This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: meEf5fV4dq37N3qh4FWW7dVQCbtdtkciAO2JNjEocqg= Subject key identifier: E1:9E:82:3A:C3:F7:82:6F:41:E2:17:37:BB:76:10:F8:18:70:86:7F Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 019AF2ADBD4B0B17C35CE81FE396A269CABE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 1364 Signing time: Sat 06 Dec 2025 08:01:03 +0000 Manifest this update: Sat 06 Dec 2025 08:01:03 +0000 Manifest next update: Sun 07 Dec 2025 08:01:03 +0000 Files and hashes: 1: 0Masll6bbXJowlWVdStYbs2tx6E.roa (hash: Rro7robf4OQi2SafD/+wvUIv6rGO8rIKSIcGQQxuDhQ=) 2: GbtphNgjK0vdnL4zh4ndNFpMq98.roa (hash: u7HLBqxJEFs0R6rzUwZQDioPq2mneZLMKiZ7WWFYBQg=) 3: HIdYT19grrvIrsLvbv9c-RyNoYM.roa (hash: gMWRLPsAhHALB5C0CyTnC2YpfuJ8OqfVcPAvIC+/69E=) 4: OUt5ZB5ErN_qim9RPT1gdy6_fsA.roa (hash: jUTt0o3pm+pyLvb6Ukj+eNNJ2nE69gsAdM4+2ox59R8=) 5: R_OlpiLM8AchN0LvgG-brNSPeok.roa (hash: Ha2jaeCRdAo3cD1S+TwOcwXV50R2/YikiY9fj+5QfSk=) 6: T-i1HnnAiZlugAgaa37LNPgeYyA.roa (hash: JZrI/oiF2iHcbj3PFgspIgoRlLncbc7mtmuIlUx+R6U=) 7: _SIVUqOCoAD9QAv9j_FoehRwqCQ.roa (hash: sSOjeJjB03HHhjQxuEaox3x4XiuehbGVKeOJQiC5f04=) 8: euxOi9Xp3n7AyiSfCEP-xOv9hDo.roa (hash: hqClLQ+yTS1bqIE58Fj5bi8zXosgwwjJT2D8au7VfQ0=) 9: jOUyMLPZrMuzuioMpl1NXAy1D0s.roa (hash: 1gb8evtP88wWeN9HxrerPINOz1+CcWlzI+mgwi1QVJ8=) 10: oTdRqWCGB_YZL-zzysNmCsUI8OU.roa (hash: Z3CxIW13t+FC0u78Ynw/b8NpKjP4IiiiZzM5isLuBQ4=) 11: opjBwsfQwaZJKVugJJ6MF-vgLQw.roa (hash: MNlxdTCVbR2yhgEH9HVAaomJahjdfDcmr5j99PJZjnc=) 12: orAKfjl1fXW4_m23ZUuKco1b-BY.roa (hash: SPzJt2ubmkoDTY2BGadUCK43CwJNkqbV55KtpGnjnsE=) 13: qjtTNxOEgSr0b6Weeb9JJHyFnhM.roa (hash: Eb0gxKs3qeMLVvYaIgIGm1oY4DsjaHktiucw1gfNHns=) 14: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: to73aPkRPyb1MaqTGDR4T1hVjbpIC7S9GgO6bnWeLUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:bd:4b:0b:17:c3:5c:e8:1f:e3:96:a2:69:ca:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Dec 6 08:01:03 2025 GMT Not After : Dec 7 08:01:03 2025 GMT Subject: CN=e19e823ac3f7826f41e21737bb7610f81870867f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:03:e7:93:ce:38:43:1d:96:33:02:0e:18:0d: 5a:cc:09:6b:4a:cb:b9:fe:ba:b7:09:4d:cf:0b:e2: 9f:03:31:22:3f:c9:1e:c3:f9:33:bc:bc:cf:c3:91: 07:51:dc:e1:78:5a:1c:65:74:cb:6a:fd:b1:99:26: ed:a7:47:c3:20:2f:66:44:6b:74:7b:f5:0c:7f:3d: 4c:c0:3c:b1:7d:2a:78:76:f8:09:ac:e4:1a:0a:a5: 32:64:34:9c:a8:26:f9:49:e3:b7:ce:b4:ef:a6:1c: 72:63:9f:10:c9:45:c6:a2:af:8c:3b:e1:1b:59:d1: cc:25:e6:c3:2a:fb:31:63:c3:20:c1:9f:c6:26:01: 