This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft File: SAtOZTD1jbM45B1DTlwkjri0nrU.mft (raw, json) Hash identifier: Rx/FgaKrEJBeSQDNLLXRo4MHJf4DyLbEgN2rzZxUmaA= Subject key identifier: 69:C7:DE:60:37:E1:DB:AE:37:D8:F2:21:47:E9:12:C3:DA:D8:A4:FD Authority key identifier: 48:0B:4E:65:30:F5:8D:B3:38:E4:1D:43:4E:5C:24:8E:B8:B4:9E:B5 Certificate issuer: /CN=480b4e6530f58db338e41d434e5c248eb8b49eb5 Certificate serial: 019AF0BF66917253DA8218183E23CC8FBBE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft Manifest number: 0EBF Signing time: Fri 05 Dec 2025 23:01:06 +0000 Manifest this update: Fri 05 Dec 2025 23:01:06 +0000 Manifest next update: Sat 06 Dec 2025 23:01:06 +0000 Files and hashes: 1: SAtOZTD1jbM45B1DTlwkjri0nrU.crl (hash: z9rZETtHiQPc+uBvAbgEW+JgmjlgIvhHDSJk66oz61Q=) 2: USDR-3S3Ht8uHMQ4E3_c_aswiFo.roa (hash: V2Oob57cuCUs4jtdyHi3fUFQvcz8PYQW8jqX4krUZXU=) 3: gNRsmV0XFCKJkgH1T9VLPl0qkP8.roa (hash: 7DieLwMe7vSj5T5/A8Tf5cCcPLC+4LWTW8IbIDeyX70=) 4: lKv9VTuUbeVALHwX5LLffZXiWZQ.roa (hash: QkXK3pqR7k1SpqQggKubiMioM4Ib+lqjz+VVQyAz0lc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:66:91:72:53:da:82:18:18:3e:23:cc:8f:bb:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=480b4e6530f58db338e41d434e5c248eb8b49eb5 Validity Not Before: Dec 5 23:01:06 2025 GMT Not After : Dec 6 23:01:06 2025 GMT Subject: CN=69c7de6037e1dbae37d8f22147e912c3dad8a4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e4:9a:fe:b4:4c:96:9e:ff:15:28:fd:57:59: ff:81:7d:e2:dc:e0:c1:14:fc:64:fc:54:1d:ae:49: 01:7e:18:24:67:e2:a6:a8:ae:59:bb:21:ce:a4:dd: 07:62:aa:74:21:f2:77:e6:60:9a:50:60:08:2c:d4: d3:53:f5:d9:be:55:06:1a:a1:4a:9d:cf:6c:fb:09: 0d:51:0d:92:f8:f7:48:1e:58:c8:f0:d8:8c:db:71: 84:66:bd:b6:26:53:db:ec:32:c4:fe:77:5e:9a:76: dd:ca:1e:20:d1:4f:4d:df:44:fa:e9:73:ec:2f:25: f6:6e:d4:67:11:37:f7:e0:3b:e0:21:c4:00:9c:b8: 09:96:f9:32:55:b9:e1:d3:f3:ae:d4:3f:12:9c:0f: 56:f5:e1:00:7f:06:85:90:39:68:3b:5a:cb:7d:66: f2:c0:a1:e0:1e:3d:79:65:4b:cd:2e:5d:c9:0c:fe: 96:b6:e7:00:7e:10:b6:c9:54:59:a3:15:de:0a:0b: 80:74:4b:82:75:76:7b:87:59:f0:79:9f:22:eb:26: c3:be:62:1b:af:6c:3a:56:71:df:1d:4b:49:1d:53: ae:fe:b9:b6:2d:79:6a:26:db:85:38:e5:f4:e1:da: 74:31:7b:4a:b0:40:2a:ca:20:59:00:a5:7b:00:cf: 09:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C7:DE:60:37:E1:DB:AE:37:D8:F2:21:47:E9:12:C3:DA:D8:A4:FD X509v3 Authority Key Identifier: keyid:48:0B:4E:65:30:F5:8D:B3:38:E4:1D:43:4E:5C:24:8E:B8:B4:9E:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:4c:28:cc:e4:3e:2a:29:49:36:14:79:3f:8a:4b:e7:c5:ba: 