This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft File: Sagbp1iajhvw4aCc9KoPTpCQHVc.mft (raw, json) Hash identifier: 8/pwzkkrTv2nDrnk1QW8pe9AK8XOrYtlti8iaI7Y/vQ= Subject key identifier: A3:24:93:0A:25:05:86:C0:C3:53:C9:09:A6:D1:34:C8:27:8D:E8:E5 Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57 Certificate issuer: /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57 Certificate serial: 019B3C7E03EE663172F4A828613E8DFD7613 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft Manifest number: 13B5 Signing time: Sat 20 Dec 2025 16:00:50 +0000 Manifest this update: Sat 20 Dec 2025 16:00:50 +0000 Manifest next update: Sun 21 Dec 2025 16:00:50 +0000 Files and hashes: 1: Sagbp1iajhvw4aCc9KoPTpCQHVc.crl (hash: lXX0G74PAbAKyg9CieoMtH2viQI2ZXl4JLVGson1N6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:03:ee:66:31:72:f4:a8:28:61:3e:8d:fd:76:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57 Validity Not Before: Dec 20 16:00:50 2025 GMT Not After : Dec 21 16:00:50 2025 GMT Subject: CN=a324930a250586c0c353c909a6d134c8278de8e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a6:26:1c:e7:e5:d9:4f:ff:70:9d:a4:12:ac: dd:26:f7:65:39:5f:bd:fb:7d:17:d8:76:57:e6:33: e6:a6:72:75:fc:e9:fd:6e:70:41:83:0e:cc:cb:25: e7:e7:88:d9:6e:d8:3b:53:b8:18:da:0a:07:7c:43: 0c:5f:27:b6:54:16:3f:24:26:1d:ee:29:dd:3c:56: 8e:ce:67:f2:52:16:ed:4d:96:7f:98:5a:f4:3f:a0: 25:4e:6c:bc:78:5e:a2:34:f2:65:10:ae:4c:16:36: e5:bd:2e:5a:f5:8a:b8:6a:fe:0b:d5:32:b9:94:26: 6f:11:8f:32:c3:75:db:c3:14:73:05:2c:78:d9:27: 27:91:85:08:10:47:64:46:50:69:c3:45:bf:8b:ab: df:8f:f0:c4:d3:7f:fd:a1:1c:cc:09:64:4a:e4:9d: 3e:47:be:5c:5d:cb:09:11:8b:ae:4e:f3:c2:f1:e1: 74:fa:73:4e:34:bb:44:7d:99:1c:46:bf:61:0d:89: 9a:ba:5d:de:ed:c1:8f:fd:d3:1a:04:91:c9:22:b0: 45:8d:2b:6d:fd:43:81:84:ca:67:1c:be:3f:01:c5: 66:e2:64:b1:c4:fa:d7:ce:e6:b8:1f:cf:1b:27:92: d4:81:47:b0:f1:32:ce:67:2a:97:f7:a7:9a:5b:43: 38:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:24:93:0A:25:05:86:C0:C3:53:C9:09:A6:D1:34:C8:27:8D:E8:E5 X509v3 Authority Key Identifier: keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:e1:41:34:26:a4:70:69:a7:3e:5c:6b:0c:91:07:af:65:64: be:70:4c:7f:96:48:5c:19:e8:dd:df:03:0f:72:8f:27:f6:9e: b2:73:11:23:cf:e7:93:e6:e4:98:51:a6:56:ea:3c:bc:29:9e: 86:bd:01:ed:e2:89:59:10:ca:23:16:78:76:e3:a8:d3:8d:86: 00:a7:6a:f9:73:0a:57:2a:f2:ad:b4:6e:3d:58:86:19:a4:b8: 74:1b:ca:bf:4e:b6:e7:7e:24:82:18:32:46:cd:bc:cd:8e:b9: c6:de:7d:7a:5c:8a:2e:d8:48:0f:09:bf:23:d3:b7:9a:6c:52: 97:9c:b6:f7:95:cc:6b:a7:33:b0:9f:78:d5:44:e4:f7:ab:13: 3d:cd:14:48:96:f8:3d:c7:c7:8f:79:ad:c8:77:dd:d7:eb:28: 47:fb:ab:68:fe:34:87:45:20:30:8f:ec:5a:7c:47:24:47:ef: ca:47:a3:0a:a5:e1:87:54:7b:be:64:52:7f:67:51:80:88:0b: 52:22:dd:62:f2:b4:55:e3:65:8f:33:14:52:58:0d:64:88:d1: 15:b3:2d:e1:bc:a8:0f:f0:e1:86:60:1c:27:42:96:e8:bb:70: ac:09:a5:75:d2:1e:6b:8d:11:de:c1:86:4f:48:52:18:43:91: 50:b1:ea:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fgPuZjFy9KgoYT6N/XYTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YTgxYmE3NTg5YThlMWJmMGUxYTA5Y2Y0YWEwZjRlOTA5 MDFkNTcwHhcNMjUxMjIwMTYwMDUwWhcNMjUxMjIxMTYwMDUwWjAzMTEwLwYDVQQD EyhhMzI0OTMwYTI1MDU4NmMwYzM1M2M5MDlhNmQxMzRjODI3OGRlOGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KYmHOfl2U//cJ2kEqzdJvdlOV+9 +30X2HZX5jPmpnJ1/On9bnBBgw7MyyXn54jZbtg7U7gY2goHfEMMXye2VBY/JCYd 7indPFaOzmfyUhbtTZZ/mFr0P6AlTmy8eF6iNPJlEK5MFjblvS5a9Yq4av4L1TK5 lCZvEY8yw3XbwxRzBSx42ScnkYUIEEdkRlBpw0W/i6vfj/DE03/9oRzMCWRK5J0+ R75cXcsJEYuuTvPC8eF0+nNONLtEfZkcRr9hDYmaul3e7cGP/dMaBJHJIrBFjStt /UOBhMpnHL4/AcVm4mSxxPrXzua4H88bJ5LUgUew8TLOZyqX96eaW0M41QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMkkwolBYbAw1PJCabRNMgnjejlMB8GA1UdIwQY MBaAFEmoG6dYmo4b8OGgnPSqD06QkB1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2FnYnAxaWFqaHZ3NGFDYzlLb1BUcENRSFZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85OWUwOGQtYjRmNS00MzUzLTk2MDIt NjAzMWQ1ZGUzZjM5LzEvU2FnYnAxaWFqaHZ3NGFDYzlLb1BUcENRSFZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85OWUwOGQtYjRmNS00MzUzLTk2MDItNjAzMWQ1ZGUzZjM5 LzEvU2FnYnAxaWFqaHZ3NGFDYzlLb1BUcENRSFZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUeFBNCak cGmnPlxrDJEHr2VkvnBMf5ZIXBno3d8DD3KPJ/aesnMRI8/nk+bkmFGmVuo8vCme hr0B7eKJWRDKIxZ4duOo042GAKdq+XMKVyryrbRuPViGGaS4dBvKv062534kghgy Rs28zY65xt59elyKLthIDwm/I9O3mmxSl5y295XMa6czsJ941UTk96sTPc0USJb4 PcfHj3mtyHfd1+soR/uraP40h0UgMI/sWnxHJEfvykejCqXhh1R7vmRSf2dRgIgL UiLdYvK0VeNljzMUUlgNZIjRFbMt4byoD/DhhmAcJ0KW6LtwrAmlddIea40R3sGG T0hSGEORULHqZg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:27:35 2025 by rpki-client