This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8fc8cc-9c9b-4e87-bae5-90f01298bf93/1/SLQGxUjn5BwW-InIkAdunlhv81Q.mft File: SLQGxUjn5BwW-InIkAdunlhv81Q.mft (raw, json) Hash identifier: A7+D1JCjU05r/p+nxLxYfScPIjmnobI0WmxvK9wLx5k= Subject key identifier: D7:88:1F:DA:7C:E1:B9:27:C3:F3:50:1D:96:63:19:54:C5:1F:9C:1A Authority key identifier: 48:B4:06:C5:48:E7:E4:1C:16:F8:89:C8:90:07:6E:9E:58:6F:F3:54 Certificate issuer: /CN=48b406c548e7e41c16f889c890076e9e586ff354 Certificate serial: 019AF19B2B21C4666AD3439DEE37F40155F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SLQGxUjn5BwW-InIkAdunlhv81Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8fc8cc-9c9b-4e87-bae5-90f01298bf93/1/SLQGxUjn5BwW-InIkAdunlhv81Q.mft Manifest number: 8B Signing time: Sat 06 Dec 2025 03:01:09 +0000 Manifest this update: Sat 06 Dec 2025 03:01:09 +0000 Manifest next update: Sun 07 Dec 2025 03:01:09 +0000 Files and hashes: 1: SLQGxUjn5BwW-InIkAdunlhv81Q.crl (hash: VYMLEL6xh8+wDJv0yMGK/NGAulnc4Tigg3lKE7sRZCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8fc8cc-9c9b-4e87-bae5-90f01298bf93/1/SLQGxUjn5BwW-InIkAdunlhv81Q.crl rsync://rpki.ripe.net/repository/DEFAULT/01/8fc8cc-9c9b-4e87-bae5-90f01298bf93/1/SLQGxUjn5BwW-InIkAdunlhv81Q.mft rsync://rpki.ripe.net/repository/DEFAULT/SLQGxUjn5BwW-InIkAdunlhv81Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:2b:21:c4:66:6a:d3:43:9d:ee:37:f4:01:55:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48b406c548e7e41c16f889c890076e9e586ff354 Validity Not Before: Dec 6 03:01:09 2025 GMT Not After : Dec 7 03:01:09 2025 GMT Subject: CN=d7881fda7ce1b927c3f3501d96631954c51f9c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cf:55:46:40:69:92:66:5d:bc:99:de:3f:e0: 4a:ef:b4:92:44:25:15:76:5f:74:fa:14:35:1c:84: f6:88:9e:22:09:ae:ff:cb:dd:70:09:5f:79:25:da: f7:81:be:fd:8c:d2:f6:7b:e4:6a:b5:21:af:25:b5: b9:25:4d:0c:5c:73:60:bb:6d:9b:08:e5:4f:db:3a: 0c:d5:0d:68:d2:e7:49:b3:eb:77:92:32:96:1f:ec: 64:0c:f8:24:62:f9:1f:9c:65:76:df:a9:47:f9:93: 05:4a:72:f5:6b:bf:a5:5e:d4:57:32:65:af:36:40: 36:09:e5:ae:db:4a:ca:f2:eb:db:0a:1d:ee:34:33: 7e:46:9d:4d:18:6e:c8:51:3c:6a:89:45:cb:c0:3c: f9:f2:25:33:86:e7:f6:2d:57:a9:39:24:80:2a:31: c6:26:c9:0b:aa:73:7e:23:ee:7c:7b:20:ab:c6:29: 0e:80:1e:b8:2e:d4:83:42:99:df:8c:f7:81:8f:47: ea:64:f8:37:c0:8d:e2:f2:fc:b1:63:3c:0a:ea:2e: 45:72:cd:1b:d6:70:0a:c7:26:db:21:40:58:a0:63: 2a:86:df:8d:57:48:5e:6f:b6:6a:38:f6:8d:2c:bc: d2:2f:9c:42:fb:98:18:41:0b:11:59:14:fc:6e:67: d6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:88:1F:DA:7C:E1:B9:27:C3:F3:50:1D:96:63:19:54:C5:1F:9C:1A X509v3 Authority Key Identifier: