This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft File: siLLxLlfE3uN2qDj8k8FuTPMepo.mft (raw, json) Hash identifier: KfXMrp34gnUV5R9IZyvEEsn2wYxBBbEx1PtiYBXQ22s= Subject key identifier: 0C:00:3D:75:1C:82:9A:13:50:63:6A:0C:D2:1E:FF:D8:A8:AC:02:44 Authority key identifier: B2:22:CB:C4:B9:5F:13:7B:8D:DA:A0:E3:F2:4F:05:B9:33:CC:7A:9A Certificate issuer: /CN=b222cbc4b95f137b8ddaa0e3f24f05b933cc7a9a Certificate serial: 019B2EFABFEC3E51A60EA8B453A5E439DE5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/siLLxLlfE3uN2qDj8k8FuTPMepo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft Manifest number: 177E Signing time: Thu 18 Dec 2025 01:02:23 +0000 Manifest this update: Thu 18 Dec 2025 01:02:23 +0000 Manifest next update: Fri 19 Dec 2025 01:02:23 +0000 Files and hashes: 1: siLLxLlfE3uN2qDj8k8FuTPMepo.crl (hash: o63CWgplkIcNDGpB9WMPpZoEVzisHLp0VD2HMBMv5JA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.crl rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft rsync://rpki.ripe.net/repository/DEFAULT/siLLxLlfE3uN2qDj8k8FuTPMepo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:bf:ec:3e:51:a6:0e:a8:b4:53:a5:e4:39:de:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b222cbc4b95f137b8ddaa0e3f24f05b933cc7a9a Validity Not Before: Dec 18 01:02:23 2025 GMT Not After : Dec 19 01:02:23 2025 GMT Subject: CN=0c003d751c829a1350636a0cd21effd8a8ac0244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:81:4e:de:27:f1:d7:84:1c:38:eb:ee:81:93: 01:2b:ad:1a:4e:73:90:62:61:71:13:4d:17:d4:29: 91:2d:ec:32:ef:d2:b6:29:cc:98:6f:7e:18:7c:36: 0d:1d:b5:2f:20:cf:0a:4a:41:a2:36:b6:0d:fc:8e: 97:74:b0:a9:0e:bc:ea:83:95:ab:47:dc:0c:07:10: f2:cd:a6:45:5a:27:c6:4d:8b:25:d6:c2:89:01:49: ab:99:48:46:28:6c:7a:c9:2a:2d:5c:b6:46:3a:7f: 2f:39:d2:63:2a:df:4c:0f:bf:fc:74:30:4e:10:8a: 64:bf:93:34:2f:a6:a5:25:56:12:46:c7:a1:d1:b4: 59:1f:a4:a3:f3:93:34:08:4a:39:ab:5b:83:09:bf: 44:a1:df:99:0e:4d:27:bb:cc:58:6d:cb:7c:80:ef: 7a:ba:ab:16:1b:34:82:50:f2:dd:7f:22:4b:51:5f: 3b:39:cf:73:cc:e0:7c:48:55:99:37:2d:7c:ce:58: 84:99:cf:10:b6:3a:a9:8a:2a:ee:43:f3:46:1d:aa: af:54:10:aa:42:0f:c4:85:7b:1b:72:15:e6:2a:4c: 1d:26:70:f8:eb:55:ba:32:0d:a8:0d:ee:8a:15:09: ca:ce:75:ff:5f:fa:86:bf:2c:4b:c4:dc:1a:e5:ff: 30:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:00:3D:75:1C:82:9A:13:50:63:6A:0C:D2:1E:FF:D8:A8:AC:02:44 X509v3 Authority Key Identifier: keyid:B2:22:CB:C4:B9:5F:13:7B:8D:DA:A0:E3:F2:4F:05:B9:33:CC:7A:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siLLxLlfE3uN2qDj8k8FuTPMepo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:73:dc:b0:b3:a1:ea:56:98:ce:37:f4:46:4d:56:46:28:81: 