57:6d:ca:cc:d5:57:dc:45:f6:c0:21:75:e1:16:44:f8:e4:bc: 41:e9:75:cb:ab:11:01:69:ab:ad:10:de:7e:93:79:c5:89:ff: 1e:9b:24:9c:22:25:96:3c:a4:5e:a1:a2:d3:3c:bc:a3:d2:81: 07:bf:bc:d2:7e:0e:3e:37:92:08:26:00:fe:3d:61:19:59:f0: 66:a9:1b:97:75:55:06:8a:8a:e9:76:ce:dd:c0:2d:e0:57:72: bd:63:c3:23:47:ac:09:53:62:bd:a7:67:c1:89:b0:a0:03:b2: 9a:cf:f9:76:ee:c1:93:f8:6e:e4:ec:70:81:7d:53:27:c5:c7: 5c:27:fa:91:52:e3:a2:32:60:34:d4:ca:20:a6:3a:0f:af:ba: 69:29:14:da:d8:43:96:6f:1d:e3:18:54:fc:9b:af:07:33:77: 0f:39:14:48:3a:2b:f0:e9:93:8d:9b:97:87:1b:9d:9a:81:ee: e6:83:e7:57:ef:ee:d0:dd:c5:d5:1d:cd:08:05:f3:c3:91:22: e1:14:cf:85:9e:81:84:9d:2c:d2:b5:2e:54:05:35:a1:96:c5: 49:2c:a2:b0:3a:38:cf:8b:b8:0f:23:11:79:6f:cf:a9:08:2b: 67:02:4f:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv2aRclPaghgYPiPMj7vhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MGI0ZTY1MzBmNThkYjMzOGU0MWQ0MzRlNWMyNDhlYjhi NDllYjUwHhcNMjUxMjA1MjMwMTA2WhcNMjUxMjA2MjMwMTA2WjAzMTEwLwYDVQQD Eyg2OWM3ZGU2MDM3ZTFkYmFlMzdkOGYyMjE0N2U5MTJjM2RhZDhhNGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuSa/rRMlp7/FSj9V1n/gX3i3ODB FPxk/FQdrkkBfhgkZ+KmqK5ZuyHOpN0HYqp0IfJ35mCaUGAILNTTU/XZvlUGGqFK nc9s+wkNUQ2S+PdIHljI8NiM23GEZr22JlPb7DLE/ndemnbdyh4g0U9N30T66XPs LyX2btRnETf34DvgIcQAnLgJlvkyVbnh0/Ou1D8SnA9W9eEAfwaFkDloO1rLfWby wKHgHj15ZUvNLl3JDP6WtucAfhC2yVRZoxXeCguAdEuCdXZ7h1nweZ8i6ybDvmIb r2w6VnHfHUtJHVOu/rm2LXlqJtuFOOX04dp0MXtKsEAqyiBZAKV7AM8JUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnH3mA34duuN9jyIUfpEsPa2KT9MB8GA1UdIwQY MBaAFEgLTmUw9Y2zOOQdQ05cJI64tJ61MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0F0T1pURDFqYk00NUIxRFRsd2tqcmkwbnJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8yYTcyZWUtZWMxZi00MGM2LWFkOWQt NWE0ZGY4OTZmYzNlLzEvU0F0T1pURDFqYk00NUIxRFRsd2tqcmkwbnJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8yYTcyZWUtZWMxZi00MGM2LWFkOWQtNWE0ZGY4OTZmYzNl LzEvU0F0T1pURDFqYk00NUIxRFRsd2tqcmkwbnJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUwozOQ+ KilJNhR5P4pL58W6V23KzNVX3EX2wCF14RZE+OS8Qel1y6sRAWmrrRDefpN5xYn/ HpsknCIlljykXqGi0zy8o9KBB7+80n4OPjeSCCYA/j1hGVnwZqkbl3VVBoqK6XbO 3cAt4FdyvWPDI0esCVNivadnwYmwoAOyms/5du7Bk/hu5OxwgX1TJ8XHXCf6kVLj ojJgNNTKIKY6D6+6aSkU2thDlm8d4xhU/JuvBzN3DzkUSDor8OmTjZuXhxudmoHu 5oPnV+/u0N3F1R3NCAXzw5Ei4RTPhZ6BhJ0s0rUuVAU1oZbFSSyisDo4z4u4DyMR eW/PqQgrZwJP0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:39 2025 by rpki-client