This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft File: sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft (raw, json) Hash identifier: 0cTS9h9WACsllWn9V/iilBdimPWq/vy2yhfOTu1oLDE= Subject key identifier: 47:1D:EE:F0:3C:B5:2A:3D:FE:B2:A2:0A:76:30:77:AE:52:26:D6:54 Authority key identifier: B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1 Certificate issuer: /CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1 Certificate serial: 019B2E8BAA611259E3A88F144642177E847E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 23:01:03 +0000 Manifest this update: Wed 17 Dec 2025 23:01:03 +0000 Manifest next update: Thu 18 Dec 2025 23:01:03 +0000 Files and hashes: 1: bjFNuvRZLnVPhxbqDpaNVvasSyc.roa (hash: Or9p+aN5TKflixXpvac1BP39grelci5lle0PuJ0UsF8=) 2: sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl (hash: UUGWsmx6R6M4tMn8pB5eHYE5UXIAuw1vB+7w5a7k4II=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:aa:61:12:59:e3:a8:8f:14:46:42:17:7e:84:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1 Validity Not Before: Dec 17 23:01:03 2025 GMT Not After : Dec 18 23:01:03 2025 GMT Subject: CN=471deef03cb52a3dfeb2a20a763077ae5226d654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:30:17:4f:13:24:07:91:81:c0:19:13:c3: 16:5c:79:2b:18:bb:65:4e:80:14:05:18:c9:4a:d0: d7:ba:c9:3b:2f:87:3e:d5:e6:2b:1f:6e:0b:49:2e: 5c:76:70:8d:f2:eb:c1:02:12:93:65:7b:99:6a:f2: e1:95:2c:80:91:ba:2a:89:2a:46:76:28:20:28:fe: 89:70:1f:d2:51:a3:77:f8:9a:24:66:9e:4e:ed:8b: 97:ad:f2:dc:4c:de:95:b4:1e:28:ca:48:2f:03:f6: 06:2b:43:63:e7:91:66:18:dc:67:1d:00:0a:33:91: b2:25:2c:e5:73:51:58:78:96:f5:17:0e:d5:2a:12: 8a:39:5b:af:90:0c:a3:7f:b8:42:79:62:cb:d3:3d: e2:11:55:af:ac:a0:c9:91:07:95:53:7d:7d:01:40: 76:4e:4a:b1:bc:82:fe:a2:7a:f3:23:9b:23:37:1e: b0:d9:45:9a:91:32:32:46:25:9d:40:89:9f:06:30: d3:aa:4c:15:f6:bf:42:63:31:3e:48:5d:4a:e3:e0: 21:c6:54:68:50:fb:dc:51:0a:d1:4f:7b:d5:be:4e: a3:fc:fe:ec:db:d3:34:49:95:50:7c:d1:8e:37:26: 7b:3d:97:ee:aa:57:fe:3e:82:ff:cc:37:89:43:b6: a5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1D:EE:F0:3C:B5:2A:3D:FE:B2:A2:0A:76:30:77:AE:52:26:D6:54 X509v3 Authority Key Identifier: keyid:B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:01:08:04:89:8b:dc:1f:1b:f6:c9:66:68:2b:7c:f5:5c:f9: 0d:85:4c:b1:c0:1e:b2:0a:40:59:08:37:41:e2:0b:ea:44:69: 5f:e9:0f:ab:5b:22:0c:d4:3d:c9:17:b3:f6:c4:9a:e9:a9:ee: ae:ad:05:3c:ef:54:e5:0e:a3:7d:d2:bc:eb:c7:6a:69:f5:eb: 0e:55:b5:84:38:ac:a7:5f:4f:49:d1:a6:28:21:3d:0b:44:f8: 2c:23:0b:be:71:80:8c:83:d8:c1:8e:2f:2b:ac:22:13:9a:f1: 90:a3:33:76:e3:34:26:56:37:5f:64:a2:5c:d7:98:23:e8:23: ff:45:3a:07:8e:9b:f8:77:40:d8:da:eb:72:ee:11:cc:24:26: 56:ba:38:3a:ca:47:bb:9d:a4:47:d3:45:c2:d9:60:8c:17:1c: 95:29:80:20:7b:24:dc:92:99:e2:7e:0d:35:58:5f:0c:11:3b: 19:ef:2d:75:9d:19:b6:52:10:7b:de:4d:24:2b:3d:a7:38:81: 93:b7:14:ef:fd:67:b2:26:a0:2d:27:96:4c:5a:4c:b4:f2:bb: 82:4b:4b:66:d5:f3:5d:d2:3e:62:03:dd:fa:5a:83:7a:e3:2e: 21:0f:6c:57:13:3b:09:c1:30:21:13:c5:37:ca:23:9a:2f:2c: 2b:8e:5c:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsui6phElnjqI8URkIXfoR+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYmZiMGZjMjk4OTY1NDc2YmMxMGY1ODc5MmJmMjg2YzE0 ZDlmZjEwHhcNMjUxMjE3MjMwMTAzWhcNMjUxMjE4MjMwMTAzWjAzMTEwLwYDVQQD Eyg0NzFkZWVmMDNjYjUyYTNkZmViMmEyMGE3NjMwNzdhZTUyMjZkNjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuIwF08TJAeRgcAZE8MWXHkrGLtl ToAUBRjJStDXusk7L4c+1eYrH24LSS5cdnCN8uvBAhKTZXuZavLhlSyAkboqiSpG diggKP6JcB/SUaN3+JokZp5O7YuXrfLcTN6VtB4oykgvA/YGK0Nj55FmGNxnHQAK M5GyJSzlc1FYeJb1Fw7VKhKKOVuvkAyjf7hCeWLL0z3iEVWvrKDJkQeVU319AUB2 TkqxvIL+onrzI5sjNx6w2UWakTIyRiWdQImfBjDTqkwV9r9CYzE+SF1K4+AhxlRo UPvcUQrRT3vVvk6j/P7s29M0SZVQfNGONyZ7PZfuqlf+PoL/zDeJQ7al2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcd7vA8tSo9/rKiCnYwd65SJtZUMB8GA1UdIwQY MBaAFLC/sPwpiWVHa8EPWHkr8obBTZ/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0wtd19DbUpaVWRyd1E5WWVTdnloc0ZObl9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi83ZTY3ZDAtZWNiNy00YzY2LTk5Yjgt ODViMGU3NDc4ODU2LzEvc0wtd19DbUpaVWRyd1E5WWVTdnloc0ZObl9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi83ZTY3ZDAtZWNiNy00YzY2LTk5YjgtODViMGU3NDc4ODU2 LzEvc0wtd19DbUpaVWRyd1E5WWVTdnloc0ZObl9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzwEIBImL 3B8b9slmaCt89Vz5DYVMscAesgpAWQg3QeIL6kRpX+kPq1siDNQ9yRez9sSa6anu rq0FPO9U5Q6jfdK868dqafXrDlW1hDisp19PSdGmKCE9C0T4LCMLvnGAjIPYwY4v K6wiE5rxkKMzduM0JlY3X2SiXNeYI+gj/0U6B46b+HdA2Nrrcu4RzCQmVro4OspH u52kR9NFwtlgjBcclSmAIHsk3JKZ4n4NNVhfDBE7Ge8tdZ0ZtlIQe95NJCs9pziB k7cU7/1nsiagLSeWTFpMtPK7gktLZtXzXdI+YgPd+lqDeuMuIQ9sVxM7CcEwIRPF N8ojmi8sK45c3w== -----END CERTIFICATE-----Generated at Thu Dec 18 05:47:46 2025 by rpki-client