This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft File: sLGxJtrAqgt3lIZADt5yVLJe6qY.mft (raw, json) Hash identifier: PnkTyVV7EzSDcOzV7oGuyfTzooZhY99CEUignbqkpiE= Subject key identifier: 7C:0A:06:8C:3F:81:43:00:13:0A:DF:D6:F8:05:0B:A7:9B:49:9D:63 Authority key identifier: B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6 Certificate issuer: /CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6 Certificate serial: 019B243F3BEA08616F7A5DEE0E969FD5A14C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft Manifest number: 170E Signing time: Mon 15 Dec 2025 23:01:22 +0000 Manifest this update: Mon 15 Dec 2025 23:01:22 +0000 Manifest next update: Tue 16 Dec 2025 23:01:22 +0000 Files and hashes: 1: sLGxJtrAqgt3lIZADt5yVLJe6qY.crl (hash: 81NJPrJzy2EEtqvRSvMRyD/I129kXdXuohvKxzW9g3E=) 2: y5aXUBKmtNndMqsBfDwB9q7N1JM.roa (hash: ZtFZGojw6I1xjiF5OKZdPGSKt7iqS59zSaAIueVvxRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3f:3b:ea:08:61:6f:7a:5d:ee:0e:96:9f:d5:a1:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6 Validity Not Before: Dec 15 23:01:22 2025 GMT Not After : Dec 16 23:01:22 2025 GMT Subject: CN=7c0a068c3f814300130adfd6f8050ba79b499d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ae:67:a6:23:da:79:d1:88:50:2d:41:bc:93: 73:a4:3e:d3:8b:e1:74:ea:11:46:30:4f:de:7e:2e: 3e:b0:4b:4e:11:94:59:26:ef:37:9a:07:b0:65:d5: 84:5f:d2:13:c2:e9:9d:71:0f:e4:c5:fe:85:26:ca: 92:89:19:cb:49:cd:fa:87:5b:6a:c0:d2:c0:4c:50: f0:05:69:c8:8b:f4:a4:17:11:3f:f4:29:62:03:9f: 02:5b:69:96:20:0a:fb:c3:ef:34:82:84:55:fb:bc: b3:6d:49:f3:bb:35:99:96:6b:09:f6:e2:e7:bb:b5: f5:26:c9:b5:b6:f5:0f:d3:8b:6d:c6:c2:b9:03:33: a3:75:6e:7f:82:d8:08:9d:f1:17:cf:fb:37:79:1e: a5:74:06:82:1b:78:b3:a0:37:36:27:9b:4d:95:4a: ee:80:fb:c2:0a:2e:d8:ec:bc:bd:2f:47:07:99:dc: cd:dd:5a:a1:1e:f3:81:5b:62:ed:fc:6b:74:9f:24: bb:44:9b:99:00:ad:8c:0b:dc:4a:97:a8:e9:be:e5: 8e:2e:b2:2a:26:0d:32:fa:72:8b:14:7a:9a:81:6b: 9c:a9:1c:31:40:52:f2:ea:cc:2e:68:96:20:84:ed: 15:84:8d:ef:0b:25:48:ec:32:8b:48:45:d9:0d:5c: 2e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:0A:06:8C:3F:81:43:00:13:0A:DF:D6:F8:05:0B:A7:9B:49:9D:63 X509v3 Authority Key Identifier: keyid:B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:c5:cb:a8:23:47:5c:1c:ee:11:51:51:f6:3f:42:7b:92:1a: 95:bc:64:89:24:55:3f:1a:50:32:f4:8b:bb:9e:a4:4b:85:c1: