This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft File: SLo3AWkdKSivrTobVzWib0yZz_Y.mft (raw, json) Hash identifier: 3SUBFehdy05Rk+cl3ZMMi8P83MivUI7IwJ6U6XWIs5Y= Subject key identifier: F8:9C:35:E0:5F:75:10:15:5C:23:ED:6C:8B:1B:25:B6:81:91:23:89 Authority key identifier: 48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6 Certificate issuer: /CN=48ba3701691d2928afad3a1b5735a26f4c99cff6 Certificate serial: 019B3FED2E8053FC8413231BA107C9ABA541 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft Manifest number: 1699 Signing time: Sun 21 Dec 2025 08:01:06 +0000 Manifest this update: Sun 21 Dec 2025 08:01:06 +0000 Manifest next update: Mon 22 Dec 2025 08:01:06 +0000 Files and hashes: 1: 2p_ZO09LakS0A7u5Qz0wGibD5fU.roa (hash: dieDhkHaU+F1D9ZZPlcY6giEpQMREkK77VG8/1P3jjc=) 2: SLo3AWkdKSivrTobVzWib0yZz_Y.crl (hash: ltvYPYnnxxItOiYImEgLEjOvrW25IXoCof//UrPX25k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:2e:80:53:fc:84:13:23:1b:a1:07:c9:ab:a5:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48ba3701691d2928afad3a1b5735a26f4c99cff6 Validity Not Before: Dec 21 08:01:06 2025 GMT Not After : Dec 22 08:01:06 2025 GMT Subject: CN=f89c35e05f7510155c23ed6c8b1b25b681912389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ce:cb:c7:7b:9d:aa:e9:db:2d:20:0f:d2:f8: 0d:54:71:ee:f6:92:fd:c0:90:c3:bd:a1:25:d8:68: 09:8a:a0:34:1b:28:e2:e1:d8:6a:29:f3:36:03:54: 08:26:97:e1:e9:59:fa:57:31:d8:65:b1:5e:99:0b: b4:a1:be:1d:1a:50:a4:98:a4:b4:73:48:7d:e4:59: c8:b2:42:85:a0:e7:9a:3d:0c:2e:18:bd:d8:da:06: 6b:40:e2:9d:b7:3b:2a:94:44:6c:d8:dd:c8:c4:0e: 12:ac:8e:c6:84:32:d6:aa:c1:0d:77:e2:13:e1:4b: 7f:a2:3a:36:9f:47:a5:a4:5c:1f:fe:39:41:7b:1e: 4a:7a:dc:47:fb:a1:b3:bf:e0:58:b1:bb:fb:7a:61: fe:af:8d:cb:f6:2b:e7:07:7c:87:c9:e8:3a:96:89: af:30:cc:7f:9e:23:10:f2:ff:11:43:02:8b:87:60: c4:30:5d:92:f5:74:e8:80:cb:cd:75:29:98:b0:e6: 17:e7:4b:28:78:32:68:ff:66:30:70:ea:06:3d:2e: 83:87:17:90:4c:10:8a:b6:f8:0a:59:42:c8:99:2a: ee:46:74:38:07:16:bb:6f:f3:77:86:03:3f:2e:fa: 4e:7e:6e:57:95:9a:27:54:d0:33:f0:84:1e:90:6e: 1f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9C:35:E0:5F:75:10:15:5C:23:ED:6C:8B:1B:25:B6:81:91:23:89 X509v3 Authority Key Identifier: keyid:48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:99:f7:59:fb:2b:a3:82:3a:31:e1:1b:2a:c9:b8:b1:db:ee: 