This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft File: sl2FaYjGKmAgc-wpOFgd1KWG-48.mft (raw, json) Hash identifier: Ee5PUI+ganEikLPMo25QEqr7JalvWSP3WXRFt77AuE4= Subject key identifier: A9:8F:D6:A4:8E:D3:DD:00:25:B3:B3:38:80:89:FD:12:E4:0B:76:BA Authority key identifier: B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F Certificate issuer: /CN=b25d856988c62a602073ec2938581dd4a586fb8f Certificate serial: 019B4A03552A37B7D42EEFA261E2E0A94D33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 07:01:30 +0000 Manifest this update: Tue 23 Dec 2025 07:01:30 +0000 Manifest next update: Wed 24 Dec 2025 07:01:30 +0000 Files and hashes: 1: 7ywY44F6W0hS7hjw1JX0UehS46M.roa (hash: EOy9avDsf7nOFq98ToM6bXsJvV8/Sd2CzZitSl4gKrE=) 2: sl2FaYjGKmAgc-wpOFgd1KWG-48.crl (hash: Dgetk5ema0+NbQmoZT6TBoSf29INaXR/5SeF7s7KrBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:55:2a:37:b7:d4:2e:ef:a2:61:e2:e0:a9:4d:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b25d856988c62a602073ec2938581dd4a586fb8f Validity Not Before: Dec 23 07:01:30 2025 GMT Not After : Dec 24 07:01:30 2025 GMT Subject: CN=a98fd6a48ed3dd0025b3b3388089fd12e40b76ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:01:e0:68:bd:c7:6b:a3:53:4d:3f:e6:eb: 45:1a:f2:b9:59:b5:72:71:3d:0c:1a:25:3c:68:90: 2d:66:81:60:1c:5d:84:0a:9a:c5:f0:97:f2:30:bd: f0:1d:89:b4:8a:48:a8:2b:71:1c:28:b2:3e:b0:f5: ba:f2:50:ed:a9:0e:67:e6:c1:e5:51:80:12:8a:d4: 83:81:89:07:72:f4:ff:0c:e2:ce:da:f4:07:87:d9: 7d:a4:99:0a:e6:f2:d9:7e:24:5f:a0:ca:48:7f:16: 6f:ab:4a:f7:a9:1c:67:08:9a:34:e7:a1:d8:b8:6b: 82:6e:07:18:fb:6c:7c:7c:5e:d2:2c:39:e4:e9:ce: ef:c1:37:35:67:45:a5:a1:7e:1e:15:00:59:88:33: a5:a1:0f:a7:24:57:ce:53:59:b2:77:db:2f:2e:20: 93:df:60:02:00:e0:f0:91:e9:4d:dc:6c:b5:ef:ba: e1:8c:ce:4f:b0:cd:4f:8f:b0:80:d1:c5:b2:07:8f: c4:5a:c4:7e:16:d0:49:2e:df:c1:d1:8f:30:26:f3: 54:5a:06:7c:95:5d:36:5c:f4:1e:1f:07:10:25:b1: 70:8b:7b:13:2a:d3:5e:2a:c5:d7:08:5a:ef:ac:f9: e8:3d:ae:9e:ac:61:d0:ef:2b:9b:f9:10:de:0b:4a: 9d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8F:D6:A4:8E:D3:DD:00:25:B3:B3:38:80:89:FD:12:E4:0B:76:BA X509v3 Authority Key Identifier: keyid:B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:76:ec:b1:c0:cb:87:89:1f:e5:ad:9f:dd:ac:42:fc:61:02: 6d:4a:b6:94:ff:a1:7a:03:41:fe:02:6b:a5:07:eb:57:fd:a6: 