This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft File: sl2FaYjGKmAgc-wpOFgd1KWG-48.mft (raw, json) Hash identifier: gvCcBgnhdr+cCidpXSDbVjOba//aTcjutlfsMbIEa1U= Subject key identifier: 29:6E:47:74:6B:22:5F:AF:02:06:ED:53:14:09:06:57:FA:D4:94:F8 Authority key identifier: B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F Certificate issuer: /CN=b25d856988c62a602073ec2938581dd4a586fb8f Certificate serial: 019AF12D49D4D00AF4A92D852DA9E149DD9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:01:08 +0000 Manifest this update: Sat 06 Dec 2025 01:01:08 +0000 Manifest next update: Sun 07 Dec 2025 01:01:08 +0000 Files and hashes: 1: 7ywY44F6W0hS7hjw1JX0UehS46M.roa (hash: EOy9avDsf7nOFq98ToM6bXsJvV8/Sd2CzZitSl4gKrE=) 2: sl2FaYjGKmAgc-wpOFgd1KWG-48.crl (hash: NHuJRUFldSgEKYankJDiza0kNgBnNMkL4ECHbNlFtbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:49:d4:d0:0a:f4:a9:2d:85:2d:a9:e1:49:dd:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b25d856988c62a602073ec2938581dd4a586fb8f Validity Not Before: Dec 6 01:01:08 2025 GMT Not After : Dec 7 01:01:08 2025 GMT Subject: CN=296e47746b225faf0206ed5314090657fad494f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:53:5d:38:5f:ba:d8:92:ab:bc:7f:74:0c:95: 58:27:da:ed:fc:ae:e5:e9:7d:32:82:4b:2e:81:31: 29:7d:4b:a8:a1:15:43:f3:4e:4e:16:89:7a:48:1f: 1a:be:ca:d2:67:b3:2f:2e:b5:8e:83:ca:7c:68:8b: 33:60:9a:e4:9a:83:b4:8c:79:f8:77:b1:26:da:c4: 0a:96:63:cb:44:12:1a:9b:02:4b:2b:2e:a6:9c:b5: 29:d9:aa:05:08:e7:a1:4a:88:fd:41:65:e2:5f:6e: b7:92:b7:a4:09:94:52:26:5b:a6:14:fb:b1:75:da: 2a:f4:45:77:1a:04:3e:c1:05:37:bd:e5:05:05:c6: 4c:20:87:cf:a4:e3:e0:c1:b4:98:30:25:a4:f3:95: 38:b1:34:57:76:0d:27:c5:30:be:91:ad:ca:39:25: 76:ff:bc:3d:45:88:cf:1a:d6:2d:5c:71:c0:4f:eb: 29:4c:cc:e9:82:ea:07:da:7d:0e:f7:92:02:2c:e3: 57:0b:66:a2:a1:d4:08:e9:9b:34:68:37:b9:8e:4e: 8b:20:20:84:dd:68:42:46:df:10:92:63:cc:03:d1: 28:3f:07:a6:18:96:f7:99:6a:a5:30:e0:97:02:2d: 47:ee:33:7f:df:b1:1c:cc:63:bb:7c:7a:d9:7d:c0: 8e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6E:47:74:6B:22:5F:AF:02:06:ED:53:14:09:06:57:FA:D4:94:F8 X509v3 Authority Key Identifier: keyid:B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:9c:e2:a7:23:48:75:b4:1c:75:5d:b6:a3:2c:5f:21:cd:66: 9d:47:df:02:b6:c9:45:3b:4b:74:44:37:8f:aa:0b:9b:6a:65: 