04:15:d6:52:3b:5f:54:32:2e:9c:18:0d:3d:68:aa:5e:35:ab: 35:bd:00:e7:a3:a4:e4:6f:f8:b6:cd:cd:e0:6e:84:05:1d:3a: 8d:bf:5b:27:71:96:60:e9:6b:56:81:aa:3e:98:f8:59:c9:1e: 98:bf:9a:ab:65:d3:2b:3b:5a:35:7a:fb:84:e8:e3:d2:6b:f6: bb:28:8e:a4:8f:c9:a1:a4:09:a5:f6:b7:5c:b6:b0:0c:31:1b: 2b:7b:7c:ce:d6:13:61:31:90:53:31:2b:97:8a:51:94:c4:8a: 1b:27:98:a4:51:c8:da:73:12:35:d1:2c:68:42:d6:c2:90:d8: ad:76:70:68:ea:e8:52:67:25:98:d1:dd:3a:0c:ff:8d:26:ca: 12:83:b0:47:0c:08:5c:69:17:24:4c:ec:a0:b9:56:2c:89:43: 1c:c2:a2:ff:a9:02:16:8a:12:69:85:f6:99:e2:84:14:b7:4b: 7a:41:cc:09:16:82:28:aa:0f:ac:01:f3:1f:dd:c4:e9:ad:83: d4:da:5a:95:e0:2b:ff:f6:63:11:b2:8f:4f:5e:a4:9f:ab:9d: 7d:4d:2f:5b:92:0e:25:86:e3:66:28:9c:f2:c0:47:1d:e2:1f: 22:14:92:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7S6AU/yEEyMboQfJq6VBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YmEzNzAxNjkxZDI5MjhhZmFkM2ExYjU3MzVhMjZmNGM5 OWNmZjYwHhcNMjUxMjIxMDgwMTA2WhcNMjUxMjIyMDgwMTA2WjAzMTEwLwYDVQQD EyhmODljMzVlMDVmNzUxMDE1NWMyM2VkNmM4YjFiMjViNjgxOTEyMzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM7Lx3udqunbLSAP0vgNVHHu9pL9 wJDDvaEl2GgJiqA0Gyji4dhqKfM2A1QIJpfh6Vn6VzHYZbFemQu0ob4dGlCkmKS0 c0h95FnIskKFoOeaPQwuGL3Y2gZrQOKdtzsqlERs2N3IxA4SrI7GhDLWqsENd+IT 4Ut/ojo2n0elpFwf/jlBex5KetxH+6Gzv+BYsbv7emH+r43L9ivnB3yHyeg6lomv MMx/niMQ8v8RQwKLh2DEMF2S9XTogMvNdSmYsOYX50soeDJo/2YwcOoGPS6DhxeQ TBCKtvgKWULImSruRnQ4Bxa7b/N3hgM/LvpOfm5XlZonVNAz8IQekG4fbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPicNeBfdRAVXCPtbIsbJbaBkSOJMB8GA1UdIwQY MBaAFEi6NwFpHSkor606G1c1om9Mmc/2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83YTg3ODEtZTM2My00NmU0LTk3ZWQt ZTNlODE1MWE4NzYwLzEvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83YTg3ODEtZTM2My00NmU0LTk3ZWQtZTNlODE1MWE4NzYw LzEvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJn3Wfsr o4I6MeEbKsm4sdvuBBXWUjtfVDIunBgNPWiqXjWrNb0A56Ok5G/4ts3N4G6EBR06 jb9bJ3GWYOlrVoGqPpj4WckemL+aq2XTKztaNXr7hOjj0mv2uyiOpI/JoaQJpfa3 XLawDDEbK3t8ztYTYTGQUzErl4pRlMSKGyeYpFHI2nMSNdEsaELWwpDYrXZwaOro UmclmNHdOgz/jSbKEoOwRwwIXGkXJEzsoLlWLIlDHMKi/6kCFooSaYX2meKEFLdL ekHMCRaCKKoPrAHzH93E6a2D1NpaleAr//ZjEbKPT16kn6udfU0vW5IOJYbjZiic 8sBHHeIfIhSSag== -----END CERTIFICATE-----Generated at Sun Dec 21 11:05:28 2025 by rpki-client