02:27:e6:ef:ea:d9:58:66:89:3b:8b:d2:65:6c:16:39:ac:79: 4f:d4:06:33:73:f0:3b:2c:2a:49:a7:a2:2c:a7:06:24:dd:fc: 14:9d:7c:a9:ac:0d:b8:d1:95:69:70:d9:52:9c:99:53:cd:15: 9a:84:e8:41:31:17:05:ce:0c:4a:c0:4d:96:98:c5:cd:04:8b: 0e:10:3e:3d:d6:41:8e:43:3e:05:76:ef:18:31:f0:36:d2:ac: 5d:c3:2c:fd:d7:28:c0:07:b4:16:84:58:83:48:46:29:ee:2f: 8f:84:59:d7:dc:8a:43:07:07:35:c2:7b:5c:e4:32:a5:a2:8d: c4:56:06:d9:68:66:46:20:3a:06:b7:07:5e:80:f3:56:35:af: 6f:78:88:ca:af:0c:07:31:3e:4c:a6:db:3f:3b:18:29:17:73: 56:07:51:66:1f:c2:c6:2d:c0:1a:59:58:5c:a6:37:5a:4c:8b: e1:d1:9f:cb:f6:50:54:75:bf:50:c2:87:c3:13:10:b1:57:ac: 05:a2:22:3a:0a:35:7c:fb:44:8a:45:2d:d4:1d:24:1b:6d:d2: 6d:b8:3c:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA1UqN7fULu+iYeLgqU0zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNWQ4NTY5ODhjNjJhNjAyMDczZWMyOTM4NTgxZGQ0YTU4 NmZiOGYwHhcNMjUxMjIzMDcwMTMwWhcNMjUxMjI0MDcwMTMwWjAzMTEwLwYDVQQD EyhhOThmZDZhNDhlZDNkZDAwMjViM2IzMzg4MDg5ZmQxMmU0MGI3NmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk0B4Gi9x2ujU00/5utFGvK5WbVy cT0MGiU8aJAtZoFgHF2ECprF8JfyML3wHYm0ikioK3EcKLI+sPW68lDtqQ5n5sHl UYASitSDgYkHcvT/DOLO2vQHh9l9pJkK5vLZfiRfoMpIfxZvq0r3qRxnCJo056HY uGuCbgcY+2x8fF7SLDnk6c7vwTc1Z0WloX4eFQBZiDOloQ+nJFfOU1myd9svLiCT 32ACAODwkelN3Gy177rhjM5PsM1Pj7CA0cWyB4/EWsR+FtBJLt/B0Y8wJvNUWgZ8 lV02XPQeHwcQJbFwi3sTKtNeKsXXCFrvrPnoPa6erGHQ7yub+RDeC0qd9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmP1qSO090AJbOzOICJ/RLkC3a6MB8GA1UdIwQY MBaAFLJdhWmIxipgIHPsKThYHdSlhvuPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2wyRmFZakdLbUFnYy13cE9GZ2QxS1dHLTQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iYzk4ODgtYmYwYS00YmZkLTk0OTYt OWQwODIxMTdkOGMxLzEvc2wyRmFZakdLbUFnYy13cE9GZ2QxS1dHLTQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iYzk4ODgtYmYwYS00YmZkLTk0OTYtOWQwODIxMTdkOGMx LzEvc2wyRmFZakdLbUFnYy13cE9GZ2QxS1dHLTQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3bsscDL h4kf5a2f3axC/GECbUq2lP+hegNB/gJrpQfrV/2mAifm7+rZWGaJO4vSZWwWOax5 T9QGM3PwOywqSaeiLKcGJN38FJ18qawNuNGVaXDZUpyZU80VmoToQTEXBc4MSsBN lpjFzQSLDhA+PdZBjkM+BXbvGDHwNtKsXcMs/dcowAe0FoRYg0hGKe4vj4RZ19yK QwcHNcJ7XOQypaKNxFYG2WhmRiA6BrcHXoDzVjWvb3iIyq8MBzE+TKbbPzsYKRdz VgdRZh/Cxi3AGllYXKY3WkyL4dGfy/ZQVHW/UMKHwxMQsVesBaIiOgo1fPtEikUt 1B0kG23Sbbg8wg== -----END CERTIFICATE-----Generated at Tue Dec 23 10:49:06 2025 by rpki-client