This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft File: SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json) Hash identifier: Yu+R7Yr3PN04RpOLESAD1ifz3ddsjAVaiNY5x5pCvk8= Subject key identifier: 3B:47:36:00:D6:97:22:82:9C:6B:F8:29:EA:45:CB:17:62:E3:C5:B5 Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019AF31C32C7E8055C9D7CAC00ADD1C0B060 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft Manifest number: 1829 Signing time: Sat 06 Dec 2025 10:01:42 +0000 Manifest this update: Sat 06 Dec 2025 10:01:42 +0000 Manifest next update: Sun 07 Dec 2025 10:01:42 +0000 Files and hashes: 1: 0r3ZOs3tSGQOAwKzjx9H3w3zD1I.roa (hash: ImJALobce0VudmZQsXxpxY8sBnoTPMqNKew3nU3/sEU=) 2: 1ojW1PCNbjVVzZCIw352rg07Sgc.roa (hash: DWGluicVfEBXfONntnVBJgK4tCyy2Ovpfao0psE3JrQ=) 3: 5JBiV6_ZwlIO1DRO8e-vucg26dc.roa (hash: pnq6FxEs3n389ufMWaHkhV00a/UkldcfAj8b2n3j78M=) 4: 5ZGlxXtHkl_D3voGj6rx85jwlZU.roa (hash: JM4dPNTX67vo7LYoTP+WEMvsk0f45bFlZOiulkq76Ww=) 5: 7sokSdMBchYZMEnBvod8waTOzqo.roa (hash: oYENQuxHUAl4Ib35jlGS9V7jC+uuxKfZxyKIG9teMqc=) 6: 9kKrY-00aHCLZ5_iE5q85XwU7ck.roa (hash: JZlIoGUSP8LhD5Ex99sUi6EUJNNOAyUQks5HiOIipSE=) 7: CrllrlBAhQGk4cIQtQiE9Nj3su4.roa (hash: M4tCpo9w//zscnUK9NiZQ/ql2b+0qXyoCf0zVfrzlg4=) 8: HqifaU4ZzX1zPEBC7D-B73EGf3M.roa (hash: 0M8aqRG6ut6LxfjbRqCgOybnHyYCc2Tx8toQYsRs7+g=) 9: IsmNaCvuzsXJ7mZx6ck2uhVnWfY.roa (hash: 5eWNodxG2i37/4nnN3ZMtyCR75XHHge/btm6KjXlzgs=) 10: J44Z4Tgcw-AV9S54DTd0WYqvfaQ.roa (hash: NmfJXb6jXjFVf2V7NROr+VC6Vzihrgt41O4Lov0gIgI=) 11: R3xayF97XK3f6WN53ZX5sxR54jo.roa (hash: 3PZ+HViUokDQMZxJmaE1uzBy+pQRq/4nLFWrCe3sMjU=) 12: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: xVp5KfSO837uyWe+X7cZkARORbuzu8MnJrxp3ErQ0Uo=) 13: U9JKjRKHCxdIsPDNQPOR88OqmCg.roa (hash: lajLKbejzI40eVa7BHAS4fdbPpPskr27n+GpeXAUSBk=) 14: VcWZUDSfSSKFrHgiIqRuCEBIomE.roa (hash: 8diyMJmOQ9BNiLPCYYS2Sa8Mn23tj7FWiq6+eMmQjW0=) 15: VgwcNuoBbQF8vGnu87-98unWzYI.roa (hash: xzpL3I9r8p4R1FCkPrlQ5XYcS0wswEmNqu/eM1IOMwU=) 16: _yzn5oDusX2X0X7GKZBcg6brbLE.roa (hash: 3Zb9XtEnFpg2ZnedyDM6Fmzs7qviCkwqPZ3m1FKhSy0=) 17: b81Y2U7ou3gE7qnhOIrH6wzIwHE.roa (hash: evIbesfBnQDx6fK9X24u14Wb1m4RUjoEvZ0+mfP0N8E=) 18: eh1lMd-pxsCY238XVmemDHajuoY.roa (hash: iqRbqVrBPabqcE8hm/O38yxpFyJc+vKU4nyi13CcpWw=) 19: iLq3_4XBIqdahBK6ZAbNC_BoDIk.roa (hash: yGHeMjl6w0xnIs7bhpeRABIGyuoMa8xkrNR26t1mdDM=) 20: iPxdZuzxvDtlhje1pBxfz_ffoSI.roa (hash: 5nZeFKjMPEJbsRI/uBt0UR440fY87EaeHxRz6CkKzyc=) 21: sXombvKi4nr7vxHECbDWlTCtz78.roa (hash: NLIx49ILN6SKs0Nh0AFpPfhfEs1G537segBfCzz3EEw=) 22: uE7Yr0mrdBcUX1IW6FuzHWklFWE.roa (hash: Txuv8knFAVKbDTm6XQpLWHHm/zIqEkh3sPLdu38MgYQ=) 23: ulYg4AG1ul90cUDOSHCVqM9kgX0.roa (hash: YyEEkcY+cM/W31h/eE29O/fYkGie+5JT9vHD80X8ftc=) 24: v3awz8QkP58mxnUs9B2fDSnWLXM.roa (hash: TAmNgPwah3we4uplBsSi3VCIYC8AT7YJO0o7AP89TEA=) 25: yJtgUHZrNGIphWEtuEirIf27Jww.roa (hash: zOQtzaZFlNqZsL/r+xQWgVSCPH9Fe6GrpDnDb0dgb2o=) 26: z9ae-Gs7r9KKpMcDJbVz7FmiTRs.roa (hash: JszRMzQKTmymxrpiY4Ap7YZRfZnYk8CJdCSLIzjXOQo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:32:c7:e8:05:5c:9d:7c:ac:00:ad:d1:c0:b0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Dec 