This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft File: SFldSlTtZEITxEYZXjb3jsGig5k.mft (raw, json) Hash identifier: XjcvaezaqZZijiFBtf+0Uz0BCHpiBNsbUtfern0N8DY= Subject key identifier: 73:91:A3:AD:5D:72:5B:72:65:BB:FA:46:E6:1A:F9:A7:3A:90:BF:5A Authority key identifier: 48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99 Certificate issuer: /CN=48595d4a54ed644213c446195e36f78ec1a28399 Certificate serial: 019AF208FD7581F2DF23732066B431C1EB83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:01:06 +0000 Manifest this update: Sat 06 Dec 2025 05:01:06 +0000 Manifest next update: Sun 07 Dec 2025 05:01:06 +0000 Files and hashes: 1: 5TwfULMH-unHdDYOcT1BkwSNVj4.roa (hash: MnqaA2gAqS7okflGRdl3L2EkczyiAqyp5YnJcnh49kE=) 2: SFldSlTtZEITxEYZXjb3jsGig5k.crl (hash: 3FhaIMM+PP+2s/WDoVDTM1W7Fam7NyiOIZ89T9PMx5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:fd:75:81:f2:df:23:73:20:66:b4:31:c1:eb:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48595d4a54ed644213c446195e36f78ec1a28399 Validity Not Before: Dec 6 05:01:06 2025 GMT Not After : Dec 7 05:01:06 2025 GMT Subject: CN=7391a3ad5d725b7265bbfa46e61af9a73a90bf5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6d:53:79:7c:17:bc:eb:25:43:a7:b1:a8:a7: f4:cd:da:01:c2:2f:e7:da:d6:d3:79:80:84:91:95: c1:ca:1b:93:52:ee:7a:77:81:54:7a:ef:65:6f:c3: 13:40:dd:34:0e:2e:a4:a2:49:ce:e3:6f:a9:a6:ed: a1:12:76:05:f6:01:b7:b9:2d:96:3e:3c:03:cd:0a: c3:90:f6:35:92:c9:f8:2e:04:27:01:22:dc:b7:92: cb:e6:0b:b2:f8:92:f2:26:34:f4:5e:24:4b:21:d5: 18:e6:19:53:75:3d:c3:b5:c4:0b:7d:e2:a4:5b:e0: fa:32:a7:ce:91:ea:e4:51:bb:36:7a:f0:55:d5:b5: 50:4f:75:58:3f:f4:2c:03:b4:06:13:70:3d:2c:70: 7a:f8:03:bd:da:52:34:d4:08:ac:c5:42:b9:24:12: d2:72:4e:85:21:3f:63:07:31:a3:60:b4:0e:35:04: 75:e2:7d:66:b1:92:e5:23:5f:23:fe:6c:92:a0:7b: cc:48:3d:f8:82:99:46:e2:21:b6:48:9e:5b:38:be: 62:e1:0c:59:b7:43:c7:f8:4c:b1:2e:6e:33:b8:04: 66:89:e3:3c:ac:37:01:7f:20:0c:32:c8:90:a5:95: 24:4e:d3:9a:9a:6b:ef:68:9f:1a:2a:6d:14:00:14: 17:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:91:A3:AD:5D:72:5B:72:65:BB:FA:46:E6:1A:F9:A7:3A:90:BF:5A X509v3 Authority Key Identifier: keyid:48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f4:9a:a9:5a:13:ac:2e:ec:01:ec:d1:15:0b:b3:38:12:c7: 31:96:96:d5:88:5a:98:0a:d3:a6:18:08:23:1d:50:80:eb:2f: ad:79:1c:d4:6e:08:fc:a8:6c:cc:cb:f2:85:bd:83:5f:f2:a9: 52:18:62:ac:16:d7:d8:aa:d9:80:5d:32:f4:35:4f:74:3e:24: 3e:2c:e8:20:41:52:db:cf:28:2c:1e:26:e9:18:96:f5:f0:cb: 95:41:1e:b9:5c:c2:09:e8:8a:da:81:60:4b:a9:bb:b3:48:ea: 75:b9:4e:2c:12:bb:4c:9c:00:be:5b:e6:f3:32:a4:d7:27:94: fe:6f:d2:34:99:42:55:0f:34:98:79:51:b6:7a:13:4b:f1:cc: 02:ce:b3:4d:8d:7f:53:7d:e9:62:bd:c0:9f:aa:11:e5:bd:8f: 78:ff:81:6d:4d:24:81:ea:e8:41:69:a0:ce:b0:16:10:22:53: d8:7b:a3:49:c1:50:8a:8a:49:95:f6:1a:75:03:cd:50:a1:fc: c1:4c:d7:6e:ec:39:66:c0:4d:5a:77:a7:7f:9a:a0:e9:ea:34: 8d:e4:40:c4:3b:77:60:07:6f:f7:8a:4a:a7:8e:7e:af:69:07: 0a:6c:87:1d:98:56:19:0e:52:98:64:29:06:c7:56:d2:ad:be: f2:8f:07:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCP11gfLfI3MgZrQxweuDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NTk1ZDRhNTRlZDY0NDIxM2M0NDYxOTVlMzZmNzhlYzFh MjgzOTkwHhcNMjUxMjA2MDUwMTA2WhcNMjUxMjA3MDUwMTA2WjAzMTEwLwYDVQQD Eyg3MzkxYTNhZDVkNzI1YjcyNjViYmZhNDZlNjFhZjlhNzNhOTBiZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG1TeXwXvOslQ6exqKf0zdoBwi/n 2tbTeYCEkZXByhuTUu56d4FUeu9lb8MTQN00Di6koknO42+ppu2hEnYF9gG3uS2W PjwDzQrDkPY1ksn4LgQnASLct5LL5guy+JLyJjT0XiRLIdUY5hlTdT3DtcQLfeKk W+D6MqfOkerkUbs2evBV1bVQT3VYP/QsA7QGE3A9LHB6+AO92lI01AisxUK5JBLS ck6FIT9jBzGjYLQONQR14n1msZLlI18j/mySoHvMSD34gplG4iG2SJ5bOL5i4QxZ t0PH+EyxLm4zuARmieM8rDcBfyAMMsiQpZUkTtOammvvaJ8aKm0UABQXkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHORo61dcltyZbv6RuYa+ac6kL9aMB8GA1UdIwQY MBaAFEhZXUpU7WRCE8RGGV42947BooOZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0ZsZFNsVHRaRUlUeEVZWlhqYjNqc0dpZzVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82ZTZmNTEtNGUxMy00NjVlLWI0ZDYt MmU4ZGNkZDUxNjUxLzEvU0ZsZFNsVHRaRUlUeEVZWlhqYjNqc0dpZzVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS82ZTZmNTEtNGUxMy00NjVlLWI0ZDYtMmU4ZGNkZDUxNjUx LzEvU0ZsZFNsVHRaRUlUeEVZWlhqYjNqc0dpZzVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvSaqVoT rC7sAezRFQuzOBLHMZaW1YhamArTphgIIx1QgOsvrXkc1G4I/KhszMvyhb2DX/Kp UhhirBbX2KrZgF0y9DVPdD4kPizoIEFS288oLB4m6RiW9fDLlUEeuVzCCeiK2oFg S6m7s0jqdblOLBK7TJwAvlvm8zKk1yeU/m/SNJlCVQ80mHlRtnoTS/HMAs6zTY1/ U33pYr3An6oR5b2PeP+BbU0kgeroQWmgzrAWECJT2HujScFQiopJlfYadQPNUKH8 wUzXbuw5ZsBNWnenf5qg6eo0jeRAxDt3YAdv94pKp45+r2kHCmyHHZhWGQ5SmGQp BsdW0q2+8o8HRg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:29 2025 by rpki-client