This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft File: SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft (raw, json) Hash identifier: lTaP3hAW2RGZuDP1TYCqUqsZW34ZiepA/uNXc5a4m8I= Subject key identifier: BC:A0:42:57:A6:1A:63:86:B5:32:6B:95:42:A6:E2:78:5C:4A:E8:99 Authority key identifier: 48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B Certificate issuer: /CN=480423aa17d04f56c690040345d6762bbfd1f88b Certificate serial: 019AF12D23A4A26D8A110BBD2AE2011F19CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft Manifest number: 1219 Signing time: Sat 06 Dec 2025 01:00:58 +0000 Manifest this update: Sat 06 Dec 2025 01:00:58 +0000 Manifest next update: Sun 07 Dec 2025 01:00:58 +0000 Files and hashes: 1: SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl (hash: eb79a8qHO+uHOJOEcJl52SlaFCtxIpHfGleAhgOwqcY=) 2: a4eWXe9mLzZdOuJF4g-i_sTPTK8.roa (hash: Nl6At3QtcKnCDV2p7jnqUB0ktT1iDDCBQexgyMCnTTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:23:a4:a2:6d:8a:11:0b:bd:2a:e2:01:1f:19:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=480423aa17d04f56c690040345d6762bbfd1f88b Validity Not Before: Dec 6 01:00:58 2025 GMT Not After : Dec 7 01:00:58 2025 GMT Subject: CN=bca04257a61a6386b5326b9542a6e2785c4ae899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:52:a2:61:6f:6f:dc:0b:0d:8b:c6:36:9a:42: 77:2d:51:72:9e:3a:cd:49:b9:c9:22:09:78:8a:86: 4c:b4:cd:e3:6b:55:24:9d:5f:7e:6e:da:d7:5b:61: e3:00:2f:66:44:85:2b:37:aa:98:07:d2:1d:2c:a2: e0:61:ff:35:25:cc:6a:0e:25:3d:d5:11:90:26:37: 94:89:74:81:0b:55:0f:aa:01:ed:7d:a0:39:d8:35: 97:0d:d5:9b:a1:73:ab:48:18:c9:8d:5a:c9:64:4d: 76:61:e9:da:cf:b8:5c:0c:19:d2:8a:ed:e6:03:7f: 86:15:07:d3:40:88:5d:58:2b:d3:36:22:16:6f:71: f3:74:a0:75:bf:8c:b4:d2:99:12:50:3d:4e:12:67: a1:9b:65:6d:84:64:9e:c4:ba:05:29:18:7e:94:80: 9c:dc:2a:50:8e:62:b1:7b:50:d2:c1:92:fd:b8:a8: f3:75:57:11:e7:4d:8c:2a:87:2f:41:8d:64:1f:58: 2c:2f:8e:21:1e:db:25:c4:45:48:4d:bf:2e:93:e7: 1b:e5:d3:aa:d1:12:4f:88:25:f6:b8:af:2c:11:b0: 7d:5e:d9:b3:b8:b2:ac:10:4d:b6:8b:07:3f:4b:da: cd:1f:e1:d6:02:42:2a:03:4f:7c:ee:f3:22:fb:85: 5d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A0:42:57:A6:1A:63:86:B5:32:6B:95:42:A6:E2:78:5C:4A:E8:99 X509v3 Authority Key Identifier: keyid:48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d4:2f:4c:9b:01:07:2a:86:3b:98:aa:23:d0:62:84:1d:ee: 