This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft File: sl8gfyfZGpE36LZdKQEpmHGqOh0.mft (raw, json) Hash identifier: w/yDYqEn5WVKL7izWylCxrZI5mk6iwd6EQbi+UpqUf4= Subject key identifier: 53:CF:F2:EC:A6:1D:C6:A7:6F:E6:6A:75:43:4F:AA:E7:FB:32:59:A4 Authority key identifier: B2:5F:20:7F:27:D9:1A:91:37:E8:B6:5D:29:01:29:98:71:AA:3A:1D Certificate issuer: /CN=b25f207f27d91a9137e8b65d2901299871aa3a1d Certificate serial: 019AF31B1983FED03FC3C143186C6A8CB054 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sl8gfyfZGpE36LZdKQEpmHGqOh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft Manifest number: 0299 Signing time: Sat 06 Dec 2025 10:00:30 +0000 Manifest this update: Sat 06 Dec 2025 10:00:30 +0000 Manifest next update: Sun 07 Dec 2025 10:00:30 +0000 Files and hashes: 1: sl8gfyfZGpE36LZdKQEpmHGqOh0.crl (hash: LarlnLRnTwzBpyMPvo7CkkwTMS9VtOTaMCo8tJH4JjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft rsync://rpki.ripe.net/repository/DEFAULT/sl8gfyfZGpE36LZdKQEpmHGqOh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:19:83:fe:d0:3f:c3:c1:43:18:6c:6a:8c:b0:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b25f207f27d91a9137e8b65d2901299871aa3a1d Validity Not Before: Dec 6 10:00:30 2025 GMT Not After : Dec 7 10:00:30 2025 GMT Subject: CN=53cff2eca61dc6a76fe66a75434faae7fb3259a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7a:b8:c9:b1:5f:18:83:23:54:11:cd:e0:c0: 3d:73:b4:b9:f2:4c:d3:55:9c:73:15:61:24:45:71: af:03:a5:e2:a1:67:a7:9f:30:6c:f3:d6:92:8e:b5: 34:fa:0b:5c:02:e1:db:2b:2c:90:39:1e:fb:77:f4: f0:06:b8:5c:c0:8d:07:56:5f:9b:b4:7a:e3:c8:5e: e6:7d:f5:51:6b:ac:a3:28:fe:b2:67:00:7d:99:e1: 15:9a:36:81:1f:75:2e:d9:e3:47:b5:77:7c:0c:e9: 52:58:a0:cf:27:af:0d:60:89:85:ee:9d:b7:55:4e: 72:66:81:d0:bc:35:ca:3f:3c:1e:82:38:35:6b:02: 4a:51:b8:eb:20:49:6e:71:0f:36:25:fc:c7:f7:55: 9a:99:44:3a:43:2c:be:dc:d3:b3:d3:9e:76:f2:ec: 13:dd:a9:79:6e:11:cb:ec:e7:2a:f2:97:5a:04:36: 74:2d:30:f3:03:85:11:3b:85:c2:c2:dc:d3:d1:81: c2:ed:3a:7d:1f:81:e5:35:a3:05:72:bd:0b:84:0a: b8:c7:a8:1a:62:19:fe:c2:1e:4f:64:ba:e8:a1:50: db:8e:7e:c1:f2:fd:2f:3f:82:8b:a5:3e:a8:26:ec: c7:50:7b:48:6b:4f:9e:31:3b:9c:c4:e6:76:af:a8: 7f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CF:F2:EC:A6:1D:C6:A7:6F:E6:6A:75:43:4F:AA:E7:FB:32:59:A4 X509v3 Authority Key Identifier: keyid:B2:5F:20:7F:27:D9:1A:91:37:E8:B6:5D:29:01:29:98:71:AA:3A:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sl8gfyfZGpE36LZdKQEpmHGqOh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:85:a9:e2:16:f7:01:4c:0c:e2:6a:58:e6:e2:59:3a:ca:1c: 