This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft File: SlyG9c47cLXbUxXWqp1XoAG81oY.mft (raw, json) Hash identifier: RINBooC5D6YuQ9JsCfjvQP45cElGZxIDhvtYk9rdpaE= Subject key identifier: 2D:31:FE:06:90:93:1C:CA:C6:9A:CD:22:3D:63:45:E0:A8:25:AD:BF Authority key identifier: 4A:5C:86:F5:CE:3B:70:B5:DB:53:15:D6:AA:9D:57:A0:01:BC:D6:86 Certificate issuer: /CN=4a5c86f5ce3b70b5db5315d6aa9d57a001bcd686 Certificate serial: 019B3DC758E5D47EA47F8782A3B591C5FB75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft Manifest number: 088E Signing time: Sat 20 Dec 2025 22:00:33 +0000 Manifest this update: Sat 20 Dec 2025 22:00:33 +0000 Manifest next update: Sun 21 Dec 2025 22:00:33 +0000 Files and hashes: 1: SlyG9c47cLXbUxXWqp1XoAG81oY.crl (hash: F2krDUEiwxKSDJ9BGhkEnjBo8zxBJdzZV9cIpfOxCoU=) 2: npLLh9RrcQH8xkykt9enwrNvhXQ.roa (hash: +AU9dB6ggcPcc7d+ifQcSn4cZAw7WXAjX0hF7llZTBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:58:e5:d4:7e:a4:7f:87:82:a3:b5:91:c5:fb:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a5c86f5ce3b70b5db5315d6aa9d57a001bcd686 Validity Not Before: Dec 20 22:00:33 2025 GMT Not After : Dec 21 22:00:33 2025 GMT Subject: CN=2d31fe0690931ccac69acd223d6345e0a825adbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c7:bd:56:c3:3d:56:54:12:04:6c:c9:cf:39: de:d7:f5:a5:52:b8:6b:40:a4:21:b7:d5:de:e2:1d: c8:27:fb:59:82:97:79:d8:88:8c:a9:b5:71:48:15: 4b:36:a9:6c:ec:f4:1a:e9:40:04:13:e2:89:d9:4a: 7c:af:a6:35:b0:76:ef:60:d3:62:a6:fe:4a:84:28: 3d:aa:90:cd:90:21:8f:a6:bc:99:29:4e:59:e8:86: cc:b4:84:e4:4c:4d:d4:6d:0e:5a:62:b7:a2:89:db: 0e:70:de:78:7c:62:b7:fb:72:29:5b:ba:2b:19:c2: c6:7f:81:8e:0d:e7:78:ef:79:57:c9:36:0f:19:90: ae:63:e1:31:4c:ae:26:99:ac:53:fd:83:59:8e:a7: f0:ab:37:99:47:57:2a:c6:5c:f8:09:b8:2e:bc:e9: 57:66:a3:66:6b:81:18:56:2e:f6:d5:68:ad:c3:10: 88:c4:fa:59:91:44:0d:84:14:35:22:5f:e8:b0:38: cc:f4:d6:1d:b0:8d:6f:32:ab:a4:57:00:55:47:c6: 5c:9c:9b:e0:fb:ee:a4:d5:8c:97:dd:a0:bd:ed:6e: 88:ea:c8:8d:bf:e0:04:8d:ff:18:f6:59:57:10:6d: 9f:8f:e2:33:93:3b:da:a3:9c:25:6e:e0:2f:09:1f: a2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:31:FE:06:90:93:1C:CA:C6:9A:CD:22:3D:63:45:E0:A8:25:AD:BF X509v3 Authority Key Identifier: keyid:4A:5C:86:F5:CE:3B:70:B5:DB:53:15:D6:AA:9D:57:A0:01:BC:D6:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:57:0c:38:93:0f:36:e4:af:96:8c:d5:33:c7:d9:b8:db:8b: 