This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft File: SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft (raw, json) Hash identifier: YWP23KMRL56iSaSxFn89vhcPFMbarvJxKbElM0K/TU0= Subject key identifier: 7A:FB:73:42:7E:37:94:94:2B:F8:5E:71:84:8C:D0:F9:9E:34:E6:EF Authority key identifier: 4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD Certificate issuer: /CN=4a54821a91b1dbdc73bdda34bced7107067964ad Certificate serial: 019B503C9A4BB062E841FCF52DC0B576D378 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft Manifest number: 108E Signing time: Wed 24 Dec 2025 12:01:47 +0000 Manifest this update: Wed 24 Dec 2025 12:01:47 +0000 Manifest next update: Thu 25 Dec 2025 12:01:47 +0000 Files and hashes: 1: JTPc5_QTZJxWgsLJFBAm1KUSpd0.roa (hash: ODeawNoXLkHerXTl+flqRC6XG80opVvKSVEN1ax5xro=) 2: SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl (hash: +o0I9URZDO6Dw84L17Ht4kW26kYrpmq90RzU/LKAieg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 12:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3c:9a:4b:b0:62:e8:41:fc:f5:2d:c0:b5:76:d3:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a54821a91b1dbdc73bdda34bced7107067964ad Validity Not Before: Dec 24 12:01:47 2025 GMT Not After : Dec 25 12:01:47 2025 GMT Subject: CN=7afb73427e3794942bf85e71848cd0f99e34e6ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:87:1d:0f:42:18:13:51:25:10:30:39:75:38: c3:eb:68:1e:18:0f:36:4c:79:2f:4f:c3:aa:53:bd: ab:f3:77:b5:c2:da:a3:98:12:40:50:11:35:81:c1: d5:d9:c7:86:43:9c:5e:92:3c:c7:b5:58:86:32:b7: 1f:74:de:f5:62:61:75:f0:1d:fd:f9:26:0d:f8:b0: ac:58:88:36:72:3e:18:db:cc:ad:92:b9:6e:8e:79: 61:6e:6d:8c:a0:87:3d:33:b5:72:f9:43:ce:d8:e0: 2a:9e:1b:e2:20:86:0a:b7:5a:ce:0f:b5:3f:59:a6: e7:26:b6:40:fe:2f:4e:a1:ac:25:a6:5d:0e:d3:aa: 91:a0:4a:1e:7b:52:75:4d:67:d9:2f:d8:7b:d4:dc: 1d:74:9e:61:67:cf:78:b5:6a:ae:91:3b:01:83:af: 07:ff:45:b4:a1:63:19:a3:66:32:b8:8d:a8:27:be: 7e:cc:59:6d:2a:29:71:21:d2:52:b9:2b:5c:45:0d: 9f:f2:c6:68:dc:3e:bc:48:f4:fc:70:5d:fd:c1:b4: c0:49:eb:30:bb:1e:23:75:ed:75:f2:24:ce:89:d2: df:e9:97:02:ac:b9:8c:4d:5c:86:8a:d8:51:a8:cd: 26:36:38:b7:b5:3d:59:94:c1:f2:62:05:cb:16:32: 77:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FB:73:42:7E:37:94:94:2B:F8:5E:71:84:8C:D0:F9:9E:34:E6:EF X509v3 Authority Key Identifier: keyid:4A:54:82:1A:91:B1:DB:DC:73:BD:DA:34:BC:ED:71:07:06:79:64:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d2e35-9fed-4fdf-9034-76ae812f076c/1/SlSCGpGx29xzvdo0vO1xBwZ5ZK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e0:8c:6a:50:fb:55:59:5b:ac:0d:d7:70:3b:66:49:6d:44: