This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft File: SLQt9x-KKZb70xXQqmF63zQ9WwY.mft (raw, json) Hash identifier: nhhDG9ziY4OdwdkP7p/pdtfMSlTQZJCIW5wIXQH1rWQ= Subject key identifier: 79:D5:C1:2A:95:9F:A7:91:72:93:0F:23:8F:B4:97:94:50:6B:95:57 Authority key identifier: 48:B4:2D:F7:1F:8A:29:96:FB:D3:15:D0:AA:61:7A:DF:34:3D:5B:06 Certificate issuer: /CN=48b42df71f8a2996fbd315d0aa617adf343d5b06 Certificate serial: 019B785CE577437C167179179DCB8E605098 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft Manifest number: 0518 Signing time: Thu 01 Jan 2026 07:01:52 +0000 Manifest this update: Thu 01 Jan 2026 07:01:52 +0000 Manifest next update: Fri 02 Jan 2026 07:01:52 +0000 Files and hashes: 1: SLQt9x-KKZb70xXQqmF63zQ9WwY.crl (hash: fOAeClSFsKDZvgV+VejMFkcOh23Y31uz1zzw+9AGQQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 07:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:5c:e5:77:43:7c:16:71:79:17:9d:cb:8e:60:50:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48b42df71f8a2996fbd315d0aa617adf343d5b06 Validity Not Before: Jan 1 07:01:52 2026 GMT Not After : Jan 2 07:01:52 2026 GMT Subject: CN=79d5c12a959fa79172930f238fb49794506b9557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:86:ae:e6:5c:c1:8b:c8:78:d2:d6:e8:ff:c8: c0:32:98:f2:a2:4c:44:0b:e5:34:d7:83:b8:5c:d2: 8f:ff:c0:68:93:96:03:57:41:59:d4:1f:74:55:03: 11:15:ff:ea:cc:ab:e3:11:99:51:88:f8:f5:b2:f4: b4:2c:16:60:04:71:be:0a:f6:06:5c:61:1c:fc:fc: e0:2c:05:d2:b0:b5:f7:16:71:48:0f:aa:f1:0c:6e: 51:40:1a:06:c9:32:d5:23:7b:7c:cc:c7:93:31:d5: 75:ef:0e:e6:86:80:3a:8f:6b:c9:c4:18:b5:c5:af: 7c:1f:69:5e:3d:26:05:2f:9b:38:25:9c:aa:6d:ec: 60:c4:ea:78:30:c4:42:5e:33:69:fd:d2:34:10:ed: f7:4a:3e:12:ee:66:62:cf:2d:6b:46:c4:3b:95:15: 47:24:09:8b:0a:85:af:ea:fa:5b:2a:e3:16:70:b4: 11:2c:4a:b7:5d:15:80:12:8c:21:af:f5:59:17:63: 32:57:bc:fc:8c:1b:a2:86:3b:74:36:3f:34:b1:24: 29:b8:33:11:30:44:93:8d:60:fa:28:0c:79:c1:d0: 8d:52:57:8c:12:13:bc:04:96:97:cd:cc:44:8f:f0: f0:e4:c9:f0:11:b0:9d:24:2e:b6:a4:3d:ac:94:be: 5d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D5:C1:2A:95:9F:A7:91:72:93:0F:23:8F:B4:97:94:50:6B:95:57 X509v3 Authority Key Identifier: keyid:48:B4:2D:F7:1F:8A:29:96:FB:D3:15:D0:AA:61:7A:DF:34:3D:5B:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:1e:42:c1:26:39:70:a7:3b:d4:43:13:2d:60:a9:38:15:0c: 11:9b:30:da:2b:9d:6c:51:bd:63:1a:52:df:18:c4:4b:5d:9c: dd:c7:1c:76:bf:8f:7a:4f:11:3d:96:26:da:7e:ba:ae:78:de: 32:39:99:76:54:2f:87:b9:7b:7d:2d:3d:33:84:ad:4b:2c:c6: 95:0d:22:ed:1c:80:87:a9:d5:89:7b:bb:ac:d8:17:88:e6:57: a8:fd:39:1d:6a:25:88:a6:3b:d4:a8:bb:ce:07:16:bb:02:3b: 5e:04:ff:82:b7:59:77:f7:32:b1:b8:be:a5:15:73:3e:51:9b: 91:95:ce:59:43:9d:ea:3c:fc:88:1b:9f:43:03:48:a3:45:37: 5e:76:39:51:f2:27:02:05:55:15:6c:e5:2d:7e:a0:ec:5a:54: 26:bc:b2:8c:26:b7:7b:a2:50:a8:60:7f:e9:30:79:c7:19:a7: 00:aa:6c:7b:fa:e5:c7:ab:a5:2a:63:13:6d:2c:dc:25:ff:75: 7f:01:20:e8:d8:82:39:00:04:6c:39:37:e0:4a:e8:29:55:34: e6:de:5e:92:e8:56:f0:88:ac:ed:17:85:8d:48:14:cc:1b:7b: 94:55:48:b6:b6:72:12:2c:9a:45:b1:3d:e5:14:51:09:cb:2d: 9b:b6:58:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4XOV3Q3wWcXkXncuOYFCYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YjQyZGY3MWY4YTI5OTZmYmQzMTVkMGFhNjE3YWRmMzQz ZDViMDYwHhcNMjYwMTAxMDcwMTUyWhcNMjYwMTAyMDcwMTUyWjAzMTEwLwYDVQQD Eyg3OWQ1YzEyYTk1OWZhNzkxNzI5MzBmMjM4ZmI0OTc5NDUwNmI5NTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4au5lzBi8h40tbo/8jAMpjyokxE C+U014O4XNKP/8Bok5YDV0FZ1B90VQMRFf/qzKvjEZlRiPj1svS0LBZgBHG+CvYG XGEc/PzgLAXSsLX3FnFID6rxDG5RQBoGyTLVI3t8zMeTMdV17w7mhoA6j2vJxBi1 xa98H2lePSYFL5s4JZyqbexgxOp4MMRCXjNp/dI0EO33Sj4S7mZizy1rRsQ7lRVH JAmLCoWv6vpbKuMWcLQRLEq3XRWAEowhr/VZF2MyV7z8jBuihjt0Nj80sSQpuDMR MESTjWD6KAx5wdCNUleMEhO8BJaXzcxEj/Dw5MnwEbCdJC62pD2slL5dEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnVwSqVn6eRcpMPI4+0l5RQa5VXMB8GA1UdIwQY MBaAFEi0LfcfiimW+9MV0Kphet80PVsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0xRdDl4LUtLWmI3MHhYUXFtRjYzelE5V3dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83NTQwOTUtNTU4Mi00MjhhLTliMTEt YThiZTRmYjAwMTIxLzEvU0xRdDl4LUtLWmI3MHhYUXFtRjYzelE5V3dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS83NTQwOTUtNTU4Mi00MjhhLTliMTEtYThiZTRmYjAwMTIx LzEvU0xRdDl4LUtLWmI3MHhYUXFtRjYzelE5V3dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAix5CwSY5 cKc71EMTLWCpOBUMEZsw2iudbFG9YxpS3xjES12c3cccdr+Pek8RPZYm2n66rnje MjmZdlQvh7l7fS09M4StSyzGlQ0i7RyAh6nViXu7rNgXiOZXqP05HWoliKY71Ki7 zgcWuwI7XgT/grdZd/cysbi+pRVzPlGbkZXOWUOd6jz8iBufQwNIo0U3XnY5UfIn AgVVFWzlLX6g7FpUJryyjCa3e6JQqGB/6TB5xxmnAKpse/rlx6ulKmMTbSzcJf91 fwEg6NiCOQAEbDk34EroKVU05t5ekuhW8Iis7ReFjUgUzBt7lFVItrZyEiyaRbE9 5RRRCcstm7ZYyQ== -----END CERTIFICATE-----Generated at Thu Jan 1 12:33:27 2026 by rpki-client