This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft File: SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft (raw, json) Hash identifier: NptSCpLD/0b47chg4vmzth+OBDIT9Mlm4tlUMm6dQCE= Subject key identifier: 89:A6:15:32:3F:4C:6F:D1:38:7B:39:B6:7A:C4:B8:9C:91:07:2F:50 Authority key identifier: 4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD Certificate issuer: /CN=4a54821a91b1dbdc73bdda34bced7107067964ad Certificate serial: 019B59E3A43E9A929CA7953A322FEEAEDFF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft Manifest number: 1093 Signing time: Fri 26 Dec 2025 09:00:49 +0000 Manifest this update: Fri 26 Dec 2025 09:00:49 +0000 Manifest next update: Sat 27 Dec 2025 09:00:49 +0000 Files and hashes: 1: JTPc5_QTZJxWgsLJFBAm1KUSpd0.roa (hash: ODeawNoXLkHerXTl+flqRC6XG80opVvKSVEN1ax5xro=) 2: SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl (hash: eGpmZ7WmENT0ACJu+r1sLEIXAIC687+WNZWL4EjQdw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:a4:3e:9a:92:9c:a7:95:3a:32:2f:ee:ae:df:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a54821a91b1dbdc73bdda34bced7107067964ad Validity Not Before: Dec 26 09:00:49 2025 GMT Not After : Dec 27 09:00:49 2025 GMT Subject: CN=89a615323f4c6fd1387b39b67ac4b89c91072f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e0:1a:ca:16:ec:0b:cf:83:14:1d:2b:2b:90: 0d:5d:84:27:9d:75:e0:07:47:44:0c:02:68:ea:af: 45:a9:05:41:0e:76:bc:3e:5b:60:d3:b6:e2:9f:d8: 8f:e1:ba:a4:a4:7b:41:48:7b:af:ee:2d:ef:bd:f5: 0c:51:d0:e5:79:93:3b:da:37:52:ac:d2:54:7d:1b: d3:cb:ac:0b:da:ce:d4:2c:55:11:2e:14:49:68:fe: 1d:f3:30:1e:28:58:c6:4d:d3:75:ac:90:a8:ba:52: 23:94:e5:3f:fe:36:f5:8b:7f:ef:a4:d7:33:a9:5c: cb:bd:c2:49:0f:b1:2e:c6:a0:a9:9a:17:7b:53:6c: 69:07:28:53:d6:58:6b:9e:a5:81:1e:92:24:e5:08: d4:b4:8c:15:50:a2:8c:71:18:64:62:9e:fa:a7:1a: 1f:cd:ef:89:b8:6e:1e:15:e6:89:a0:e2:0a:40:e3: fc:23:9e:e1:dc:87:e0:36:70:73:07:cf:16:8b:10: dd:5a:91:f3:ff:25:3e:a1:b3:14:71:c3:22:a5:25: a0:d3:ba:12:db:03:c7:1e:17:b5:a9:ed:ae:63:5d: 0c:bb:aa:2e:50:d5:fb:11:e4:fd:77:e8:33:6f:62: 05:6d:45:ee:e9:6e:44:b7:3b:cc:78:ba:76:67:92: 6a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A6:15:32:3F:4C:6F:D1:38:7B:39:B6:7A:C4:B8:9C:91:07:2F:50 X509v3 Authority Key Identifier: keyid:4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a7:73:c2:16:3e:48:4d:5c:07:21:2b:b7:0a:92:fe:34:f6: f4:e2:bb:cb:b4:88:7e:af:07:8a:63:44:c7:8f:01:ba:27:67: 