This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft File: saC9QgWKA5D0Y8_rexfiHeC3VQA.mft (raw, json) Hash identifier: g9HHkwQm9DtW6fSRscbG4xPfNyulIPZ2hFGVkut+f34= Subject key identifier: 5B:81:0B:33:9D:F6:D1:7B:F3:4F:01:50:3B:53:B3:68:55:FB:D0:6F Authority key identifier: B1:A0:BD:42:05:8A:03:90:F4:63:CF:EB:7B:17:E2:1D:E0:B7:55:00 Certificate issuer: /CN=b1a0bd42058a0390f463cfeb7b17e21de0b75500 Certificate serial: 019B3456B82C277BDBF3557952A1CA2AA2DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saC9QgWKA5D0Y8_rexfiHeC3VQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 02:00:57 +0000 Manifest this update: Fri 19 Dec 2025 02:00:57 +0000 Manifest next update: Sat 20 Dec 2025 02:00:57 +0000 Files and hashes: 1: M5ygsUf6TUqUYI8FV2cjTiESBdE.roa (hash: inJMcRO+0HtRn269DlSaUq0NeeQUCkuMxbxILPu+WG8=) 2: saC9QgWKA5D0Y8_rexfiHeC3VQA.crl (hash: nApwjbC6UoMLbpk914dCPzBv5ZNsa2gJMPnU+X1SfQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.crl rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft rsync://rpki.ripe.net/repository/DEFAULT/saC9QgWKA5D0Y8_rexfiHeC3VQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:b8:2c:27:7b:db:f3:55:79:52:a1:ca:2a:a2:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a0bd42058a0390f463cfeb7b17e21de0b75500 Validity Not Before: Dec 19 02:00:57 2025 GMT Not After : Dec 20 02:00:57 2025 GMT Subject: CN=5b810b339df6d17bf34f01503b53b36855fbd06f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fa:b8:9f:12:28:57:cd:c4:3f:92:8d:5f:53: 99:c2:51:a5:2b:99:f9:69:30:09:5d:82:96:4c:e5: c3:50:88:21:e0:01:b4:4b:a0:ff:9e:d3:f4:c4:92: ea:35:49:cc:e1:c8:18:17:54:ec:94:4b:6c:6d:aa: b5:51:8b:1e:f8:71:5d:2d:9c:fa:37:66:6c:dd:ad: 25:38:b0:13:51:bd:4f:65:09:38:dc:d3:3b:fe:bf: 7d:59:d4:47:fe:8a:1e:40:f1:1e:79:c7:f7:31:ce: 4d:7f:de:ce:88:a2:c2:1f:60:64:75:97:3a:99:57: ac:d2:68:fd:99:3d:dc:b9:2e:14:b4:0c:14:1d:12: f4:4a:2a:32:95:8b:88:97:f3:53:51:16:d9:a9:63: b1:00:49:dc:76:99:13:04:be:66:4b:07:37:43:f0: c8:cf:38:55:38:07:9e:00:69:68:af:41:85:0f:2c: b2:7e:50:ac:53:4e:25:dc:8c:11:98:a7:d7:81:be: 2d:c0:f6:b3:96:05:58:50:24:a8:52:f4:4b:36:0c: 13:f9:a8:bd:8f:6a:a2:f4:75:79:58:17:fc:d6:01: 32:76:68:9a:15:08:a5:e4:4d:60:c9:94:13:98:af: 69:da:bb:43:de:19:23:04:a3:00:46:72:23:c3:dc: a9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:81:0B:33:9D:F6:D1:7B:F3:4F:01:50:3B:53:B3:68:55:FB:D0:6F X509v3 Authority Key Identifier: