This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft File: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft (raw, json) Hash identifier: bA4I2Ee7p3+3enhZ2iaptxdE/iBPd7EYp8xv4rMZVW0= Subject key identifier: 78:07:FF:F7:18:72:8D:FE:93:0C:21:2A:B7:74:83:AF:A2:6F:D9:9D Authority key identifier: D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC Certificate issuer: /CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc Certificate serial: 019B6CFC85DCAC73BE3A67C2208B66D4F27F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft Manifest number: 0F2B Signing time: Tue 30 Dec 2025 02:00:47 +0000 Manifest this update: Tue 30 Dec 2025 02:00:47 +0000 Manifest next update: Wed 31 Dec 2025 02:00:47 +0000 Files and hashes: 1: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl (hash: SPMl/AyIqUAklMpNzoN44tLwlBucvJ8g4wPACYmPP14=) 2: 4nov_nt6GEsQWCkcquH9SVS1bMU.roa (hash: Ylgq5sDsdH7k78HDH4UBmheF5iyrFEvrHVeDharXE+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:fc:85:dc:ac:73:be:3a:67:c2:20:8b:66:d4:f2:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc Validity Not Before: Dec 30 02:00:47 2025 GMT Not After : Dec 31 02:00:47 2025 GMT Subject: CN=7807fff718728dfe930c212ab77483afa26fd99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:87:3b:ea:80:77:6e:86:ee:c0:04:d1:92:78: 20:cf:60:3d:9d:a5:86:7e:5b:de:02:26:ae:ab:af: ad:a0:47:ee:7b:f6:a6:a6:27:d7:39:ec:37:1f:f6: f2:3f:c9:aa:f2:3c:d7:2c:e6:5a:92:df:9e:5c:c2: ee:dd:b4:06:bf:49:eb:0c:21:39:37:21:2e:17:6a: 90:36:57:1a:80:84:04:74:82:00:a1:e4:28:c6:13: 9a:7d:cf:a4:0f:89:da:85:9e:ff:78:09:2b:23:47: 7b:fa:6b:d7:93:90:6e:fa:66:ef:ea:01:1d:53:c9: a9:01:30:4f:28:a6:ea:13:3c:69:21:e4:1e:7e:6d: a9:6b:f9:e0:86:10:12:46:17:ae:cf:3c:50:cd:38: 8f:b0:cf:d9:de:98:79:69:e8:53:67:7c:bf:7d:7c: de:87:39:ba:a6:75:5b:ef:ed:67:67:aa:66:51:ea: fe:70:ec:d5:5e:cb:3f:86:db:7e:c7:fa:84:78:e3: 5f:5d:4e:e0:06:4e:a3:04:a9:b4:03:0e:bf:25:28: 7a:b7:2d:a3:2e:6f:5c:ba:ab:3e:3a:b6:6f:7d:25: 3b:cd:96:db:20:1b:b2:48:6b:cd:3f:85:43:c9:c1: 2d:0c:bd:e0:43:a6:63:50:6c:2b:13:43:ab:f6:80: 5e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:07:FF:F7:18:72:8D:FE:93:0C:21:2A:B7:74:83:AF:A2:6F:D9:9D X509v3 Authority Key Identifier: keyid:D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:1d:fc:27:ae:32:aa:11:ff:ad:3b:34:83:c2:06:b5:69:a0: 4f:1b:ba:a8:1e:cb:23:4d:f0:e4:72:a9:da:be:ea:52:2c:58: 56:81:80:14:84:dc:ba:58:84:96:22:95:b6:70:a6:e9:d5:12: bb:92:4f:49:52:05:4d:23:f8:a2:10:a7:a8:d0:0e:55:a5:e8: e6:1d:56:a3:7a:f7:2b:c7:fb:79:97:ca:73:55:3c:c8:5d:8a: b0:5f:e3:40:ae:b1:65:92:b1:5a:17:2b:3d:1d:c6:4f:61:da: 9c:21:8a:91:73:87:dd:cb:63:92:52:61:41:ba:17:45:83:39: 92:10:cf:16:cf:e0:71:03:b0:b6:61:40:23:a5:72:24:45:1c: db:ce:88:cd:3b:cb:33:b0:9d:ef:20:f6:25:63:06:51:76:43: 3c:f7:97:8c:90:67:94:32:50:90:d5:3c:f4:b8:64:04:c3:46: 9f:7e:b1:60:66:28:1e:2a:dc:dd:24:c0:9a:94:bf:4a:a2:6f: b3:76:42:8f:47:31:62:10:07:39:f1:59:2b:8f:d6:11:52:51: 9c:fe:2f:46:12:47:9d:92:58:04:6e:5e:b3:f7:d3:f6:de:33: bb:7b:12:48:cc:87:fd:b8:e8:89:fa:12:05:14:52:d1:ed:af: 9f:a7:e6:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZts/IXcrHO+OmfCIItm1PJ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OTZhZmM1NGZlNjNlZDE3NDBkNWU4OTZiM2Y1OTFiMTE4 NGY2ZGMwHhcNMjUxMjMwMDIwMDQ3WhcNMjUxMjMxMDIwMDQ3WjAzMTEwLwYDVQQD Eyg3ODA3ZmZmNzE4NzI4ZGZlOTMwYzIxMmFiNzc0ODNhZmEyNmZkOTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIc76oB3bobuwATRknggz2A9naWG flveAiauq6+toEfue/ampifXOew3H/byP8mq8jzXLOZakt+eXMLu3bQGv0nrDCE5 NyEuF2qQNlcagIQEdIIAoeQoxhOafc+kD4nahZ7/eAkrI0d7+mvXk5Bu+mbv6gEd U8mpATBPKKbqEzxpIeQefm2pa/nghhASRheuzzxQzTiPsM/Z3ph5aehTZ3y/fXze hzm6pnVb7+1nZ6pmUer+cOzVXss/htt+x/qEeONfXU7gBk6jBKm0Aw6/JSh6ty2j Lm9cuqs+OrZvfSU7zZbbIBuySGvNP4VDycEtDL3gQ6ZjUGwrE0Or9oBemwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgH//cYco3+kwwhKrd0g6+ib9mdMB8GA1UdIwQY MBaAFNeWr8VP5j7RdA1eiWs/WRsRhPbcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zMmFiMTYtOGY2ZC00MTRkLTgwY2Yt MGE4NjM1OGU5Yzg0LzEvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8zMmFiMTYtOGY2ZC00MTRkLTgwY2YtMGE4NjM1OGU5Yzg0 LzEvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJR38J64y qhH/rTs0g8IGtWmgTxu6qB7LI03w5HKp2r7qUixYVoGAFITculiEliKVtnCm6dUS u5JPSVIFTSP4ohCnqNAOVaXo5h1Wo3r3K8f7eZfKc1U8yF2KsF/jQK6xZZKxWhcr PR3GT2HanCGKkXOH3ctjklJhQboXRYM5khDPFs/gcQOwtmFAI6VyJEUc286IzTvL M7Cd7yD2JWMGUXZDPPeXjJBnlDJQkNU89LhkBMNGn36xYGYoHirc3STAmpS/SqJv s3ZCj0cxYhAHOfFZK4/WEVJRnP4vRhJHnZJYBG5es/fT9t4zu3sSSMyH/bjoifoS BRRS0e2vn6fmBg== -----END CERTIFICATE-----Generated at Tue Dec 30 07:14:16 2025 by rpki-client