8b:11:ca:8c:f0:d4:a1:9f:22:f6:ef:dc:eb:da:a4:2e:d6:2e: 14:a5:98:5d:b2:d2:e5:1d:07:8f:0b:d7:35:23:90:5b:db:a8: 44:dc:6c:f3:89:95:33:4d:9e:ce:b0:ec:47:eb:dd:52:17:f8: 5b:02:b8:d1:cb:2a:39:01:ae:cc:8e:c5:d2:61:92:bb:41:9c: f8:60:cb:a1:cd:21:b5:dd:3f:d0:69:af:6f:24:f5:a1:94:8a: 31:64:ea:ec:fe:77:f6:01:1e:f9:0f:a5:d8:5b:00:dd:dc:3d: 24:7d:95:5a:e2:37:38:6f:2d:ea:34:0f:2b:13:f6:d4:49:b1: f2:c4:56:d4:0b:9f:bf:fe:0d:b6:e8:cf:c6:14:bb:10:ab:15: 78:09:88:73:a3:85:fb:e6:4d:a2:fd:cd:43:87:1d:24:e0:e2: 2c:f8:fe:cd:64:cd:e6:b9:38:54:49:2b:93:61:13:0d:13:2c: 33:17:a4:22:7b:3a:b7:bb:3a:66:57:49:5c:52:aa:e6:1e:a6: 2c:67:4b:af:a7:e3:f7:99:3b:f8:71:66:29:1a:de:5c:ad:32: 9a:d6:37:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLUnU0Ar0qS2FLanhSd2eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNWQ4NTY5ODhjNjJhNjAyMDczZWMyOTM4NTgxZGQ0YTU4 NmZiOGYwHhcNMjUxMjA2MDEwMTA4WhcNMjUxMjA3MDEwMTA4WjAzMTEwLwYDVQQD EygyOTZlNDc3NDZiMjI1ZmFmMDIwNmVkNTMxNDA5MDY1N2ZhZDQ5NGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVNdOF+62JKrvH90DJVYJ9rt/K7l 6X0ygksugTEpfUuooRVD805OFol6SB8avsrSZ7MvLrWOg8p8aIszYJrkmoO0jHn4 d7Em2sQKlmPLRBIamwJLKy6mnLUp2aoFCOehSoj9QWXiX263krekCZRSJlumFPux ddoq9EV3GgQ+wQU3veUFBcZMIIfPpOPgwbSYMCWk85U4sTRXdg0nxTC+ka3KOSV2 /7w9RYjPGtYtXHHAT+spTMzpguoH2n0O95ICLONXC2aiodQI6Zs0aDe5jk6LICCE 3WhCRt8QkmPMA9EoPwemGJb3mWqlMOCXAi1H7jN/37EczGO7fHrZfcCOfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCluR3RrIl+vAgbtUxQJBlf61JT4MB8GA1UdIwQY MBaAFLJdhWmIxipgIHPsKThYHdSlhvuPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2wyRmFZakdLbUFnYy13cE9GZ2QxS1dHLTQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iYzk4ODgtYmYwYS00YmZkLTk0OTYt OWQwODIxMTdkOGMxLzEvc2wyRmFZakdLbUFnYy13cE9GZ2QxS1dHLTQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iYzk4ODgtYmYwYS00YmZkLTk0OTYtOWQwODIxMTdkOGMx LzEvc2wyRmFZakdLbUFnYy13cE9GZ2QxS1dHLTQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZzipyNI dbQcdV22oyxfIc1mnUffArbJRTtLdEQ3j6oLm2plixHKjPDUoZ8i9u/c69qkLtYu FKWYXbLS5R0HjwvXNSOQW9uoRNxs84mVM02ezrDsR+vdUhf4WwK40csqOQGuzI7F 0mGSu0Gc+GDLoc0htd0/0GmvbyT1oZSKMWTq7P539gEe+Q+l2FsA3dw9JH2VWuI3 OG8t6jQPKxP21Emx8sRW1Aufv/4NtujPxhS7EKsVeAmIc6OF++ZNov3NQ4cdJODi LPj+zWTN5rk4VEkrk2ETDRMsMxekIns6t7s6ZldJXFKq5h6mLGdLr6fj95k7+HFm KRreXK0ymtY3XQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:07 2025 by rpki-client