c8:5c:00:5f:c9:31:46:7f:f7:08:05:1f:ae:b4:28:55:12:b7: a4:44:ce:58:7b:c4:24:cb:ee:10:2e:7d:a6:79:0e:75:74:69: 24:88:51:1b:0f:01:c4:f5:e4:d0:de:23:52:ad:a2:ea:c1:41: 17:a2:aa:a4:0b:73:81:f4:3e:38:3d:ff:5e:cf:b3:bc:47:b5: 70:a2:5a:31:e5:de:3a:b3:d9:47:f1:e2:16:93:38:6c:dc:c4: 2b:48:ae:18:55:be:77:f8:f8:49:84:65:84:80:74:f4:83:c6: b5:0b:a5:0c:7c:d9:87:13:95:79:4d:1b:7e:03:3f:ac:7d:80: 4d:79:71:ee:30:8c:aa:15:f5:f6:52:d2:7b:4b:0f:b5:ce:f9: b1:d5:1e:a2:38:be:aa:ab:cc:b9:5c:95:e7:1b:aa:6a:a6:18: ee:8a:e8:18:a7:77:e4:2b:cb:e9:ef:57:64:25:eb:48:03:03: 74:5c:4f:29:1c:28:fc:b4:6b:c3:13:d3:74:95:30:76:39:b1: a9:fe:3c:c5:b4:50:9a:51:ff:df:04:7a:0a:75:86:10:5e:27: e4:9b:2a:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPzvqCGFvel3uDpaf1aFMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYjFiMTI2ZGFjMGFhMGI3Nzk0ODY0MDBlZGU3MjU0YjI1 ZWVhYTYwHhcNMjUxMjE1MjMwMTIyWhcNMjUxMjE2MjMwMTIyWjAzMTEwLwYDVQQD Eyg3YzBhMDY4YzNmODE0MzAwMTMwYWRmZDZmODA1MGJhNzliNDk5ZDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl65npiPaedGIUC1BvJNzpD7Ti+F0 6hFGME/efi4+sEtOEZRZJu83mgewZdWEX9ITwumdcQ/kxf6FJsqSiRnLSc36h1tq wNLATFDwBWnIi/SkFxE/9CliA58CW2mWIAr7w+80goRV+7yzbUnzuzWZlmsJ9uLn u7X1Jsm1tvUP04ttxsK5AzOjdW5/gtgInfEXz/s3eR6ldAaCG3izoDc2J5tNlUru gPvCCi7Y7Ly9L0cHmdzN3VqhHvOBW2Lt/Gt0nyS7RJuZAK2MC9xKl6jpvuWOLrIq Jg0y+nKLFHqagWucqRwxQFLy6swuaJYghO0VhI3vCyVI7DKLSEXZDVwulwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwKBow/gUMAEwrf1vgFC6ebSZ1jMB8GA1UdIwQY MBaAFLCxsSbawKoLd5SGQA7eclSyXuqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0xHeEp0ckFxZ3QzbElaQUR0NXlWTEplNnFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YTQ3NmEtMzQ1NS00ZTNhLThjMzMt ZmY4MjRiNDE1NjkzLzEvc0xHeEp0ckFxZ3QzbElaQUR0NXlWTEplNnFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84YTQ3NmEtMzQ1NS00ZTNhLThjMzMtZmY4MjRiNDE1Njkz LzEvc0xHeEp0ckFxZ3QzbElaQUR0NXlWTEplNnFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8XLqCNH XBzuEVFR9j9Ce5IalbxkiSRVPxpQMvSLu56kS4XByFwAX8kxRn/3CAUfrrQoVRK3 pETOWHvEJMvuEC59pnkOdXRpJIhRGw8BxPXk0N4jUq2i6sFBF6KqpAtzgfQ+OD3/ Xs+zvEe1cKJaMeXeOrPZR/HiFpM4bNzEK0iuGFW+d/j4SYRlhIB09IPGtQulDHzZ hxOVeU0bfgM/rH2ATXlx7jCMqhX19lLSe0sPtc75sdUeoji+qqvMuVyV5xuqaqYY 7oroGKd35CvL6e9XZCXrSAMDdFxPKRwo/LRrwxPTdJUwdjmxqf48xbRQmlH/3wR6 CnWGEF4n5JsqWA== -----END CERTIFICATE-----Generated at Tue Dec 16 04:40:16 2025 by rpki-client