This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft File: _sl9DBu8zD2GcSKhFxD1X3AjAI4.mft (raw, json) Hash identifier: IhBtWrM/DaAQlrch0VdCPlFpQvyNLJzulyUCbITGhXU= Subject key identifier: FB:05:F7:22:CC:3B:BC:FE:DD:7E:6C:C4:61:ED:2C:6C:CE:89:01:E6 Authority key identifier: FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E Certificate issuer: /CN=fec97d0c1bbccc3d867122a11710f55f7023008e Certificate serial: 019AF1D19A11EF0444D3BCFAA2EE902D235C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft Manifest number: 0659 Signing time: Sat 06 Dec 2025 04:00:36 +0000 Manifest this update: Sat 06 Dec 2025 04:00:36 +0000 Manifest next update: Sun 07 Dec 2025 04:00:36 +0000 Files and hashes: 1: _sl9DBu8zD2GcSKhFxD1X3AjAI4.crl (hash: jCVWyroeEz5UmsSU7pEIFpjWlAgjJ58C3oYbGXsDmbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:9a:11:ef:04:44:d3:bc:fa:a2:ee:90:2d:23:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fec97d0c1bbccc3d867122a11710f55f7023008e Validity Not Before: Dec 6 04:00:36 2025 GMT Not After : Dec 7 04:00:36 2025 GMT Subject: CN=fb05f722cc3bbcfedd7e6cc461ed2c6cce8901e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f6:34:3c:89:68:10:31:cb:51:2b:c0:9f:d5: ca:34:d0:7d:d7:1b:d2:77:19:44:d7:07:09:1b:5e: 7e:40:aa:69:92:b9:be:e1:51:c6:7c:20:ce:7f:49: e0:66:d7:cb:02:cc:e0:8d:84:5b:58:be:56:32:3a: 74:ef:43:4c:6d:f0:a7:d5:8a:e5:a5:df:71:d1:f4: 79:4f:e1:34:7d:39:26:05:5d:cd:20:1e:ae:7a:ce: 46:8b:d7:75:99:61:84:d1:67:5b:62:06:86:3d:b0: e9:18:05:55:2b:df:df:57:01:fd:7c:c7:73:e3:2d: 24:b2:96:43:84:ab:fa:41:63:e6:1f:35:e7:a1:44: 65:2e:fe:4a:3e:1f:31:3d:7c:3a:92:09:69:67:cd: 0f:d9:40:e6:9c:f6:09:cb:6b:ce:34:07:40:e6:e4: 5d:74:fb:ce:5d:a3:b9:08:97:39:12:1a:e1:ff:d7: af:90:f2:d0:ca:fd:45:b6:c6:29:60:f1:a7:ed:82: 56:fc:ca:61:ad:88:62:c3:e5:c2:d7:b1:b9:59:97: 64:bd:e5:6d:41:0d:2d:93:b5:4c:79:a1:45:86:16: d8:a9:74:91:7f:93:14:6a:4d:c8:75:b3:22:b3:ba: 99:9c:8a:f1:27:f0:90:0b:ec:51:35:d9:16:e5:a2: d6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:05:F7:22:CC:3B:BC:FE:DD:7E:6C:C4:61:ED:2C:6C:CE:89:01:E6 X509v3 Authority Key Identifier: keyid:FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ba:8f:23:fe:f6:db:83:77:29:24:7b:5e:42:33:de:02:b7: fa:3f:f8:07:d2:7d:ba:a3:80:a4:ac:aa:c5:e6:21:a3:43:e1: 33:19:6a:65:50:0e:91:e8:df:5c:54:d1:e4:a4:c9:68:bb:2e: 