ef:67:12:1a:e2:65:be:11:5a:26:8c:18:ad:1e:5d:a1:14:1d: a8:12:56:ed:41:87:d9:db:7c:7d:5e:c2:3b:ac:46:9c:ea:71: 47:42:7c:08:9a:36:a2:d2:63:4b:b5:46:79:95:ef:32:f6:55: 33:cf:ba:85:70:3d:a5:57:cf:68:b0:94:9b:73:c0:4a:f8:5f: 05:9a:48:eb:45:ab:2f:11:8b:56:ae:0a:d2:4a:7c:d9:d5:ec: b0:3e:3c:ba:59:45:e7:14:98:a4:86:e9:66:16:66:2f:6e:c9: 6c:b5:f8:39:d0:b3:15:91:fd:8a:eb:15:a8:b3:7b:8d:8c:b1: 7b:5b:f4:e3:75:01:cd:99:cd:63:85:9a:c5:c5:f8:78:ff:32: 93:81:40:02:33:02:8c:bb:cf:86:6e:c2:6c:c0:68:67:87:6d: 96:39:19:ce:41:ed:b3:00:19:96:df:5e:9f:2c:79:3a:b8:d3: 74:69:77:0b:f7:ca:27:11:ad:17:41:d9:dc:e9:12:3d:93:79: 34:e5:5b:7e:97:d1:90:1b:a7:e4:0e:dd:2e:42:80:36:4c:a1: fc:36:cf:dc:cb:72:89:a5:aa:4e:4d:1f:8c:bf:09:05:e9:52: 9a:ef:98:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQPJpLsGLoQfz1LcC1dtN4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNTQ4MjFhOTFiMWRiZGM3M2JkZGEzNGJjZWQ3MTA3MDY3 OTY0YWQwHhcNMjUxMjI0MTIwMTQ3WhcNMjUxMjI1MTIwMTQ3WjAzMTEwLwYDVQQD Eyg3YWZiNzM0MjdlMzc5NDk0MmJmODVlNzE4NDhjZDBmOTllMzRlNmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+IcdD0IYE1ElEDA5dTjD62geGA82 THkvT8OqU72r83e1wtqjmBJAUBE1gcHV2ceGQ5xekjzHtViGMrcfdN71YmF18B39 +SYN+LCsWIg2cj4Y28ytkrlujnlhbm2MoIc9M7Vy+UPO2OAqnhviIIYKt1rOD7U/ WabnJrZA/i9Ooawlpl0O06qRoEoee1J1TWfZL9h71NwddJ5hZ894tWqukTsBg68H /0W0oWMZo2YyuI2oJ75+zFltKilxIdJSuStcRQ2f8sZo3D68SPT8cF39wbTASesw ux4jde118iTOidLf6ZcCrLmMTVyGithRqM0mNji3tT1ZlMHyYgXLFjJ32wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHr7c0J+N5SUK/hecYSM0PmeNObvMB8GA1UdIwQY MBaAFEpUghqRsdvcc73aNLztcQcGeWStMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2xTQ0dwR3gyOXh6dmRvMHZPMXhCd1o1WkswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84ZDJlMzUtOWZlZC00ZmRmLTkwMzQt NzZhZTgxMmYwNzZjLzEvU2xTQ0dwR3gyOXh6dmRvMHZPMXhCd1o1WkswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi84ZDJlMzUtOWZlZC00ZmRmLTkwMzQtNzZhZTgxMmYwNzZj LzEvU2xTQ0dwR3gyOXh6dmRvMHZPMXhCd1o1WkswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcuCMalD7 VVlbrA3XcDtmSW1E72cSGuJlvhFaJowYrR5doRQdqBJW7UGH2dt8fV7CO6xGnOpx R0J8CJo2otJjS7VGeZXvMvZVM8+6hXA9pVfPaLCUm3PASvhfBZpI60WrLxGLVq4K 0kp82dXssD48ullF5xSYpIbpZhZmL27JbLX4OdCzFZH9iusVqLN7jYyxe1v043UB zZnNY4WaxcX4eP8yk4FAAjMCjLvPhm7CbMBoZ4dtljkZzkHtswAZlt9enyx5OrjT dGl3C/fKJxGtF0HZ3OkSPZN5NOVbfpfRkBun5A7dLkKANkyh/DbP3MtyiaWqTk0f jL8JBelSmu+YrQ== -----END CERTIFICATE-----Generated at Wed Dec 24 19:59:37 2025 by rpki-client