This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft File: siLLxLlfE3uN2qDj8k8FuTPMepo.mft (raw, json) Hash identifier: BWcygt0iqR/MczcIm/L7KVzDJ1RtF6FPrSJ8zWBuD+o= Subject key identifier: 0B:8C:CF:53:18:AC:74:80:66:90:0B:C1:E1:35:C5:AF:C7:C3:1C:29 Authority key identifier: B2:22:CB:C4:B9:5F:13:7B:8D:DA:A0:E3:F2:4F:05:B9:33:CC:7A:9A Certificate issuer: /CN=b222cbc4b95f137b8ddaa0e3f24f05b933cc7a9a Certificate serial: 019AF12ECCAC8B653E4E459956FE34D3C1AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/siLLxLlfE3uN2qDj8k8FuTPMepo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:02:47 +0000 Manifest this update: Sat 06 Dec 2025 01:02:47 +0000 Manifest next update: Sun 07 Dec 2025 01:02:47 +0000 Files and hashes: 1: siLLxLlfE3uN2qDj8k8FuTPMepo.crl (hash: pIPQDvEahFW+TGILB5ygVSJGh2aFKU/iMij4aJVhULs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.crl rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft rsync://rpki.ripe.net/repository/DEFAULT/siLLxLlfE3uN2qDj8k8FuTPMepo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:cc:ac:8b:65:3e:4e:45:99:56:fe:34:d3:c1:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b222cbc4b95f137b8ddaa0e3f24f05b933cc7a9a Validity Not Before: Dec 6 01:02:47 2025 GMT Not After : Dec 7 01:02:47 2025 GMT Subject: CN=0b8ccf5318ac748066900bc1e135c5afc7c31c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:22:47:01:d1:69:d1:a5:bd:45:65:4f:ae:e8: bf:bb:38:b3:69:c6:1e:bd:f7:94:a7:f4:e7:eb:81: ac:bd:a1:56:bd:5d:c3:d0:1c:bb:51:4b:33:98:f3: 8c:2e:e9:6c:39:16:ec:74:08:2b:d2:98:44:fb:49: 91:81:c1:47:85:f3:d8:11:d7:fe:37:a4:70:a1:d8: 67:81:f1:19:a4:0a:dc:1c:a3:8f:13:0d:9a:bb:0a: 26:45:b7:54:9a:b7:4a:57:9c:21:18:82:d8:63:1a: 4c:bc:da:e8:e3:43:76:e6:b5:47:be:f8:a3:04:ce: a2:7e:f1:6f:16:ed:61:c1:2e:6b:8b:b1:83:a8:60: 1f:e8:a5:61:4a:75:39:b9:bf:a7:14:6a:2d:c3:54: 5f:dd:c3:fc:f5:4b:e4:8c:f4:53:e5:3b:14:08:74: 5f:1c:5c:df:96:07:55:26:eb:a8:d8:5e:36:4e:63: 17:c5:ba:f6:04:9d:bb:db:8e:34:57:88:2c:6d:ee: c7:06:3d:10:a5:df:10:10:7a:7a:d9:97:66:45:e1: 17:92:7c:50:dc:4d:e7:3d:7b:a0:e9:31:7c:d9:19: 4b:44:97:7e:6d:7a:f0:22:eb:ec:48:86:c0:e2:23: 1e:38:6a:dd:57:9d:b0:12:18:d3:1b:73:2b:7a:cf: 4a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8C:CF:53:18:AC:74:80:66:90:0B:C1:E1:35:C5:AF:C7:C3:1C:29 X509v3 Authority Key Identifier: keyid:B2:22:CB:C4:B9:5F:13:7B:8D:DA:A0:E3:F2:4F:05:B9:33:CC:7A:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siLLxLlfE3uN2qDj8k8FuTPMepo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ef:0f:b7:e8:59:72:6b:6d:b7:d6:cc:7b:a4:c2:e6:c1:72: 