This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft File: SAa55i8bAPLPmNDcxYMpKvrLUi8.mft (raw, json) Hash identifier: a0V04U/X08wiMOwBqZ52vHZIFn5tDzi1c2Ub3W2m4rU= Subject key identifier: 50:6F:41:92:9C:99:05:57:B1:23:65:AC:F0:41:26:C1:22:34:0F:54 Authority key identifier: 48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F Certificate issuer: /CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f Certificate serial: 019B32318C75E9F2C13B345959E7A491FDB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft Manifest number: 1246 Signing time: Thu 18 Dec 2025 16:01:06 +0000 Manifest this update: Thu 18 Dec 2025 16:01:06 +0000 Manifest next update: Fri 19 Dec 2025 16:01:06 +0000 Files and hashes: 1: SAa55i8bAPLPmNDcxYMpKvrLUi8.crl (hash: WE1a9pWKZoMB5EUsAYfKfptxMZiVV5tfGdHYgiE6v0Y=) 2: bOFB3LalOSOdSrbz-a4cUkkG03M.roa (hash: SZa6u36skxx1rALcmnxtRi0278XWZ89tCnch5FRpzoM=) 3: ipcAqlbQdh9QjilJG8UTA6cw-zw.roa (hash: RUMHng+Xlo2Ru6wmJaBAotc3mLSEqq30G4I26Jr98jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:8c:75:e9:f2:c1:3b:34:59:59:e7:a4:91:fd:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f Validity Not Before: Dec 18 16:01:06 2025 GMT Not After : Dec 19 16:01:06 2025 GMT Subject: CN=506f41929c990557b12365acf04126c122340f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:69:0c:2a:a0:85:e2:85:24:af:aa:4f:96:22: df:ae:b6:f6:4b:17:2e:2f:6b:c5:82:91:73:18:02: 3e:70:89:b3:dc:94:95:1a:3a:b0:b6:9f:cf:55:7c: 95:a1:b4:c4:70:5f:db:fe:2e:d4:32:c7:28:2f:86: f0:0f:b9:f7:6b:78:8a:44:dc:5c:ec:ae:e1:a2:1a: 01:40:4d:59:62:09:31:d6:6a:bb:64:bd:73:02:d9: 1b:86:97:f1:98:a1:43:17:46:6b:7f:f6:bb:8e:e4: 64:f4:e9:19:31:73:f9:76:ed:52:52:08:33:b6:32: bd:21:c8:d6:02:43:43:e6:e8:b6:2d:15:b3:b4:79: cd:41:43:7b:ad:60:76:a3:ac:dc:42:48:0c:3d:2b: c3:a7:b8:4e:fe:2d:97:38:4a:5d:1b:b1:6d:17:80: 17:7c:6a:ad:8a:0d:d4:09:2e:8b:9a:95:86:fc:43: 53:d2:73:63:5b:a7:e1:ab:5e:b4:4e:02:ad:07:1b: 38:e2:18:1d:6d:cf:68:2c:1e:33:9e:90:ab:c7:18: ec:d0:a5:04:2c:5a:e6:86:85:cb:51:4e:69:94:fd: 7c:7b:09:4b:98:29:aa:1a:85:82:60:af:e0:03:f5: 93:e8:c0:6c:bd:f5:7d:71:52:24:bc:9b:ee:7b:1e: 1d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6F:41:92:9C:99:05:57:B1:23:65:AC:F0:41:26:C1:22:34:0F:54 X509v3 Authority Key Identifier: keyid:48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:15:9d:2f:96:4a:ef:65:22:9d:82:8d:90:e4:97:c2:37:5c: 