This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft File: sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft (raw, json) Hash identifier: 6a3+PJMIYhtZ3LPgbAIlfH0/LQoyvW1OrC6Zmj2Xubo= Subject key identifier: 3F:B3:15:DF:D3:D8:6C:D7:02:A4:D8:E1:18:2A:31:4B:2F:24:04:E9 Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc Certificate serial: 019AF0BF3D320C6C990E62DCA2A9A6C0AF23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft Manifest number: 0E45 Signing time: Fri 05 Dec 2025 23:00:55 +0000 Manifest this update: Fri 05 Dec 2025 23:00:55 +0000 Manifest next update: Sat 06 Dec 2025 23:00:55 +0000 Files and hashes: 1: WiIPyXHByzAssjj4VKSqXNq3hNo.roa (hash: zCz09ISW2vqCRWl6+kt0e/gaUd26cQmDKkxwLzxkeJQ=) 2: XLNp588BlhjTzq9wL8KooDNiDfQ.roa (hash: yqzj3pa+xK6sQ61wkjeNUDLd0sOcE9ePSDM9S9DIM0g=) 3: sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl (hash: bAGohHi2YLtf5yfPJu8j5dMAKpx1gsBtVE7lpHm5yx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:3d:32:0c:6c:99:0e:62:dc:a2:a9:a6:c0:af:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc Validity Not Before: Dec 5 23:00:55 2025 GMT Not After : Dec 6 23:00:55 2025 GMT Subject: CN=3fb315dfd3d86cd702a4d8e1182a314b2f2404e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0f:7f:71:64:b7:d1:ac:8d:e4:da:75:e0:37: 13:0f:05:a8:b0:fc:9c:30:0e:2a:e4:36:42:4d:b6: d3:c5:fc:da:7b:94:77:00:ff:d4:99:ae:58:59:78: e6:f5:fe:7a:bb:a0:14:c3:54:8e:f1:fb:db:4b:e5: b2:cd:54:fe:71:2c:c2:5a:59:3d:4c:e4:4a:e9:94: 4a:47:86:5e:21:81:5b:6d:d7:d3:78:c3:56:be:c8: 69:c7:9b:c7:d5:10:b7:87:32:aa:13:65:9c:2d:b6: 82:e1:c4:42:e6:1b:ed:64:f8:c8:9d:1f:df:14:8d: fe:d3:3c:62:bc:db:09:d9:08:d6:12:84:4e:1b:25: 6a:d7:3d:0f:98:23:f0:a0:d0:ed:e1:24:46:de:eb: 24:84:cf:5a:e6:c4:11:d2:50:b7:19:fa:1b:e4:bb: 45:9c:eb:91:41:1f:ab:87:9b:98:b9:bb:c0:2a:35: f1:0d:94:a2:36:2f:ac:c5:57:22:5e:b4:8f:6a:95: 5c:86:36:b9:db:71:a3:14:98:07:f4:5b:47:cb:a0: 16:7c:c5:74:1c:d9:bd:30:ee:ac:7d:67:67:b7:4d: 95:bd:11:24:e1:d2:64:e6:43:e1:fc:6b:40:32:a9: 44:c1:33:b8:b4:09:51:6a:b4:16:9a:e2:9a:a3:e7: 77:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B3:15:DF:D3:D8:6C:D7:02:A4:D8:E1:18:2A:31:4B:2F:24:04:E9 X509v3 Authority Key Identifier: keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:43:13:d0:3f:63:11:e6:2d:5a:dd:be:cb:dc:bd:e9:13:7e: 15:e5:54:2a:e5:d5:9e:69:4f:c4:12:6e:b3:6c:58:6b:e3:a2: 