This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft File: RovSl-go2l6hLA32zXQmt4MHRos.mft (raw, json) Hash identifier: 8fdcn1XaJ1Zj8IOcOraY0esexWl6hmQe9SG4N+WK1dY= Subject key identifier: 08:5D:86:18:3C:5D:5C:C6:7D:65:85:24:CE:ED:31:DD:9E:65:6F:45 Authority key identifier: 46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B Certificate issuer: /CN=468bd297e828da5ea12c0df6cd7426b78307468b Certificate serial: 019AF2097279BCDB8152E0A3F7AE8F1ADE98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 05:01:36 +0000 Manifest this update: Sat 06 Dec 2025 05:01:36 +0000 Manifest next update: Sun 07 Dec 2025 05:01:36 +0000 Files and hashes: 1: RovSl-go2l6hLA32zXQmt4MHRos.crl (hash: ufIxoe9Py6IQVsad/T0ptG/nZiUDR+udza3bK4YoKIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:72:79:bc:db:81:52:e0:a3:f7:ae:8f:1a:de:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468bd297e828da5ea12c0df6cd7426b78307468b Validity Not Before: Dec 6 05:01:36 2025 GMT Not After : Dec 7 05:01:36 2025 GMT Subject: CN=085d86183c5d5cc67d658524ceed31dd9e656f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0d:70:d6:3e:9c:f0:ae:81:a9:35:13:e5:87: c4:25:4c:40:f1:51:b3:0a:10:7c:2a:af:93:7e:bd: 85:75:50:93:3b:c9:74:15:e5:6f:79:23:33:f2:56: 60:6e:61:0e:08:51:57:72:52:b9:dd:ca:d2:dc:90: 74:1d:6b:98:aa:42:ae:47:cc:e5:68:7b:e1:7b:cd: 39:95:29:83:20:f9:1e:46:7b:4b:e0:3e:9b:a9:1f: fb:cf:1d:c0:5b:ea:48:db:da:2e:e4:69:ca:66:f3: 5d:fd:a8:bf:50:5d:29:c4:b5:cd:7f:02:48:21:bf: 09:f1:ab:d8:b7:82:5b:03:1b:5b:43:e3:e0:11:c1: 02:9f:30:d5:a4:2a:bc:07:25:90:e1:d1:9a:7a:e6: 1b:e0:a8:c5:be:6a:a1:d8:32:b3:06:32:77:67:dd: ec:6c:6b:a0:76:3a:48:18:4a:25:2b:07:60:a8:c3: 9f:8b:3b:89:aa:53:5c:70:0e:97:56:e9:f9:13:5b: 5f:e0:c4:bf:ef:fb:0b:1e:ec:9a:cf:e8:c2:fe:3e: 96:52:ef:17:47:12:06:59:76:1d:1e:98:22:af:cb: f8:c3:e9:d0:03:58:7f:53:78:d7:27:35:16:2a:d7: 9d:a9:83:8c:20:23:55:d2:2f:9d:4a:ac:fa:06:01: 18:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5D:86:18:3C:5D:5C:C6:7D:65:85:24:CE:ED:31:DD:9E:65:6F:45 X509v3 Authority Key Identifier: keyid:46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:1b:db:a3:36:75:92:b9:b2:b4:d2:dc:74:51:cf:ba:65:94: 98:e2:bb:18:33:20:8d:f9:ae:e1:ed:45:52:6f:27:4c:08:cb: e1:cf:28:88:fc:9d:69:5e:73:ad:30:50:02:20:57:64:a8:6d: 00:3d:58:92:99:29:83:66:74:72:ee:95:36:61:c5:ba:38:f3: 01:2d:87:f2:0d:2f:ab:6f:d2:10:61:5a:2d:f9:64:41:ca:b3: 6b:de:26:f2:a2:95:89:04:af:db:4e:84:2a:84:2d:78:dc:a0: ce:8a:9f:5b:97:23:a8:48:1e:a1:95:b8:6f:3d:26:40:b9:0a: eb:27:14:2c:bd:a0:55:b6:80:e6:27:81:6d:23:db:6c:37:63: b4:3c:07:fd:d0:6e:b5:2c:75:10:a7:44:11:96:de:87:b2:e6: 36:4b:b4:a4:ac:d0:6f:31:6b:ba:e4:c2:a4:26:6c:4b:44:cb: 77:eb:b4:7a:8b:e8:fb:f6:fc:11:3c:6a:52:1c:76:e2:3f:84: 9b:b6:52:8f:29:f7:b3:43:93:f9:c5:73:e7:b9:0d:03:bb:ae: 36:99:9d:d6:c9:ab:16:7d:57:53:d9:2e:91:1e:cf:76:89:42: 9f:36:49:61:d7:e9:e1:6c:d6:80:8a:b1:c6:ec:a0:93:5f:ef: f7:c8:a2:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXJ5vNuBUuCj966PGt6YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGJkMjk3ZTgyOGRhNWVhMTJjMGRmNmNkNzQyNmI3ODMw NzQ2OGIwHhcNMjUxMjA2MDUwMTM2WhcNMjUxMjA3MDUwMTM2WjAzMTEwLwYDVQQD EygwODVkODYxODNjNWQ1Y2M2N2Q2NTg1MjRjZWVkMzFkZDllNjU2ZjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA1w1j6c8K6BqTUT5YfEJUxA8VGz ChB8Kq+Tfr2FdVCTO8l0FeVveSMz8lZgbmEOCFFXclK53crS3JB0HWuYqkKuR8zl aHvhe805lSmDIPkeRntL4D6bqR/7zx3AW+pI29ou5GnKZvNd/ai/UF0pxLXNfwJI Ib8J8avYt4JbAxtbQ+PgEcECnzDVpCq8ByWQ4dGaeuYb4KjFvmqh2DKzBjJ3Z93s bGugdjpIGEolKwdgqMOfizuJqlNccA6XVun5E1tf4MS/7/sLHuyaz+jC/j6WUu8X RxIGWXYdHpgir8v4w+nQA1h/U3jXJzUWKtedqYOMICNV0i+dSqz6BgEYUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhdhhg8XVzGfWWFJM7tMd2eZW9FMB8GA1UdIwQY MBaAFEaL0pfoKNpeoSwN9s10JreDB0aLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm92U2wtZ28ybDZoTEEzMnpYUW10NE1IUm9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS85NzkyYjAtYzljNC00ODQ4LWI3MTMt ODNkMDljZWZiZTg4LzEvUm92U2wtZ28ybDZoTEEzMnpYUW10NE1IUm9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS85NzkyYjAtYzljNC00ODQ4LWI3MTMtODNkMDljZWZiZTg4 LzEvUm92U2wtZ28ybDZoTEEzMnpYUW10NE1IUm9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsBvbozZ1 krmytNLcdFHPumWUmOK7GDMgjfmu4e1FUm8nTAjL4c8oiPydaV5zrTBQAiBXZKht AD1Ykpkpg2Z0cu6VNmHFujjzAS2H8g0vq2/SEGFaLflkQcqza94m8qKViQSv206E KoQteNygzoqfW5cjqEgeoZW4bz0mQLkK6ycULL2gVbaA5ieBbSPbbDdjtDwH/dBu tSx1EKdEEZbeh7LmNku0pKzQbzFruuTCpCZsS0TLd+u0eovo+/b8ETxqUhx24j+E m7ZSjyn3s0OT+cVz57kNA7uuNpmd1smrFn1XU9kukR7PdolCnzZJYdfp4WzWgIqx xuygk1/v98iiWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:56 2025 by rpki-client