This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8fc8cc-9c9b-4e87-bae5-90f01298bf93/1/SLQGxUjn5BwW-InIkAdunlhv81Q.mft File: SLQGxUjn5BwW-InIkAdunlhv81Q.mft (raw, json) Hash identifier: RkNxnX2Qb6bIpvJsGGsqNKfU2rgcP99L1Grz/Ii24UY= Subject key identifier: 82:DF:95:29:55:4A:71:2F:AC:6C:AF:F8:AC:BD:E4:64:A6:DC:D9:FF Authority key identifier: 48:B4:06:C5:48:E7:E4:1C:16:F8:89:C8:90:07:6E:9E:58:6F:F3:54 Certificate issuer: /CN=48b406c548e7e41c16f889c890076e9e586ff354 Certificate serial: 019B59E3D59D2FE9A888D272C7F9B6B5B415 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SLQGxUjn5BwW-InIkAdunlhv81Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8fc8cc-9c9b-4e87-bae5-90f01298bf93/1/SLQGxUjn5BwW-InIkAdunlhv81Q.mft Manifest number: C1 Signing time: Fri 26 Dec 2025 09:01:02 +0000 Manifest this update: Fri 26 Dec 2025 09:01:02 +0000 Manifest next update: Sat 27 Dec 2025 09:01:02 +0000 Files and hashes: 1: SLQGxUjn5BwW-InIkAdunlhv81Q.crl (hash: 4Xt4naElorD0SH/O4ljx4eUqA4qLxtGv2F5QOSS58Aw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8fc8cc-9c9b-4e87-bae5-90f01298bf93/1/SLQGxUjn5BwW-InIkAdunlhv81Q.crl rsync://rpki.ripe.net/repository/DEFAULT/01/8fc8cc-9c9b-4e87-bae5-90f01298bf93/1/SLQGxUjn5BwW-InIkAdunlhv81Q.mft rsync://rpki.ripe.net/repository/DEFAULT/SLQGxUjn5BwW-InIkAdunlhv81Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:d5:9d:2f:e9:a8:88:d2:72:c7:f9:b6:b5:b4:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48b406c548e7e41c16f889c890076e9e586ff354 Validity Not Before: Dec 26 09:01:02 2025 GMT Not After : Dec 27 09:01:02 2025 GMT Subject: CN=82df9529554a712fac6caff8acbde464a6dcd9ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6a:17:96:39:5f:3b:d0:61:e7:4d:41:08:d4: 69:27:6f:25:3b:e5:1a:6c:42:51:7b:63:e8:19:bd: 93:01:56:43:16:e7:9f:e5:81:2a:c2:23:3e:f8:74: a7:0e:f5:6b:1f:a6:90:8b:bf:53:b3:40:7c:83:8e: d4:30:bd:18:0e:d4:88:19:5a:d5:2c:77:95:0b:df: 9f:92:3e:10:82:e2:2c:1c:78:57:d5:8e:ef:f3:e6: ba:37:70:f5:31:7e:d0:11:97:5f:0f:a9:56:58:6a: fe:f6:68:80:32:96:ac:a8:9d:80:9e:e4:ac:ff:28: 8c:a3:f7:77:e2:67:bd:28:fb:74:7a:ec:3c:14:2d: 33:54:0c:a0:cc:8a:32:1a:3d:84:c4:d7:0e:68:ed: 62:4d:f7:55:6b:d7:e1:e4:f4:e4:24:84:fd:d5:6f: ab:97:a8:eb:a3:94:fc:17:18:78:9c:c3:85:70:9c: 06:57:b0:0e:23:23:91:63:1b:53:0c:31:08:60:72: 72:d6:8b:d0:98:82:af:1f:8c:49:2a:ba:8c:4c:a6: a3:e0:87:6f:16:d4:7e:00:0d:c9:bf:84:46:ab:1f: 00:fd:ca:16:9b:98:a0:b2:b3:10:2b:16:d7:72:d8: 9e:c1:fd:a7:91:17:36:d5:d9:5c:46:ba:78:96:1c: 49:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:DF:95:29:55:4A:71:2F:AC:6C:AF:F8:AC:BD:E4:64:A6:DC:D9:FF X509v3 Authority Key Identifier: keyid:48:B4:06:C5:48:E7:E4:1C:16:F8:89:C8:90:07:6E:9E:58:6F:F3:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLQGxUjn5BwW-InIkAdunlhv81Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8fc8cc-9c9b-4e87-bae5-90f01298bf93/1/SLQGxUjn5BwW-InIkAdunlhv81Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8fc8cc-9c9b-4e87-bae5-90f01298bf93/1/SLQGxUjn5BwW-InIkAdunlhv81Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:0f:a9:9c:42:77:1d:12:71:91:21:97:0a:d5:c1:be:3f:b9: 5a:cb:ae:a9:fb:3b:49:26:6b:a3:e3:c4:8b:16:9c:90:d7:7f: 5f:ee:dc:2d:f1:36:93:eb:56:7e:db:bc:aa:32:ca:7a:f1:7a: f8:7b:ab:b3:e2:8d:ae:a5:80:f1:ff:07:de:99:71:4d:05:d7: 70:dd:a3:da:37:d3:d4:76:f7:12:95:9a:80:d9:d8:82:33:8c: 71:c4:d7:0c:f3:36:9e:8e:37:b9:29:a6:cf:af:d6:40:0c:95: c8:38:b6:c6:03:fe:1a:73:d2:14:31:81:67:1d:fb:9b:ca:24: c5:37:f2:bc:1d:82:cc:8a:c7:ef:c7:7a:06:6c:55:e0:11:fb: e3:20:8a:0e:62:c7:f4:9d:a8:df:88:d4:96:1f:c6:1e:7e:b4: 21:5a:a9:6c:2a:9c:ba:76:18:74:aa:74:2e:f5:5f:43:a8:7d: e3:e6:48:28:39:ea:d7:f0:60:25:fa:05:ad:fc:73:8d:9a:90: c5:df:b1:20:6d:41:38:84:51:41:81:c6:e1:50:6c:0b:a5:b2: 3a:f3:d2:08:b5:b0:8f:4d:f9:09:4e:23:3c:bc:f7:16:c8:e0: 07:c2:d0:91:46:4d:46:c0:8c:6b:69:1f:83:92:77:6a:89:f6: 34:2e:28:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ49WdL+moiNJyx/m2tbQVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YjQwNmM1NDhlN2U0MWMxNmY4ODljODkwMDc2ZTllNTg2 ZmYzNTQwHhcNMjUxMjI2MDkwMTAyWhcNMjUxMjI3MDkwMTAyWjAzMTEwLwYDVQQD Eyg4MmRmOTUyOTU1NGE3MTJmYWM2Y2FmZjhhY2JkZTQ2NGE2ZGNkOWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2oXljlfO9Bh501BCNRpJ28lO+Ua bEJRe2PoGb2TAVZDFuef5YEqwiM++HSnDvVrH6aQi79Ts0B8g47UML0YDtSIGVrV LHeVC9+fkj4QguIsHHhX1Y7v8+a6N3D1MX7QEZdfD6lWWGr+9miAMpasqJ2AnuSs /yiMo/d34me9KPt0euw8FC0zVAygzIoyGj2ExNcOaO1iTfdVa9fh5PTkJIT91W+r l6jro5T8Fxh4nMOFcJwGV7AOIyORYxtTDDEIYHJy1ovQmIKvH4xJKrqMTKaj4Idv FtR+AA3Jv4RGqx8A/coWm5igsrMQKxbXctiewf2nkRc21dlcRrp4lhxJdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILflSlVSnEvrGyv+Ky95GSm3Nn/MB8GA1UdIwQY MBaAFEi0BsVI5+QcFviJyJAHbp5Yb/NUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0xRR3hVam41QndXLUluSWtBZHVubGh2ODFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84ZmM4Y2MtOWM5Yi00ZTg3LWJhZTUt OTBmMDEyOThiZjkzLzEvU0xRR3hVam41QndXLUluSWtBZHVubGh2ODFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84ZmM4Y2MtOWM5Yi00ZTg3LWJhZTUtOTBmMDEyOThiZjkz LzEvU0xRR3hVam41QndXLUluSWtBZHVubGh2ODFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAew+pnEJ3 HRJxkSGXCtXBvj+5Wsuuqfs7SSZro+PEixackNd/X+7cLfE2k+tWftu8qjLKevF6 +Hurs+KNrqWA8f8H3plxTQXXcN2j2jfT1Hb3EpWagNnYgjOMccTXDPM2no43uSmm z6/WQAyVyDi2xgP+GnPSFDGBZx37m8okxTfyvB2CzIrH78d6BmxV4BH74yCKDmLH 9J2o34jUlh/GHn60IVqpbCqcunYYdKp0LvVfQ6h94+ZIKDnq1/BgJfoFrfxzjZqQ xd+xIG1BOIRRQYHG4VBsC6WyOvPSCLWwj035CU4jPLz3FsjgB8LQkUZNRsCMa2kf g5J3aon2NC4oeA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:11 2025 by rpki-client