This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft File: SLQt9x-KKZb70xXQqmF63zQ9WwY.mft (raw, json) Hash identifier: AmWwA0oo2rU3P8PSTV6jEwa0l1vN+qN9w905MOROPFw= Subject key identifier: B7:8F:1A:69:32:FF:DF:57:23:A0:14:A1:A0:60:90:84:A8:D6:3B:25 Authority key identifier: 48:B4:2D:F7:1F:8A:29:96:FB:D3:15:D0:AA:61:7A:DF:34:3D:5B:06 Certificate issuer: /CN=48b42df71f8a2996fbd315d0aa617adf343d5b06 Certificate serial: 019B46262E077B1FDFB66AC6F4F0AD31B34E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft Manifest number: 04FE Signing time: Mon 22 Dec 2025 13:01:05 +0000 Manifest this update: Mon 22 Dec 2025 13:01:05 +0000 Manifest next update: Tue 23 Dec 2025 13:01:05 +0000 Files and hashes: 1: SLQt9x-KKZb70xXQqmF63zQ9WwY.crl (hash: 2mr8UcUnOVxONfsl7AzizcAdVSWAi/X3uM0YJiW7Mso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:2e:07:7b:1f:df:b6:6a:c6:f4:f0:ad:31:b3:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48b42df71f8a2996fbd315d0aa617adf343d5b06 Validity Not Before: Dec 22 13:01:05 2025 GMT Not After : Dec 23 13:01:05 2025 GMT Subject: CN=b78f1a6932ffdf5723a014a1a0609084a8d63b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:57:1b:e7:29:7a:28:a9:57:aa:58:a7:6c:c7: 93:03:f5:1a:c2:65:92:54:14:10:c6:08:a3:50:ac: 38:08:7a:35:07:16:b8:21:04:b3:02:39:ed:b9:bb: 80:2b:b5:58:bc:ef:bf:db:ff:48:ae:65:23:6f:0c: 94:c7:8c:f2:a1:ea:de:0d:99:ef:71:2a:f7:dc:2d: af:2d:fc:98:6d:b3:52:05:96:53:e3:eb:67:ef:d0: ed:83:85:82:4f:b9:c4:1f:3e:ea:8e:02:07:34:28: 7a:48:41:af:7c:c7:ba:69:ea:90:6d:1e:28:96:42: dc:bd:4f:d0:7b:06:65:88:49:dc:f5:1a:c0:2e:27: ba:c4:a1:e7:a7:e1:3f:75:05:5a:70:16:bb:b4:8e: 9f:72:85:c9:3d:7c:30:08:3b:ff:4e:5b:37:23:e1: 4c:98:90:f7:3d:29:85:9f:e2:00:c2:ff:2d:e3:26: 02:0f:f4:91:cb:a6:d7:10:c1:6e:60:f1:7d:3f:79: c0:c2:41:c3:44:81:63:e4:72:8a:48:20:04:af:1e: 47:df:f5:35:ec:f5:ba:70:0d:ef:7c:3a:43:86:b4: 2d:2b:96:db:e4:b9:97:b4:8a:11:c0:1a:26:df:04: 29:98:ee:45:bf:ee:a8:56:1f:87:2b:ea:41:1a:45: 33:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8F:1A:69:32:FF:DF:57:23:A0:14:A1:A0:60:90:84:A8:D6:3B:25 X509v3 Authority Key Identifier: keyid:48:B4:2D:F7:1F:8A:29:96:FB:D3:15:D0:AA:61:7A:DF:34:3D:5B:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:27:4b:d4:df:1a:19:e9:60:82:91:3c:36:c7:60:ee:70:5a: 14:40:1f:ab:2c:31:77:35:80:2a:42:76:85:15:31:39:d8:ca: 