This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft File: sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft (raw, json) Hash identifier: 65A7VguJVy7wExkiqSc3RkLn2NQVsFx9BHAISWldsz8= Subject key identifier: EF:54:A7:E0:1D:14:3E:C3:91:12:44:95:68:26:96:04:1D:56:AB:4F Authority key identifier: B0:BB:87:D2:0C:C4:20:DF:41:E0:90:C3:3B:4C:40:EF:CB:0D:D8:78 Certificate issuer: /CN=b0bb87d20cc420df41e090c33b4c40efcb0dd878 Certificate serial: 019AF12EB509D87836ADF228F7FCDDD0C130 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLuH0gzEIN9B4JDDO0xA78sN2Hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:02:41 +0000 Manifest this update: Sat 06 Dec 2025 01:02:41 +0000 Manifest next update: Sun 07 Dec 2025 01:02:41 +0000 Files and hashes: 1: sLuH0gzEIN9B4JDDO0xA78sN2Hg.crl (hash: G7el1oX580k88G6ReYNnqo9QQAXZ2m5mIzaBEy22Q3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.crl rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft rsync://rpki.ripe.net/repository/DEFAULT/sLuH0gzEIN9B4JDDO0xA78sN2Hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b5:09:d8:78:36:ad:f2:28:f7:fc:dd:d0:c1:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0bb87d20cc420df41e090c33b4c40efcb0dd878 Validity Not Before: Dec 6 01:02:41 2025 GMT Not After : Dec 7 01:02:41 2025 GMT Subject: CN=ef54a7e01d143ec391124495682696041d56ab4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:93:58:5d:ae:f4:48:d1:b3:91:84:28:be:19: 0d:26:68:32:2a:44:f3:2d:59:9d:3a:b9:7e:d1:da: 77:fc:77:d5:6f:1d:69:8f:48:df:e3:ff:1d:40:81: 90:2b:d3:1f:18:c2:56:19:c2:29:f6:4d:58:75:3a: c9:8d:fe:8b:36:c5:c7:b9:0e:8f:5a:6a:d6:c4:5e: da:9b:e0:9f:a5:1d:15:0f:95:a0:5f:21:d9:b4:fb: cc:e1:2d:e6:18:d0:d6:ff:a0:0e:e3:fb:a0:ce:70: c5:2b:fd:ae:b1:9d:3d:96:2f:eb:63:db:70:d1:42: 78:6f:97:5b:e8:c7:06:9b:77:a0:6b:c3:7d:62:b8: 5c:31:6e:2c:2f:f7:dc:66:4e:e2:49:77:92:02:75: 8f:32:8e:5a:ea:25:de:84:c0:8a:9b:ee:47:9e:ff: e8:6d:32:54:3c:17:01:ac:42:53:fd:ba:2c:36:54: 5c:56:30:03:cb:0c:34:08:99:85:bf:9f:89:34:5e: 1b:2a:1f:66:87:71:41:f3:e7:ab:3a:4e:2e:f6:26: 3e:eb:3d:ab:c3:3e:fa:8d:c5:35:6b:f0:ad:58:5f: e9:68:e8:01:06:d9:49:0a:60:a3:74:cb:8c:85:68: ac:24:ed:83:82:b8:18:00:72:ac:30:ff:87:8c:ca: c9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:54:A7:E0:1D:14:3E:C3:91:12:44:95:68:26:96:04:1D:56:AB:4F X509v3 Authority Key Identifier: keyid:B0:BB:87:D2:0C:C4:20:DF:41:E0:90:C3:3B:4C:40:EF:CB:0D:D8:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLuH0gzEIN9B4JDDO0xA78sN2Hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:6e:3d:51:4a:c9:cd:8f:0c:d8:6b:d2:46:82:f0:49:a2:47: c6:2a:fe:fa:40:3d:e3:9f:a5:cf:44:f6:18:e5:52:7e:fc:bf: 1c:10:81:a2:59:e2:4a:cf:81:cb:c4:5f:b7:6f:a3:ce:ce:7c: f9:9b:a2:0c:69:5b:03:48:9f:b1:de:d3:3b:93:d4:04:d7:c2: 47:6f:8b:eb:3c:8d:51:de:2f:4b:50:ad:82:ee:62:33:43:c1: 78:75:20:04:b0:9a:a3:47:96:94:27:c0:f2:fd:53:d5:03:0d: 4c:b8:82:b7:d7:15:a2:b0:9e:4e:fd:6c:1c:ea:92:25:30:25: 91:23:f0:26:02:b2:d4:e0:be:e3:df:7e:6a:c2:a9:2e:68:4e: 85:dc:c2:0a:4b:97:c6:aa:12:7d:ce:9f:6a:e4:5a:67:47:0b: 97:38:ee:45:67:01:50:9d:d1:09:31:74:09:7e:ac:98:27:12: 7c:19:c7:7a:1f:c9:a4:d3:8f:77:3a:f0:9f:ee:a0:8a:d8:fd: 2a:27:cf:40:2a:20:7f:99:f1:c4:8b:35:fa:47:04:e1:31:34: cd:4d:10:c4:70:59:b7:b3:b1:d4:e9:60:0a:39:41:08:f7:da: cc:f2:75:f1:ea:bf:ab:32:0e:8e:59:c1:58:f9:44:6c:c1:38: 2f:5c:6a:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrUJ2Hg2rfIo9/zd0MEwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYmI4N2QyMGNjNDIwZGY0MWUwOTBjMzNiNGM0MGVmY2Iw ZGQ4NzgwHhcNMjUxMjA2MDEwMjQxWhcNMjUxMjA3MDEwMjQxWjAzMTEwLwYDVQQD EyhlZjU0YTdlMDFkMTQzZWMzOTExMjQ0OTU2ODI2OTYwNDFkNTZhYjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJNYXa70SNGzkYQovhkNJmgyKkTz LVmdOrl+0dp3/HfVbx1pj0jf4/8dQIGQK9MfGMJWGcIp9k1YdTrJjf6LNsXHuQ6P WmrWxF7am+CfpR0VD5WgXyHZtPvM4S3mGNDW/6AO4/ugznDFK/2usZ09li/rY9tw 0UJ4b5db6McGm3ega8N9YrhcMW4sL/fcZk7iSXeSAnWPMo5a6iXehMCKm+5Hnv/o bTJUPBcBrEJT/bosNlRcVjADyww0CJmFv5+JNF4bKh9mh3FB8+erOk4u9iY+6z2r wz76jcU1a/CtWF/paOgBBtlJCmCjdMuMhWisJO2DgrgYAHKsMP+HjMrJ9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9Up+AdFD7DkRJElWgmlgQdVqtPMB8GA1UdIwQY MBaAFLC7h9IMxCDfQeCQwztMQO/LDdh4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0x1SDBnekVJTjlCNEpERE8weEE3OHNOMkhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80ODEzZjItNGM2My00YWEwLTliMjIt MzdiYzhlNjU2ZWIxLzEvc0x1SDBnekVJTjlCNEpERE8weEE3OHNOMkhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi80ODEzZjItNGM2My00YWEwLTliMjItMzdiYzhlNjU2ZWIx LzEvc0x1SDBnekVJTjlCNEpERE8weEE3OHNOMkhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS249UUrJ zY8M2GvSRoLwSaJHxir++kA945+lz0T2GOVSfvy/HBCBolniSs+By8Rft2+jzs58 +ZuiDGlbA0ifsd7TO5PUBNfCR2+L6zyNUd4vS1Ctgu5iM0PBeHUgBLCao0eWlCfA 8v1T1QMNTLiCt9cVorCeTv1sHOqSJTAlkSPwJgKy1OC+499+asKpLmhOhdzCCkuX xqoSfc6fauRaZ0cLlzjuRWcBUJ3RCTF0CX6smCcSfBnHeh/JpNOPdzrwn+6gitj9 KifPQCogf5nxxIs1+kcE4TE0zU0QxHBZt7Ox1OlgCjlBCPfazPJ18eq/qzIOjlnB WPlEbME4L1xq5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:03:05 2025 by rpki-client