84:33:77:36:78:e2:a3:d3:69:51:3b:c1:7b:3e:e8:c7:45:4b: ed:87:ff:ac:92:03:13:00:28:df:ba:19:be:14:f0:e4:ac:cd: d2:22:4d:c7:b7:7b:75:76:2f:a6:b4:ce:66:86:a5:51:13:af: 5c:58:8e:a9:a0:b0:5d:1b:5c:4a:d2:8a:da:db:20:8c:a5:57: ae:90:85:80:89:cd:a1:dc:47:07:59:f3:e1:c7:ee:46:2c:7a: 4f:e4:9f:94:d8:d3:76:ec:97:c5:d1:78:c2:8e:6c:2f:9c:be: 80:49:20:5b:b4:66:8b:6b:86:2c:4e:a9:5b:72:eb:75:02:28: b1:ec:d6:f1:72:98:27:db:3d:02:18:9b:13:0d:ff:80:cc:93: 26:a6:af:09:0a:c7:a9:93:8b:51:11:4d:ff:ff:3e:d7:e2:25: c8:66:66:50:4c:a6:28:94:3a:7c:34:8e:78:a1:b6:cf:18:12: 6f:11:6b:e8:82:bb:6b:08:e7:1e:34:23:ac:6b:32:3d:60:41: 48:ca:25:35:40:c0:6c:75:e5:f1:a1:d2:e8:65:1b:20:f0:a7: 9f:73:a2:b2:70:30:d7:df:cb:9e:53:fd:9d:c9:bf:0f:0a:27: 91:9c:2e:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGxmD/tA/w8FDGGxqjLBUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNWYyMDdmMjdkOTFhOTEzN2U4YjY1ZDI5MDEyOTk4NzFh YTNhMWQwHhcNMjUxMjA2MTAwMDMwWhcNMjUxMjA3MTAwMDMwWjAzMTEwLwYDVQQD Eyg1M2NmZjJlY2E2MWRjNmE3NmZlNjZhNzU0MzRmYWFlN2ZiMzI1OWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXq4ybFfGIMjVBHN4MA9c7S58kzT VZxzFWEkRXGvA6XioWennzBs89aSjrU0+gtcAuHbKyyQOR77d/TwBrhcwI0HVl+b tHrjyF7mffVRa6yjKP6yZwB9meEVmjaBH3Uu2eNHtXd8DOlSWKDPJ68NYImF7p23 VU5yZoHQvDXKPzwegjg1awJKUbjrIElucQ82JfzH91WamUQ6Qyy+3NOz05528uwT 3al5bhHL7Ocq8pdaBDZ0LTDzA4URO4XCwtzT0YHC7Tp9H4HlNaMFcr0LhAq4x6ga Yhn+wh5PZLrooVDbjn7B8v0vP4KLpT6oJuzHUHtIa0+eMTucxOZ2r6h/uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPP8uymHcanb+ZqdUNPquf7MlmkMB8GA1UdIwQY MBaAFLJfIH8n2RqRN+i2XSkBKZhxqjodMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2w4Z2Z5ZlpHcEUzNkxaZEtRRXBtSEdxT2gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lZDg1ZGYtMWMxMi00ZTIwLWI3Zjgt MWM5NzQ0YzE5NWY3LzEvc2w4Z2Z5ZlpHcEUzNkxaZEtRRXBtSEdxT2gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lZDg1ZGYtMWMxMi00ZTIwLWI3ZjgtMWM5NzQ0YzE5NWY3 LzEvc2w4Z2Z5ZlpHcEUzNkxaZEtRRXBtSEdxT2gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuIWp4hb3 AUwM4mpY5uJZOsochDN3Nnjio9NpUTvBez7ox0VL7Yf/rJIDEwAo37oZvhTw5KzN 0iJNx7d7dXYvprTOZoalUROvXFiOqaCwXRtcStKK2tsgjKVXrpCFgInNodxHB1nz 4cfuRix6T+SflNjTduyXxdF4wo5sL5y+gEkgW7Rmi2uGLE6pW3LrdQIosezW8XKY J9s9AhibEw3/gMyTJqavCQrHqZOLURFN//8+1+IlyGZmUEymKJQ6fDSOeKG2zxgS bxFr6IK7awjnHjQjrGsyPWBBSMolNUDAbHXl8aHS6GUbIPCnn3OisnAw19/LnlP9 ncm/DwonkZwuMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:01:27 2025 by rpki-client