This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft File: SLo3AWkdKSivrTobVzWib0yZz_Y.mft (raw, json) Hash identifier: 0yLYdDiXhzA9+6ZX88fyzrkOoN7NDP6LYRs09+QEqR8= Subject key identifier: 8A:3A:AA:84:B2:54:84:1E:58:FA:A3:FF:E2:B0:73:B5:A4:C2:5F:88 Authority key identifier: 48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6 Certificate issuer: /CN=48ba3701691d2928afad3a1b5735a26f4c99cff6 Certificate serial: 019AF2ADFBED94E495143702574D759046D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft Manifest number: 1671 Signing time: Sat 06 Dec 2025 08:01:19 +0000 Manifest this update: Sat 06 Dec 2025 08:01:19 +0000 Manifest next update: Sun 07 Dec 2025 08:01:19 +0000 Files and hashes: 1: 2p_ZO09LakS0A7u5Qz0wGibD5fU.roa (hash: dieDhkHaU+F1D9ZZPlcY6giEpQMREkK77VG8/1P3jjc=) 2: SLo3AWkdKSivrTobVzWib0yZz_Y.crl (hash: 89sD2b+5b2XMjrQcsgR7aJ+meMYj+f/Reo+gMuNRgM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:fb:ed:94:e4:95:14:37:02:57:4d:75:90:46:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48ba3701691d2928afad3a1b5735a26f4c99cff6 Validity Not Before: Dec 6 08:01:19 2025 GMT Not After : Dec 7 08:01:19 2025 GMT Subject: CN=8a3aaa84b254841e58faa3ffe2b073b5a4c25f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:88:48:17:e5:18:8c:cc:26:37:06:8c:5b:f1: fd:9d:7f:f0:ad:a3:ad:1c:07:f4:8d:f2:40:b1:bc: 22:cc:00:78:41:11:f5:42:d8:f7:de:4e:75:c1:d5: 70:4b:02:9d:43:6e:47:ac:31:af:9d:86:fa:65:41: c8:5e:87:a8:87:47:66:da:bc:02:ce:16:c5:92:85: f1:12:d9:47:95:95:b8:ef:8b:df:3f:e5:c3:32:cb: 40:bf:9c:ec:ac:8d:83:0b:08:a6:1b:f2:7f:63:89: 65:0c:99:95:cc:c0:d0:29:96:b4:88:7b:74:d4:90: 07:71:35:5d:6e:bd:b3:79:b3:1b:c9:48:82:41:f4: 33:16:3b:00:08:56:0d:b6:c4:1b:f5:ad:47:70:40: d4:a4:01:9d:6c:32:ae:d7:5c:f6:6c:a0:10:91:63: e5:28:90:8b:0a:e7:52:3e:8c:21:9b:df:70:c1:e1: 77:c4:31:9a:93:5c:59:75:90:f3:55:18:59:e5:99: f2:4c:c0:15:53:64:db:3c:55:75:3b:0f:f8:e5:d1: 08:6c:23:98:68:dc:d1:36:18:08:0c:29:be:d9:96: 3f:5c:55:3e:d4:05:68:73:e4:d8:7f:5d:c6:6c:08: 50:35:1c:dd:c3:62:36:57:25:f1:cc:bc:c4:46:b7: f7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3A:AA:84:B2:54:84:1E:58:FA:A3:FF:E2:B0:73:B5:A4:C2:5F:88 X509v3 Authority Key Identifier: keyid:48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:c9:dc:5b:80:fa:a2:1b:69:a2:b5:6a:07:d3:20:f7:64:b0: be:90:0a:d9:d7:d0:7b:ac:c3:07:11:64:7c:7b:d4:b7:37:d0: ad:d6:ef:2f:05:93:c3:f1:cd:b5:ff:a3:6e:2b:06:4f:a1:c2: 7d:0f:7f:8c:2d:96:06:7b:6e:33:e4:69:da:dc:6d:11:29:df: 20:a6:0b:9f:43:eb:e3:cb:7d:aa:3f:a2:9e:f2:5e:46:cc:95: 56:04:57:c1:80:36:f4:05:5c:45:19:5d:3a:d8:03:dd:e6:df: b9:21:de:d2:09:db:cf:3e:a5:ff:f1:ef:0b:84:f2:6e:04:af: ac:9a:f0:fd:23:05:c8:26:c5:ce:6a:bc:38:43:5d:16:cd:e9: 18:67:f4:dd:14:29:cf:cb:96:c5:49:3f:cd:1c:ba:51:ba:93: 1c:38:8a:4d:d6:2e:c6:50:1e:fe:b5:97:dd:f9:ad:dd:d0:70: 39:ed:c3:21:a7:d3:b9:c3:0e:d4:60:12:df:06:21:12:ce:5e: 63:05:bf:87:96:cf:63:45:46:ad:db:b7:37:18:ac:85:c1:9d: 93:8c:ed:44:c5:b5:2d:9a:f1:05:a0:c1:95:ce:78:48:fa:d6: 38:9d:d4:7d:75:2c:a9:62:0a:54:39:b8:0f:c1:2a:e9:28:9c: f4:0a:ee:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrfvtlOSVFDcCV011kEbUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YmEzNzAxNjkxZDI5MjhhZmFkM2ExYjU3MzVhMjZmNGM5 OWNmZjYwHhcNMjUxMjA2MDgwMTE5WhcNMjUxMjA3MDgwMTE5WjAzMTEwLwYDVQQD Eyg4YTNhYWE4NGIyNTQ4NDFlNThmYWEzZmZlMmIwNzNiNWE0YzI1Zjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIhIF+UYjMwmNwaMW/H9nX/wraOt HAf0jfJAsbwizAB4QRH1Qtj33k51wdVwSwKdQ25HrDGvnYb6ZUHIXoeoh0dm2rwC zhbFkoXxEtlHlZW474vfP+XDMstAv5zsrI2DCwimG/J/Y4llDJmVzMDQKZa0iHt0 1JAHcTVdbr2zebMbyUiCQfQzFjsACFYNtsQb9a1HcEDUpAGdbDKu11z2bKAQkWPl KJCLCudSPowhm99wweF3xDGak1xZdZDzVRhZ5ZnyTMAVU2TbPFV1Ow/45dEIbCOY aNzRNhgIDCm+2ZY/XFU+1AVoc+TYf13GbAhQNRzdw2I2VyXxzLzERrf3gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIo6qoSyVIQeWPqj/+Kwc7Wkwl+IMB8GA1UdIwQY MBaAFEi6NwFpHSkor606G1c1om9Mmc/2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83YTg3ODEtZTM2My00NmU0LTk3ZWQt ZTNlODE1MWE4NzYwLzEvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83YTg3ODEtZTM2My00NmU0LTk3ZWQtZTNlODE1MWE4NzYw LzEvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsncW4D6 ohtporVqB9Mg92SwvpAK2dfQe6zDBxFkfHvUtzfQrdbvLwWTw/HNtf+jbisGT6HC fQ9/jC2WBntuM+Rp2txtESnfIKYLn0Pr48t9qj+invJeRsyVVgRXwYA29AVcRRld OtgD3ebfuSHe0gnbzz6l//HvC4TybgSvrJrw/SMFyCbFzmq8OENdFs3pGGf03RQp z8uWxUk/zRy6UbqTHDiKTdYuxlAe/rWX3fmt3dBwOe3DIafTucMO1GAS3wYhEs5e YwW/h5bPY0VGrdu3NxishcGdk4ztRMW1LZrxBaDBlc54SPrWOJ3UfXUsqWIKVDm4 D8Eq6Sic9Aru+A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:10 2025 by rpki-client