keyid:48:B4:06:C5:48:E7:E4:1C:16:F8:89:C8:90:07:6E:9E:58:6F:F3:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLQGxUjn5BwW-InIkAdunlhv81Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8fc8cc-9c9b-4e87-bae5-90f01298bf93/1/SLQGxUjn5BwW-InIkAdunlhv81Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8fc8cc-9c9b-4e87-bae5-90f01298bf93/1/SLQGxUjn5BwW-InIkAdunlhv81Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:96:84:85:09:ec:13:37:e8:33:9b:bf:25:0c:07:f0:25:6c: d5:21:8c:c1:db:fb:bc:59:ec:45:ea:76:3c:2c:64:9a:6f:cf: 38:25:41:c7:be:e0:6c:e0:4a:8f:a1:80:87:dd:1d:e0:70:0f: 1d:b8:c1:24:f3:db:f8:53:5f:13:5e:d0:41:32:98:dd:79:73: 2a:99:74:d4:c9:28:58:d3:d4:6a:39:cb:03:49:fc:d3:13:1b: b0:cb:c0:27:3f:35:7b:93:f8:ee:77:32:e3:fb:70:94:ae:f9: 6a:4a:8a:c8:38:91:69:69:be:87:f3:7a:44:a9:ab:1b:d4:f8: 6c:d7:b9:0b:ea:e2:95:8d:20:a2:17:4c:71:be:ab:14:d1:47: c5:dc:c3:86:80:e9:d0:a4:d4:e0:8a:12:d2:6c:0d:af:27:6d: 2c:6d:5b:ba:de:bb:69:58:c5:66:5d:35:2d:70:46:fc:7f:5e: be:79:52:fe:83:c4:03:f8:82:e9:73:49:09:f3:ba:cb:fc:30: 49:5a:f8:d9:e3:86:87:93:1c:5e:94:a3:46:0d:a1:dd:c5:f2: 0f:aa:e2:c8:c0:03:c6:9c:db:5a:df:cb:14:35:e1:4b:54:13: 91:3f:25:f9:5f:fb:62:f5:c0:0b:f7:b0:9c:4e:dc:4b:84:66: 2d:dc:bb:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyshxGZq00Od7jf0AVXzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YjQwNmM1NDhlN2U0MWMxNmY4ODljODkwMDc2ZTllNTg2 ZmYzNTQwHhcNMjUxMjA2MDMwMTA5WhcNMjUxMjA3MDMwMTA5WjAzMTEwLwYDVQQD EyhkNzg4MWZkYTdjZTFiOTI3YzNmMzUwMWQ5NjYzMTk1NGM1MWY5YzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0M9VRkBpkmZdvJneP+BK77SSRCUV dl90+hQ1HIT2iJ4iCa7/y91wCV95Jdr3gb79jNL2e+RqtSGvJbW5JU0MXHNgu22b COVP2zoM1Q1o0udJs+t3kjKWH+xkDPgkYvkfnGV236lH+ZMFSnL1a7+lXtRXMmWv NkA2CeWu20rK8uvbCh3uNDN+Rp1NGG7IUTxqiUXLwDz58iUzhuf2LVepOSSAKjHG JskLqnN+I+58eyCrxikOgB64LtSDQpnfjPeBj0fqZPg3wI3i8vyxYzwK6i5Fcs0b 1nAKxybbIUBYoGMqht+NV0heb7ZqOPaNLLzSL5xC+5gYQQsRWRT8bmfW1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNeIH9p84bknw/NQHZZjGVTFH5waMB8GA1UdIwQY MBaAFEi0BsVI5+QcFviJyJAHbp5Yb/NUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0xRR3hVam41QndXLUluSWtBZHVubGh2ODFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84ZmM4Y2MtOWM5Yi00ZTg3LWJhZTUt OTBmMDEyOThiZjkzLzEvU0xRR3hVam41QndXLUluSWtBZHVubGh2ODFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84ZmM4Y2MtOWM5Yi00ZTg3LWJhZTUtOTBmMDEyOThiZjkz LzEvU0xRR3hVam41QndXLUluSWtBZHVubGh2ODFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYpaEhQns EzfoM5u/JQwH8CVs1SGMwdv7vFnsRep2PCxkmm/POCVBx77gbOBKj6GAh90d4HAP HbjBJPPb+FNfE17QQTKY3XlzKpl01MkoWNPUajnLA0n80xMbsMvAJz81e5P47ncy 4/twlK75akqKyDiRaWm+h/N6RKmrG9T4bNe5C+rilY0gohdMcb6rFNFHxdzDhoDp 0KTU4IoS0mwNrydtLG1but67aVjFZl01LXBG/H9evnlS/oPEA/iC6XNJCfO6y/ww SVr42eOGh5McXpSjRg2h3cXyD6riyMADxpzbWt/LFDXhS1QTkT8l+V/7YvXAC/ew nE7cS4RmLdy7qg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:00:50 2025 by rpki-client