This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft File: slLdonImonXj55s3TI8mPNLY7NE.mft (raw, json) Hash identifier: JPRzgH//MtiPgMBmsO4/J9VCLxPbr6h+XV/YH1B7h38= Subject key identifier: A6:8D:BF:96:E5:27:37:23:A0:85:47:01:51:BA:BE:48:91:7A:09:A6 Authority key identifier: B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1 Certificate issuer: /CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1 Certificate serial: 019B34FBD1D4C91F0AD03359CFDB62C8DBEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 05:01:17 +0000 Manifest this update: Fri 19 Dec 2025 05:01:17 +0000 Manifest next update: Sat 20 Dec 2025 05:01:17 +0000 Files and hashes: 1: 7QMuMfRcubM7Dw9mRD9Oeleudm0.roa (hash: 34yr97BhHkN5u8FjcTkMX2e6CbJy1pgn7SWZTkyU8GQ=) 2: slLdonImonXj55s3TI8mPNLY7NE.crl (hash: SnPtObihxyzKsPE/4TNPG9gKdXD6JDbcgvaoNdvHG6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:d1:d4:c9:1f:0a:d0:33:59:cf:db:62:c8:db:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b252dda27226a275e3e79b374c8f263cd2d8ecd1 Validity Not Before: Dec 19 05:01:17 2025 GMT Not After : Dec 20 05:01:17 2025 GMT Subject: CN=a68dbf96e5273723a085470151babe48917a09a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:54:5a:0e:1d:94:1d:9a:47:15:f7:2c:b6:5e: 02:92:3e:cf:e3:98:4c:55:52:af:24:2e:aa:ee:c8: 9c:89:c9:c7:53:e8:a3:a3:7e:f9:3c:5d:a6:97:4d: 71:c1:2b:f7:5b:b5:8b:d4:24:6c:3b:7d:9c:39:cd: 8a:88:14:62:43:53:4d:c6:37:e6:ab:83:85:2d:db: 95:b8:13:8f:31:25:af:cd:b4:35:c3:fb:ef:a3:5c: 1e:58:ed:b5:31:bf:e8:14:ed:22:10:90:c0:89:86: 36:9e:6d:2c:a8:b6:30:c7:b9:2b:1a:b7:fb:2b:aa: bb:ef:b2:ff:3a:ea:94:26:5c:31:6c:1d:2a:5d:cd: e2:7f:b2:5a:0a:45:a8:6a:83:07:51:49:8c:93:29: 16:0e:9f:e4:dd:e1:8c:bf:14:8d:b4:b2:d0:76:bd: 15:7a:e0:d4:a1:a3:1f:11:bb:9c:60:7a:3f:f1:94: ee:76:06:1f:63:fd:52:87:a8:0f:ff:27:bc:77:2d: ed:74:0a:c3:9e:1e:03:2e:09:a7:7e:78:ee:13:ca: a1:e8:34:e0:cb:1b:2e:49:6b:2e:2a:05:56:74:39: fd:9e:af:8e:69:52:d8:29:2c:ec:ed:6e:11:8d:a7: 1a:f7:e5:9c:75:36:80:8e:cd:2d:2b:90:f1:95:05: 75:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8D:BF:96:E5:27:37:23:A0:85:47:01:51:BA:BE:48:91:7A:09:A6 X509v3 Authority Key Identifier: keyid:B2:52:DD:A2:72:26:A2:75:E3:E7:9B:37:4C:8F:26:3C:D2:D8:EC:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slLdonImonXj55s3TI8mPNLY7NE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d05a2e-c281-4dab-8373-a1779904b1c5/1/slLdonImonXj55s3TI8mPNLY7NE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:29:73:fc:98:73:8a:83:f3:a6:2b:64:8e:30:f3:96:7e:e9: f4:f1:1c:79:fa:ad:40:c9:bf:8b:e8:5e:b4:ec:c8:c9:4c:75: a8:d6:22:32:a6:a0:9c:bc:3c:53:23:dd:18:13:db:06:a7:88: b9:38:34:23:29:17:d5:08:99:fd:f2:1c:c7:4c:f4:41:c1:df: d9:02:0a:83:b3:7a:bc:d0:8b:80:fe:7c:71:50:c5:4c:b0:2c: 99:3b:68:bf:4e:ae:f1:de:a2:a9:2d:48:70:12:c9:17:d4:47: 77:5e:62:4b:d7:04:a9:bc:fb:17:58:1e:a3:0f:f5:25:9d:df: 08:e3:ab:77:82:af:f9:b6:9a:cb:b0:5a:8c:7f:26:c4:71:f1: 84:42:c0:e4:b9:a8:3f:1f:6f:a9:09:9f:57:7d:61:12:8d:7c: 78:32:ca:1e:f3:dd:02:b8:98:b7:2d:51:f8:41:f8:77:a4:e3: 4e:60:60:72:f9:cc:24:0e:af:7c:a3:3b:65:6a:88:d5:0f:a1: a0:39:e2:84:db:cb:1b:5f:85:62:3e:6b:74:63:1e:20:4e:d0: f7:c5:07:f3:07:1c:27:e7:f6:70:a2:fc:96:cc:14:da:39:bf: 44:a6:48:5a:8d:24:9d:d2:2f:13:3b:3a:6d:c2:89:61:67:f3: 4e:3f:c5:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+9HUyR8K0DNZz9tiyNvqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNTJkZGEyNzIyNmEyNzVlM2U3OWIzNzRjOGYyNjNjZDJk OGVjZDEwHhcNMjUxMjE5MDUwMTE3WhcNMjUxMjIwMDUwMTE3WjAzMTEwLwYDVQQD EyhhNjhkYmY5NmU1MjczNzIzYTA4NTQ3MDE1MWJhYmU0ODkxN2EwOWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVRaDh2UHZpHFfcstl4Ckj7P45hM VVKvJC6q7sicicnHU+ijo375PF2ml01xwSv3W7WL1CRsO32cOc2KiBRiQ1NNxjfm q4OFLduVuBOPMSWvzbQ1w/vvo1weWO21Mb/oFO0iEJDAiYY2nm0sqLYwx7krGrf7 K6q777L/OuqUJlwxbB0qXc3if7JaCkWoaoMHUUmMkykWDp/k3eGMvxSNtLLQdr0V euDUoaMfEbucYHo/8ZTudgYfY/1Sh6gP/ye8dy3tdArDnh4DLgmnfnjuE8qh6DTg yxsuSWsuKgVWdDn9nq+OaVLYKSzs7W4Rjaca9+WcdTaAjs0tK5DxlQV11QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKaNv5blJzcjoIVHAVG6vkiRegmmMB8GA1UdIwQY MBaAFLJS3aJyJqJ14+ebN0yPJjzS2OzRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2xMZG9uSW1vblhqNTVzM1RJOG1QTkxZN05FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kMDVhMmUtYzI4MS00ZGFiLTgzNzMt YTE3Nzk5MDRiMWM1LzEvc2xMZG9uSW1vblhqNTVzM1RJOG1QTkxZN05FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9kMDVhMmUtYzI4MS00ZGFiLTgzNzMtYTE3Nzk5MDRiMWM1 LzEvc2xMZG9uSW1vblhqNTVzM1RJOG1QTkxZN05FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApilz/Jhz ioPzpitkjjDzln7p9PEcefqtQMm/i+hetOzIyUx1qNYiMqagnLw8UyPdGBPbBqeI uTg0IykX1QiZ/fIcx0z0QcHf2QIKg7N6vNCLgP58cVDFTLAsmTtov06u8d6iqS1I cBLJF9RHd15iS9cEqbz7F1geow/1JZ3fCOOrd4Kv+baay7BajH8mxHHxhELA5Lmo Px9vqQmfV31hEo18eDLKHvPdAriYty1R+EH4d6TjTmBgcvnMJA6vfKM7ZWqI1Q+h oDnihNvLG1+FYj5rdGMeIE7Q98UH8wccJ+f2cKL8lswU2jm/RKZIWo0kndIvEzs6 bcKJYWfzTj/Flw== -----END CERTIFICATE-----Generated at Fri Dec 19 12:54:02 2025 by rpki-client