11:61:9a:91:67:c7:17:a4:65:6b:b0:ed:b3:4d:85: b5:f1:52:3f:91:60:3c:b0:09:c8:1a:0a:ce:ce:6c: 1d:b9:56:b8:2b:cb:9e:f5:59:b4:b0:fd:86:fe:46: 4e:ba:e3:18:ff:64:33:7c:a0:d5:7b:92:0c:3a:5e: 1a:2e:6e:f1:85:80:0a:dc:94:f5:a3:7c:62:ee:20: f6:3c:59:f1:1b:f7:d5:de:08:39:3e:19:c0:ae:d6: ce:5d:61:da:9d:b5:07:a4:d4:89:5b:d2:05:c9:8c: 8b:fd:d6:a7:90:5b:bd:03:e9:1f:3f:1d:0d:43:cb: 6e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9E:82:3A:C3:F7:82:6F:41:E2:17:37:BB:76:10:F8:18:70:86:7F X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:44:71:d6:37:fd:87:90:74:6e:58:76:ff:a7:67:8b:92:e6: 63:c3:37:5f:01:7a:d3:59:18:43:dc:3b:97:0c:95:de:97:7e: 34:61:b0:28:d8:4b:68:7f:ee:4d:af:fd:e3:c9:c2:b6:83:5d: b8:46:9e:8d:b4:77:21:3e:c6:2a:d8:21:08:53:f1:80:12:6b: 60:82:43:0d:bf:74:d6:f6:d4:b2:d1:e8:9a:e2:b9:ca:29:3c: 46:a2:c7:7e:9b:67:c4:13:e6:97:56:9d:04:fb:60:18:f8:88: e4:40:1a:8d:ce:61:15:02:c5:72:5a:a0:01:bf:6c:11:d6:f8: dd:ee:04:1d:59:5c:58:a1:d7:45:70:e8:31:4a:3f:82:25:76: 2f:ea:a1:f3:f6:3f:36:4b:48:4c:d6:7b:a4:ea:ea:28:ba:4a: 36:8d:b4:02:d3:76:73:29:bc:e0:7f:83:36:73:55:dc:a8:ce: cc:ea:66:eb:e8:76:e2:02:b1:d1:1b:3c:ca:1b:44:a0:84:9f: 7f:96:12:9f:7c:e4:d9:36:d0:ae:6c:e7:77:c4:0f:c5:1a:a8: 8c:de:9e:15:47:90:7c:61:22:d6:7d:0e:52:57:3e:bf:f0:57: 2a:76:d5:67:47:26:2a:07:29:e0:5e:0e:eb:d5:53:bf:b4:ef: 63:ab:90:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrb1LCxfDXOgf45aiacq+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjUxMjA2MDgwMTAzWhcNMjUxMjA3MDgwMTAzWjAzMTEwLwYDVQQD EyhlMTllODIzYWMzZjc4MjZmNDFlMjE3MzdiYjc2MTBmODE4NzA4NjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQPnk844Qx2WMwIOGA1azAlrSsu5 /rq3CU3PC+KfAzEiP8kew/kzvLzPw5EHUdzheFocZXTLav2xmSbtp0fDIC9mRGt0 e/UMfz1MwDyxfSp4dvgJrOQaCqUyZDScqCb5SeO3zrTvphxyY58QyUXGoq+MO+Eb WdHMJebDKvsxY8MgwZ/GJgERYZqRZ8cXpGVrsO2zTYW18VI/kWA8sAnIGgrOzmwd uVa4K8ue9Vm0sP2G/kZOuuMY/2QzfKDVe5IMOl4aLm7xhYAK3JT1o3xi7iD2PFnx G/fV3gg5PhnArtbOXWHanbUHpNSJW9IFyYyL/dankFu9A+kfPx0NQ8tuRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGegjrD94JvQeIXN7t2EPgYcIZ/MB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASERx1jf9 h5B0blh2/6dni5LmY8M3XwF601kYQ9w7lwyV3pd+NGGwKNhLaH/uTa/948nCtoNd uEaejbR3IT7GKtghCFPxgBJrYIJDDb901vbUstHomuK5yik8RqLHfptnxBPml1ad BPtgGPiI5EAajc5hFQLFclqgAb9sEdb43e4EHVlcWKHXRXDoMUo/giV2L+qh8/Y/ NktITNZ7pOrqKLpKNo20AtN2cym84H+DNnNV3KjOzOpm6+h24gKx0Rs8yhtEoISf f5YSn3zk2TbQrmznd8QPxRqojN6eFUeQfGEi1n0OUlc+v/BXKnbVZ0cmKgcp4F4O 69VTv7TvY6uQrw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:01 2025 by rpki-client