This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft File: SAqutTeS1SAWm84oDD3Yb4N27GM.mft (raw, json) Hash identifier: X83Zoxen190N60ALNRu9fNVRJznBBIAHfF4n9OPJXSA= Subject key identifier: 53:A9:E8:EC:5C:BD:E8:D9:6E:0B:FB:02:FD:47:8A:A1:58:80:4A:A6 Authority key identifier: 48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63 Certificate issuer: /CN=480aaeb53792d520169bce280c3dd86f8376ec63 Certificate serial: 019AF1646E66BA2B83FD289D4355A9AA7FE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:01:21 +0000 Manifest this update: Sat 06 Dec 2025 02:01:21 +0000 Manifest next update: Sun 07 Dec 2025 02:01:21 +0000 Files and hashes: 1: Kc84xCLoopoVZjLsNJRLj2XaVE4.roa (hash: EYoVSxaior1IONB3NcpWKZcJ8AkylxdNSnDbeuoh7e8=) 2: SAqutTeS1SAWm84oDD3Yb4N27GM.crl (hash: TOc0xFw9qmMKY05pSOVBvlTs15MJ8UybYY1an4zwGWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:6e:66:ba:2b:83:fd:28:9d:43:55:a9:aa:7f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=480aaeb53792d520169bce280c3dd86f8376ec63 Validity Not Before: Dec 6 02:01:21 2025 GMT Not After : Dec 7 02:01:21 2025 GMT Subject: CN=53a9e8ec5cbde8d96e0bfb02fd478aa158804aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:05:19:c0:c6:05:58:b9:3f:df:3e:44:44:d9: d6:0f:da:d5:a8:4f:25:d5:37:60:c4:33:0e:c3:ee: 9c:66:a6:fc:47:db:d9:09:0c:43:24:5e:70:0c:cd: e6:04:d4:72:90:82:9c:c0:c1:35:2a:84:8b:8e:4b: 92:4e:f7:8e:6c:e6:8a:75:69:1c:8c:d5:a2:6c:45: 00:07:e4:5a:97:30:32:9e:e1:00:7b:d0:1d:71:30: 81:dd:17:ba:1c:8b:28:37:45:49:f6:86:40:f1:e7: 27:c6:2f:fb:03:65:48:21:55:a5:e3:01:25:68:3a: 2e:07:b1:a6:fd:36:7a:e8:b6:70:3f:93:6a:fc:d1: 23:cc:e1:de:28:ef:44:5b:c9:a2:2a:3e:eb:c5:a4: 02:6d:60:fc:bd:bf:99:a7:a5:5a:5f:10:f2:91:2f: 77:7b:be:2f:51:4d:ed:8d:d3:73:39:60:47:f1:2f: 81:9c:1c:f5:9c:85:86:72:1c:19:ec:07:6c:a3:c5: 86:9a:26:4f:62:9e:92:76:ee:91:d9:86:c9:9c:cf: 12:13:d7:6e:97:4a:dd:08:7f:4b:f6:8a:3c:2b:af: af:fc:50:91:11:c1:46:c2:d0:18:b4:17:12:b8:9d: 71:dc:40:84:c3:f3:08:85:91:b6:79:40:6c:c3:45: 62:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A9:E8:EC:5C:BD:E8:D9:6E:0B:FB:02:FD:47:8A:A1:58:80:4A:A6 X509v3 Authority Key Identifier: keyid:48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:37:52:cb:f8:2a:88:89:7f:2b:5a:0d:79:86:e8:cf:3a:5d: cc:7d:e8:c4:cb:17:de:4e:3f:99:17:9c:93:11:80:42:98:2e: d3:67:66:b5:4a:31:f7:31:25:02:79:0b:26:41:ed:84:a6:56: af:8c:99:49:04:a1:9c:31:40:1b:97:8f:9c:e8:6e:41:b4:a5: 3e:93:3f:71:f6:b4:ad:0b:29:e7:65:68:dc:da:f0:90:7d:ea: 39:5b:5c:98:92:63:76:1a:fb:66:37:5c:e7:ef:4f:15:8f:dd: a3:7f:60:09:42:6b:5e:79:4b:ea:ab:1b:38:92:22:a8:e2:37: 0e:69:24:00:b5:10:df:dd:04:10:40:54:d3:e7:52:24:c1:d8: c9:e2:59:6c:b0:ca:7b:0b:48:39:8e:b6:3c:d2:71:65:9b:e9: 35:8e:4a:f0:85:b6:f7:74:1d:13:b2:87:3d:f5:5a:1e:1d:cf: ed:d2:0d:bb:94:99:fa:fe:a3:11:6a:46:7c:03:c7:9c:50:db: fc:55:3d:fa:86:fd:e8:6c:ac:7f:63:6c:c9:27:b0:b3:96:88: 2d:8d:59:80:74:34:1f:2e:eb:9d:5a:5c:1a:eb:21:e6:53:dd: fd:9a:a2:14:0f:ae:85:ff:ba:80:0f:1c:fe:d1:43:18:72:d4: db:7d:97:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZG5muiuD/SidQ1Wpqn/iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MGFhZWI1Mzc5MmQ1MjAxNjliY2UyODBjM2RkODZmODM3 NmVjNjMwHhcNMjUxMjA2MDIwMTIxWhcNMjUxMjA3MDIwMTIxWjAzMTEwLwYDVQQD Eyg1M2E5ZThlYzVjYmRlOGQ5NmUwYmZiMDJmZDQ3OGFhMTU4ODA0YWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwUZwMYFWLk/3z5ERNnWD9rVqE8l 1TdgxDMOw+6cZqb8R9vZCQxDJF5wDM3mBNRykIKcwME1KoSLjkuSTveObOaKdWkc jNWibEUAB+RalzAynuEAe9AdcTCB3Re6HIsoN0VJ9oZA8ecnxi/7A2VIIVWl4wEl aDouB7Gm/TZ66LZwP5Nq/NEjzOHeKO9EW8miKj7rxaQCbWD8vb+Zp6VaXxDykS93 e74vUU3tjdNzOWBH8S+BnBz1nIWGchwZ7Adso8WGmiZPYp6Sdu6R2YbJnM8SE9du l0rdCH9L9oo8K6+v/FCREcFGwtAYtBcSuJ1x3ECEw/MIhZG2eUBsw0VijQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOp6OxcvejZbgv7Av1HiqFYgEqmMB8GA1UdIwQY MBaAFEgKrrU3ktUgFpvOKAw92G+DduxjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FxdXRUZVMxU0FXbTg0b0REM1liNE4yN0dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zZDU3OWYtODE1YS00NDZlLThlZDkt ZDE2NjkxYWQ2OWZhLzEvU0FxdXRUZVMxU0FXbTg0b0REM1liNE4yN0dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8zZDU3OWYtODE1YS00NDZlLThlZDktZDE2NjkxYWQ2OWZh LzEvU0FxdXRUZVMxU0FXbTg0b0REM1liNE4yN0dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjdSy/gq iIl/K1oNeYbozzpdzH3oxMsX3k4/mReckxGAQpgu02dmtUox9zElAnkLJkHthKZW r4yZSQShnDFAG5ePnOhuQbSlPpM/cfa0rQsp52Vo3NrwkH3qOVtcmJJjdhr7Zjdc 5+9PFY/do39gCUJrXnlL6qsbOJIiqOI3DmkkALUQ390EEEBU0+dSJMHYyeJZbLDK ewtIOY62PNJxZZvpNY5K8IW293QdE7KHPfVaHh3P7dINu5SZ+v6jEWpGfAPHnFDb /FU9+ob96Gysf2NsySews5aILY1ZgHQ0Hy7rnVpcGush5lPd/ZqiFA+uhf+6gA8c /tFDGHLU232X3w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:48:31 2025 by rpki-client