82:30:19:ef:95:10:ed:d8:68:58:78:c5:8e:b5:a6:c5:39:c5: 38:f8:17:32:94:d5:34:61:43:3f:c6:ec:e9:21:5f:40:60:98: 45:c7:a3:16:7c:ae:9a:eb:da:24:ea:10:5b:5d:52:b1:78:b6: e1:2b:6b:c3:8c:0a:e8:ed:d4:dd:90:33:38:8b:eb:2f:46:72: f6:d1:a0:66:58:ee:49:22:a6:7c:44:4c:c3:d9:ce:6c:66:bc: 25:3a:36:c2:3d:6e:07:de:12:6c:bc:cf:7a:e4:86:45:e8:df: d8:40:5a:53:e4:0a:63:bd:fa:0a:d4:47:5e:df:47:96:56:bb: b4:a4:59:f9:7c:2c:1c:34:e7:15:81:26:27:d5:2a:91:74:a5: 7f:49:e8:5e:3b:74:3f:33:f4:b6:8e:2e:f4:13:e5:41:3b:0b: d9:a1:62:34:0c:af:44:84:56:df:03:59:0c:f6:9b:14:43:5c: 2c:b4:6e:46:40:90:1d:cf:e6:88:00:6e:da:3a:cf:a4:9b:55: 2f:79:89:51:1c:e2:2f:0c:66:50:d0:a9:5c:ce:ad:9e:8e:34: fe:05:77:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvz0yDGyZDmLcoqmmwK8jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYmQ2OGUzNzBlN2VjMjViZWM4ZTAxNDk3YjIxMzhkOTVk YzZlYmMwHhcNMjUxMjA1MjMwMDU1WhcNMjUxMjA2MjMwMDU1WjAzMTEwLwYDVQQD EygzZmIzMTVkZmQzZDg2Y2Q3MDJhNGQ4ZTExODJhMzE0YjJmMjQwNGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ9/cWS30ayN5Np14DcTDwWosPyc MA4q5DZCTbbTxfzae5R3AP/Uma5YWXjm9f56u6AUw1SO8fvbS+WyzVT+cSzCWlk9 TORK6ZRKR4ZeIYFbbdfTeMNWvshpx5vH1RC3hzKqE2WcLbaC4cRC5hvtZPjInR/f FI3+0zxivNsJ2QjWEoROGyVq1z0PmCPwoNDt4SRG3uskhM9a5sQR0lC3Gfob5LtF nOuRQR+rh5uYubvAKjXxDZSiNi+sxVciXrSPapVchja523GjFJgH9FtHy6AWfMV0 HNm9MO6sfWdnt02VvREk4dJk5kPh/GtAMqlEwTO4tAlRarQWmuKao+d3IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+zFd/T2GzXAqTY4RgqMUsvJATpMB8GA1UdIwQY MBaAFLC9aONw5+wlvsjgFJeyE42V3G68MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0wxbzQzRG43Q1cteU9BVWw3SVRqWlhjYnJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9mNGNhMWMtMzVkZC00Y2IxLTg0ZmEt ODExNWNhZmQzOGNlLzEvc0wxbzQzRG43Q1cteU9BVWw3SVRqWlhjYnJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9mNGNhMWMtMzVkZC00Y2IxLTg0ZmEtODExNWNhZmQzOGNl LzEvc0wxbzQzRG43Q1cteU9BVWw3SVRqWlhjYnJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0MT0D9j EeYtWt2+y9y96RN+FeVUKuXVnmlPxBJus2xYa+OigjAZ75UQ7dhoWHjFjrWmxTnF OPgXMpTVNGFDP8bs6SFfQGCYRcejFnyumuvaJOoQW11SsXi24Strw4wK6O3U3ZAz OIvrL0Zy9tGgZljuSSKmfERMw9nObGa8JTo2wj1uB94SbLzPeuSGRejf2EBaU+QK Y736CtRHXt9Hlla7tKRZ+XwsHDTnFYEmJ9UqkXSlf0noXjt0PzP0to4u9BPlQTsL 2aFiNAyvRIRW3wNZDPabFENcLLRuRkCQHc/miABu2jrPpJtVL3mJURziLwxmUNCp XM6tno40/gV3Fw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:33 2025 by rpki-client