This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft File: Sagbp1iajhvw4aCc9KoPTpCQHVc.mft (raw, json) Hash identifier: U7Kh6hSFJXtuK8rhJi1x3nN0fyo07qop0pujfie+Ft0= Subject key identifier: B2:FA:0A:5B:35:87:22:FC:C8:06:58:06:1B:89:11:0D:34:03:33:C5 Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57 Certificate issuer: /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57 Certificate serial: 019AF50BA77A65BF55A567A6DFF6719192AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft Manifest number: 1390 Signing time: Sat 06 Dec 2025 19:02:52 +0000 Manifest this update: Sat 06 Dec 2025 19:02:52 +0000 Manifest next update: Sun 07 Dec 2025 19:02:52 +0000 Files and hashes: 1: Sagbp1iajhvw4aCc9KoPTpCQHVc.crl (hash: 4o1I3lUx/wBiw9PM8Q2dV3qRoI04TVE3YEXtC1G2erM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:a7:7a:65:bf:55:a5:67:a6:df:f6:71:91:92:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57 Validity Not Before: Dec 6 19:02:52 2025 GMT Not After : Dec 7 19:02:52 2025 GMT Subject: CN=b2fa0a5b358722fcc80658061b89110d340333c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3a:7c:44:d0:ed:73:3a:61:3b:45:bc:86:9d: 03:c4:3c:64:7d:c0:f5:f8:4c:57:82:f4:f2:9f:bb: 90:24:b2:02:44:1c:4b:75:e8:a0:0f:c2:2c:8f:ea: 78:ae:42:2a:86:c9:ca:d7:44:8c:bd:90:b1:6e:0d: 5c:68:97:b5:3c:09:91:8a:18:3c:17:00:fd:31:86: 46:cf:52:29:7b:32:02:7f:d9:3b:ae:06:00:2e:13: 4e:14:31:b1:5c:5b:fc:c1:78:3f:95:94:14:58:a8: 09:32:b6:bd:f9:50:75:c8:e1:33:45:a1:ce:10:db: 8c:2d:d0:a3:05:70:a1:10:a4:f6:91:14:6c:07:ac: 03:79:16:ac:aa:ee:2e:11:51:d0:f0:6e:07:15:73: 85:db:88:d9:5b:11:9d:f4:29:17:7c:51:5a:8b:cd: 37:2e:d3:2f:80:e4:df:87:a5:e8:ff:5d:61:03:3a: 66:15:a0:21:69:bf:3c:7d:39:27:31:2b:16:6f:5e: 25:b9:25:67:94:f9:99:f0:b4:4a:e4:91:96:d4:75: 1f:d7:ff:24:e7:24:ca:74:11:34:6e:5e:e0:78:1c: 4d:e6:83:e5:3d:93:af:e0:d6:2f:c9:2a:50:33:08: 7d:a2:ca:da:a0:52:14:02:29:1c:07:ef:b2:46:17: 55:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FA:0A:5B:35:87:22:FC:C8:06:58:06:1B:89:11:0D:34:03:33:C5 X509v3 Authority Key Identifier: keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f4:e8:c8:50:54:d5:f8:90:a8:d7:e2:b6:d4:51:b9:38:7d: ec:6e:6e:c8:99:22:85:29:25:98:89:ba:aa:5c:ef:91:82:70: bd:b1:b8:d6:77:77:7a:1d:26:65:d5:6a:e9:e0:c5:1d:f6:17: e3:c8:5c:03:df:57:45:13:51:71:dc:5b:6b:92:1e:89:1a:e8: 59:fc:69:3d:e8:5b:08:e9:7e:cd:5d:5d:ff:c9:3d:da:9b:22: b5:58:9d:ee:c1:ef:77:e4:b9:6b:79:53:f7:d1:17:7e:af:bf: 0b:ab:e8:53:c4:ba:46:f8:68:fe:36:17:28:cd:e7:56:2b:4d: 28:f8:3f:13:e5:e8:a7:73:30:67:b8:8e:39:20:8f:a8:4c:3a: 42:bf:7f:db:14:c6:40:8e:41:a1:5f:4f:8f:37:40:cb:28:e1: 38:fb:17:1b:c3:c5:08:67:87:d9:08:7a:38:7b:e8:ab:c8:af: ad:11:c6:52:e5:bf:74:d0:a2:8c:9e:c7:2e:11:02:36:07:92: e8:37:e9:08:18:f4:61:98:27:e7:5b:66:27:70:a5:7f:da:03: 35:51:e5:a1:55:86:9f:5b:18:94:f7:09:15:8a:bd:f8:d2:e1: 32:f3:cb:32:7d:9d:95:49:87:4d:b9:fe:de:c2:2e:e9:43:9d: 4f:25:fa:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C6d6Zb9VpWem3/ZxkZKsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YTgxYmE3NTg5YThlMWJmMGUxYTA5Y2Y0YWEwZjRlOTA5 MDFkNTcwHhcNMjUxMjA2MTkwMjUyWhcNMjUxMjA3MTkwMjUyWjAzMTEwLwYDVQQD EyhiMmZhMGE1YjM1ODcyMmZjYzgwNjU4MDYxYjg5MTEwZDM0MDMzM2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjp8RNDtczphO0W8hp0DxDxkfcD1 +ExXgvTyn7uQJLICRBxLdeigD8Isj+p4rkIqhsnK10SMvZCxbg1caJe1PAmRihg8 FwD9MYZGz1IpezICf9k7rgYALhNOFDGxXFv8wXg/lZQUWKgJMra9+VB1yOEzRaHO ENuMLdCjBXChEKT2kRRsB6wDeRasqu4uEVHQ8G4HFXOF24jZWxGd9CkXfFFai803 LtMvgOTfh6Xo/11hAzpmFaAhab88fTknMSsWb14luSVnlPmZ8LRK5JGW1HUf1/8k 5yTKdBE0bl7geBxN5oPlPZOv4NYvySpQMwh9osraoFIUAikcB++yRhdVzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLL6Cls1hyL8yAZYBhuJEQ00AzPFMB8GA1UdIwQY MBaAFEmoG6dYmo4b8OGgnPSqD06QkB1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2FnYnAxaWFqaHZ3NGFDYzlLb1BUcENRSFZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85OWUwOGQtYjRmNS00MzUzLTk2MDIt NjAzMWQ1ZGUzZjM5LzEvU2FnYnAxaWFqaHZ3NGFDYzlLb1BUcENRSFZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85OWUwOGQtYjRmNS00MzUzLTk2MDItNjAzMWQ1ZGUzZjM5 LzEvU2FnYnAxaWFqaHZ3NGFDYzlLb1BUcENRSFZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfToyFBU 1fiQqNfittRRuTh97G5uyJkihSklmIm6qlzvkYJwvbG41nd3eh0mZdVq6eDFHfYX 48hcA99XRRNRcdxba5IeiRroWfxpPehbCOl+zV1d/8k92psitVid7sHvd+S5a3lT 99EXfq+/C6voU8S6Rvho/jYXKM3nVitNKPg/E+Xop3MwZ7iOOSCPqEw6Qr9/2xTG QI5BoV9PjzdAyyjhOPsXG8PFCGeH2Qh6OHvoq8ivrRHGUuW/dNCijJ7HLhECNgeS 6DfpCBj0YZgn51tmJ3Clf9oDNVHloVWGn1sYlPcJFYq9+NLhMvPLMn2dlUmHTbn+ 3sIu6UOdTyX68A== -----END CERTIFICATE-----Generated at Sat Dec 6 23:17:53 2025 by rpki-client