This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft File: sL0oE0WvbNVBVNTP908ZWjiP_8E.mft (raw, json) Hash identifier: 4BVFBt+EFAgNH7j6eyD0lFx+HJmRO24j57XRrTY0rKs= Subject key identifier: 7E:95:3B:F9:EB:FF:09:BA:F6:BA:5F:45:C9:71:D8:24:24:D1:DF:AE Authority key identifier: B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1 Certificate issuer: /CN=b0bd281345af6cd54154d4cff74f195a388fffc1 Certificate serial: 019B1C4E1ED0134382B7F7F1E4BA10CFEAFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft Manifest number: 1779 Signing time: Sun 14 Dec 2025 10:00:40 +0000 Manifest this update: Sun 14 Dec 2025 10:00:40 +0000 Manifest next update: Mon 15 Dec 2025 10:00:40 +0000 Files and hashes: 1: WQbKsA3j9plFxqexMQZCCTZtrbU.roa (hash: NWTJ5dr27/rFdV1pDzF/Ey/hAby6fAYx1MwHmB4Vn1s=) 2: sL0oE0WvbNVBVNTP908ZWjiP_8E.crl (hash: ppDuHJSHgOzUtsSCTjI9EO1e5pOQ0E0lCMT2lx57haQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:4e:1e:d0:13:43:82:b7:f7:f1:e4:ba:10:cf:ea:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0bd281345af6cd54154d4cff74f195a388fffc1 Validity Not Before: Dec 14 10:00:40 2025 GMT Not After : Dec 15 10:00:40 2025 GMT Subject: CN=7e953bf9ebff09baf6ba5f45c971d82424d1dfae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:28:1a:77:e1:98:67:f6:1b:21:dc:e0:ee:20: 8d:35:c2:e6:59:3f:c0:aa:00:15:da:97:5f:d6:70: f2:b4:18:04:81:3f:85:09:ff:32:e1:c2:9b:f9:7e: 4d:19:03:41:43:5e:4a:b7:7a:99:bf:6f:cc:70:e9: a3:e2:97:02:f1:43:51:d4:55:7e:16:9b:76:16:5c: 52:2d:fe:1e:e5:ec:5d:33:6c:9c:c2:5e:6b:3f:34: 0b:52:61:e8:f9:e9:47:26:3b:a8:bf:b9:1f:82:15: ac:81:f2:bf:e4:a2:5e:22:fb:97:51:08:0d:99:2d: 99:e1:be:6d:b6:63:fc:11:c9:79:9e:42:41:e6:11: 1c:21:fc:1d:a6:30:5a:0c:25:4b:83:99:ba:9c:8a: d6:e0:33:a4:fa:8b:d5:e4:0f:28:bd:96:66:c4:a6: ba:03:18:78:39:f6:67:90:2a:46:ec:33:3e:79:06: d0:86:b4:02:bd:0e:2e:aa:a8:9f:28:b8:34:f2:28: f3:5b:95:b1:78:27:61:13:1e:e7:66:cc:6c:c4:62: b6:0f:82:37:52:a8:7d:d2:1a:fb:7f:99:0d:dd:2e: 99:da:7f:66:66:36:6d:75:c5:21:02:fc:f6:0c:01: 08:43:e5:dd:1d:64:f8:56:90:92:59:ec:99:57:c7: cd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:95:3B:F9:EB:FF:09:BA:F6:BA:5F:45:C9:71:D8:24:24:D1:DF:AE X509v3 Authority Key Identifier: keyid:B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:65:ce:1f:d5:83:57:a0:24:b1:05:57:09:de:df:6d:8f:da: 79:d5:4b:20:0b:2c:b8:0b:1e:74:c1:82:5c:cf:65:6c:0c:58: 