This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft File: sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft (raw, json) Hash identifier: hzHfH6SgeIxJTsyRDIwCv01SBKAjAtZZopw4mbhqIOQ= Subject key identifier: 50:06:79:09:9C:38:A2:F3:F0:B1:06:24:6A:2B:B5:F2:A1:0A:7D:79 Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc Certificate serial: 019B3079C35433D8D5DF644A6F32AD410E9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft Manifest number: 0E66 Signing time: Thu 18 Dec 2025 08:00:44 +0000 Manifest this update: Thu 18 Dec 2025 08:00:44 +0000 Manifest next update: Fri 19 Dec 2025 08:00:44 +0000 Files and hashes: 1: WiIPyXHByzAssjj4VKSqXNq3hNo.roa (hash: zCz09ISW2vqCRWl6+kt0e/gaUd26cQmDKkxwLzxkeJQ=) 2: XLNp588BlhjTzq9wL8KooDNiDfQ.roa (hash: yqzj3pa+xK6sQ61wkjeNUDLd0sOcE9ePSDM9S9DIM0g=) 3: sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl (hash: C5k+VW/1xvivrC9vseDZwH/9wczl/grtPlG8J7Wjrpk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:79:c3:54:33:d8:d5:df:64:4a:6f:32:ad:41:0e:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc Validity Not Before: Dec 18 08:00:44 2025 GMT Not After : Dec 19 08:00:44 2025 GMT Subject: CN=500679099c38a2f3f0b106246a2bb5f2a10a7d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:33:92:fc:09:fa:41:13:34:30:1c:09:20:3a: a4:27:4f:04:b9:f4:61:9c:5f:c2:e8:4e:ac:c0:70: 85:9f:53:15:a1:6c:87:26:15:41:1a:ac:8e:be:cf: 27:f9:7c:3c:fa:df:8c:32:77:bc:b2:e1:e2:42:2f: 2f:4a:77:a4:28:28:12:17:d5:58:66:57:bf:a1:a1: a4:14:40:cc:2f:21:55:09:47:7c:48:c1:07:52:b6: 97:ea:f9:cc:c9:69:ef:95:3c:73:00:4d:ca:75:64: 94:f1:69:d9:0e:85:c9:b4:ad:db:94:4a:79:77:ba: 0d:36:a7:77:f9:e3:03:df:58:ac:1a:d3:ea:22:c5: f2:22:25:5f:55:1b:07:d5:ff:98:a2:dc:64:83:c5: cf:18:83:c5:66:1a:73:0f:70:01:db:c0:27:83:bb: ba:1b:17:33:19:7d:bf:41:82:7f:1c:92:00:39:77: d7:12:3a:45:0a:42:a7:55:57:69:7c:8d:65:bc:ce: 71:30:8a:b9:8e:18:94:09:f1:c8:c9:0a:8a:d7:8c: 7d:08:98:a0:ad:4c:e3:7d:cd:fd:1a:8a:33:d8:44: 5c:b4:ff:48:84:de:d3:17:d2:a2:94:ec:13:ee:82: 5b:02:06:a9:62:3c:27:57:c9:5b:43:d3:6d:44:f9: d3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:06:79:09:9C:38:A2:F3:F0:B1:06:24:6A:2B:B5:F2:A1:0A:7D:79 X509v3 Authority Key Identifier: keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:c7:d3:04:88:53:f2:74:89:00:68:32:72:9f:f7:6d:ec:d6: 3b:bd:35:1a:d1:fa:11:6a:5e:a5:e2:03:5c:68:3c:25:1b:12: eb:57:e7:e3:94:77:0b:59:cc:6a:b8:2f:9a:f7:e9:fb:fc:33: a7:9e:f2:4a:54:60:4a:a2:cb:78:3d:04:71:cf:3b:f1:02:9a: 90:78:a6:6b:13:b9:04:3b:ab:4f:5d:aa:51:0f:df:df:82:cf: ee:c3:93:9c:6a:a7:b4:fe:3f:46:f3:11:db:28:45:b0:21:87: 22:08:9f:82:f0:3e:02:9f:ab:b1:75:50:0c:64:d4:73:bb:80: 5d:70:16:ad:20:4b:80:55:5b:c8:3b:a5:54:e0:9b:15:31:40: a4:f9:ab:88:10:6a:e9:67:0b:38:a4:67:47:cc:42:82:a6:d3: 57:7b:b0:a0:3c:80:8c:40:b8:f5:ca:f1:9d:71:78:a3:5a:6e: 6c:c1:b7:21:e8:0a:b7:0f:4d:7a:ea:0c:b3:a0:69:0a:1c:ae: 69:3c:45:46:41:ad:8e:46:5f:6e:79:fd:f2:72:71:bd:dd:9d: cd:de:a3:a8:d1:e1:3c:b1:80:73:dc:67:55:85:98:22:10:49: bb:97:69:2f:85:a0:22:94:bb:49:c7:a2:59:c7:ae:9f:de:83: ae:ee:ef:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswecNUM9jV32RKbzKtQQ6eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYmQ2OGUzNzBlN2VjMjViZWM4ZTAxNDk3YjIxMzhkOTVk YzZlYmMwHhcNMjUxMjE4MDgwMDQ0WhcNMjUxMjE5MDgwMDQ0WjAzMTEwLwYDVQQD Eyg1MDA2NzkwOTljMzhhMmYzZjBiMTA2MjQ2YTJiYjVmMmExMGE3ZDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DOS/An6QRM0MBwJIDqkJ08EufRh nF/C6E6swHCFn1MVoWyHJhVBGqyOvs8n+Xw8+t+MMne8suHiQi8vSnekKCgSF9VY Zle/oaGkFEDMLyFVCUd8SMEHUraX6vnMyWnvlTxzAE3KdWSU8WnZDoXJtK3blEp5 d7oNNqd3+eMD31isGtPqIsXyIiVfVRsH1f+Yotxkg8XPGIPFZhpzD3AB28Ang7u6 GxczGX2/QYJ/HJIAOXfXEjpFCkKnVVdpfI1lvM5xMIq5jhiUCfHIyQqK14x9CJig rUzjfc39Gooz2ERctP9IhN7TF9KilOwT7oJbAgapYjwnV8lbQ9NtRPnTEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAGeQmcOKLz8LEGJGortfKhCn15MB8GA1UdIwQY MBaAFLC9aONw5+wlvsjgFJeyE42V3G68MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0wxbzQzRG43Q1cteU9BVWw3SVRqWlhjYnJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9mNGNhMWMtMzVkZC00Y2IxLTg0ZmEt ODExNWNhZmQzOGNlLzEvc0wxbzQzRG43Q1cteU9BVWw3SVRqWlhjYnJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9mNGNhMWMtMzVkZC00Y2IxLTg0ZmEtODExNWNhZmQzOGNl LzEvc0wxbzQzRG43Q1cteU9BVWw3SVRqWlhjYnJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzcfTBIhT 8nSJAGgycp/3bezWO701GtH6EWpepeIDXGg8JRsS61fn45R3C1nMargvmvfp+/wz p57ySlRgSqLLeD0Ecc878QKakHimaxO5BDurT12qUQ/f34LP7sOTnGqntP4/RvMR 2yhFsCGHIgifgvA+Ap+rsXVQDGTUc7uAXXAWrSBLgFVbyDulVOCbFTFApPmriBBq 6WcLOKRnR8xCgqbTV3uwoDyAjEC49crxnXF4o1pubMG3IegKtw9NeuoMs6BpChyu aTxFRkGtjkZfbnn98nJxvd2dzd6jqNHhPLGAc9xnVYWYIhBJu5dpL4WgIpS7Scei Wceun96Dru7v9A== -----END CERTIFICATE-----Generated at Thu Dec 18 10:25:25 2025 by rpki-client