This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft File: sLGxJtrAqgt3lIZADt5yVLJe6qY.mft (raw, json) Hash identifier: R8WvmaZsnHYq8FJxlsWvqvHV1KYz9K0brpSEyRvfL+U= Subject key identifier: F2:BA:62:80:17:41:11:29:D4:BE:ED:97:BA:F3:4B:35:43:EF:84:EB Authority key identifier: B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6 Certificate issuer: /CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6 Certificate serial: 019B3D59F1D6050DD4B1DD309612AB3C089F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft Manifest number: 171B Signing time: Sat 20 Dec 2025 20:01:03 +0000 Manifest this update: Sat 20 Dec 2025 20:01:03 +0000 Manifest next update: Sun 21 Dec 2025 20:01:03 +0000 Files and hashes: 1: sLGxJtrAqgt3lIZADt5yVLJe6qY.crl (hash: cEVSDuctOcfpFp2YZjzRwVLjFDSLNUrgeOc9sburCDY=) 2: y5aXUBKmtNndMqsBfDwB9q7N1JM.roa (hash: ZtFZGojw6I1xjiF5OKZdPGSKt7iqS59zSaAIueVvxRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:f1:d6:05:0d:d4:b1:dd:30:96:12:ab:3c:08:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6 Validity Not Before: Dec 20 20:01:03 2025 GMT Not After : Dec 21 20:01:03 2025 GMT Subject: CN=f2ba628017411129d4beed97baf34b3543ef84eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d7:6a:e9:65:81:6c:d2:f7:e8:75:94:f5:78: 7f:c3:63:2c:cc:e3:1f:08:b9:78:94:78:77:44:fd: 24:e7:ab:77:22:d1:b8:47:b4:cf:43:d2:98:a3:45: 19:7a:41:29:68:12:e9:72:a0:0d:9e:f3:30:00:7b: b8:e4:d6:ce:56:00:4e:bf:62:aa:73:27:79:5a:95: 5a:a0:bd:5b:e7:f1:79:b5:d0:d3:53:5c:d2:65:90: 45:44:0a:12:8f:4f:74:2d:26:89:af:16:9c:4e:af: 1f:53:80:39:b5:88:01:09:0d:e7:49:ae:9f:13:7b: ab:ef:2c:01:42:4d:f0:83:39:17:a8:36:bd:cb:b9: 56:23:1f:89:d4:a6:c6:35:65:3a:4a:e2:2e:c4:c2: 8c:1a:c6:49:15:00:5e:70:b2:c8:f3:9f:bd:a7:3f: 3d:e2:aa:03:d6:0a:49:19:e4:68:b1:20:35:cc:90: b6:b9:19:c9:87:3a:de:19:f1:27:4f:e4:19:ee:45: 89:50:a7:05:5a:88:34:d7:67:39:76:02:2c:b8:f4: 51:82:30:e3:d2:40:90:2f:2b:26:ee:16:7f:1a:db: 94:dc:fb:9a:77:cf:66:a2:71:5c:4b:e0:91:d3:76: 97:bb:c0:62:0f:3d:1e:5b:73:3b:52:6f:47:ab:32: fb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BA:62:80:17:41:11:29:D4:BE:ED:97:BA:F3:4B:35:43:EF:84:EB X509v3 Authority Key Identifier: keyid:B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:c5:16:ac:89:24:5a:b5:08:af:1b:fb:70:62:f2:be:d2:30: 06:8a:4b:d2:7b:b5:11:47:87:38:15:d5:89:24:1e:a1:8a:d1: 