3a:2e:d1:3d:6f:e3:0f:06:48:9f:21:54:71:cd:ee:1a:f4:48: 70:32:b0:0e:aa:d0:dc:9f:e0:d0:6b:33:97:72:b0:45:57:07: cd:3e:ae:95:4d:58:1d:51:9a:51:09:49:91:df:c9:ba:41:85: b6:73:a8:0e:38:91:26:ff:3b:69:b4:55:3f:91:f0:eb:4d:61: 41:62:58:b3:d4:78:df:3f:57:61:f7:d9:a0:c5:05:15:72:ea: 11:07:80:71:e9:19:9e:66:fc:63:7b:37:6c:12:dc:3d:dc:5e: 7f:02:07:b2:29:29:09:92:ca:b9:17:86:75:aa:9a:2b:fc:22: 88:c6:25:3a:63:58:d6:1b:31:1e:a9:ab:e7:e6:ba:80:6d:b5: bf:29:bd:6b:df:8b:d9:f9:7a:26:58:6b:fe:41:8a:0c:b2:ca: b9:ac:9c:52:a9:e9:f2:9a:e0:a8:c3:15:e3:d3:fe:d5:0e:1a: ad:4d:a4:41:f3:71:32:84:40:73:c3:c9:91:a1:09:87:c8:e9: 13:17:b0:b9:d7:aa:03:f8:1e:cd:5d:9a:62:7a:0c:22:52:e6: b6:91:fc:59:7d:ff:3d:03:4d:ae:51:de:6b:c5:5c:7f:26:09: 71:ad:02:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLsysi2U+TkWZVv4008GuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMjJjYmM0Yjk1ZjEzN2I4ZGRhYTBlM2YyNGYwNWI5MzNj YzdhOWEwHhcNMjUxMjA2MDEwMjQ3WhcNMjUxMjA3MDEwMjQ3WjAzMTEwLwYDVQQD EygwYjhjY2Y1MzE4YWM3NDgwNjY5MDBiYzFlMTM1YzVhZmM3YzMxYzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CJHAdFp0aW9RWVPrui/uzizacYe vfeUp/Tn64GsvaFWvV3D0By7UUszmPOMLulsORbsdAgr0phE+0mRgcFHhfPYEdf+ N6RwodhngfEZpArcHKOPEw2auwomRbdUmrdKV5whGILYYxpMvNro40N25rVHvvij BM6ifvFvFu1hwS5ri7GDqGAf6KVhSnU5ub+nFGotw1Rf3cP89UvkjPRT5TsUCHRf HFzflgdVJuuo2F42TmMXxbr2BJ272440V4gsbe7HBj0Qpd8QEHp62ZdmReEXknxQ 3E3nPXug6TF82RlLRJd+bXrwIuvsSIbA4iMeOGrdV52wEhjTG3Mres9KqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuMz1MYrHSAZpALweE1xa/HwxwpMB8GA1UdIwQY MBaAFLIiy8S5XxN7jdqg4/JPBbkzzHqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2lMTHhMbGZFM3VOMnFEajhrOEZ1VFBNZXBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84MjY5YzQtOWMwMi00Y2MyLTlhOTUt Y2YwZTc4NmExZmZkLzEvc2lMTHhMbGZFM3VOMnFEajhrOEZ1VFBNZXBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84MjY5YzQtOWMwMi00Y2MyLTlhOTUtY2YwZTc4NmExZmZk LzEvc2lMTHhMbGZFM3VOMnFEajhrOEZ1VFBNZXBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHO8Pt+hZ cmttt9bMe6TC5sFyOi7RPW/jDwZInyFUcc3uGvRIcDKwDqrQ3J/g0Gszl3KwRVcH zT6ulU1YHVGaUQlJkd/JukGFtnOoDjiRJv87abRVP5Hw601hQWJYs9R43z9XYffZ oMUFFXLqEQeAcekZnmb8Y3s3bBLcPdxefwIHsikpCZLKuReGdaqaK/wiiMYlOmNY 1hsxHqmr5+a6gG21vym9a9+L2fl6Jlhr/kGKDLLKuaycUqnp8prgqMMV49P+1Q4a rU2kQfNxMoRAc8PJkaEJh8jpExewudeqA/gezV2aYnoMIlLmtpH8WX3/PQNNrlHe a8VcfyYJca0Cxg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:08 2025 by rpki-client