This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft File: SFldSlTtZEITxEYZXjb3jsGig5k.mft (raw, json) Hash identifier: 38wiNbM5d+JQaxOSU72Vo5JJS4hFFfKtapY0pB7mMJM= Subject key identifier: 0A:0B:8F:1E:BE:08:1D:6D:16:A6:62:80:08:DE:66:2A:A7:E2:1E:33 Authority key identifier: 48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99 Certificate issuer: /CN=48595d4a54ed644213c446195e36f78ec1a28399 Certificate serial: 019B5298606DCE0FDA458846AF0A359CE7FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 23:01:16 +0000 Manifest this update: Wed 24 Dec 2025 23:01:16 +0000 Manifest next update: Thu 25 Dec 2025 23:01:16 +0000 Files and hashes: 1: 5TwfULMH-unHdDYOcT1BkwSNVj4.roa (hash: MnqaA2gAqS7okflGRdl3L2EkczyiAqyp5YnJcnh49kE=) 2: SFldSlTtZEITxEYZXjb3jsGig5k.crl (hash: MoPxI+59CWSPX+HzlsFt0ef84p5abbGQiI23pU0ypUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:60:6d:ce:0f:da:45:88:46:af:0a:35:9c:e7:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48595d4a54ed644213c446195e36f78ec1a28399 Validity Not Before: Dec 24 23:01:16 2025 GMT Not After : Dec 25 23:01:16 2025 GMT Subject: CN=0a0b8f1ebe081d6d16a6628008de662aa7e21e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f5:f8:ec:87:d5:1a:e6:f0:f0:e2:87:9e:2c: a9:d8:92:a5:05:4d:12:bc:01:0f:2a:fa:06:5a:4e: 16:b9:cd:ce:19:0c:33:bc:d7:16:e3:15:25:f5:46: 2b:23:64:e2:8d:78:6f:a2:aa:61:c5:97:15:87:a9: 0b:47:c9:3d:37:0e:ed:6e:d2:d1:3a:80:09:77:41: 00:14:8e:73:b9:17:b9:c2:db:a4:96:c4:8f:ac:a5: da:1d:86:fb:2c:97:64:33:e3:e0:c3:96:08:cb:e3: 77:01:ec:19:1c:55:ac:fe:45:ee:f3:52:0f:9d:ac: b3:a3:25:1d:71:91:ad:bb:58:34:84:d1:58:18:37: 04:1a:7b:64:e5:8e:03:72:52:c3:8a:61:53:c8:38: 9e:4b:96:23:62:b5:72:0f:fd:0f:e1:cd:ec:97:9e: 0d:52:23:38:04:57:25:30:a3:21:32:2c:54:e0:03: 43:08:c5:94:3a:fd:ef:a2:b7:f8:03:68:42:2c:9f: 88:b5:83:a0:6d:f6:a0:53:d1:da:47:5a:39:cd:37: b1:f1:1a:76:71:66:fa:d4:ba:1c:bf:08:54:63:ec: a0:58:d8:03:95:45:20:f3:84:79:0a:55:50:d2:f7: 38:a3:f1:f7:c7:5c:3e:18:e8:d4:ae:14:79:ab:a8: c8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0B:8F:1E:BE:08:1D:6D:16:A6:62:80:08:DE:66:2A:A7:E2:1E:33 X509v3 Authority Key Identifier: keyid:48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:46:f7:4f:de:82:83:30:3b:0c:3b:22:32:dc:27:37:4a:b7: 17:8a:6b:0f:9c:94:7e:3f:37:ca:46:18:df:04:34:00:ff:b3: 