This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft File: SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft (raw, json) Hash identifier: cpY9YumUEPGdim2dZ8XbLYBSykvo1t8QwQ6RghRAdYE= Subject key identifier: D8:CD:B8:17:EB:68:CB:F6:55:EC:97:C3:34:18:5A:31:BD:42:C3:9E Authority key identifier: 4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD Certificate issuer: /CN=4a54821a91b1dbdc73bdda34bced7107067964ad Certificate serial: 019AFB42D46028C2A576B2C565E7C6B05891 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft Manifest number: 1062 Signing time: Mon 08 Dec 2025 00:00:52 +0000 Manifest this update: Mon 08 Dec 2025 00:00:52 +0000 Manifest next update: Tue 09 Dec 2025 00:00:52 +0000 Files and hashes: 1: JTPc5_QTZJxWgsLJFBAm1KUSpd0.roa (hash: ODeawNoXLkHerXTl+flqRC6XG80opVvKSVEN1ax5xro=) 2: SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl (hash: 2rdmKg3tBA1s0W6mM2+J0XkfifvlIUabDuEuvU30ZDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 00:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:42:d4:60:28:c2:a5:76:b2:c5:65:e7:c6:b0:58:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a54821a91b1dbdc73bdda34bced7107067964ad Validity Not Before: Dec 8 00:00:52 2025 GMT Not After : Dec 9 00:00:52 2025 GMT Subject: CN=d8cdb817eb68cbf655ec97c334185a31bd42c39e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:61:bb:95:28:01:50:81:b0:62:e8:8c:fd:17: 1b:37:20:89:63:df:18:e0:83:07:42:c3:e3:63:e5: 77:e7:af:bf:d9:1e:5f:ab:79:99:d2:ad:44:f4:c0: 31:2d:07:c6:5c:42:e3:db:1f:28:ed:61:d6:20:f0: 1a:6c:d0:50:f3:9b:51:e9:3e:ae:1a:be:af:6c:52: 15:27:09:1b:8e:0a:0a:f2:dc:a2:f7:46:0e:72:37: fa:11:f0:24:08:7c:41:2e:79:8a:c1:67:41:a0:a0: 6c:23:ca:ec:07:87:4b:85:e5:f1:8b:35:da:30:2d: 08:82:00:ea:15:12:0f:59:c1:26:bd:64:cb:05:08: fc:e1:0d:38:80:e0:61:01:27:be:88:eb:3a:5f:d6: 66:6e:56:1d:d2:71:aa:0a:50:09:6d:ef:58:04:a1: f1:ff:dd:32:53:12:fa:7a:ed:a9:d9:88:52:99:ae: 07:ab:d9:e5:39:a0:b9:dc:48:6a:ab:3d:26:bd:73: c1:50:b6:db:7a:29:fc:f4:56:64:23:c9:9f:a9:1b: 4f:c2:e8:fb:c4:2f:5f:9c:28:e3:9f:0a:26:25:b7: 1f:9a:d3:77:3a:c1:33:9a:ff:d1:88:e9:dd:5f:47: 0d:f9:26:90:3f:77:26:b0:88:1d:de:93:4a:d3:53: 5f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CD:B8:17:EB:68:CB:F6:55:EC:97:C3:34:18:5A:31:BD:42:C3:9E X509v3 Authority Key Identifier: keyid:4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:8f:f4:ac:ae:c0:1c:94:59:84:a8:12:c2:89:18:a7:4b:c4: ce:8b:9b:ca:b4:c1:6a:51:18:70:c6:f8:a7:e4:f5:e3:7f:93: 11:8f:d2:6b:a7:10:b1:27:04:52:80:7d:58:b9:fb:67:11:45: f6:35:89:f8:e5:00:cb:4a:a6:54:b1:4e:9f:a0:31:cc:02:f9: 10:69:58:48:3c:b1:60:29:bb:85:d8:6a:62:6c:b2:a2:63:81: 73:ca:71:b9:cb:6f:b7:1f:c4:7d:f7:04:61:92:27:72:79:59: 5e:f7:68:b4:b1:09:26:db:15:9d:0c:1c:54:03:0a:31:a6:92: 6f:9a:03:ad:53:24:2a:fa:74:68:20:f3:e9:93:d3:9d:d3:eb: 9c:32:b2:48:9c:dc:b2:9a:98:5d:f7:a8:2d:9f:7d:49:74:7c: 95:96:30:7c:9c:cb:b5:a4:1c:95:84:22:cc:fe:ea:f7:30:58: fb:a2:aa:9c:3e:82:bf:a3:20:36:0f:25:47:cb:87:0f:b8:4c: b5:eb:9a:9c:fe:df:22:4b:77:93:a1:82:96:85:12:c4:a9:73: 2c:c0:bc:8b:75:d5:4e:a3:52:29:3d:81:ec:3f:92:17:2b:7b: e1:e3:83:8d:3a:cc:3b:52:b7:ee:19:b2:1a:e8:6d:0a:23:46: 68:5a:aa:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7QtRgKMKldrLFZefGsFiRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNTQ4MjFhOTFiMWRiZGM3M2JkZGEzNGJjZWQ3MTA3MDY3 OTY0YWQwHhcNMjUxMjA4MDAwMDUyWhcNMjUxMjA5MDAwMDUyWjAzMTEwLwYDVQQD EyhkOGNkYjgxN2ViNjhjYmY2NTVlYzk3YzMzNDE4NWEzMWJkNDJjMzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGG7lSgBUIGwYuiM/RcbNyCJY98Y 4IMHQsPjY+V356+/2R5fq3mZ0q1E9MAxLQfGXELj2x8o7WHWIPAabNBQ85tR6T6u Gr6vbFIVJwkbjgoK8tyi90YOcjf6EfAkCHxBLnmKwWdBoKBsI8rsB4dLheXxizXa MC0IggDqFRIPWcEmvWTLBQj84Q04gOBhASe+iOs6X9ZmblYd0nGqClAJbe9YBKHx /90yUxL6eu2p2YhSma4Hq9nlOaC53Ehqqz0mvXPBULbbein89FZkI8mfqRtPwuj7 xC9fnCjjnwomJbcfmtN3OsEzmv/RiOndX0cN+SaQP3cmsIgd3pNK01NfsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjNuBfraMv2VeyXwzQYWjG9QsOeMB8GA1UdIwQY MBaAFEpUghqRsdvcc73aNLztcQcGeWStMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2xTQ0dwR3gyOXh6dmRvMHZPMXhCd1o1WkswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84ZDJlMzUtOWZlZC00ZmRmLTkwMzQt NzZhZTgxMmYwNzZjLzEvU2xTQ0dwR3gyOXh6dmRvMHZPMXhCd1o1WkswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi84ZDJlMzUtOWZlZC00ZmRmLTkwMzQtNzZhZTgxMmYwNzZj LzEvU2xTQ0dwR3gyOXh6dmRvMHZPMXhCd1o1WkswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQo/0rK7A HJRZhKgSwokYp0vEzoubyrTBalEYcMb4p+T143+TEY/Sa6cQsScEUoB9WLn7ZxFF 9jWJ+OUAy0qmVLFOn6AxzAL5EGlYSDyxYCm7hdhqYmyyomOBc8pxuctvtx/EffcE YZIncnlZXvdotLEJJtsVnQwcVAMKMaaSb5oDrVMkKvp0aCDz6ZPTndPrnDKySJzc spqYXfeoLZ99SXR8lZYwfJzLtaQclYQizP7q9zBY+6KqnD6Cv6MgNg8lR8uHD7hM teuanP7fIkt3k6GCloUSxKlzLMC8i3XVTqNSKT2B7D+SFyt74eODjTrMO1K37hmy GuhtCiNGaFqqBg== -----END CERTIFICATE-----Generated at Mon Dec 8 09:11:44 2025 by rpki-client