This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft File: SlyG9c47cLXbUxXWqp1XoAG81oY.mft (raw, json) Hash identifier: 0J6f+ogAYt2Fky1p5OOSCcxKeTHXsWW7Odzd1qbal7Q= Subject key identifier: 33:1E:E4:97:E1:32:3E:71:9D:11:04:DC:85:B7:89:FE:2E:B6:61:11 Authority key identifier: 4A:5C:86:F5:CE:3B:70:B5:DB:53:15:D6:AA:9D:57:A0:01:BC:D6:86 Certificate issuer: /CN=4a5c86f5ce3b70b5db5315d6aa9d57a001bcd686 Certificate serial: 019AF276FE22E8C40F0821493880A9451AAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft Manifest number: 0867 Signing time: Sat 06 Dec 2025 07:01:15 +0000 Manifest this update: Sat 06 Dec 2025 07:01:15 +0000 Manifest next update: Sun 07 Dec 2025 07:01:15 +0000 Files and hashes: 1: SlyG9c47cLXbUxXWqp1XoAG81oY.crl (hash: Z8E5RFDUAtHPv7L4vvhOWQhDZDbw7IMdkkr7n3MDXs4=) 2: npLLh9RrcQH8xkykt9enwrNvhXQ.roa (hash: +AU9dB6ggcPcc7d+ifQcSn4cZAw7WXAjX0hF7llZTBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:fe:22:e8:c4:0f:08:21:49:38:80:a9:45:1a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a5c86f5ce3b70b5db5315d6aa9d57a001bcd686 Validity Not Before: Dec 6 07:01:15 2025 GMT Not After : Dec 7 07:01:15 2025 GMT Subject: CN=331ee497e1323e719d1104dc85b789fe2eb66111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cb:73:04:5d:8b:3f:85:f1:a1:bb:a2:e9:cc: fc:e1:2e:bf:3d:3a:0a:81:ab:c0:9c:44:4f:69:aa: 50:63:42:c1:91:53:17:f8:b6:e4:bf:4f:ee:7a:34: a4:b9:dc:88:05:8b:21:9b:4d:88:a2:a6:11:a6:a3: 9a:4a:3d:e6:3c:58:af:e4:1b:38:2b:05:6e:8d:ee: 9c:e4:15:98:93:ac:87:42:52:be:57:39:68:f9:ea: c3:3a:1c:15:bb:0b:82:c1:64:fe:b4:ff:b0:48:25: ac:e3:f2:26:f3:fd:ba:b0:80:20:e5:4e:6b:e5:a7: dd:8f:b1:14:d7:19:80:91:f3:32:08:1e:e1:0d:f0: a5:b1:68:72:2c:9c:4e:c8:55:7d:9c:21:8b:37:7e: a4:b3:ea:b8:3f:ea:a0:38:9e:b7:d4:44:33:d9:c4: f2:7b:a9:83:0c:14:e0:22:d9:c3:de:00:49:de:c6: 46:f6:a6:20:47:20:b3:ef:2d:f2:ba:e9:6b:de:f2: 2f:56:4c:c3:3f:1a:3c:1e:8d:95:68:83:a0:7e:0c: cb:c2:b7:68:55:df:ab:49:3a:37:42:1b:06:d1:de: 40:88:fc:e9:4e:4f:2c:3a:52:07:41:30:12:67:bd: 78:1a:75:63:09:2e:52:47:d4:59:dd:f1:91:fc:e1: e0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1E:E4:97:E1:32:3E:71:9D:11:04:DC:85:B7:89:FE:2E:B6:61:11 X509v3 Authority Key Identifier: keyid:4A:5C:86:F5:CE:3B:70:B5:DB:53:15:D6:AA:9D:57:A0:01:BC:D6:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:2c:20:72:90:c5:a5:70:15:89:ca:56:e2:e0:6d:a5:08:54: a4:a1:46:f6:28:09:c6:fd:19:be:07:18:4f:07:10:c8:92:51: a2:68:5d:89:75:8b:c4:fe:ad:05:5d:96:74:75:0e:75:98:c4: 7e:44:47:39:91:9f:70:60:09:70:31:fc:94:26:09:c1:bf:0d: 58:c6:ed:a4:e6:09:86:38:b8:aa:61:47:8c:ca:1a:33:0d:57: b4:44:5f:f5:d1:8e:90:af:f7:f2:8f:36:e8:9d:92:8d:e7:51: 3d:f3:64:c8:a1:17:3c:8c:3b:ba:52:a2:f8:17:b5:b1:c6:00: 28:ae:0c:76:1a:ea:71:81:de:2f:99:ca:a7:ad:6f:80:ae:08: f4:b2:00:63:9c:6c:6e:a4:64:c6:ed:df:c4:30:cd:e6:a1:35: b7:57:a8:53:fc:aa:5a:ec:b0:92:83:99:76:c0:98:95:7b:a1: ee:d9:f8:54:53:10:cd:a6:f2:15:2e:21:7d:a9:ff:96:79:4e: a2:f2:69:2e:e0:80:88:73:cd:26:04:b2:a6:53:9f:88:55:61: ec:bc:d6:84:25:be:2a:4d:3c:34:28:47:d5:57:af:3d:3d:6b: 11:2b:74:35:84:fa:46:aa:67:e4:81:a5:1a:9e:8e:e1:e6:4e: 3b:d1:37:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydv4i6MQPCCFJOICpRRqsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNWM4NmY1Y2UzYjcwYjVkYjUzMTVkNmFhOWQ1N2EwMDFi Y2Q2ODYwHhcNMjUxMjA2MDcwMTE1WhcNMjUxMjA3MDcwMTE1WjAzMTEwLwYDVQQD EygzMzFlZTQ5N2UxMzIzZTcxOWQxMTA0ZGM4NWI3ODlmZTJlYjY2MTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuctzBF2LP4Xxobui6cz84S6/PToK gavAnERPaapQY0LBkVMX+Lbkv0/uejSkudyIBYshm02IoqYRpqOaSj3mPFiv5Bs4 KwVuje6c5BWYk6yHQlK+Vzlo+erDOhwVuwuCwWT+tP+wSCWs4/Im8/26sIAg5U5r 5afdj7EU1xmAkfMyCB7hDfClsWhyLJxOyFV9nCGLN36ks+q4P+qgOJ631EQz2cTy e6mDDBTgItnD3gBJ3sZG9qYgRyCz7y3yuulr3vIvVkzDPxo8Ho2VaIOgfgzLwrdo Vd+rSTo3QhsG0d5AiPzpTk8sOlIHQTASZ714GnVjCS5SR9RZ3fGR/OHg+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMe5JfhMj5xnREE3IW3if4utmERMB8GA1UdIwQY MBaAFEpchvXOO3C121MV1qqdV6ABvNaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2x5RzljNDdjTFhiVXhYV3FwMVhvQUc4MW9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85ZTJiYzItNWJjMi00YjZmLTgxYTct NDc3ODNlMjNmYjU5LzEvU2x5RzljNDdjTFhiVXhYV3FwMVhvQUc4MW9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi85ZTJiYzItNWJjMi00YjZmLTgxYTctNDc3ODNlMjNmYjU5 LzEvU2x5RzljNDdjTFhiVXhYV3FwMVhvQUc4MW9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvywgcpDF pXAVicpW4uBtpQhUpKFG9igJxv0ZvgcYTwcQyJJRomhdiXWLxP6tBV2WdHUOdZjE fkRHOZGfcGAJcDH8lCYJwb8NWMbtpOYJhji4qmFHjMoaMw1XtERf9dGOkK/38o82 6J2SjedRPfNkyKEXPIw7ulKi+Be1scYAKK4MdhrqcYHeL5nKp61vgK4I9LIAY5xs bqRkxu3fxDDN5qE1t1eoU/yqWuywkoOZdsCYlXuh7tn4VFMQzabyFS4hfan/lnlO ovJpLuCAiHPNJgSyplOfiFVh7LzWhCW+Kk08NChH1VevPT1rESt0NYT6Rqpn5IGl Gp6O4eZOO9E3hw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:50 2025 by rpki-client