32:60:86:28:7a:5a:93:5b:c3:3e:3a:b8:ff:66:b4:90:76:04: 04:d4:60:9e:c8:c0:96:c7:da:92:40:b8:ce:e8:15:3f:49:46: 1b:f4:87:3c:28:5c:73:e4:22:a3:8b:4b:5a:ff:d0:fd:c6:01: de:fd:82:d9:90:6e:c6:e2:e1:17:b5:a4:0f:d5:7d:dc:da:f6: 06:d3:c3:4b:03:6c:62:87:5a:53:8e:08:11:26:ed:b4:3b:c5: b1:2b:fc:ad:1a:68:da:4b:1a:69:10:41:ab:96:5d:8b:97:43: e9:31:12:4f:1a:6d:6b:05:96:35:1c:c9:94:31:9a:83:0e:43: 16:75:44:9a:4c:da:0e:3e:c4:54:44:13:f1:b7:25:31:43:65: 56:2a:48:75:58:c8:d5:64:0b:f7:76:5c:d5:77:5f:f0:fb:26: 2e:f0:80:78:5d:fb:a6:7c:be:42:cb:3b:02:1d:51:ec:82:eb: d1:70:c9:29:f1:6c:36:10:3e:71:28:2d:5e:ac:1d:69:c7:9a: 0f:f3:51:bd:b8:b0:c4:7f:b3:08:6d:bf:eb:e0:64:9e:f0:1b: 35:01:49:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmGBtzg/aRYhGrwo1nOf9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NTk1ZDRhNTRlZDY0NDIxM2M0NDYxOTVlMzZmNzhlYzFh MjgzOTkwHhcNMjUxMjI0MjMwMTE2WhcNMjUxMjI1MjMwMTE2WjAzMTEwLwYDVQQD EygwYTBiOGYxZWJlMDgxZDZkMTZhNjYyODAwOGRlNjYyYWE3ZTIxZTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfX47IfVGubw8OKHniyp2JKlBU0S vAEPKvoGWk4Wuc3OGQwzvNcW4xUl9UYrI2TijXhvoqphxZcVh6kLR8k9Nw7tbtLR OoAJd0EAFI5zuRe5wtuklsSPrKXaHYb7LJdkM+Pgw5YIy+N3AewZHFWs/kXu81IP nayzoyUdcZGtu1g0hNFYGDcEGntk5Y4DclLDimFTyDieS5YjYrVyD/0P4c3sl54N UiM4BFclMKMhMixU4ANDCMWUOv3vorf4A2hCLJ+ItYOgbfagU9HaR1o5zTex8Rp2 cWb61LocvwhUY+ygWNgDlUUg84R5ClVQ0vc4o/H3x1w+GOjUrhR5q6jICwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoLjx6+CB1tFqZigAjeZiqn4h4zMB8GA1UdIwQY MBaAFEhZXUpU7WRCE8RGGV42947BooOZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0ZsZFNsVHRaRUlUeEVZWlhqYjNqc0dpZzVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82ZTZmNTEtNGUxMy00NjVlLWI0ZDYt MmU4ZGNkZDUxNjUxLzEvU0ZsZFNsVHRaRUlUeEVZWlhqYjNqc0dpZzVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS82ZTZmNTEtNGUxMy00NjVlLWI0ZDYtMmU4ZGNkZDUxNjUx LzEvU0ZsZFNsVHRaRUlUeEVZWlhqYjNqc0dpZzVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtUb3T96C gzA7DDsiMtwnN0q3F4prD5yUfj83ykYY3wQ0AP+zMmCGKHpak1vDPjq4/2a0kHYE BNRgnsjAlsfakkC4zugVP0lGG/SHPChcc+Qio4tLWv/Q/cYB3v2C2ZBuxuLhF7Wk D9V93Nr2BtPDSwNsYodaU44IESbttDvFsSv8rRpo2ksaaRBBq5Zdi5dD6TESTxpt awWWNRzJlDGagw5DFnVEmkzaDj7EVEQT8bclMUNlVipIdVjI1WQL93Zc1Xdf8Psm LvCAeF37pny+Qss7Ah1R7ILr0XDJKfFsNhA+cSgtXqwdaceaD/NRvbiwxH+zCG2/ 6+BknvAbNQFJkg== -----END CERTIFICATE-----Generated at Thu Dec 25 03:00:22 2025 by rpki-client