This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft File: SA488NEiV0x-ezvwNNDT0BPuvBU.mft (raw, json) Hash identifier: qY99YG0+K157m7HSoUbX0lHpQxEMCWvqpF6eDMOT72A= Subject key identifier: 8A:EE:B4:EE:69:5B:30:94:62:F5:EE:B3:5F:44:D5:A5:03:44:B8:DA Authority key identifier: 48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15 Certificate issuer: /CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15 Certificate serial: 019AF6538B6C034F6734E220A77FC1C3DC51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft Manifest number: 0C6B Signing time: Sun 07 Dec 2025 01:01:01 +0000 Manifest this update: Sun 07 Dec 2025 01:01:01 +0000 Manifest next update: Mon 08 Dec 2025 01:01:01 +0000 Files and hashes: 1: 7y3mGX9ZUocL1OILQHSxmA8VkvM.roa (hash: 7a9Oiy3txQlGgm+QjKoKXHZkPBhpeO84dBEOXh2SIfc=) 2: SA488NEiV0x-ezvwNNDT0BPuvBU.crl (hash: QoNN1XNczv5ntgArK7rHrM4S18fUwGY7LBbmAd5WZq4=) 3: oU4Cohsb9kWDicLsugicyZN6s7k.roa (hash: YXEAgbcCjB/PmDtI8uql79S0hq5pcPIEdu0GZCtli20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:8b:6c:03:4f:67:34:e2:20:a7:7f:c1:c3:dc:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15 Validity Not Before: Dec 7 01:01:01 2025 GMT Not After : Dec 8 01:01:01 2025 GMT Subject: CN=8aeeb4ee695b309462f5eeb35f44d5a50344b8da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e0:7e:5a:af:69:16:43:b9:6d:c1:57:47:96: 28:b1:d6:23:a8:22:84:71:6e:e3:be:d0:3e:6b:fe: ce:6d:29:fe:5d:f8:f6:23:60:ef:ae:38:c9:30:a8: be:65:46:be:69:6f:56:1d:d0:9c:79:12:9b:77:a4: dc:02:72:a6:e1:d0:b9:86:8f:c4:c5:a2:9d:aa:9b: d0:40:cc:54:a1:4e:e8:96:0b:6a:31:82:47:c2:51: cf:0d:47:3c:6f:f0:9a:aa:0c:6a:9e:58:5e:40:63: 8d:23:3c:4f:80:85:9a:61:1e:31:d5:52:7c:76:04: 5b:f0:0d:af:94:84:32:50:cc:a8:3b:1d:10:af:e2: 8c:7c:77:48:ca:8b:39:ce:16:a6:2c:47:b4:7d:63: 8b:50:28:2f:0d:db:54:cf:7a:f5:cf:42:56:f8:c6: a7:c7:c5:7b:4b:b2:0e:a8:e8:c3:ef:51:89:57:1f: b9:e1:48:df:82:2f:2e:7e:ca:e7:30:10:32:1b:59: e7:e5:b1:08:b0:8f:d3:e6:c4:a8:1d:94:45:27:0c: ed:02:b4:8a:18:cc:72:dc:f5:92:29:f6:27:93:df: aa:61:80:56:d6:bb:14:f5:99:ee:65:ff:6f:2f:c2: 92:d2:49:03:67:d1:c7:2e:ff:02:0b:a5:e7:7d:6b: 81:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:EE:B4:EE:69:5B:30:94:62:F5:EE:B3:5F:44:D5:A5:03:44:B8:DA X509v3 Authority Key Identifier: keyid:48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:4f:03:ab:07:ac:71:8b:32:af:40:b3:ce:3f:03:4c:68:1e: 