This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft File: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft (raw, json) Hash identifier: EFhlPf8bRL1fiVdIa10oNK4JmqDyciHDKqjaah62Ask= Subject key identifier: 81:D1:50:C7:52:68:96:CA:74:ED:BC:40:51:51:E9:A0:C3:C3:F2:23 Authority key identifier: D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC Certificate issuer: /CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc Certificate serial: 019B3CB53B01A499E31786F3ED219D6AB2E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft Manifest number: 0F12 Signing time: Sat 20 Dec 2025 17:01:08 +0000 Manifest this update: Sat 20 Dec 2025 17:01:08 +0000 Manifest next update: Sun 21 Dec 2025 17:01:08 +0000 Files and hashes: 1: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl (hash: MjiADswRkcSTYD0THzXlIrSgDhYGrPuKJTZU7rhJ40Y=) 2: 4nov_nt6GEsQWCkcquH9SVS1bMU.roa (hash: Ylgq5sDsdH7k78HDH4UBmheF5iyrFEvrHVeDharXE+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:3b:01:a4:99:e3:17:86:f3:ed:21:9d:6a:b2:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc Validity Not Before: Dec 20 17:01:08 2025 GMT Not After : Dec 21 17:01:08 2025 GMT Subject: CN=81d150c7526896ca74edbc405151e9a0c3c3f223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:43:fe:35:bb:4a:48:a5:0d:a5:84:9f:02:55: 1c:1c:d9:22:79:f7:30:49:12:de:de:06:da:92:4e: 83:34:89:26:eb:3b:98:67:64:65:a9:27:c4:f9:03: e9:3d:c6:e6:35:c7:f8:fc:1c:ff:3d:22:41:d0:1e: 8d:5d:a1:be:7c:a8:2c:43:7d:6d:54:57:3a:60:ca: 06:6d:43:3a:6a:5e:da:b4:a8:57:52:96:d0:88:12: a6:09:8f:99:fa:89:84:85:7f:89:af:96:f7:21:72: 11:d9:d4:98:1f:fb:d3:f7:f5:8d:49:88:02:46:c6: ab:99:18:0c:55:08:2a:db:f0:24:7a:5e:8f:75:95: 66:95:c4:21:7d:41:ee:2a:6b:91:2a:63:cd:03:91: d3:57:f9:c1:11:a2:9a:c6:4e:b3:6c:56:de:e4:34: 11:db:50:7c:dc:51:69:4f:4a:37:ee:d7:a9:da:2d: 38:4d:48:ce:10:3c:b5:96:d2:90:a3:64:e8:0f:cf: fc:75:86:0d:b7:27:99:a4:97:30:68:2c:ea:50:81: 3b:47:30:5a:57:08:44:9b:6f:37:e0:2b:26:88:01: 52:32:c1:19:f6:4c:93:f6:1b:6c:f4:bc:a5:d0:da: ca:60:46:42:b1:89:f9:8c:d2:82:76:d2:42:65:99: 79:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D1:50:C7:52:68:96:CA:74:ED:BC:40:51:51:E9:A0:C3:C3:F2:23 X509v3 Authority Key Identifier: keyid:D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:9d:02:d0:ea:b1:fa:f4:69:65:78:b9:fd:46:46:e4:76:11: aa:38:dc:6d:83:d0:af:dd:3e:77:1d:e8:67:99:f9:d8:fb:53: ad:b1:39:b5:33:f8:cb:86:b9:ba:a3:be:98:26:e9:36:d0:82: 4c:e9:92:2f:8e:46:66:14:02:85:11:af:a0:e4:8c:aa:ac:67: af:18:fa:01:19:15:69:5e:35:73:bb:78:ee:d2:ba:24:c7:ca: 27:20:dd:a9:45:d0:af:be:00:56:68:76:e9:7e:9a:b7:b9:53: 96:45:75:29:f1:a7:bf:f8:e4:66:1e:09:1e:8e:5f:8b:f8:3d: 34:ce:6e:6d:04:d0:48:f3:1e:58:9d:7c:1f:cf:34:90:ef:2e: b8:06:28:ca:f2:68:0b:c1:10:73:8e:ef:17:c3:16:99:05:fc: c6:c2:21:e2:ce:e9:a5:62:28:d0:5b:27:81:a2:53:c9:0a:ac: 37:19:d8:6c:a5:7b:6f:33:02:46:c9:ca:5d:22:72:41:8b:81: 53:39:3f:a6:df:25:49:49:5b:ff:c6:77:c3:2f:43:9b:44:d8: cf:c8:0d:4e:a1:6b:6b:ad:92:5d:98:e3:c1:d0:45:13:9a:08: 66:42:03:05:af:ed:bf:23:41:16:f0:45:64:77:ec:a4:8c:07: f1:a5:61:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tTsBpJnjF4bz7SGdarLoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OTZhZmM1NGZlNjNlZDE3NDBkNWU4OTZiM2Y1OTFiMTE4 NGY2ZGMwHhcNMjUxMjIwMTcwMTA4WhcNMjUxMjIxMTcwMTA4WjAzMTEwLwYDVQQD Eyg4MWQxNTBjNzUyNjg5NmNhNzRlZGJjNDA1MTUxZTlhMGMzYzNmMjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUP+NbtKSKUNpYSfAlUcHNkiefcw SRLe3gbakk6DNIkm6zuYZ2RlqSfE+QPpPcbmNcf4/Bz/PSJB0B6NXaG+fKgsQ31t VFc6YMoGbUM6al7atKhXUpbQiBKmCY+Z+omEhX+Jr5b3IXIR2dSYH/vT9/WNSYgC RsarmRgMVQgq2/Akel6PdZVmlcQhfUHuKmuRKmPNA5HTV/nBEaKaxk6zbFbe5DQR 21B83FFpT0o37tep2i04TUjOEDy1ltKQo2ToD8/8dYYNtyeZpJcwaCzqUIE7RzBa VwhEm2834CsmiAFSMsEZ9kyT9hts9Lyl0NrKYEZCsYn5jNKCdtJCZZl5RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHRUMdSaJbKdO28QFFR6aDDw/IjMB8GA1UdIwQY MBaAFNeWr8VP5j7RdA1eiWs/WRsRhPbcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zMmFiMTYtOGY2ZC00MTRkLTgwY2Yt MGE4NjM1OGU5Yzg0LzEvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8zMmFiMTYtOGY2ZC00MTRkLTgwY2YtMGE4NjM1OGU5Yzg0 LzEvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZ0C0Oqx +vRpZXi5/UZG5HYRqjjcbYPQr90+dx3oZ5n52PtTrbE5tTP4y4a5uqO+mCbpNtCC TOmSL45GZhQChRGvoOSMqqxnrxj6ARkVaV41c7t47tK6JMfKJyDdqUXQr74AVmh2 6X6at7lTlkV1KfGnv/jkZh4JHo5fi/g9NM5ubQTQSPMeWJ18H880kO8uuAYoyvJo C8EQc47vF8MWmQX8xsIh4s7ppWIo0FsngaJTyQqsNxnYbKV7bzMCRsnKXSJyQYuB Uzk/pt8lSUlb/8Z3wy9Dm0TYz8gNTqFra62SXZjjwdBFE5oIZkIDBa/tvyNBFvBF ZHfspIwH8aVhwA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:56:08 2025 by rpki-client