This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft File: SLo3AWkdKSivrTobVzWib0yZz_Y.mft (raw, json) Hash identifier: HMBxgZRzrL9tSjkAsyjXqZMCSa8vdZRGLDrAU0ed1Jg= Subject key identifier: 8F:72:0B:3D:26:D6:8B:54:91:CB:AD:13:7A:FC:32:FD:8C:F6:ED:19 Authority key identifier: 48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6 Certificate issuer: /CN=48ba3701691d2928afad3a1b5735a26f4c99cff6 Certificate serial: 019B0FA5572C0464E90CE2CA4C9315B3F3AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft Manifest number: 1680 Signing time: Thu 11 Dec 2025 23:00:52 +0000 Manifest this update: Thu 11 Dec 2025 23:00:52 +0000 Manifest next update: Fri 12 Dec 2025 23:00:52 +0000 Files and hashes: 1: 2p_ZO09LakS0A7u5Qz0wGibD5fU.roa (hash: dieDhkHaU+F1D9ZZPlcY6giEpQMREkK77VG8/1P3jjc=) 2: SLo3AWkdKSivrTobVzWib0yZz_Y.crl (hash: 0fcZM2+dShJQFy8/wONg76mcJ9VwXRB2qNW5RlkIfgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:57:2c:04:64:e9:0c:e2:ca:4c:93:15:b3:f3:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48ba3701691d2928afad3a1b5735a26f4c99cff6 Validity Not Before: Dec 11 23:00:52 2025 GMT Not After : Dec 12 23:00:52 2025 GMT Subject: CN=8f720b3d26d68b5491cbad137afc32fd8cf6ed19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6f:78:d4:5e:90:07:57:f7:b6:67:2b:c0:d1: fd:9c:83:49:86:03:00:e2:b6:b6:25:39:1d:2f:b2: dd:33:8f:0c:91:af:42:f1:7b:45:ed:a9:bc:8b:05: d2:a4:79:5a:ec:55:c9:0c:93:18:ba:d4:7f:03:00: 06:e7:c7:c7:f7:32:6e:d1:10:e8:36:33:4a:c1:a9: 54:83:78:35:99:38:9d:de:54:f8:d0:f3:4c:4e:17: 77:4c:fd:a7:44:34:de:b5:8d:de:d7:76:2a:1c:0b: 39:57:74:e8:16:00:2e:0a:9e:46:cb:9e:30:d2:95: 0f:fa:b6:56:4c:22:c5:d1:38:06:c8:e2:7b:21:e1: 13:af:ef:9f:36:12:58:94:63:5a:fb:92:5f:4c:f4: cb:c3:41:23:c1:4f:fc:f4:c7:f4:c4:dd:f4:58:1c: a8:06:cf:ed:e2:51:87:46:2d:0f:c5:f3:31:62:ac: 03:96:5f:22:2f:a8:e4:3d:0c:dc:d0:f7:4b:3f:f1: 6e:4b:29:0a:c3:29:a4:63:7e:63:65:57:aa:6a:6a: 58:13:96:d3:fd:e8:b1:5b:7d:7a:01:d5:cc:5d:72: 7e:0c:c6:55:0a:ed:a9:3d:2e:f1:f6:96:b4:a5:66: 95:02:4a:bd:52:e1:07:f9:47:61:23:5b:cd:ab:d3: 0f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:72:0B:3D:26:D6:8B:54:91:CB:AD:13:7A:FC:32:FD:8C:F6:ED:19 X509v3 Authority Key Identifier: keyid:48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:8a:db:ec:df:44:1d:6e:5c:11:24:9c:2e:3c:66:9f:21:96: 2c:85:b4:35:79:8d:6d:93:07:7e:f6:d3:a0:ca:b1:64:be:2b: 7c:df:39:62:90:7e:1c:24:9e:6a:ee:e9:56:c9:e6:9e:68:89: 17:93:21:71:ae:68:25:58:61:74:ae:ae:7e:8e:71:8a:d2:d9: d9:53:d7:0b:26:b9:32:02:89:ea:e2:fb:96:58:40:b6:1d:16: c3:b7:d8:fd:20:0c:25:e9:6b:19:22:18:16:a4:17:7c:07:db: e7:e9:40:97:8f:d6:c4:98:99:7b:c8:24:46:8b:73:ab:95:ec: 9b:e3:19:21:9f:05:25:48:b2:d2:09:f4:e8:fc:a4:bc:59:2e: fc:ee:bf:8d:36:9c:e0:eb:64:f0:7e:23:48:e9:aa:06:5e:a1: 89:c6:75:74:72:93:17:01:00:70:d6:e7:29:b0:8a:16:e0:de: ab:e5:b4:12:82:3c:24:fa:8b:fe:44:78:3e:25:61:d4:a4:a6: 03:b2:5f:47:38:6b:56:ca:01:eb:e6:77:d2:b1:01:24:83:53: cb:fe:7e:a2:b1:ff:62:2b:7a:b9:6a:04:cc:46:7d:26:93:6a: 44:66:aa:11:84:a6:ce:a7:3b:b0:4f:34:84:e7:7f:60:73:91: a6:bb:b5:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpVcsBGTpDOLKTJMVs/OtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YmEzNzAxNjkxZDI5MjhhZmFkM2ExYjU3MzVhMjZmNGM5 OWNmZjYwHhcNMjUxMjExMjMwMDUyWhcNMjUxMjEyMjMwMDUyWjAzMTEwLwYDVQQD Eyg4ZjcyMGIzZDI2ZDY4YjU0OTFjYmFkMTM3YWZjMzJmZDhjZjZlZDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW941F6QB1f3tmcrwNH9nINJhgMA 4ra2JTkdL7LdM48Mka9C8XtF7am8iwXSpHla7FXJDJMYutR/AwAG58fH9zJu0RDo NjNKwalUg3g1mTid3lT40PNMThd3TP2nRDTetY3e13YqHAs5V3ToFgAuCp5Gy54w 0pUP+rZWTCLF0TgGyOJ7IeETr++fNhJYlGNa+5JfTPTLw0EjwU/89Mf0xN30WByo Bs/t4lGHRi0PxfMxYqwDll8iL6jkPQzc0PdLP/FuSykKwymkY35jZVeqampYE5bT /eixW316AdXMXXJ+DMZVCu2pPS7x9pa0pWaVAkq9UuEH+UdhI1vNq9MPkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9yCz0m1otUkcutE3r8Mv2M9u0ZMB8GA1UdIwQY MBaAFEi6NwFpHSkor606G1c1om9Mmc/2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83YTg3ODEtZTM2My00NmU0LTk3ZWQt ZTNlODE1MWE4NzYwLzEvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83YTg3ODEtZTM2My00NmU0LTk3ZWQtZTNlODE1MWE4NzYw LzEvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4rb7N9E HW5cESScLjxmnyGWLIW0NXmNbZMHfvbToMqxZL4rfN85YpB+HCSeau7pVsnmnmiJ F5Mhca5oJVhhdK6ufo5xitLZ2VPXCya5MgKJ6uL7llhAth0Ww7fY/SAMJelrGSIY FqQXfAfb5+lAl4/WxJiZe8gkRotzq5Xsm+MZIZ8FJUiy0gn06PykvFku/O6/jTac 4Otk8H4jSOmqBl6hicZ1dHKTFwEAcNbnKbCKFuDeq+W0EoI8JPqL/kR4PiVh1KSm A7JfRzhrVsoB6+Z30rEBJINTy/5+orH/Yit6uWoEzEZ9JpNqRGaqEYSmzqc7sE80 hOd/YHORpru1Sw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:16:06 2025 by rpki-client