This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft File: BSawPHFxhMNoCBflXiRV-F1zpBM.mft (raw, json) Hash identifier: sAFYNVcdxn85KLYD1f5/ohXA1snPfWE4y16NdiOzbAI= Subject key identifier: 0D:55:0D:8E:2F:14:21:89:23:81:7E:C2:CF:59:F6:DD:60:9D:9D:38 Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13 Certificate issuer: /CN=0526b03c717184c3680817e55e2455f85d73a413 Certificate serial: 019AF35238DC1A9F7DBECD14B0472C697E0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft Manifest number: 1198 Signing time: Sat 06 Dec 2025 11:00:43 +0000 Manifest this update: Sat 06 Dec 2025 11:00:43 +0000 Manifest next update: Sun 07 Dec 2025 11:00:43 +0000 Files and hashes: 1: 8c89w0Wi8wMsoXrghW5qP2-hNS0.roa (hash: D8vS3w3ktRdTzyzGgvoFRLHLzAmdAx/fg6SYcr4tnA0=) 2: BSawPHFxhMNoCBflXiRV-F1zpBM.crl (hash: 7shduXOQw/69DoJJkfLzU8gcNSBi4jclUEdwHVWaeZc=) 3: fCmxjuxg2kiGhVLozWEWvXwEU4U.roa (hash: M5qgc4FTv7281YHawHS2pyFS7vA+gmBBWWyMQstn7/0=) 4: nOiNWJ-i5dURvJrnb-UFxx1qFR4.roa (hash: Gb+jmLlW78LaJODUMsMQolCStI4IVcksSh8B2dzPGko=) 5: ppaVoCVyYt16HDG7WfOtkr7EeHs.roa (hash: Qez8a/FWG6eNLOTogKVCXP47/rGL1fBAom4YDZ6wxts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:38:dc:1a:9f:7d:be:cd:14:b0:47:2c:69:7e:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413 Validity Not Before: Dec 6 11:00:43 2025 GMT Not After : Dec 7 11:00:43 2025 GMT Subject: CN=0d550d8e2f14218923817ec2cf59f6dd609d9d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cc:26:65:59:cd:9a:76:c3:04:ba:5d:ee:2f: 30:f5:3d:17:a3:ec:f5:74:0c:09:b2:03:eb:32:06: b3:1c:81:da:70:c4:be:15:9a:da:06:d5:d4:fb:48: 54:db:49:ff:21:54:57:41:6c:73:aa:ad:b6:c1:90: e7:9c:9a:c7:f5:ca:e2:82:2e:2c:fd:a8:12:21:c4: f8:66:62:a4:cf:0c:cb:53:a9:32:d2:3d:10:b1:be: 32:df:12:05:f0:d9:36:12:bb:34:20:1c:04:43:cb: 9d:55:fd:ca:65:2c:d3:52:ec:c5:c0:e1:27:1d:7d: 58:0f:b6:b9:65:6c:47:58:83:ec:54:ef:87:ef:21: 3e:e1:65:ba:4a:55:b8:69:6a:11:ae:2c:03:59:8d: 32:d3:0b:ef:4f:78:8a:04:db:b5:34:30:d8:81:58: ce:2a:e0:4d:c7:a9:e4:f9:3f:c9:c1:f2:2f:7a:cf: 33:05:45:a0:7d:b8:63:67:a8:02:8a:a3:c7:a1:cc: d4:df:31:d4:4c:85:d0:dc:e8:3b:b6:f2:fc:80:47: f2:b6:49:3f:07:68:60:e4:c0:97:9f:f5:ae:b1:3d: 09:b3:af:68:7b:4d:b0:cc:a5:2a:fc:3a:67:08:10: 61:25:6d:77:6a:76:b0:75:98:dd:e7:d7:3b:56:b4: ff:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:55:0D:8E:2F:14:21:89:23:81:7E:C2:CF:59:F6:DD:60:9D:9D:38 X509v3 