8a:52:a0:f5:ee:ac:0e:5b:39:6e:6d:d4:e4:58:63:23:46:40: 08:16:77:67:01:ca:8f:e2:99:fa:02:d0:41:61:e3:a5:00:68: 55:59:1f:b4:80:01:f4:22:b5:d9:e5:64:38:f4:63:33:af:1a: 6b:7d:25:b6:58:4c:68:dc:c3:bb:4e:15:7e:1b:20:09:2b:ec: ed:18:6b:a1:cd:06:df:5e:3b:e4:4b:59:dc:da:a7:5d:e5:31: 06:1d:77:e4:59:8a:a1:e6:cd:e1:3f:5b:db:e6:59:31:03:1c: b4:40:66:c9:cf:67:8f:67:f6:da:7a:60:cf:9e:be:04:34:3a: 64:df:4c:8b:ad:8c:b7:0c:ae:08:87:73:b9:96:36:8d:ee:7b: b3:b2:d4:cd:d4:58:c9:7d:5c:db:55:e1:5a:da:87:20:64:4f: 1a:3d:01:2b:5e:8c:8b:25:9d:f1:78:58:d0:b2:03:e4:e0:c4: 8b:e5:28:9d:2a:ae:71:57:18:fd:b5:a2:49:06:d0:b4:18:48: 17:21:6c:79:fd:19:c6:39:f8:7c:b1:31:14:3b:bc:c6:a9:44: 22:3c:6d:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WfHWBQ3Usd0wlhKrPAifMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYjFiMTI2ZGFjMGFhMGI3Nzk0ODY0MDBlZGU3MjU0YjI1 ZWVhYTYwHhcNMjUxMjIwMjAwMTAzWhcNMjUxMjIxMjAwMTAzWjAzMTEwLwYDVQQD EyhmMmJhNjI4MDE3NDExMTI5ZDRiZWVkOTdiYWYzNGIzNTQzZWY4NGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9dq6WWBbNL36HWU9Xh/w2MszOMf CLl4lHh3RP0k56t3ItG4R7TPQ9KYo0UZekEpaBLpcqANnvMwAHu45NbOVgBOv2Kq cyd5WpVaoL1b5/F5tdDTU1zSZZBFRAoSj090LSaJrxacTq8fU4A5tYgBCQ3nSa6f E3ur7ywBQk3wgzkXqDa9y7lWIx+J1KbGNWU6SuIuxMKMGsZJFQBecLLI85+9pz89 4qoD1gpJGeRosSA1zJC2uRnJhzreGfEnT+QZ7kWJUKcFWog012c5dgIsuPRRgjDj 0kCQLysm7hZ/GtuU3Puad89monFcS+CR03aXu8BiDz0eW3M7Um9HqzL73wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPK6YoAXQREp1L7tl7rzSzVD74TrMB8GA1UdIwQY MBaAFLCxsSbawKoLd5SGQA7eclSyXuqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0xHeEp0ckFxZ3QzbElaQUR0NXlWTEplNnFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YTQ3NmEtMzQ1NS00ZTNhLThjMzMt ZmY4MjRiNDE1NjkzLzEvc0xHeEp0ckFxZ3QzbElaQUR0NXlWTEplNnFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84YTQ3NmEtMzQ1NS00ZTNhLThjMzMtZmY4MjRiNDE1Njkz LzEvc0xHeEp0ckFxZ3QzbElaQUR0NXlWTEplNnFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMUWrIkk WrUIrxv7cGLyvtIwBopL0nu1EUeHOBXViSQeoYrRilKg9e6sDls5bm3U5FhjI0ZA CBZ3ZwHKj+KZ+gLQQWHjpQBoVVkftIAB9CK12eVkOPRjM68aa30ltlhMaNzDu04V fhsgCSvs7Rhroc0G31475EtZ3NqnXeUxBh135FmKoebN4T9b2+ZZMQMctEBmyc9n j2f22npgz56+BDQ6ZN9Mi62MtwyuCIdzuZY2je57s7LUzdRYyX1c21XhWtqHIGRP Gj0BK16MiyWd8XhY0LID5ODEi+UonSqucVcY/bWiSQbQtBhIFyFsef0Zxjn4fLEx FDu8xqlEIjxtnA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:32:27 2025 by rpki-client