8b:10:c6:12:87:5e:9c:e6:d5:9e:49:6e:00:77:09:80:80:97: 06:a7:80:32:08:cb:63:60:63:38:c6:e6:d8:99:ed:28:09:44: c8:3f:3d:bd:95:2c:17:32:94:7b:62:3a:b7:e3:01:8d:f5:0f: 6f:4a:6f:a2:07:d8:b2:12:33:56:8f:31:f4:f5:1d:4e:cd:39: 4c:90:6d:29:c3:ab:0c:50:59:1e:df:bb:b6:be:5d:9f:c7:71: 56:0a:b7:de:22:cc:ce:36:66:89:14:87:c7:5e:46:fa:fb:22: 18:e6:90:53:fc:21:49:32:6f:51:67:12:a9:e0:c5:85:ae:c4: 45:3f:07:d8:c2:c2:b9:ab:14:d3:e1:fd:35:55:29:67:39:db: ef:3b:68:8b:79:ce:28:37:8d:3f:0e:77:4a:59:0f:22:53:da: 0e:9b:17:1b:60:3b:d7:3d:41:56:b0:2d:ff:3f:b6:a6:7b:2b: 55:ed:05:e4:77:70:05:c4:08:fe:18:d0:c8:a3:0a:0f:14:9f: 36:2b:6b:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZoR7wRE07z6ou6QLSNcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYzk3ZDBjMWJiY2NjM2Q4NjcxMjJhMTE3MTBmNTVmNzAy MzAwOGUwHhcNMjUxMjA2MDQwMDM2WhcNMjUxMjA3MDQwMDM2WjAzMTEwLwYDVQQD EyhmYjA1ZjcyMmNjM2JiY2ZlZGQ3ZTZjYzQ2MWVkMmM2Y2NlODkwMWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPY0PIloEDHLUSvAn9XKNNB91xvS dxlE1wcJG15+QKppkrm+4VHGfCDOf0ngZtfLAszgjYRbWL5WMjp070NMbfCn1Yrl pd9x0fR5T+E0fTkmBV3NIB6ues5Gi9d1mWGE0WdbYgaGPbDpGAVVK9/fVwH9fMdz 4y0kspZDhKv6QWPmHzXnoURlLv5KPh8xPXw6kglpZ80P2UDmnPYJy2vONAdA5uRd dPvOXaO5CJc5Ehrh/9evkPLQyv1FtsYpYPGn7YJW/MphrYhiw+XC17G5WZdkveVt QQ0tk7VMeaFFhhbYqXSRf5MUak3IdbMis7qZnIrxJ/CQC+xRNdkW5aLW1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsF9yLMO7z+3X5sxGHtLGzOiQHmMB8GA1UdIwQY MBaAFP7JfQwbvMw9hnEioRcQ9V9wIwCOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3NsOURCdTh6RDJHY1NLaEZ4RDFYM0FqQUk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9iZTc1ODAtNTExMi00YWFiLWFhNzkt OTM5Zjg3YTMxYmYwLzEvX3NsOURCdTh6RDJHY1NLaEZ4RDFYM0FqQUk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9iZTc1ODAtNTExMi00YWFiLWFhNzktOTM5Zjg3YTMxYmYw LzEvX3NsOURCdTh6RDJHY1NLaEZ4RDFYM0FqQUk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbqPI/72 24N3KSR7XkIz3gK3+j/4B9J9uqOApKyqxeYho0PhMxlqZVAOkejfXFTR5KTJaLsu ixDGEodenObVnkluAHcJgICXBqeAMgjLY2BjOMbm2JntKAlEyD89vZUsFzKUe2I6 t+MBjfUPb0pvogfYshIzVo8x9PUdTs05TJBtKcOrDFBZHt+7tr5dn8dxVgq33iLM zjZmiRSHx15G+vsiGOaQU/whSTJvUWcSqeDFha7ERT8H2MLCuasU0+H9NVUpZznb 7ztoi3nOKDeNPw53SlkPIlPaDpsXG2A71z1BVrAt/z+2pnsrVe0F5HdwBcQI/hjQ yKMKDxSfNitrEA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:37:28 2025 by rpki-client