Authority Key Identifier: keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:c7:2b:bc:30:e4:0b:54:a2:49:56:4e:76:fb:61:4b:e3:4c: ae:2d:b6:2a:19:68:bc:8d:12:c0:f2:50:1f:b8:32:d8:6e:c5: 99:77:e4:43:9a:35:59:3c:9f:c6:83:71:88:87:9a:d1:ff:fa: e1:22:e6:82:45:01:0b:f6:f0:bb:61:d9:59:71:9c:af:96:70: ae:d5:7b:01:26:d9:2a:57:53:eb:bc:81:76:79:02:c1:a2:bf: a6:f6:da:63:42:82:62:0b:f2:8e:33:a0:d5:1b:44:1f:04:bf: e8:ab:e6:9d:b6:2d:cd:bc:9f:fc:ed:32:a5:21:8f:ae:8f:fb: fa:31:3d:fc:af:18:f5:88:fc:8b:32:f7:93:62:80:20:ac:66: 78:8d:34:72:85:c4:d9:38:58:9d:03:eb:e5:93:72:df:61:05: 0c:0d:7d:ae:78:81:9e:9f:11:20:81:77:4b:fe:56:b3:9b:17: b3:f1:40:63:62:2c:3a:9f:ac:11:4a:6e:6f:36:a5:68:bb:1f: 74:30:ec:0c:2d:25:8a:12:b4:e5:ae:ad:0a:63:c6:dd:11:72: 86:63:1e:0b:7d:bd:5e:c4:00:ce:9d:41:53:73:4a:2f:96:ca: fb:eb:bb:67:52:76:45:63:84:a9:16:e6:17:40:b2:f1:d8:2b: 48:52:b4:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUjjcGp99vs0UsEcsaX4KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MjZiMDNjNzE3MTg0YzM2ODA4MTdlNTVlMjQ1NWY4NWQ3 M2E0MTMwHhcNMjUxMjA2MTEwMDQzWhcNMjUxMjA3MTEwMDQzWjAzMTEwLwYDVQQD EygwZDU1MGQ4ZTJmMTQyMTg5MjM4MTdlYzJjZjU5ZjZkZDYwOWQ5ZDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcwmZVnNmnbDBLpd7i8w9T0Xo+z1 dAwJsgPrMgazHIHacMS+FZraBtXU+0hU20n/IVRXQWxzqq22wZDnnJrH9crigi4s /agSIcT4ZmKkzwzLU6ky0j0Qsb4y3xIF8Nk2Ers0IBwEQ8udVf3KZSzTUuzFwOEn HX1YD7a5ZWxHWIPsVO+H7yE+4WW6SlW4aWoRriwDWY0y0wvvT3iKBNu1NDDYgVjO KuBNx6nk+T/JwfIves8zBUWgfbhjZ6gCiqPHoczU3zHUTIXQ3Og7tvL8gEfytkk/ B2hg5MCXn/WusT0Js69oe02wzKUq/DpnCBBhJW13anawdZjd59c7VrT/xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1VDY4vFCGJI4F+ws9Z9t1gnZ04MB8GA1UdIwQY MBaAFAUmsDxxcYTDaAgX5V4kVfhdc6QTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9hMzM4M2EtMDRlYi00M2Y4LWE5NTMt M2JmMDRhMmE5M2Q4LzEvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9hMzM4M2EtMDRlYi00M2Y4LWE5NTMtM2JmMDRhMmE5M2Q4 LzEvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMcrvDDk C1SiSVZOdvthS+NMri22KhlovI0SwPJQH7gy2G7FmXfkQ5o1WTyfxoNxiIea0f/6 4SLmgkUBC/bwu2HZWXGcr5ZwrtV7ASbZKldT67yBdnkCwaK/pvbaY0KCYgvyjjOg 1RtEHwS/6KvmnbYtzbyf/O0ypSGPro/7+jE9/K8Y9Yj8izL3k2KAIKxmeI00coXE 2ThYnQPr5ZNy32EFDA19rniBnp8RIIF3S/5Ws5sXs/FAY2IsOp+sEUpubzalaLsf dDDsDC0lihK05a6tCmPG3RFyhmMeC329XsQAzp1BU3NKL5bK++u7Z1J2RWOEqRbm F0Cy8dgrSFK0Kw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:56:03 2025 by rpki-client