This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft File: sLGxJtrAqgt3lIZADt5yVLJe6qY.mft (raw, json) Hash identifier: YsokiFNW3xrHDnpe0p/IPi4sQ7nR9AcY5LLLHIEdJYY= Subject key identifier: F0:67:A4:27:CA:D9:34:9A:9B:50:3F:07:A1:3F:C9:45:E7:93:6C:E6 Authority key identifier: B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6 Certificate issuer: /CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6 Certificate serial: 019AF5E62F578358A5D07DAFFB3D54CE230A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft Manifest number: 16F6 Signing time: Sat 06 Dec 2025 23:01:34 +0000 Manifest this update: Sat 06 Dec 2025 23:01:34 +0000 Manifest next update: Sun 07 Dec 2025 23:01:34 +0000 Files and hashes: 1: sLGxJtrAqgt3lIZADt5yVLJe6qY.crl (hash: JSSSV4eJ20XUeG1VdyS716jyuHw7IAIjEWO9Wrgk/ik=) 2: y5aXUBKmtNndMqsBfDwB9q7N1JM.roa (hash: ZtFZGojw6I1xjiF5OKZdPGSKt7iqS59zSaAIueVvxRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:2f:57:83:58:a5:d0:7d:af:fb:3d:54:ce:23:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6 Validity Not Before: Dec 6 23:01:34 2025 GMT Not After : Dec 7 23:01:34 2025 GMT Subject: CN=f067a427cad9349a9b503f07a13fc945e7936ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c9:e2:a5:ce:12:86:71:2a:02:9d:1b:e7:36: 27:b6:01:a2:5b:ee:67:be:46:2e:ef:41:1a:a7:85: cb:15:36:2c:ad:fa:16:97:85:ad:3f:7a:ca:d7:1b: 24:c7:84:df:89:7c:ab:62:32:d9:c0:64:dd:8c:44: 2a:74:d1:c7:14:aa:f0:53:09:95:80:e3:34:d4:aa: 4a:f6:f2:25:f4:fb:a3:73:42:9f:4d:4f:78:2e:52: 24:c8:a9:24:9d:9a:21:49:f0:fb:e3:ff:a5:0e:ee: 4a:f5:98:04:85:6a:56:75:d7:8b:58:04:88:ef:31: e7:5c:cd:c1:b4:65:06:16:f0:68:bc:cd:0c:5c:03: 1b:bb:bb:ac:25:f7:4c:04:dc:73:ad:19:0b:2c:73: 6c:c3:7e:47:0c:b0:18:95:28:af:f2:95:01:be:c3: 02:70:d4:12:aa:66:8b:2e:3e:c9:08:a3:21:63:2d: 05:ec:7a:00:0e:e1:bc:56:38:84:d4:9d:7d:f5:c0: 4c:33:1c:67:48:a3:ca:9a:f6:ab:ed:3e:a7:a5:c8: 9a:0f:f9:74:48:0c:42:a6:dc:d8:3a:42:d4:d5:4c: 99:2c:27:82:dc:bc:ce:c2:91:f7:96:be:c0:df:5e: e8:4b:31:8b:d8:b1:cf:89:a3:44:28:a2:79:45:74: c2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:67:A4:27:CA:D9:34:9A:9B:50:3F:07:A1:3F:C9:45:E7:93:6C:E6 X509v3 Authority Key Identifier: keyid:B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f2:33:72:bf:55:43:e6:29:69:6e:63:7d:8d:6d:21:a5:18: cd:ce:e3:b4:07:4d:12:c7:ec:a7:20:74:1d:4a:67:59:2d:6f: 