This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft File: sL0oE0WvbNVBVNTP908ZWjiP_8E.mft (raw, json) Hash identifier: 3hdLsoMAWAi/gNcYXytNgajDEWIW0omvSRK0xhLo8M8= Subject key identifier: F6:79:A6:7D:38:12:18:6E:28:D3:7B:A7:94:30:B8:36:97:6E:D2:DE Authority key identifier: B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1 Certificate issuer: /CN=b0bd281345af6cd54154d4cff74f195a388fffc1 Certificate serial: 019AF5AEA79E80DA463489DA2A383D3C982D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 22:00:55 +0000 Manifest this update: Sat 06 Dec 2025 22:00:55 +0000 Manifest next update: Sun 07 Dec 2025 22:00:55 +0000 Files and hashes: 1: WQbKsA3j9plFxqexMQZCCTZtrbU.roa (hash: NWTJ5dr27/rFdV1pDzF/Ey/hAby6fAYx1MwHmB4Vn1s=) 2: sL0oE0WvbNVBVNTP908ZWjiP_8E.crl (hash: UOZnwJJVWL9Vwhr+kM67WAsGfi726cFah7MOx/7bMlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:a7:9e:80:da:46:34:89:da:2a:38:3d:3c:98:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0bd281345af6cd54154d4cff74f195a388fffc1 Validity Not Before: Dec 6 22:00:55 2025 GMT Not After : Dec 7 22:00:55 2025 GMT Subject: CN=f679a67d3812186e28d37ba79430b836976ed2de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:58:97:69:6b:92:77:dd:cd:ad:73:79:9c: ef:63:5b:c1:ed:28:0e:e3:d1:96:69:9d:5b:fd:c6: d6:21:45:dc:10:ee:a6:84:ab:96:27:ed:17:87:d3: 33:7b:e3:dd:9e:1a:17:1c:55:e4:11:07:3e:13:19: d5:e0:23:50:08:9b:45:fa:9b:b3:14:a7:6d:2f:c5: d6:55:33:b4:6a:26:75:35:2e:8e:95:97:28:26:41: 79:d1:d2:f3:ac:34:37:7d:df:26:21:df:44:4b:56: 5c:32:9e:a8:d6:b8:fe:ad:2a:b3:4a:0c:b6:99:0c: 07:94:38:e3:03:04:9f:9b:a9:52:06:0b:2d:5b:2b: 9e:ae:d6:bb:4a:62:35:ba:54:20:98:17:f4:d2:ee: 72:04:ce:5b:f1:5f:c1:a6:40:00:75:44:5e:09:85: 2a:f7:46:1e:6c:bb:92:5f:2d:37:3e:a2:d7:02:21: 4f:a9:dd:f0:c5:b8:98:f6:cd:31:04:ad:12:d5:f8: 5e:44:f0:59:11:ce:ac:6b:3f:df:b4:e2:b8:c9:f6: 72:f0:41:70:53:d7:88:93:80:5d:47:9c:03:d3:5a: 6d:58:7a:6b:0c:52:8f:f3:72:a8:85:9f:b0:6f:2f: c6:ec:dc:9b:ac:6b:51:bd:c8:04:d5:46:89:07:2a: c0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:79:A6:7D:38:12:18:6E:28:D3:7B:A7:94:30:B8:36:97:6E:D2:DE X509v3 Authority Key Identifier: keyid:B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:04:9b:b1:2b:f5:fd:88:42:56:26:5e:1d:56:02:3d:26:96: ee:10:e1:0b:f0:bc:7a:0b:d1:ea:50:af:d8:1a:95:f4:36:1d: 