3c:cf:1a:02:9e:55:59:2d:f5:ca:b1:09:4d:4e:4c:34:6b:d7: b6:4b:be:1e:be:d4:24:02:95:07:17:33:4a:a9:a7:ba:2a:03: ee:29:3c:fa:8a:12:42:5b:2b:cb:6e:5f:a8:38:d7:91:b4:e7: 83:f2:d7:27:ba:11:1a:24:7d:02:4b:d5:e1:7c:d8:fe:72:b4: f3:f9:6e:65:6d:8e:6d:79:8d:eb:18:f3:84:ca:ca:65:05:34: eb:d8:2f:f8:e3:2b:17:39:51:9f:99:5e:f5:83:da:7a:ee:fe: c2:7b:bd:1c:03:f1:40:4b:50:29:3c:db:13:79:48:a8:16:79: 5a:0d:38:4a:83:95:4b:ff:5c:9c:f0:aa:b8:65:8d:b7:f8:fb: 0c:01:b0:c9:cd:94:07:3c:63:c6:1a:c7:89:85:8b:98:02:4c: ef:05:06:27:cd:63:67:e5:9f:f3:1d:15:03:ca:bd:b8:0b:3d: 2d:80:a4:b6:8d:1c:6b:93:5f:f0:f6:41:e4:bb:ae:34:9b:21: 84:87:93:46:7f:a3:a6:7f:c0:1d:f9:c1:7d:17:5e:16:ef:20: a7:59:10:67:96:57:83:bf:27:5c:bf:1a:c9:71:2d:d1:68:21: 95:67:ce:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSOkom2KEQu9KuIBHxnNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDQyM2FhMTdkMDRmNTZjNjkwMDQwMzQ1ZDY3NjJiYmZk MWY4OGIwHhcNMjUxMjA2MDEwMDU4WhcNMjUxMjA3MDEwMDU4WjAzMTEwLwYDVQQD EyhiY2EwNDI1N2E2MWE2Mzg2YjUzMjZiOTU0MmE2ZTI3ODVjNGFlODk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lKiYW9v3AsNi8Y2mkJ3LVFynjrN SbnJIgl4ioZMtM3ja1UknV9+btrXW2HjAC9mRIUrN6qYB9IdLKLgYf81JcxqDiU9 1RGQJjeUiXSBC1UPqgHtfaA52DWXDdWboXOrSBjJjVrJZE12Yenaz7hcDBnSiu3m A3+GFQfTQIhdWCvTNiIWb3HzdKB1v4y00pkSUD1OEmehm2VthGSexLoFKRh+lICc 3CpQjmKxe1DSwZL9uKjzdVcR502MKocvQY1kH1gsL44hHtslxEVITb8uk+cb5dOq 0RJPiCX2uK8sEbB9XtmzuLKsEE22iwc/S9rNH+HWAkIqA0987vMi+4VdjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLygQlemGmOGtTJrlUKm4nhcSuiZMB8GA1UdIwQY MBaAFEgEI6oX0E9WxpAEA0XWdiu/0fiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FRanFoZlFUMWJHa0FRRFJkWjJLN19SLUlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9mMGY1ZmYtYTgyMC00ZGJhLThlZTEt Y2RhNTc0MjZkZTIyLzEvU0FRanFoZlFUMWJHa0FRRFJkWjJLN19SLUlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9mMGY1ZmYtYTgyMC00ZGJhLThlZTEtY2RhNTc0MjZkZTIy LzEvU0FRanFoZlFUMWJHa0FRRFJkWjJLN19SLUlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitQvTJsB ByqGO5iqI9BihB3uPM8aAp5VWS31yrEJTU5MNGvXtku+Hr7UJAKVBxczSqmnuioD 7ik8+ooSQlsry25fqDjXkbTng/LXJ7oRGiR9AkvV4XzY/nK08/luZW2ObXmN6xjz hMrKZQU069gv+OMrFzlRn5le9YPaeu7+wnu9HAPxQEtQKTzbE3lIqBZ5Wg04SoOV S/9cnPCquGWNt/j7DAGwyc2UBzxjxhrHiYWLmAJM7wUGJ81jZ+Wf8x0VA8q9uAs9 LYCkto0ca5Nf8PZB5LuuNJshhIeTRn+jpn/AHfnBfRdeFu8gp1kQZ5ZXg78nXL8a yXEt0WghlWfOJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:35 2025 by rpki-client