This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft File: slpaQ70jhPiS0mXlWLRBHosjK1U.mft (raw, json) Hash identifier: lkFwI9DWPNzJ4KAfFZcv9AYJz4he6cMVfaPcX0z1/OA= Subject key identifier: 39:93:F3:56:0B:AF:CE:5F:43:DC:2A:CC:28:E7:48:E7:E4:8A:C5:28 Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55 Certificate issuer: /CN=b25a5a43bd2384f892d265e558b4411e8b232b55 Certificate serial: 019B232BD9B87BAB2A70685A209D557D2CB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft Manifest number: 177C Signing time: Mon 15 Dec 2025 18:00:34 +0000 Manifest this update: Mon 15 Dec 2025 18:00:34 +0000 Manifest next update: Tue 16 Dec 2025 18:00:34 +0000 Files and hashes: 1: 1-yGyAb5aLCteBw1IK7px8umPM0E.roa (hash: sbk/bLa9eBvitwUvY7P4OBh7ripskQi0SoXdYbLT94o=) 2: slpaQ70jhPiS0mXlWLRBHosjK1U.crl (hash: zSyC2inan1qeyUa8OzELc1d1DAnFOk4wq9jHRnl274w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:2b:d9:b8:7b:ab:2a:70:68:5a:20:9d:55:7d:2c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55 Validity Not Before: Dec 15 18:00:34 2025 GMT Not After : Dec 16 18:00:34 2025 GMT Subject: CN=3993f3560bafce5f43dc2acc28e748e7e48ac528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d3:11:23:32:b2:a9:94:cb:ce:38:96:f2:fe: af:dc:17:e6:2f:fc:a5:30:a7:99:8d:87:1c:3a:47: eb:c8:d8:bf:58:cd:42:c0:c3:68:72:ec:9f:ea:d8: 38:0f:c3:7c:8a:55:34:35:ca:cd:8a:8b:89:7f:f4: fc:00:0d:df:5a:db:48:fd:b7:eb:a9:5d:0f:0b:ff: 3f:a6:74:d8:fa:90:4b:3a:ae:c2:42:18:0c:70:88: 62:9d:9a:55:05:3a:1a:a9:86:02:24:9a:4c:ee:c4: b7:a9:21:ea:91:c5:a0:8a:36:1e:16:13:6e:44:dc: 0e:2a:c3:8d:1e:37:ac:b8:2f:7b:5c:a7:49:cb:6f: f3:bf:05:e3:91:21:18:23:23:f6:08:5c:c2:71:47: 3d:5c:88:43:b4:29:e1:ed:b7:00:8d:4b:c6:8b:ce: 59:06:54:2b:17:84:d2:7f:7e:37:2d:d5:99:aa:3b: b2:48:5e:a8:a3:da:fd:ba:e0:2e:eb:63:94:18:24: 6d:61:12:d1:0a:a4:67:ab:2e:2d:bd:ad:23:e2:3e: 23:41:57:0f:e0:27:ed:74:d4:e0:f2:23:87:7e:f4: 83:0e:8b:01:e2:a3:5d:50:8e:80:57:67:6e:9e:1b: 09:c9:33:b5:48:12:e7:7a:d2:46:7f:87:fa:d5:86: 4a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:93:F3:56:0B:AF:CE:5F:43:DC:2A:CC:28:E7:48:E7:E4:8A:C5:28 X509v3 Authority Key Identifier: keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:75:55:8e:ed:8f:ae:cb:15:4f:69:99:2b:53:ea:69:76:b1: 6a:1a:60:9d:e3:58:99:8d:6d:b3:e6:5c:c4:47:80:fd:02:d9: 6f:93:62:ba:91:8c:5c:1a:f1:3a:57:02:ce:36:68:73:cc:2d: 69:4b:38:05:cc:e3:99:12:ed:ce:22:86:a4:21:70:d6:28:4c: 4b:03:6a:0c:ef:ab:bb:ef:59:66:ce:45:67:9b:75:cd:11:ac: 85:03:6a:d3:7d:92:37:69:4a:76:2c:ae:bc:04:65:6a:2f:ad: 94:80:81:1c:83:25:db:61:3e:ca:38:bd:83:b2:39:d4:a6:0e: ed:13:4b:9a:57:36:1b:58:3a:df:18:5f:bb:0d:90:94:c8:52: 39:54:82:77:73:92:d3:55:6a:08:e5:7c:f3:a7:7c:12:ca:ad: 9f:d6:f4:fe:bc:6c:be:6c:0f:b3:25:59:e7:cb:f9:bf:2f:2d: 69:48:8c:b8:10:40:c7:78:14:8c:39:37:27:6f:32:d3:13:5b: 26:44:bb:bb:17:c9:a9:e3:45:bb:30:b8:46:c2:9a:fc:31:b4: 20:df:97:4b:d8:fb:6e:1b:03:5e:9e:c7:99:c6:03:6e:31:17: 79:17:c4:5c:5b:bc:0b:be:99:0f:5e:57:9f:92:f7:d2:c7:a9: 13:15:d0:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjK9m4e6sqcGhaIJ1VfSy3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNWE1YTQzYmQyMzg0Zjg5MmQyNjVlNTU4YjQ0MTFlOGIy MzJiNTUwHhcNMjUxMjE1MTgwMDM0WhcNMjUxMjE2MTgwMDM0WjAzMTEwLwYDVQQD EygzOTkzZjM1NjBiYWZjZTVmNDNkYzJhY2MyOGU3NDhlN2U0OGFjNTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdMRIzKyqZTLzjiW8v6v3BfmL/yl MKeZjYccOkfryNi/WM1CwMNocuyf6tg4D8N8ilU0NcrNiouJf/T8AA3fWttI/bfr qV0PC/8/pnTY+pBLOq7CQhgMcIhinZpVBToaqYYCJJpM7sS3qSHqkcWgijYeFhNu RNwOKsONHjesuC97XKdJy2/zvwXjkSEYIyP2CFzCcUc9XIhDtCnh7bcAjUvGi85Z BlQrF4TSf343LdWZqjuySF6oo9r9uuAu62OUGCRtYRLRCqRnqy4tva0j4j4jQVcP 4CftdNTg8iOHfvSDDosB4qNdUI6AV2dunhsJyTO1SBLnetJGf4f61YZKkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmT81YLr85fQ9wqzCjnSOfkisUoMB8GA1UdIwQY MBaAFLJaWkO9I4T4ktJl5Vi0QR6LIytVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS80ZGY5NjktNTdhNi00NWY3LTgwODIt NWViZGU4YjhjZTFkLzEvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS80ZGY5NjktNTdhNi00NWY3LTgwODItNWViZGU4YjhjZTFk LzEvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHVVju2P rssVT2mZK1PqaXaxahpgneNYmY1ts+ZcxEeA/QLZb5NiupGMXBrxOlcCzjZoc8wt aUs4BczjmRLtziKGpCFw1ihMSwNqDO+ru+9ZZs5FZ5t1zRGshQNq032SN2lKdiyu vARlai+tlICBHIMl22E+yji9g7I51KYO7RNLmlc2G1g63xhfuw2QlMhSOVSCd3OS 01VqCOV886d8Esqtn9b0/rxsvmwPsyVZ58v5vy8taUiMuBBAx3gUjDk3J28y0xNb JkS7uxfJqeNFuzC4RsKa/DG0IN+XS9j7bhsDXp7HmcYDbjEXeRfEXFu8C76ZD15X n5L30sepExXQmQ== -----END CERTIFICATE-----Generated at Tue Dec 16 00:48:28 2025 by rpki-client