95:3c:35:5d:65:4a:c3:3c:d0:5f:13:0e:ba:a9:b8:39:f1:f9: 51:7b:df:41:1d:29:ce:86:c8:5a:e8:b4:15:51:e5:55:af:04: 06:4c:4b:fb:b5:41:2d:09:0d:d1:80:5c:a1:76:29:57:89:b3: c9:29:e8:98:d1:03:33:62:9b:b0:26:1d:0a:b9:bc:83:bc:99: 9d:07:d0:6a:52:59:96:c5:6f:a9:e0:9e:0d:c2:8e:e6:3b:cd: 1e:4a:c1:8e:8e:46:ad:58:9b:76:76:5a:f5:d7:2e:fe:d9:41: 03:72:9c:28:49:9e:70:7b:91:11:6b:5b:b9:4f:e8:57:1f:85: d5:8c:ee:8a:0c:11:9c:a9:b7:9e:8e:2e:66:d7:5f:19:1a:f4: 8c:18:92:9a:b6:44:40:10:93:80:23:79:8c:4b:22:4f:d5:05: d0:47:be:52:2e:41:45:33:ec:74:43:0e:8f:09:b7:28:86:c9: 47:6f:92:fc:92:2c:e4:12:6d:72:e4:b2:c3:cc:9b:a5:01:80: 33:72:50:dd:dc:09:50:22:df:96:28:78:4c:16:09:7f:02:e9: bd:a1:1f:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ46Q+mpKcp5U6Mi/urt/4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNTQ4MjFhOTFiMWRiZGM3M2JkZGEzNGJjZWQ3MTA3MDY3 OTY0YWQwHhcNMjUxMjI2MDkwMDQ5WhcNMjUxMjI3MDkwMDQ5WjAzMTEwLwYDVQQD Eyg4OWE2MTUzMjNmNGM2ZmQxMzg3YjM5YjY3YWM0Yjg5YzkxMDcyZjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleAayhbsC8+DFB0rK5ANXYQnnXXg B0dEDAJo6q9FqQVBDna8Pltg07bin9iP4bqkpHtBSHuv7i3vvfUMUdDleZM72jdS rNJUfRvTy6wL2s7ULFURLhRJaP4d8zAeKFjGTdN1rJCoulIjlOU//jb1i3/vpNcz qVzLvcJJD7EuxqCpmhd7U2xpByhT1lhrnqWBHpIk5QjUtIwVUKKMcRhkYp76pxof ze+JuG4eFeaJoOIKQOP8I57h3IfgNnBzB88WixDdWpHz/yU+obMUccMipSWg07oS 2wPHHhe1qe2uY10Mu6ouUNX7EeT9d+gzb2IFbUXu6W5EtzvMeLp2Z5JqMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImmFTI/TG/ROHs5tnrEuJyRBy9QMB8GA1UdIwQY MBaAFEpUghqRsdvcc73aNLztcQcGeWStMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2xTQ0dwR3gyOXh6dmRvMHZPMXhCd1o1WkswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84ZDJlMzUtOWZlZC00ZmRmLTkwMzQt NzZhZTgxMmYwNzZjLzEvU2xTQ0dwR3gyOXh6dmRvMHZPMXhCd1o1WkswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi84ZDJlMzUtOWZlZC00ZmRmLTkwMzQtNzZhZTgxMmYwNzZj LzEvU2xTQ0dwR3gyOXh6dmRvMHZPMXhCd1o1WkswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKdzwhY+ SE1cByErtwqS/jT29OK7y7SIfq8HimNEx48BuidnlTw1XWVKwzzQXxMOuqm4OfH5 UXvfQR0pzobIWui0FVHlVa8EBkxL+7VBLQkN0YBcoXYpV4mzySnomNEDM2KbsCYd Crm8g7yZnQfQalJZlsVvqeCeDcKO5jvNHkrBjo5GrVibdnZa9dcu/tlBA3KcKEme cHuREWtbuU/oVx+F1YzuigwRnKm3no4uZtdfGRr0jBiSmrZEQBCTgCN5jEsiT9UF 0Ee+Ui5BRTPsdEMOjwm3KIbJR2+S/JIs5BJtcuSyw8ybpQGAM3JQ3dwJUCLflih4 TBYJfwLpvaEfBA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:55:33 2025 by rpki-client