32:9b:32:79:80:6e:42:32:44:79:46:b3:d3:85:ec:7a:7f:9b: c2:ca:c3:8f:e3:ff:37:60:64:e8:7a:d1:c3:61:7e:e6:6a:76: 71:62:5c:16:e7:1a:b3:ec:ce:27:b2:cd:72:6f:90:35:90:0c: 50:13:22:71:71:98:fe:45:e0:ab:e8:d5:48:e8:60:2f:9b:ae: fd:86:b3:8f:06:59:a8:bc:10:8e:bf:31:26:8d:32:89:64:19: d6:e3:a4:7e:67:1f:bb:ba:d8:18:a4:6f:c3:cd:07:a9:ef:88: 96:f9:e4:ec:d7:6a:51:bb:a5:95:df:a2:2e:13:6a:af:1b:2d: 24:00:86:18:05:88:e2:04:19:66:25:ec:97:ba:09:93:1d:95: ef:60:0e:94:ee:11:25:51:ca:5c:44:fa:29:3a:5b:93:70:0c: eb:fa:33:eb:e6:b8:04:e2:6d:7e:76:2c:4d:89:5d:82:6c:9f: cc:52:52:2d:c4:9b:4e:c1:ff:83:91:91:6c:06:ff:f0:62:2b: 97:54:a7:ac:4d:93:9d:48:53:27:16:03:1c:c9:3a:70:c5:d2: ef:4a:c2:ab:96:da:8c:87:14:8e:27:c1:51:2d:db:cd:81:be: ac:69:ab:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMYx16fLBOzRZWeekkf20MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDZiOWU2MmYxYjAwZjJjZjk4ZDBkY2M1ODMyOTJhZmFj YjUyMmYwHhcNMjUxMjE4MTYwMTA2WhcNMjUxMjE5MTYwMTA2WjAzMTEwLwYDVQQD Eyg1MDZmNDE5MjljOTkwNTU3YjEyMzY1YWNmMDQxMjZjMTIyMzQwZjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmkMKqCF4oUkr6pPliLfrrb2Sxcu L2vFgpFzGAI+cImz3JSVGjqwtp/PVXyVobTEcF/b/i7UMscoL4bwD7n3a3iKRNxc 7K7hohoBQE1ZYgkx1mq7ZL1zAtkbhpfxmKFDF0Zrf/a7juRk9OkZMXP5du1SUggz tjK9IcjWAkND5ui2LRWztHnNQUN7rWB2o6zcQkgMPSvDp7hO/i2XOEpdG7FtF4AX fGqtig3UCS6LmpWG/ENT0nNjW6fhq160TgKtBxs44hgdbc9oLB4znpCrxxjs0KUE LFrmhoXLUU5plP18ewlLmCmqGoWCYK/gA/WT6MBsvfV9cVIkvJvuex4dxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBvQZKcmQVXsSNlrPBBJsEiNA9UMB8GA1UdIwQY MBaAFEgGueYvGwDyz5jQ3MWDKSr6y1IvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FhNTVpOGJBUExQbU5EY3hZTXBLdnJMVWk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iYWE0YmMtOTI0ZS00MzY0LTlmMTMt YTVjOTZlMjExNjA1LzEvU0FhNTVpOGJBUExQbU5EY3hZTXBLdnJMVWk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9iYWE0YmMtOTI0ZS00MzY0LTlmMTMtYTVjOTZlMjExNjA1 LzEvU0FhNTVpOGJBUExQbU5EY3hZTXBLdnJMVWk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBWdL5ZK 72UinYKNkOSXwjdcMpsyeYBuQjJEeUaz04Xsen+bwsrDj+P/N2Bk6HrRw2F+5mp2 cWJcFucas+zOJ7LNcm+QNZAMUBMicXGY/kXgq+jVSOhgL5uu/YazjwZZqLwQjr8x Jo0yiWQZ1uOkfmcfu7rYGKRvw80Hqe+Ilvnk7NdqUbulld+iLhNqrxstJACGGAWI 4gQZZiXsl7oJkx2V72AOlO4RJVHKXET6KTpbk3AM6/oz6+a4BOJtfnYsTYldgmyf zFJSLcSbTsH/g5GRbAb/8GIrl1SnrE2TnUhTJxYDHMk6cMXS70rCq5bajIcUjifB US3bzYG+rGmrVQ== -----END CERTIFICATE-----Generated at Thu Dec 18 22:10:07 2025 by rpki-client