43:f5:d2:ca:06:bc:3b:d6:4a:55:de:f0:b9:da:22:ce:57:ba: 2b:ca:81:f9:bd:d2:2c:d0:d7:51:b9:3f:51:2c:9d:d8:77:ff: 60:84:ea:50:a5:18:22:86:8e:4a:5d:18:ea:b6:3b:7a:30:58: 83:a4:fc:4b:aa:91:a1:5a:93:be:ab:b0:ec:a9:b5:f9:ba:a6: 49:5b:56:10:92:f9:e8:cf:6c:8f:f0:3d:e3:3d:69:99:b7:3c: 50:0b:86:c9:cf:93:d6:60:65:d3:ae:2d:9e:04:68:a7:a5:75: 17:4c:ad:d1:0d:e1:16:22:1a:7a:14:ac:6d:1a:0a:39:a6:65: b0:45:37:3a:71:1d:bc:ed:e8:de:11:3b:87:87:5d:1c:c2:57: 21:b1:c4:39:73:0e:32:92:2b:c0:b1:db:fe:b3:1a:10:35:a0: f9:96:b9:46:e6:6c:2d:d9:ae:e0:6d:ae:74:7a:ee:23:2e:b4: 7e:f5:6a:f8:20:b4:06:2c:a1:cc:0d:cd:f5:74:05:d0:b7:c9: 5d:44:c7:a3:15:61:bc:c2:80:44:f7:84:c8:2f:32:90:30:93: bc:04:f1:a8:96:30:ff:48:70:83:cd:90:6a:fb:38:95:f1:25: de:b5:a6:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+r/sPlGmDqi0U6XkOd5fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMjJjYmM0Yjk1ZjEzN2I4ZGRhYTBlM2YyNGYwNWI5MzNj YzdhOWEwHhcNMjUxMjE4MDEwMjIzWhcNMjUxMjE5MDEwMjIzWjAzMTEwLwYDVQQD EygwYzAwM2Q3NTFjODI5YTEzNTA2MzZhMGNkMjFlZmZkOGE4YWMwMjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYFO3ifx14QcOOvugZMBK60aTnOQ YmFxE00X1CmRLewy79K2KcyYb34YfDYNHbUvIM8KSkGiNrYN/I6XdLCpDrzqg5Wr R9wMBxDyzaZFWifGTYsl1sKJAUmrmUhGKGx6ySotXLZGOn8vOdJjKt9MD7/8dDBO EIpkv5M0L6alJVYSRseh0bRZH6Sj85M0CEo5q1uDCb9Eod+ZDk0nu8xYbct8gO96 uqsWGzSCUPLdfyJLUV87Oc9zzOB8SFWZNy18zliEmc8QtjqpiiruQ/NGHaqvVBCq Qg/EhXsbchXmKkwdJnD461W6Mg2oDe6KFQnKznX/X/qGvyxLxNwa5f8w9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwAPXUcgpoTUGNqDNIe/9iorAJEMB8GA1UdIwQY MBaAFLIiy8S5XxN7jdqg4/JPBbkzzHqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2lMTHhMbGZFM3VOMnFEajhrOEZ1VFBNZXBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84MjY5YzQtOWMwMi00Y2MyLTlhOTUt Y2YwZTc4NmExZmZkLzEvc2lMTHhMbGZFM3VOMnFEajhrOEZ1VFBNZXBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84MjY5YzQtOWMwMi00Y2MyLTlhOTUtY2YwZTc4NmExZmZk LzEvc2lMTHhMbGZFM3VOMnFEajhrOEZ1VFBNZXBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHPcsLOh 6laYzjf0Rk1WRiiBQ/XSyga8O9ZKVd7wudoizle6K8qB+b3SLNDXUbk/USyd2Hf/ YITqUKUYIoaOSl0Y6rY7ejBYg6T8S6qRoVqTvquw7Km1+bqmSVtWEJL56M9sj/A9 4z1pmbc8UAuGyc+T1mBl064tngRop6V1F0yt0Q3hFiIaehSsbRoKOaZlsEU3OnEd vO3o3hE7h4ddHMJXIbHEOXMOMpIrwLHb/rMaEDWg+Za5RuZsLdmu4G2udHruIy60 fvVq+CC0BiyhzA3N9XQF0LfJXUTHoxVhvMKARPeEyC8ykDCTvATxqJYw/0hwg82Q avs4lfEl3rWmlw== -----END CERTIFICATE-----Generated at Thu Dec 18 08:15:02 2025 by rpki-client