keyid:B1:A0:BD:42:05:8A:03:90:F4:63:CF:EB:7B:17:E2:1D:E0:B7:55:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saC9QgWKA5D0Y8_rexfiHeC3VQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:3c:ee:67:bc:1d:cc:b3:8c:60:48:55:86:2e:0d:3d:0a:86: 46:3c:2b:21:92:a0:04:13:89:f3:37:97:91:ec:c0:6c:60:33: 9c:77:62:5e:c7:97:c5:c8:b1:ae:6c:a9:62:df:96:fd:56:21: a9:5b:23:f8:7a:56:0c:98:0c:11:6e:4b:5c:1c:71:e0:f9:10: 1f:08:d2:4f:8f:56:3c:ba:b4:8e:0b:82:67:7b:bc:38:ac:90: c4:03:9c:5b:0a:ec:3a:39:6a:52:c2:ca:a1:58:4d:56:08:c7: c2:83:c4:a2:b4:1c:fa:a8:4d:d3:f4:5d:cb:2f:8c:22:c3:c5: 5b:f4:6d:c1:a6:9d:c3:1b:bd:39:b6:8a:2c:29:5d:3b:5f:57: 44:4e:cd:a3:76:be:a8:88:53:59:70:57:34:3f:7a:68:b4:2d: 79:ed:37:b6:d5:fa:47:bf:86:6a:b5:cf:73:94:f9:74:13:a1: 78:2b:3a:95:ae:b6:47:3a:27:48:78:db:70:1d:96:d2:19:db: 06:be:c7:43:94:4d:85:f4:f8:82:65:f4:b1:07:e9:d6:cb:b3: ae:bc:57:6d:07:1e:ce:52:7c:f0:9b:58:3c:e9:e2:d3:b6:8f: a5:96:02:dc:23:9c:48:2a:2f:89:12:d4:07:ea:52:32:91:b6: e4:29:40:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VrgsJ3vb81V5UqHKKqLeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTBiZDQyMDU4YTAzOTBmNDYzY2ZlYjdiMTdlMjFkZTBi NzU1MDAwHhcNMjUxMjE5MDIwMDU3WhcNMjUxMjIwMDIwMDU3WjAzMTEwLwYDVQQD Eyg1YjgxMGIzMzlkZjZkMTdiZjM0ZjAxNTAzYjUzYjM2ODU1ZmJkMDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/q4nxIoV83EP5KNX1OZwlGlK5n5 aTAJXYKWTOXDUIgh4AG0S6D/ntP0xJLqNUnM4cgYF1TslEtsbaq1UYse+HFdLZz6 N2Zs3a0lOLATUb1PZQk43NM7/r99WdRH/ooeQPEeecf3Mc5Nf97OiKLCH2BkdZc6 mVes0mj9mT3cuS4UtAwUHRL0SioylYuIl/NTURbZqWOxAEncdpkTBL5mSwc3Q/DI zzhVOAeeAGlor0GFDyyyflCsU04l3IwRmKfXgb4twPazlgVYUCSoUvRLNgwT+ai9 j2qi9HV5WBf81gEydmiaFQil5E1gyZQTmK9p2rtD3hkjBKMARnIjw9ypAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFuBCzOd9tF7808BUDtTs2hV+9BvMB8GA1UdIwQY MBaAFLGgvUIFigOQ9GPP63sX4h3gt1UAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FDOVFnV0tBNUQwWThfcmV4ZmlIZUMzVlFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9jNmY3NmItNzg4Ny00MTJhLWJhYjQt ZWMyODE5YzBhYzRkLzEvc2FDOVFnV0tBNUQwWThfcmV4ZmlIZUMzVlFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9jNmY3NmItNzg4Ny00MTJhLWJhYjQtZWMyODE5YzBhYzRk LzEvc2FDOVFnV0tBNUQwWThfcmV4ZmlIZUMzVlFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDzuZ7wd zLOMYEhVhi4NPQqGRjwrIZKgBBOJ8zeXkezAbGAznHdiXseXxcixrmypYt+W/VYh qVsj+HpWDJgMEW5LXBxx4PkQHwjST49WPLq0jguCZ3u8OKyQxAOcWwrsOjlqUsLK oVhNVgjHwoPEorQc+qhN0/Rdyy+MIsPFW/Rtwaadwxu9ObaKLCldO19XRE7No3a+ qIhTWXBXND96aLQtee03ttX6R7+GarXPc5T5dBOheCs6la62RzonSHjbcB2W0hnb Br7HQ5RNhfT4gmX0sQfp1suzrrxXbQcezlJ88JtYPOni07aPpZYC3COcSCoviRLU B+pSMpG25ClAEg== -----END CERTIFICATE-----Generated at Fri Dec 19 07:33:34 2025 by rpki-client