31:6a:14:2a:cc:e2:27:07:dd:52:d2:f7:2c:a3:1d:69:27:91: 87:3c:43:f6:c8:10:e3:ea:3c:0b:07:df:3f:aa:d7:e5:8f:f8: 22:64:72:58:26:c7:69:ae:c2:cb:fb:97:ff:ab:ae:1f:1e:75: 98:b6:46:2f:c3:fe:bf:29:f7:96:2b:cd:eb:6f:64:b1:3b:bb: fe:6d:ff:58:04:ac:52:0f:34:0f:b8:b5:05:0b:0a:62:0c:45: ea:8a:9e:58:c7:24:05:31:ae:1b:b9:04:3c:f9:42:03:92:c9: f3:39:51:81:88:61:fa:9c:ba:b2:55:30:f6:41:8a:aa:68:49: a3:a1:3a:0d:f7:a3:de:ed:5a:3b:e4:b3:42:2b:2a:17:51:21: 6b:e8:46:16:3c:ba:85:07:c8:47:d4:87:78:fd:f0:2c:7c:c2: b6:ec:d7:2a:9b:eb:f3:99:92:4a:97:dc:27:0a:fb:17:e3:90: 8d:7e:e9:ac:fc:6c:aa:70:4a:0b:b4:d8:85:f2:d1:65:ab:b0: 23:19:5b:a7:60:76:79:71:90:18:f2:64:eb:66:a6:5d:6c:98: dc:96:d0:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rqeegNpGNInaKjg9PJgtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYmQyODEzNDVhZjZjZDU0MTU0ZDRjZmY3NGYxOTVhMzg4 ZmZmYzEwHhcNMjUxMjA2MjIwMDU1WhcNMjUxMjA3MjIwMDU1WjAzMTEwLwYDVQQD EyhmNjc5YTY3ZDM4MTIxODZlMjhkMzdiYTc5NDMwYjgzNjk3NmVkMmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUtYl2lrknfdza1zeZzvY1vB7SgO 49GWaZ1b/cbWIUXcEO6mhKuWJ+0Xh9Mze+PdnhoXHFXkEQc+ExnV4CNQCJtF+puz FKdtL8XWVTO0aiZ1NS6OlZcoJkF50dLzrDQ3fd8mId9ES1ZcMp6o1rj+rSqzSgy2 mQwHlDjjAwSfm6lSBgstWyuerta7SmI1ulQgmBf00u5yBM5b8V/BpkAAdUReCYUq 90YebLuSXy03PqLXAiFPqd3wxbiY9s0xBK0S1fheRPBZEc6saz/ftOK4yfZy8EFw U9eIk4BdR5wD01ptWHprDFKP83KohZ+wby/G7NybrGtRvcgE1UaJByrAewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZ5pn04EhhuKNN7p5QwuDaXbtLeMB8GA1UdIwQY MBaAFLC9KBNFr2zVQVTUz/dPGVo4j//BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0wwb0UwV3ZiTlZCVk5UUDkwOFpXamlQXzhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mNWZkZWItM2ExNC00YTllLTg4MTUt ZTU2YjY5MGZkMzBlLzEvc0wwb0UwV3ZiTlZCVk5UUDkwOFpXamlQXzhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9mNWZkZWItM2ExNC00YTllLTg4MTUtZTU2YjY5MGZkMzBl LzEvc0wwb0UwV3ZiTlZCVk5UUDkwOFpXamlQXzhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlwSbsSv1 /YhCViZeHVYCPSaW7hDhC/C8egvR6lCv2BqV9DYdMWoUKsziJwfdUtL3LKMdaSeR hzxD9sgQ4+o8CwffP6rX5Y/4ImRyWCbHaa7Cy/uX/6uuHx51mLZGL8P+vyn3livN 629ksTu7/m3/WASsUg80D7i1BQsKYgxF6oqeWMckBTGuG7kEPPlCA5LJ8zlRgYhh +py6slUw9kGKqmhJo6E6Dfej3u1aO+SzQisqF1Eha+hGFjy6hQfIR9SHeP3wLHzC tuzXKpvr85mSSpfcJwr7F+OQjX7prPxsqnBKC7TYhfLRZauwIxlbp2B2eXGQGPJk 62amXWyY3JbQMA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:51:14 2025 by rpki-client