This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft File: SLQt9x-KKZb70xXQqmF63zQ9WwY.mft (raw, json) Hash identifier: E8vMLTcb4Jm2MDJwevKdi0b+JGiZ4LsbIMa0HY9DCJs= Subject key identifier: 9D:30:44:91:36:EF:ED:06:46:4F:6C:6A:37:D4:BA:3B:7B:78:49:C7 Authority key identifier: 48:B4:2D:F7:1F:8A:29:96:FB:D3:15:D0:AA:61:7A:DF:34:3D:5B:06 Certificate issuer: /CN=48b42df71f8a2996fbd315d0aa617adf343d5b06 Certificate serial: 019B42497474DF5D345AA4FCE20B59D645C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft Manifest number: 04FC Signing time: Sun 21 Dec 2025 19:01:08 +0000 Manifest this update: Sun 21 Dec 2025 19:01:08 +0000 Manifest next update: Mon 22 Dec 2025 19:01:08 +0000 Files and hashes: 1: SLQt9x-KKZb70xXQqmF63zQ9WwY.crl (hash: VFxdjPPpuOetKIbYAiIzYOkks8/HQTtVrBzDPDVhycM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:74:74:df:5d:34:5a:a4:fc:e2:0b:59:d6:45:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48b42df71f8a2996fbd315d0aa617adf343d5b06 Validity Not Before: Dec 21 19:01:08 2025 GMT Not After : Dec 22 19:01:08 2025 GMT Subject: CN=9d30449136efed06464f6c6a37d4ba3b7b7849c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3e:f7:71:29:75:d0:42:19:cf:8f:99:aa:b4: 88:ad:61:e9:34:08:10:c9:04:a2:e6:0f:62:ab:c2: f8:5a:77:3a:c9:98:36:f9:31:50:f6:7a:ac:71:95: c5:68:10:8c:e9:13:ad:72:ce:72:5f:dc:50:62:a8: ef:db:82:dc:8a:ce:7a:f0:14:fa:18:c1:f4:86:81: 3f:27:1f:e6:99:b7:87:0e:ac:7e:d1:25:51:99:e6: 2c:66:f8:e6:89:d6:94:03:5c:13:30:85:e3:bf:6a: 79:ca:f6:db:c5:4c:a9:a4:82:9b:9d:c8:71:b3:93: 54:ad:da:7e:7f:a4:d3:35:27:ee:52:da:88:98:aa: c3:3f:ad:53:3f:27:7c:14:5a:32:4e:6c:f5:ce:f7: 5c:23:80:8a:0b:56:1e:ac:79:5c:18:54:5b:86:e1: 5c:a7:28:c3:e9:cc:6a:1c:a3:a4:8f:d1:b2:7b:44: 55:e5:87:2c:86:1e:0c:af:ed:4e:41:fc:5f:6e:ab: 45:04:d3:f1:ba:97:fd:98:c2:27:3a:4d:c8:11:25: 4a:85:7a:df:b4:2d:0d:98:8a:f2:78:eb:97:84:7e: 99:7a:0b:cf:82:03:7c:dc:3b:93:c9:ef:80:d3:13: 7b:f5:c2:4b:a3:dc:46:98:49:33:c6:e4:da:b2:b7: 1f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:30:44:91:36:EF:ED:06:46:4F:6C:6A:37:D4:BA:3B:7B:78:49:C7 X509v3 Authority Key Identifier: keyid:48:B4:2D:F7:1F:8A:29:96:FB:D3:15:D0:AA:61:7A:DF:34:3D:5B:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:a3:5b:63:a1:3d:e7:d0:dc:52:89:1c:08:56:44:21:7d:09: 0c:eb:34:f0:ab:28:ca:bd:65:f9:0c:60:ae:90:7a:90:95:fe: b2:63:6c:13:96:d6:e9:c8:70:42:ab:46:18:f8:41:19:33:7f: 9e:bb:60:08:28:1a:75:03:e4:34:68:74:1d:ae:1e:6d:d2:84: 70:b7:43:39:18:d7:56:02:d1:80:1b:2d:6f:59:0f:b1:fb:dc: a5:c9:80:e6:b8:0e:1c:e4:c2:f3:ff:5b:19:fe:69:9b:49:c3: 4f:71:17:a8:e6:12:e3:b2:6e:59:46:c2:cd:71:6d:e8:0d:be: 4d:db:a1:50:df:db:b4:3a:bb:5e:e2:2c:72:0a:30:11:8b:d3: e6:0b:01:95:cf:54:ed:fb:da:9b:dc:b4:9d:d3:43:19:d6:58: b7:84:72:8f:03:b8:0f:3a:c1:3f:85:dd:03:6e:2c:57:1b:cf: d7:8a:5a:75:53:c5:58:8d:c8:18:6e:4c:cc:61:78:de:5d:0e: 07:0b:e3:f2:ba:85:c1:1d:52:23:11:97:18:4d:aa:84:4d:09: 97:10:38:cf:5b:8a:74:03:1b:80:99:c5:c1:88:43:28:d5:70: 4a:c7:59:d8:52:a8:39:a3:ad:03:29:49:52:3d:ef:87:b2:d7: e2:a4:69:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSXR03100WqT84gtZ1kXJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YjQyZGY3MWY4YTI5OTZmYmQzMTVkMGFhNjE3YWRmMzQz ZDViMDYwHhcNMjUxMjIxMTkwMTA4WhcNMjUxMjIyMTkwMTA4WjAzMTEwLwYDVQQD Eyg5ZDMwNDQ5MTM2ZWZlZDA2NDY0ZjZjNmEzN2Q0YmEzYjdiNzg0OWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz73cSl10EIZz4+ZqrSIrWHpNAgQ yQSi5g9iq8L4Wnc6yZg2+TFQ9nqscZXFaBCM6ROtcs5yX9xQYqjv24Lcis568BT6 GMH0hoE/Jx/mmbeHDqx+0SVRmeYsZvjmidaUA1wTMIXjv2p5yvbbxUyppIKbnchx s5NUrdp+f6TTNSfuUtqImKrDP61TPyd8FFoyTmz1zvdcI4CKC1YerHlcGFRbhuFc pyjD6cxqHKOkj9Gye0RV5Ycshh4Mr+1OQfxfbqtFBNPxupf9mMInOk3IESVKhXrf tC0NmIryeOuXhH6ZegvPggN83DuTye+A0xN79cJLo9xGmEkzxuTasrcfSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0wRJE27+0GRk9sajfUujt7eEnHMB8GA1UdIwQY MBaAFEi0LfcfiimW+9MV0Kphet80PVsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0xRdDl4LUtLWmI3MHhYUXFtRjYzelE5V3dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83NTQwOTUtNTU4Mi00MjhhLTliMTEt YThiZTRmYjAwMTIxLzEvU0xRdDl4LUtLWmI3MHhYUXFtRjYzelE5V3dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS83NTQwOTUtNTU4Mi00MjhhLTliMTEtYThiZTRmYjAwMTIx LzEvU0xRdDl4LUtLWmI3MHhYUXFtRjYzelE5V3dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqNbY6E9 59DcUokcCFZEIX0JDOs08Ksoyr1l+QxgrpB6kJX+smNsE5bW6chwQqtGGPhBGTN/ nrtgCCgadQPkNGh0Ha4ebdKEcLdDORjXVgLRgBstb1kPsfvcpcmA5rgOHOTC8/9b Gf5pm0nDT3EXqOYS47JuWUbCzXFt6A2+TduhUN/btDq7XuIscgowEYvT5gsBlc9U 7fvam9y0ndNDGdZYt4RyjwO4DzrBP4XdA24sVxvP14padVPFWI3IGG5MzGF43l0O Bwvj8rqFwR1SIxGXGE2qhE0JlxA4z1uKdAMbgJnFwYhDKNVwSsdZ2FKoOaOtAylJ Uj3vh7LX4qRpWQ== -----END CERTIFICATE-----Generated at Sun Dec 21 22:07:34 2025 by rpki-client