80:8a:21:d7:9d:09:52:37:71:a6:19:4d:4b:90:c4:cd:ed:19: f6:58:47:70:3e:bf:23:b9:9d:ea:7b:5e:43:fa:05:2a:14:4a: 06:d7:a1:86:50:80:e3:94:5a:00:28:f7:a4:f3:bb:d4:5f:b7: 34:f4:f1:67:45:0e:24:56:d7:7b:b0:d9:1e:2d:9e:c6:de:8b: 8e:ce:24:9d:40:76:a7:80:43:cd:9e:4f:c6:06:09:4e:d4:5b: 42:3c:a8:47:db:cb:5f:39:2f:2e:a0:74:41:cf:79:32:47:7d: b3:ed:47:83:89:75:1d:2f:75:58:87:42:9c:61:1a:b2:fe:58: 06:44:9b:80:ba:b8:a2:5b:3d:0a:00:ed:27:af:4c:4e:0c:8a: 4a:55:e6:e2:f5:11:83:20:2c:a9:7a:83:03:1e:18:5b:93:98: c5:9a:6b:a9:47:b3:da:e9:a0:c3:c5:a8:a8:62:55:8e:60:7b: 59:d3:24:b6:fb:36:71:d9:43:c8:a9:56:4f:fe:11:96:af:b3: 06:9f:fe:c3:cf:53:87:b0:a7:84:7c:f8:d3:2c:d9:18:da:3f: a6:c5:d8:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15i9Xg1il0H2v+z1UziMKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYjFiMTI2ZGFjMGFhMGI3Nzk0ODY0MDBlZGU3MjU0YjI1 ZWVhYTYwHhcNMjUxMjA2MjMwMTM0WhcNMjUxMjA3MjMwMTM0WjAzMTEwLwYDVQQD EyhmMDY3YTQyN2NhZDkzNDlhOWI1MDNmMDdhMTNmYzk0NWU3OTM2Y2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8nipc4ShnEqAp0b5zYntgGiW+5n vkYu70Eap4XLFTYsrfoWl4WtP3rK1xskx4TfiXyrYjLZwGTdjEQqdNHHFKrwUwmV gOM01KpK9vIl9Pujc0KfTU94LlIkyKkknZohSfD74/+lDu5K9ZgEhWpWddeLWASI 7zHnXM3BtGUGFvBovM0MXAMbu7usJfdMBNxzrRkLLHNsw35HDLAYlSiv8pUBvsMC cNQSqmaLLj7JCKMhYy0F7HoADuG8VjiE1J199cBMMxxnSKPKmvar7T6npciaD/l0 SAxCptzYOkLU1UyZLCeC3LzOwpH3lr7A317oSzGL2LHPiaNEKKJ5RXTC6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBnpCfK2TSam1A/B6E/yUXnk2zmMB8GA1UdIwQY MBaAFLCxsSbawKoLd5SGQA7eclSyXuqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0xHeEp0ckFxZ3QzbElaQUR0NXlWTEplNnFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YTQ3NmEtMzQ1NS00ZTNhLThjMzMt ZmY4MjRiNDE1NjkzLzEvc0xHeEp0ckFxZ3QzbElaQUR0NXlWTEplNnFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84YTQ3NmEtMzQ1NS00ZTNhLThjMzMtZmY4MjRiNDE1Njkz LzEvc0xHeEp0ckFxZ3QzbElaQUR0NXlWTEplNnFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/Izcr9V Q+YpaW5jfY1tIaUYzc7jtAdNEsfspyB0HUpnWS1vgIoh150JUjdxphlNS5DEze0Z 9lhHcD6/I7md6nteQ/oFKhRKBtehhlCA45RaACj3pPO71F+3NPTxZ0UOJFbXe7DZ Hi2ext6Ljs4knUB2p4BDzZ5PxgYJTtRbQjyoR9vLXzkvLqB0Qc95Mkd9s+1Hg4l1 HS91WIdCnGEasv5YBkSbgLq4ols9CgDtJ69MTgyKSlXm4vURgyAsqXqDAx4YW5OY xZprqUez2umgw8WoqGJVjmB7WdMktvs2cdlDyKlWT/4Rlq+zBp/+w89Th7CnhHz4 0yzZGNo/psXYUQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:38:30 2025 by rpki-client