66:0b:8d:95:ea:a1:b2:77:f5:7b:a7:31:60:a4:7a:08:3c:79: 42:3d:72:d0:f9:a3:f0:8b:7f:dc:12:5c:40:79:d3:4f:1f:5a: 80:09:f9:a1:a5:eb:6d:1a:aa:1b:48:f6:86:3b:5c:ba:a1:bf: 39:4e:14:2c:12:5a:81:72:7b:51:07:99:1c:66:a2:c0:aa:b7: 49:10:49:db:d4:b6:f8:5c:4a:a5:e3:c5:fc:22:97:2b:ed:24: 1b:c2:8c:6d:2c:ae:df:74:ec:ea:b5:40:9e:9e:91:ed:e6:bb: d1:1d:6b:eb:a4:77:50:12:ad:43:0f:6d:50:4d:63:a4:2a:16: b7:9e:e5:f0:bc:af:04:59:3c:e0:64:1f:98:91:fb:16:e7:bc: dc:77:50:49:c9:b5:13:a2:07:70:2e:42:de:09:b5:a2:7b:3d: 5a:1a:77:b8:e4:97:2a:4d:d7:22:55:c7:16:6d:bb:2d:da:14: 7a:ad:ae:42:be:6d:d1:d3:c5:72:d0:3b:70:6e:80:d0:9f:81: 35:37:50:db:7a:40:1f:5b:86:ce:b0:a4:d1:90:84:9b:25:a3: 50:71:52:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJi4Hex/ftmrG9PCtMbNOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YjQyZGY3MWY4YTI5OTZmYmQzMTVkMGFhNjE3YWRmMzQz ZDViMDYwHhcNMjUxMjIyMTMwMTA1WhcNMjUxMjIzMTMwMTA1WjAzMTEwLwYDVQQD EyhiNzhmMWE2OTMyZmZkZjU3MjNhMDE0YTFhMDYwOTA4NGE4ZDYzYjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFcb5yl6KKlXqlinbMeTA/UawmWS VBQQxgijUKw4CHo1Bxa4IQSzAjntubuAK7VYvO+/2/9IrmUjbwyUx4zyoereDZnv cSr33C2vLfyYbbNSBZZT4+tn79Dtg4WCT7nEHz7qjgIHNCh6SEGvfMe6aeqQbR4o lkLcvU/QewZliEnc9RrALie6xKHnp+E/dQVacBa7tI6fcoXJPXwwCDv/Tls3I+FM mJD3PSmFn+IAwv8t4yYCD/SRy6bXEMFuYPF9P3nAwkHDRIFj5HKKSCAErx5H3/U1 7PW6cA3vfDpDhrQtK5bb5LmXtIoRwBom3wQpmO5Fv+6oVh+HK+pBGkUzwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLePGmky/99XI6AUoaBgkISo1jslMB8GA1UdIwQY MBaAFEi0LfcfiimW+9MV0Kphet80PVsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0xRdDl4LUtLWmI3MHhYUXFtRjYzelE5V3dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83NTQwOTUtNTU4Mi00MjhhLTliMTEt YThiZTRmYjAwMTIxLzEvU0xRdDl4LUtLWmI3MHhYUXFtRjYzelE5V3dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS83NTQwOTUtNTU4Mi00MjhhLTliMTEtYThiZTRmYjAwMTIx LzEvU0xRdDl4LUtLWmI3MHhYUXFtRjYzelE5V3dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCdL1N8a GelggpE8Nsdg7nBaFEAfqywxdzWAKkJ2hRUxOdjKZguNleqhsnf1e6cxYKR6CDx5 Qj1y0Pmj8It/3BJcQHnTTx9agAn5oaXrbRqqG0j2hjtcuqG/OU4ULBJagXJ7UQeZ HGaiwKq3SRBJ29S2+FxKpePF/CKXK+0kG8KMbSyu33Ts6rVAnp6R7ea70R1r66R3 UBKtQw9tUE1jpCoWt57l8LyvBFk84GQfmJH7Fue83HdQScm1E6IHcC5C3gm1ons9 Whp3uOSXKk3XIlXHFm27LdoUeq2uQr5t0dPFctA7cG6A0J+BNTdQ23pAH1uGzrCk 0ZCEmyWjUHFSOQ== -----END CERTIFICATE-----Generated at Mon Dec 22 20:48:14 2025 by rpki-client