95:c0:21:b7:c3:14:2e:6d:09:23:d2:c4:bf:71:72:8e:ae:46: 6d:9c:7a:68:86:0a:af:92:81:ef:aa:84:c1:0b:e5:20:f6:b8: a1:04:cf:ee:18:e4:c0:3b:71:cf:27:3d:0c:2b:be:9a:39:48: cd:57:c5:96:76:04:48:2a:96:78:a4:a6:a2:6a:42:d4:09:50: a5:ce:2c:6f:d0:3d:9c:e9:51:2a:7e:bf:f1:f2:43:f8:f4:fe: 19:2e:69:19:3d:29:69:5f:74:2e:5b:9c:fe:32:28:e9:d7:42: 00:1f:82:f8:a0:78:5e:3b:5a:c2:58:ef:be:a7:3c:a3:23:73: a4:b8:d8:95:d9:f9:f8:d7:d6:16:8f:35:ea:ce:e5:51:5c:4f: 45:9d:cc:35:36:9f:f5:17:e6:66:63:7d:fd:bc:e2:3e:75:64: ec:0a:21:38:7e:d6:e6:60:12:fa:49:ae:12:0e:0d:cd:b3:03: d6:d4:c6:9c:15:29:17:bf:b4:33:6b:93:99:08:76:59:62:41: ce:04:1c:f0:e6:0e:3d:cf:87:65:7f:e2:81:90:22:3b:71:9d: c2:54:d8:52:c6:70:39:14:82:8a:1e:a6:f6:2c:3a:37:ef:5f: 68:3a:ba:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U4tsA09nNOIgp3/Bw9xRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MGUzY2YwZDEyMjU3NGM3ZTdiM2JmMDM0ZDBkM2QwMTNl ZWJjMTUwHhcNMjUxMjA3MDEwMTAxWhcNMjUxMjA4MDEwMTAxWjAzMTEwLwYDVQQD Eyg4YWVlYjRlZTY5NWIzMDk0NjJmNWVlYjM1ZjQ0ZDVhNTAzNDRiOGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuB+Wq9pFkO5bcFXR5YosdYjqCKE cW7jvtA+a/7ObSn+Xfj2I2DvrjjJMKi+ZUa+aW9WHdCceRKbd6TcAnKm4dC5ho/E xaKdqpvQQMxUoU7olgtqMYJHwlHPDUc8b/CaqgxqnlheQGONIzxPgIWaYR4x1VJ8 dgRb8A2vlIQyUMyoOx0Qr+KMfHdIyos5zhamLEe0fWOLUCgvDdtUz3r1z0JW+Man x8V7S7IOqOjD71GJVx+54Ujfgi8ufsrnMBAyG1nn5bEIsI/T5sSoHZRFJwztArSK GMxy3PWSKfYnk9+qYYBW1rsU9ZnuZf9vL8KS0kkDZ9HHLv8CC6XnfWuB7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrutO5pWzCUYvXus19E1aUDRLjaMB8GA1UdIwQY MBaAFEgOPPDRIldMfns78DTQ09AT7rwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0E0ODhORWlWMHgtZXp2d05ORFQwQlB1dkJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iYTY2ZjItZGUzZS00ZGU4LWJkNjUt MjJmMjNmZTI5Mjg3LzEvU0E0ODhORWlWMHgtZXp2d05ORFQwQlB1dkJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9iYTY2ZjItZGUzZS00ZGU4LWJkNjUtMjJmMjNmZTI5Mjg3 LzEvU0E0ODhORWlWMHgtZXp2d05ORFQwQlB1dkJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqE8Dqwes cYsyr0Czzj8DTGgelcAht8MULm0JI9LEv3Fyjq5GbZx6aIYKr5KB76qEwQvlIPa4 oQTP7hjkwDtxzyc9DCu+mjlIzVfFlnYESCqWeKSmompC1AlQpc4sb9A9nOlRKn6/ 8fJD+PT+GS5pGT0paV90Lluc/jIo6ddCAB+C+KB4Xjtawljvvqc8oyNzpLjYldn5 +NfWFo816s7lUVxPRZ3MNTaf9RfmZmN9/bziPnVk7AohOH7W5mAS+kmuEg4NzbMD 1tTGnBUpF7+0M2uTmQh2WWJBzgQc8OYOPc+HZX/igZAiO3GdwlTYUsZwORSCih6m 9iw6N+9faDq62Q== -----END CERTIFICATE-----Generated at Sun Dec 7 03:57:38 2025 by rpki-client