6 10:01:42 2025 GMT Not After : Dec 7 10:01:42 2025 GMT Subject: CN=3b473600d69722829c6bf829ea45cb1762e3c5b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1d:42:73:b2:13:37:b6:0e:58:9e:d1:b7:79: b6:11:de:1d:15:08:f7:d5:96:e2:2b:b3:51:3d:de: f9:a0:d9:2d:32:17:97:a3:9e:13:e3:4b:52:ed:9b: ac:4b:61:92:b5:af:2e:e8:10:51:2e:5c:4e:dc:7e: b5:a6:9a:64:94:34:20:33:33:c9:90:a7:66:0d:af: 48:a9:53:40:e2:f5:ba:ee:a7:96:88:26:84:1e:82: 1d:2c:9f:dc:aa:0d:75:b8:c8:b0:34:8b:67:a8:13: d0:ac:2b:82:31:78:2c:2c:ce:ec:ad:75:f1:a8:c5: c0:2a:f5:34:71:d4:32:11:25:d8:2f:81:f8:19:18: 26:c4:a1:0e:0c:c7:74:20:f3:47:35:c0:3f:83:70: d3:2c:83:0c:61:ec:61:d7:47:7e:e0:c3:21:1f:9a: e2:5a:a5:38:71:f2:5b:12:35:1f:8e:ab:81:78:27: 89:07:f0:3b:77:50:64:1b:5e:ab:ab:1f:fb:7b:04: c7:98:5c:57:8f:ec:77:9c:67:a7:97:fc:c6:24:02: 16:0f:04:b9:17:21:ae:f1:9c:57:16:62:93:ef:ca: f1:54:c9:c1:22:74:a8:cd:f8:ca:b0:24:9f:c6:cc: e3:28:07:84:c7:64:0a:6b:c1:98:88:ce:4b:95:85: bd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:47:36:00:D6:97:22:82:9C:6B:F8:29:EA:45:CB:17:62:E3:C5:B5 X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:93:7f:02:f4:f0:f9:27:58:c8:09:0a:76:d1:af:b0:07:44: d0:8f:e8:3c:0d:c8:32:8f:62:36:4f:a0:0f:6d:6d:ff:dd:8f: b3:d6:67:44:f4:3b:3e:a0:a5:66:43:98:cb:3a:c2:d2:42:90: 53:3e:50:7f:50:99:87:63:00:41:cf:8a:16:0d:60:b1:c7:5c: a9:c6:5e:5f:a1:ad:08:e4:83:e1:30:2f:34:91:23:c8:8a:4a: 22:b2:6f:31:c9:7c:58:34:e0:86:b2:9e:96:92:44:42:cb:3e: 19:1d:83:4c:b3:cd:4d:77:75:44:e4:70:3a:de:82:3e:de:cf: d9:f7:76:15:99:9e:dc:3e:a9:6a:cd:04:50:38:3d:35:b4:03: 9c:bf:f3:27:5d:49:55:7f:be:cd:3c:17:98:91:fe:28:45:44: 11:a4:58:a8:00:0c:4c:87:63:d9:02:91:fa:b8:b8:aa:a6:2c: d5:b0:10:c5:c2:04:78:da:c4:c6:fc:c4:d9:1c:19:fc:f2:7a: 90:98:fa:2a:af:6e:83:ee:1a:dd:d1:a1:a4:12:c8:99:80:35: f3:e9:22:19:32:09:e3:06:8a:9b:82:82:a3:da:fe:4b:ed:b3: 93:48:5f:8e:37:a8:94:33:8d:80:b1:12:bd:b0:60:b8:e5:79: 9a:89:1e:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHDLH6AVcnXysAK3RwLBgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjUxMjA2MTAwMTQyWhcNMjUxMjA3MTAwMTQyWjAzMTEwLwYDVQQD EygzYjQ3MzYwMGQ2OTcyMjgyOWM2YmY4MjllYTQ1Y2IxNzYyZTNjNWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB1Cc7ITN7YOWJ7Rt3m2Ed4dFQj3 1ZbiK7NRPd75oNktMheXo54T40tS7ZusS2GSta8u6BBRLlxO3H61pppklDQgMzPJ kKdmDa9IqVNA4vW67qeWiCaEHoIdLJ/cqg11uMiwNItnqBPQrCuCMXgsLM7srXXx qMXAKvU0cdQyESXYL4H4GRgmxKEODMd0IPNHNcA/g3DTLIMMYexh10d+4MMhH5ri WqU4cfJbEjUfjquBeCeJB/A7d1BkG16rqx/7ewTHmFxXj+x3nGenl/zGJAIWDwS5 FyGu8ZxXFmKT78rxVMnBInSozfjKsCSfxszjKAeEx2QKa8GYiM5LlYW9SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtHNgDWlyKCnGv4KepFyxdi48W1MB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZN/AvTw +SdYyAkKdtGvsAdE0I/oPA3IMo9iNk+gD21t/92Ps9ZnRPQ7PqClZkOYyzrC0kKQ Uz5Qf1CZh2MAQc+KFg1gscdcqcZeX6GtCOSD4TAvNJEjyIpKIrJvMcl8WDTghrKe lpJEQss+GR2DTLPNTXd1RORwOt6CPt7P2fd2FZme3D6pas0EUDg9NbQDnL/zJ11J VX++zTwXmJH+KEVEEaRYqAAMTIdj2QKR+ri4qqYs1bAQxcIEeNrExvzE2RwZ/PJ6 kJj6Kq9ug+4a3dGhpBLImYA18+kiGTIJ4waKm4KCo9r+S+2zk0hfjjeolDONgLES vbBguOV5mokeEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:15:03 2025 by rpki-client