This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft File: sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft (raw, json) Hash identifier: ta+8/etQbTmsLF5Q0ztEzJvgWpf2ToGqiHJSzyUDCFo= Subject key identifier: 63:8A:09:A0:AF:CC:C8:37:1C:65:43:55:2F:05:56:E0:D2:44:6F:72 Authority key identifier: B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1 Certificate issuer: /CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1 Certificate serial: 019AF2ADB51AA25448CE1F67087EB912E4F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 08:01:01 +0000 Manifest this update: Sat 06 Dec 2025 08:01:01 +0000 Manifest next update: Sun 07 Dec 2025 08:01:01 +0000 Files and hashes: 1: bjFNuvRZLnVPhxbqDpaNVvasSyc.roa (hash: Or9p+aN5TKflixXpvac1BP39grelci5lle0PuJ0UsF8=) 2: sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl (hash: nc+n1cp6WjoEgPoS1rezf9eLE/MbhzkfWD2TZyd6RQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:b5:1a:a2:54:48:ce:1f:67:08:7e:b9:12:e4:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1 Validity Not Before: Dec 6 08:01:01 2025 GMT Not After : Dec 7 08:01:01 2025 GMT Subject: CN=638a09a0afccc8371c6543552f0556e0d2446f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c9:7f:ea:12:a6:8a:4c:48:6c:16:f7:06:7a: e7:40:ea:2c:ec:8c:e3:ed:fb:c7:18:04:66:6a:0f: 7c:91:cf:4f:ee:37:de:01:c0:59:6d:c6:f7:af:6a: 5f:e1:44:bc:d6:4b:b0:6d:d8:b2:c3:a3:dc:7d:cb: a8:32:d0:dd:41:28:80:92:de:17:65:2d:d2:94:52: 24:4e:d3:80:87:95:22:7f:9f:69:ff:19:0e:2a:0a: 8a:18:5d:cd:ff:c1:9f:1e:26:f8:e5:9f:61:ba:c1: 03:7d:f0:d6:28:63:94:b3:d9:87:d9:f6:b5:42:dc: 9d:52:b8:61:6a:9d:3d:2e:69:19:fa:59:ae:74:ba: 2c:92:eb:72:50:cf:88:ab:58:a7:ba:8b:fe:2f:da: 2f:f8:80:7c:9f:26:79:c1:20:ff:39:ef:bd:77:1a: 6d:df:64:88:6c:96:7b:61:a6:d0:4f:47:59:70:42: 13:0c:29:63:c7:ed:73:fb:fa:65:e5:f2:0d:9a:da: 94:4f:2d:49:af:ee:a4:79:51:dd:36:a5:38:54:9a: 1a:d7:af:db:03:d7:17:cb:c9:67:8c:ab:d0:62:a0: 0f:f9:b6:88:35:50:4c:6d:e1:4f:f7:b3:ea:bc:71: 91:d7:df:04:fd:28:28:2c:44:50:5f:d4:3d:6a:7f: f4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8A:09:A0:AF:CC:C8:37:1C:65:43:55:2F:05:56:E0:D2:44:6F:72 X509v3 Authority Key Identifier: keyid:B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:c9:52:8e:18:d8:e7:e3:be:18:ff:96:e1:4b:c9:24:b9:45: bd:2b:a7:59:b4:60:be:57:00:a1:dd:42:bb:59:75:a0:f0:7a: d2:de:44:1a:4d:2d:7c:bb:9e:33:6d:e4:dc:bd:97:26:d3:34: d5:dd:25:2f:eb:09:51:cb:cb:d4:98:d0:00:24:f6:ae:d4:a3: 8f:81:0c:bf:ec:e0:cc:72:3f:4a:c4:d6:0f:e3:ef:d6:1d:9c: 2c:b7:91:ad:e0:47:f8:ab:a7:06:b8:92:27:18:e2:c8:b0:4c: 30:fd:dc:e0:dd:66:13:40:4b:88:7e:19:13:47:52:c1:f2:3f: 2f:48:a6:d1:d1:b1:bf:e8:23:d2:fd:bd:d3:43:65:40:5f:10: 76:1a:d2:3f:0f:1a:34:a8:5b:cc:ed:47:30:88:8e:61:11:8b: 80:91:6b:b6:4b:57:0a:1c:53:d1:a4:c4:6a:d9:77:69:23:e5: 0d:93:19:eb:44:34:35:c4:8c:6a:cc:ea:d1:38:af:45:f0:e6: 68:6b:d7:c5:bf:5d:43:78:ab:35:2f:a3:86:02:4e:69:b8:48: 14:cf:7f:5d:42:8d:ee:08:be:a4:45:20:27:a1:a7:90:fa:11: fc:66:e7:ae:d9:a5:28:3b:4e:f7:47:8b:12:2d:4a:e7:e6:ee: 23:11:66:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbUaolRIzh9nCH65EuTzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYmZiMGZjMjk4OTY1NDc2YmMxMGY1ODc5MmJmMjg2YzE0 ZDlmZjEwHhcNMjUxMjA2MDgwMTAxWhcNMjUxMjA3MDgwMTAxWjAzMTEwLwYDVQQD Eyg2MzhhMDlhMGFmY2NjODM3MWM2NTQzNTUyZjA1NTZlMGQyNDQ2ZjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMl/6hKmikxIbBb3BnrnQOos7Izj 7fvHGARmag98kc9P7jfeAcBZbcb3r2pf4US81kuwbdiyw6PcfcuoMtDdQSiAkt4X ZS3SlFIkTtOAh5Uif59p/xkOKgqKGF3N/8GfHib45Z9husEDffDWKGOUs9mH2fa1 QtydUrhhap09LmkZ+lmudLoskutyUM+Iq1inuov+L9ov+IB8nyZ5wSD/Oe+9dxpt 32SIbJZ7YabQT0dZcEITDCljx+1z+/pl5fINmtqUTy1Jr+6keVHdNqU4VJoa16/b A9cXy8lnjKvQYqAP+baINVBMbeFP97PqvHGR198E/SgoLERQX9Q9an/0mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOKCaCvzMg3HGVDVS8FVuDSRG9yMB8GA1UdIwQY MBaAFLC/sPwpiWVHa8EPWHkr8obBTZ/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0wtd19DbUpaVWRyd1E5WWVTdnloc0ZObl9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi83ZTY3ZDAtZWNiNy00YzY2LTk5Yjgt ODViMGU3NDc4ODU2LzEvc0wtd19DbUpaVWRyd1E5WWVTdnloc0ZObl9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi83ZTY3ZDAtZWNiNy00YzY2LTk5YjgtODViMGU3NDc4ODU2 LzEvc0wtd19DbUpaVWRyd1E5WWVTdnloc0ZObl9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJclSjhjY 5+O+GP+W4UvJJLlFvSunWbRgvlcAod1Cu1l1oPB60t5EGk0tfLueM23k3L2XJtM0 1d0lL+sJUcvL1JjQACT2rtSjj4EMv+zgzHI/SsTWD+Pv1h2cLLeRreBH+KunBriS JxjiyLBMMP3c4N1mE0BLiH4ZE0dSwfI/L0im0dGxv+gj0v2900NlQF8QdhrSPw8a NKhbzO1HMIiOYRGLgJFrtktXChxT0aTEatl3aSPlDZMZ60Q0NcSMaszq0TivRfDm aGvXxb9dQ3irNS+jhgJOabhIFM9/XUKN7gi+pEUgJ6GnkPoR/GbnrtmlKDtO90eL Ei1K5+buIxFmZg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:02:40 2025 by rpki-client