This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft File: slpaQ70jhPiS0mXlWLRBHosjK1U.mft (raw, json) Hash identifier: Ri2KVR6FtlqEAdY4FkbXiI+FZbZLxAl+xjDLexOd/wE= Subject key identifier: A7:0F:60:7B:5B:EB:DC:15:68:5B:62:0B:97:AA:9B:68:BB:6D:28:2D Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55 Certificate issuer: /CN=b25a5a43bd2384f892d265e558b4411e8b232b55 Certificate serial: 019AF2E4462D2D9D1E3C97C12EAD710C9467 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 09:00:37 +0000 Manifest this update: Sat 06 Dec 2025 09:00:37 +0000 Manifest next update: Sun 07 Dec 2025 09:00:37 +0000 Files and hashes: 1: 1-yGyAb5aLCteBw1IK7px8umPM0E.roa (hash: sbk/bLa9eBvitwUvY7P4OBh7ripskQi0SoXdYbLT94o=) 2: slpaQ70jhPiS0mXlWLRBHosjK1U.crl (hash: 9uCpjkcFg2pX5Td6xHlsMFrt2rYB8ltXfLLnhDnGk5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:46:2d:2d:9d:1e:3c:97:c1:2e:ad:71:0c:94:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55 Validity Not Before: Dec 6 09:00:37 2025 GMT Not After : Dec 7 09:00:37 2025 GMT Subject: CN=a70f607b5bebdc15685b620b97aa9b68bb6d282d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:25:8c:16:6c:e6:d8:04:c0:79:9d:7d:80:43: 1e:48:f9:0c:fc:c0:3e:fc:bb:8c:21:27:37:ae:ee: d0:54:4b:09:b5:d8:dc:dc:9b:cb:8a:2c:4a:da:77: a6:57:a4:a8:9b:63:23:31:dd:32:ca:ee:aa:32:20: 99:b2:f7:9a:c0:c7:b5:9f:54:66:f0:17:90:15:07: aa:98:7c:10:20:df:fe:ae:ef:95:de:e4:00:30:74: ec:d5:a7:e0:9d:1f:f7:e7:e8:aa:83:49:fd:26:d9: 9b:de:b0:2c:35:69:58:60:9e:3a:d8:c6:1d:31:90: 83:98:3f:23:ec:f8:bf:f6:00:81:14:af:e3:a2:71: 19:9a:9e:a7:37:b0:09:97:98:65:45:b5:59:10:b9: 9b:bf:4d:7e:ab:b2:33:50:cd:42:fc:28:2b:cb:2c: f9:4c:0c:d1:f4:b1:d0:23:18:76:d5:1b:b6:ec:74: c1:30:d1:ca:96:b8:3d:5e:83:d1:a6:ae:ac:61:97: 16:50:b4:47:9a:3d:db:97:86:e5:57:fb:30:cd:af: 7a:00:3c:7d:ba:82:e4:f7:43:50:57:05:3b:e4:79: 7f:f5:30:ef:98:81:c5:79:4b:de:5f:7b:13:44:b8: 1e:9a:a5:f1:c4:42:51:01:a6:a3:28:3b:94:03:fb: 3b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:0F:60:7B:5B:EB:DC:15:68:5B:62:0B:97:AA:9B:68:BB:6D:28:2D X509v3 Authority Key Identifier: keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:dd:24:60:f7:59:37:54:59:e7:fc:e9:6d:8e:d1:05:12:a2: 02:b5:34:c9:3c:2b:c3:43:f3:51:55:3d:fb:e3:d4:a1:c7:3f: a9:e7:d1:2c:5d:61:d3:45:08:51:7e:a9:61:ad:05:29:d0:2f: b0:a6:57:7e:c7:3b:55:85:2b:f4:6b:30:47:72:7a:8d:3e:7a: 3e:8e:3e:6f:cf:f8:4c:76:42:74:32:85:e7:76:21:11:f5:36: 83:01:39:2a:21:b7:67:84:00:04:5c:4b:bc:ce:5d:f4:2c:e5: 28:f1:83:10:3d:51:25:e9:5b:f6:da:71:e4:ef:3a:5d:57:a4: ca:37:01:41:ff:08:75:a5:84:64:fc:82:52:f8:f0:aa:5a:20: f7:5e:42:85:90:c0:2e:7d:5c:94:b7:e7:45:1b:41:50:a3:b2: 66:23:cf:15:bd:17:12:cb:51:26:63:bd:22:6d:bd:5c:13:5d: 0d:2f:17:c8:e1:3e:b1:38:31:9b:fb:29:28:96:05:4f:45:24: ce:9a:60:59:bf:c0:b2:ea:8c:56:29:63:c9:87:60:5f:3e:89: b4:9f:cd:c6:c0:c7:e8:93:67:05:f7:a0:b0:11:8e:62:32:34: cd:cd:df:df:68:1c:fc:af:85:9e:87:58:d3:7d:13:9e:10:68: 34:d2:4a:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5EYtLZ0ePJfBLq1xDJRnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNWE1YTQzYmQyMzg0Zjg5MmQyNjVlNTU4YjQ0MTFlOGIy MzJiNTUwHhcNMjUxMjA2MDkwMDM3WhcNMjUxMjA3MDkwMDM3WjAzMTEwLwYDVQQD EyhhNzBmNjA3YjViZWJkYzE1Njg1YjYyMGI5N2FhOWI2OGJiNmQyODJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCWMFmzm2ATAeZ19gEMeSPkM/MA+ /LuMISc3ru7QVEsJtdjc3JvLiixK2nemV6Som2MjMd0yyu6qMiCZsveawMe1n1Rm 8BeQFQeqmHwQIN/+ru+V3uQAMHTs1afgnR/35+iqg0n9Jtmb3rAsNWlYYJ462MYd MZCDmD8j7Pi/9gCBFK/jonEZmp6nN7AJl5hlRbVZELmbv01+q7IzUM1C/Cgryyz5 TAzR9LHQIxh21Ru27HTBMNHKlrg9XoPRpq6sYZcWULRHmj3bl4blV/swza96ADx9 uoLk90NQVwU75Hl/9TDvmIHFeUveX3sTRLgemqXxxEJRAaajKDuUA/s7AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcPYHtb69wVaFtiC5eqm2i7bSgtMB8GA1UdIwQY MBaAFLJaWkO9I4T4ktJl5Vi0QR6LIytVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS80ZGY5NjktNTdhNi00NWY3LTgwODIt NWViZGU4YjhjZTFkLzEvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS80ZGY5NjktNTdhNi00NWY3LTgwODItNWViZGU4YjhjZTFk LzEvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfd0kYPdZ N1RZ5/zpbY7RBRKiArU0yTwrw0PzUVU9++PUocc/qefRLF1h00UIUX6pYa0FKdAv sKZXfsc7VYUr9GswR3J6jT56Po4+b8/4THZCdDKF53YhEfU2gwE5KiG3Z4QABFxL vM5d9CzlKPGDED1RJelb9tpx5O86XVekyjcBQf8IdaWEZPyCUvjwqlog915ChZDA Ln1clLfnRRtBUKOyZiPPFb0XEstRJmO9Im29XBNdDS8XyOE+sTgxm/spKJYFT0Uk zppgWb/AsuqMViljyYdgXz6JtJ/NxsDH6JNnBfegsBGOYjI0zc3f32gc/K+FnodY 030TnhBoNNJKmw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:16:32 2025 by rpki-client