26:51:14:d7:c3:fe:b8:99:16:ed:d5:93:51:8e:e5:c4:3f:fa: bc:36:19:b2:33:75:0c:cc:d8:77:11:88:ce:69:72:99:23:3d: b6:a4:e3:fa:ca:92:ab:be:81:87:f0:0c:fc:29:58:1a:7a:c2: 6e:9d:a2:7c:7d:31:eb:df:69:aa:63:47:72:3a:4f:12:88:2b: 6f:ee:0d:3f:03:b7:d2:6f:59:96:6a:04:85:4d:cc:7b:d0:8f: 64:a2:e7:6d:0a:8a:b7:06:44:5a:ef:a6:9a:51:2d:04:b9:98: bd:6c:69:47:51:da:d2:88:5b:53:4b:cc:76:40:03:93:f8:32: d5:5a:08:ee:bd:4b:f9:6f:1a:95:ba:c7:19:5c:8b:7c:a5:e4: 89:7b:5e:b1:cf:e2:b7:8f:8f:cb:66:4f:e5:13:63:32:f7:db: f6:5b:f6:db:e6:0a:20:42:a1:1d:fa:4c:41:40:84:dc:68:46: 11:45:d6:b4:37:2c:6b:92:af:a6:9d:b5:64:f2:70:bb:1f:10: c1:fc:a4:fa:71:76:c0:84:46:1a:29:81:95:56:17:23:0b:b1: dd:c3:b7:db:9a:a3:94:ee:a7:8b:a3:2a:1b:46:cd:c9:cf:0e: 83:45:45:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x1jl1H6kf4eCo7WRxft1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNWM4NmY1Y2UzYjcwYjVkYjUzMTVkNmFhOWQ1N2EwMDFi Y2Q2ODYwHhcNMjUxMjIwMjIwMDMzWhcNMjUxMjIxMjIwMDMzWjAzMTEwLwYDVQQD EygyZDMxZmUwNjkwOTMxY2NhYzY5YWNkMjIzZDYzNDVlMGE4MjVhZGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8e9VsM9VlQSBGzJzzne1/WlUrhr QKQht9Xe4h3IJ/tZgpd52IiMqbVxSBVLNqls7PQa6UAEE+KJ2Up8r6Y1sHbvYNNi pv5KhCg9qpDNkCGPpryZKU5Z6IbMtITkTE3UbQ5aYreiidsOcN54fGK3+3IpW7or GcLGf4GODed473lXyTYPGZCuY+ExTK4mmaxT/YNZjqfwqzeZR1cqxlz4CbguvOlX ZqNma4EYVi721WitwxCIxPpZkUQNhBQ1Il/osDjM9NYdsI1vMqukVwBVR8ZcnJvg ++6k1YyX3aC97W6I6siNv+AEjf8Y9llXEG2fj+Izkzvao5wlbuAvCR+iAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0x/gaQkxzKxprNIj1jReCoJa2/MB8GA1UdIwQY MBaAFEpchvXOO3C121MV1qqdV6ABvNaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2x5RzljNDdjTFhiVXhYV3FwMVhvQUc4MW9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85ZTJiYzItNWJjMi00YjZmLTgxYTct NDc3ODNlMjNmYjU5LzEvU2x5RzljNDdjTFhiVXhYV3FwMVhvQUc4MW9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi85ZTJiYzItNWJjMi00YjZmLTgxYTctNDc3ODNlMjNmYjU5 LzEvU2x5RzljNDdjTFhiVXhYV3FwMVhvQUc4MW9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVcMOJMP NuSvlozVM8fZuNuLJlEU18P+uJkW7dWTUY7lxD/6vDYZsjN1DMzYdxGIzmlymSM9 tqTj+sqSq76Bh/AM/ClYGnrCbp2ifH0x699pqmNHcjpPEogrb+4NPwO30m9ZlmoE hU3Me9CPZKLnbQqKtwZEWu+mmlEtBLmYvWxpR1Ha0ohbU0vMdkADk/gy1VoI7r1L +W8albrHGVyLfKXkiXtesc/it4+Py2ZP5RNjMvfb9lv22+YKIEKhHfpMQUCE3GhG EUXWtDcsa5Kvpp21ZPJwux8Qwfyk+nF2wIRGGimBlVYXIwux3cO325qjlO6ni6Mq G0bNyc8Og0VF5A== -----END CERTIFICATE-----Generated at Sun Dec 21 06:15:00 2025 by rpki-client