75:14:71:09:e1:b2:2e:3b:d7:a9:d6:83:ef:f8:83:a0:23:8a: 95:39:6d:d7:53:7d:d3:b4:3c:92:25:62:20:1f:16:7b:dc:38: dc:d9:40:f3:d6:04:2a:9b:ac:40:01:d2:9e:36:e3:16:5f:c7: ce:de:9c:76:d2:57:12:5c:fc:88:1a:50:60:d6:bb:fc:18:95: f7:6d:8e:5d:a9:33:da:9c:e0:84:4e:81:1c:f8:1a:4e:43:94: 9d:5c:00:59:62:10:d8:26:2a:b3:e7:46:11:87:c7:86:c0:76: 23:70:d2:d1:c0:ba:cd:ab:bb:e5:4f:bd:f6:16:4c:52:2b:95: ba:25:81:73:d6:48:36:19:7a:b5:1c:7d:8a:38:cf:6c:aa:49: a4:11:42:f5:e5:63:12:ad:f2:1e:81:3f:b7:98:e2:5f:03:1e: 32:2c:55:fa:b2:dd:42:2f:0d:0c:fc:8c:85:4b:f8:a6:3d:4b: 46:c1:d1:ab:3e:58:40:0e:7a:31:9f:02:43:68:8b:87:7e:5a: ed:41:d5:c3:70:42:f8:42:5d:33:6a:f3:26:9f:16:a9:77:cd: 6a:c2:81:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscTh7QE0OCt/fx5LoQz+r+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYmQyODEzNDVhZjZjZDU0MTU0ZDRjZmY3NGYxOTVhMzg4 ZmZmYzEwHhcNMjUxMjE0MTAwMDQwWhcNMjUxMjE1MTAwMDQwWjAzMTEwLwYDVQQD Eyg3ZTk1M2JmOWViZmYwOWJhZjZiYTVmNDVjOTcxZDgyNDI0ZDFkZmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Sgad+GYZ/YbIdzg7iCNNcLmWT/A qgAV2pdf1nDytBgEgT+FCf8y4cKb+X5NGQNBQ15Kt3qZv2/McOmj4pcC8UNR1FV+ Fpt2FlxSLf4e5exdM2ycwl5rPzQLUmHo+elHJjuov7kfghWsgfK/5KJeIvuXUQgN mS2Z4b5ttmP8Ecl5nkJB5hEcIfwdpjBaDCVLg5m6nIrW4DOk+ovV5A8ovZZmxKa6 Axh4OfZnkCpG7DM+eQbQhrQCvQ4uqqifKLg08ijzW5WxeCdhEx7nZsxsxGK2D4I3 Uqh90hr7f5kN3S6Z2n9mZjZtdcUhAvz2DAEIQ+XdHWT4VpCSWeyZV8fNbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6VO/nr/wm69rpfRclx2CQk0d+uMB8GA1UdIwQY MBaAFLC9KBNFr2zVQVTUz/dPGVo4j//BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0wwb0UwV3ZiTlZCVk5UUDkwOFpXamlQXzhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mNWZkZWItM2ExNC00YTllLTg4MTUt ZTU2YjY5MGZkMzBlLzEvc0wwb0UwV3ZiTlZCVk5UUDkwOFpXamlQXzhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9mNWZkZWItM2ExNC00YTllLTg4MTUtZTU2YjY5MGZkMzBl LzEvc0wwb0UwV3ZiTlZCVk5UUDkwOFpXamlQXzhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2XOH9WD V6AksQVXCd7fbY/aedVLIAssuAsedMGCXM9lbAxYdRRxCeGyLjvXqdaD7/iDoCOK lTlt11N907Q8kiViIB8We9w43NlA89YEKpusQAHSnjbjFl/Hzt6cdtJXElz8iBpQ YNa7/BiV922OXakz2pzghE6BHPgaTkOUnVwAWWIQ2CYqs+dGEYfHhsB2I3DS0cC6 zau75U+99hZMUiuVuiWBc9ZINhl6tRx9ijjPbKpJpBFC9eVjEq3yHoE/t5jiXwMe MixV+rLdQi8NDPyMhUv4pj1LRsHRqz5YQA56MZ8CQ2iLh35a7UHVw3BC+EJdM2rz Jp8WqXfNasKBuQ== -----END CERTIFICATE-----Generated at Sun Dec 14 11:50:31 2025 by rpki-client