDM7/l/HBNEHAF4dZRMFq3Bcey2p7ANQkespkQ= Subject key identifier: E4:D5:73:11:4E:01:45:8C:AA:32:A0:31:77:70:9C:F0:B2:A9:F2:0E Authority key identifier: D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96 Certificate issuer: /CN=d62d7949e698441dbe9abc5609c49eaca73c9796 Certificate serial: 019B32D76FE5AEF16616A905F0CB6B68DB49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft Manifest number: 10EF Signing time: Thu 18 Dec 2025 19:02:18 +0000 Manifest this update: Thu 18 Dec 2025 19:02:18 +0000 Manifest next update: Fri 19 Dec 2025 19:02:18 +0000 Files and hashes: 1: 1i15SeaYRB2-mrxWCcSerKc8l5Y.crl (hash: QFPcxk2mv1nJ/8z2HX4L+UNM2ZNsNkKP2tTX7DPntx8=) 2: d6njcJAvU5XAKbAJO-1stP-sI3c.roa (hash: Qb51F1ZjPbC9UkzfA0CmXmJOGj7X7JIQuEBdAlbn5BM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:6f:e5:ae:f1:66:16:a9:05:f0:cb:6b:68:db:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d62d7949e698441dbe9abc5609c49eaca73c9796 Validity Not Before: Dec 18 19:02:18 2025 GMT Not After : Dec 19 19:02:18 2025 GMT Subject: CN=e4d573114e01458caa32a03177709cf0b2a9f20e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:08:0f:f9:49:60:c7:cf:bb:f9:63:ae:87:48: a4:c9:2b:80:8e:24:f3:7c:5f:a7:55:00:5c:38:82: 1f:b5:e2:25:c9:ed:61:7c:e7:3f:fe:4f:a4:e7:ac: c8:63:f2:26:75:0e:3d:da:2c:8e:8c:ae:e9:6d:c9: d0:37:37:62:f6:bf:00:e2:72:ed:a9:1f:ee:5e:cc: 9e:a8:8e:47:e2:1c:29:18:f1:be:70:14:e9:03:c0: 03:ce:77:0a:f4:65:32:af:6f:01:5a:de:fb:a7:16: e4:1f:48:fe:1b:c5:76:c5:3b:25:58:20:99:9a:ea: 6e:19:af:3d:b0:b3:d7:f1:1a:b7:d6:d6:53:5d:35: f8:e8:5b:b9:fb:a9:a0:dd:7c:87:48:77:3a:08:09: f0:68:af:01:ea:80:16:77:87:20:c0:65:0c:89:8b: 87:7d:2b:2d:15:23:64:4d:d0:9d:9b:21:1b:1f:2f: 59:f1:ef:df:e3:16:13:4c:94:67:7d:44:4d:b8:b7: 8d:67:3d:b1:d5:ad:6f:04:7c:25:c4:d9:60:b8:86: c9:ff:dc:34:c6:04:c7:d9:0c:0e:c0:36:7a:f1:24: 39:41:93:1c:5e:e7:34:f3:14:34:8f:87:41:fc:7b: 47:53:f2:66:3e:24:24:eb:e2:7a:f5:ad:3c:38:7b: be:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D5:73:11:4E:01:45:8C:AA:32:A0:31:77:70:9C:F0:B2:A9:F2:0E X509v3 Authority Key Identifier: keyid:D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f3:f9:ac:a2:bc:6c:ba:7c:3c:03:95:3c:48:59:b5:44:05: ed:e7:42:ec:f5:1b:b8:4b:db:ac:61:51:13:e9:45:11:aa:49: 7a:46:d9:a3:96:93:82:61:2e:1d:67:9b:92:8e:6c:15:0e:6d: 85:aa:86:cf:95:77:8e:18:02:f5:39:d9:bf:eb:7f:ee:b5:63: c7:2e:af:30:ab:30:7b:59:e5:94:ff:4e:61:e6:25:9b:0c:b9: a1:c4:fc:80:3c:b0:26:d0:05:24:88:23:a3:51:ae:68:76:da: 9c:88:cb:f4:58:c4:f0:cf:18:0f:7c:00:df:54:0d:7a:7d:37: 80:93:49:ee:42:ab:21:49:19:9f:71:50:0c:15:a9:68:ac:06: fe:9e:02:8d:01:42:f3:83:4b:eb:13:a6:27:a2:97:72:d5:fb: f0:df:de:a8:91:7a:ff:ff:ce:f6:43:c9:7b:f2:e6:6e:16:07: c3:46:fa:09:da:92:02:19:bd:36:cb:9d:03:92:71:73:04:7b: b3:9e:0b:1c:ab:d4:7c:39:b7:ea:7f:ff:75:85:67:b6:3d:53: fe:8d:a4:0b:6b:52:9f:03:f2:21:1c:1e:e2:0f:31:ae:ea:d0: 0c:e3:51:07:79:f4:7b:d9:06:01:e1:6f:a5:2e:96:e6:94:10: f3:94:d9:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy12/lrvFmFqkF8MtraNtJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MmQ3OTQ5ZTY5ODQ0MWRiZTlhYmM1NjA5YzQ5ZWFjYTcz Yzk3OTYwHhcNMjUxMjE4MTkwMjE4WhcNMjUxMjE5MTkwMjE4WjAzMTEwLwYDVQQD EyhlNGQ1NzMxMTRlMDE0NThjYWEzMmEwMzE3NzcwOWNmMGIyYTlmMjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuggP+Ulgx8+7+WOuh0ikySuAjiTz fF+nVQBcOIIfteIlye1hfOc//k+k56zIY/ImdQ492iyOjK7pbcnQNzdi9r8A4nLt qR/uXsyeqI5H4hwpGPG+cBTpA8ADzncK9GUyr28BWt77pxbkH0j+G8V2xTslWCCZ mupuGa89sLPX8Rq31tZTXTX46Fu5+6mg3XyHSHc6CAnwaK8B6oAWd4cgwGUMiYuH fSstFSNkTdCdmyEbHy9Z8e/f4xYTTJRnfURNuLeNZz2x1a1vBHwlxNlguIbJ/9w0 xgTH2QwOwDZ68SQ5QZMcXuc08xQ0j4dB/HtHU/JmPiQk6+J69a08OHu+cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTVcxFOAUWMqjKgMXdwnPCyqfIOMB8GA1UdIwQY MBaAFNYteUnmmEQdvpq8VgnEnqynPJeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hYzA5MjMtN2ViMS00YTVmLTkxMDUt MTViMjFhOWI0MzI1LzEvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9hYzA5MjMtN2ViMS00YTVmLTkxMDUtMTViMjFhOWI0MzI1 LzEvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfP5rKK8 bLp8PAOVPEhZtUQF7edC7PUbuEvbrGFRE+lFEapJekbZo5aTgmEuHWebko5sFQ5t haqGz5V3jhgC9TnZv+t/7rVjxy6vMKswe1nllP9OYeYlmwy5ocT8gDywJtAFJIgj o1GuaHbanIjL9FjE8M8YD3wA31QNen03gJNJ7kKrIUkZn3FQDBWpaKwG/p4CjQFC 84NL6xOmJ6KXctX78N/eqJF6///O9kPJe/LmbhYHw0b6CdqSAhm9NsudA5JxcwR7 s54LHKvUfDm36n//dYVntj1T/o2kC2tSnwPyIRwe4g8xrurQDONRB3n0e9kGAeFv pS6W5pQQ85TZew== -----END CERTIFICATE-----Generated at Fri Dec 19 00:14:45 2025 by rpki-client