This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft File: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft (raw, json) Hash identifier: V07FJhekC6+t1Zy4uyHIR93sMj2YD0w+WCnSCHwT5pk= Subject key identifier: C0:65:48:FF:3D:27:08:6D:2F:33:67:3A:F3:A6:48:C9:A9:5D:C4:0F Authority key identifier: B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17 Certificate issuer: /CN=b004f5869f5675f65f9b10cff4b65f74f76bed17 Certificate serial: 019AF2AD770048F917A0538BF4A7462C8637 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft Manifest number: 0678 Signing time: Sat 06 Dec 2025 08:00:45 +0000 Manifest this update: Sat 06 Dec 2025 08:00:45 +0000 Manifest next update: Sun 07 Dec 2025 08:00:45 +0000 Files and hashes: 1: BxWtid_-E8rZCQpiPweDOTdOKeU.roa (hash: eIpy/irnZIzZ2iTcdnKoq7vKHPC2KdLXiq5W/929yzo=) 2: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl (hash: zvKdWCI5e128I34RVMblUvVl86yTB8IaI/umP9p/js4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:77:00:48:f9:17:a0:53:8b:f4:a7:46:2c:86:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b004f5869f5675f65f9b10cff4b65f74f76bed17 Validity Not Before: Dec 6 08:00:45 2025 GMT Not After : Dec 7 08:00:45 2025 GMT Subject: CN=c06548ff3d27086d2f33673af3a648c9a95dc40f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6f:16:2d:66:f1:53:44:9c:fc:18:6a:cf:59: 4a:73:73:3b:3f:05:62:5a:14:73:f7:1e:04:cd:0b: 4f:68:e6:fc:ff:d2:5e:65:e7:43:5d:52:fe:6c:8b: 42:0d:f4:94:34:2d:54:3b:e5:79:87:58:c5:b0:76: ce:10:6c:b6:25:86:38:1d:3a:57:ab:69:31:1d:27: 92:cf:82:48:62:52:86:d8:b3:af:32:d3:2e:ef:c3: ea:02:23:48:0f:62:f2:e6:cd:c0:71:07:9e:ea:06: ff:00:56:06:c0:a6:bd:1a:d2:cf:9d:5e:35:4b:d1: 42:2b:88:23:25:2f:79:e8:bc:4e:96:dc:03:76:c6: 48:2f:a6:7d:6e:3a:52:08:90:56:95:87:e0:f2:b8: 9a:a6:04:47:6c:19:32:37:9e:ed:90:1f:a8:a2:ee: f6:e9:1d:fa:8a:3f:e9:1d:f2:bd:ac:be:e4:81:cf: ba:28:d5:35:2e:37:8e:d4:2f:56:17:2b:59:f3:06: 98:43:0e:3f:e6:53:dc:8c:0f:06:6c:55:ea:31:18: cf:d2:8f:cc:bc:88:07:ad:74:70:e2:52:f4:5d:79: e6:48:b3:3a:77:e7:44:3c:81:0c:2f:76:f1:72:d1: b1:0a:e4:dc:de:cc:0b:dc:ae:29:f4:4f:51:1a:19: de:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:65:48:FF:3D:27:08:6D:2F:33:67:3A:F3:A6:48:C9:A9:5D:C4:0F X509v3 Authority Key Identifier: keyid:B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:e1:c9:02:21:23:71:be:1f:8f:6c:e9:7d:24:4d:74:52:32: 4a:8d:22:f4:7e:42:d2:4b:1b:fb:17:af:62:e3:cd:9d:ee:c8: 69:e1:b1:d6:5e:f7:b6:3f:70:03:1d:c0:4e:7e:57:69:df:7e: 51:9c:a4:41:65:6e:21:d1:64:50:10:26:82:45:f6:c4:0d:37: 20:01:0f:e9:13:8d:cb:ac:7a:59:3f:ba:5b:48:4f:a8:d5:94: da:15:9e:d7:23:d4:dc:99:1f:87:5a:d0:3b:65:88:d2:5d:89: b9:cc:25:a6:6c:53:9d:ee:20:0c:7b:b4:67:e0:4b:5c:d1:4c: c2:ac:81:86:da:dc:58:d5:ce:70:14:e0:03:f8:6f:42:08:cc: e6:d0:c3:8e:9b:86:bb:0a:21:ab:91:e5:dd:de:7f:e8:9c:d2: 26:dd:cc:61:ae:c9:c1:15:2b:da:50:0c:a9:fc:56:f3:10:72: 05:84:e6:9a:e7:12:a5:f8:40:db:43:39:31:c3:79:5d:c1:00: ad:80:6b:3d:45:cf:dc:36:5c:c8:7f:54:71:8a:f6:2b:0f:eb: 3d:61:53:06:cf:ac:9d:d5:c1:36:a8:47:25:e5:e8:6d:f5:72: 66:35:16:0d:f8:bb:a7:c8:8c:42:3f:0a:3b:03:4f:e1:01:f2: 53:ff:ec:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXcASPkXoFOL9KdGLIY3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMDRmNTg2OWY1Njc1ZjY1ZjliMTBjZmY0YjY1Zjc0Zjc2 YmVkMTcwHhcNMjUxMjA2MDgwMDQ1WhcNMjUxMjA3MDgwMDQ1WjAzMTEwLwYDVQQD EyhjMDY1NDhmZjNkMjcwODZkMmYzMzY3M2FmM2E2NDhjOWE5NWRjNDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW8WLWbxU0Sc/Bhqz1lKc3M7PwVi WhRz9x4EzQtPaOb8/9JeZedDXVL+bItCDfSUNC1UO+V5h1jFsHbOEGy2JYY4HTpX q2kxHSeSz4JIYlKG2LOvMtMu78PqAiNID2Ly5s3AcQee6gb/AFYGwKa9GtLPnV41 S9FCK4gjJS956LxOltwDdsZIL6Z9bjpSCJBWlYfg8riapgRHbBkyN57tkB+oou72 6R36ij/pHfK9rL7kgc+6KNU1LjeO1C9WFytZ8waYQw4/5lPcjA8GbFXqMRjP0o/M vIgHrXRw4lL0XXnmSLM6d+dEPIEML3bxctGxCuTc3swL3K4p9E9RGhne3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBlSP89JwhtLzNnOvOmSMmpXcQPMB8GA1UdIwQY MBaAFLAE9YafVnX2X5sQz/S2X3T3a+0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0FUMWhwOVdkZlpmbXhEUDlMWmZkUGRyN1JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8zMWEyZGYtZGNkZS00OWYyLThmMWUt MmZlY2RkODhlNTc1LzEvc0FUMWhwOVdkZlpmbXhEUDlMWmZkUGRyN1JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8zMWEyZGYtZGNkZS00OWYyLThmMWUtMmZlY2RkODhlNTc1 LzEvc0FUMWhwOVdkZlpmbXhEUDlMWmZkUGRyN1JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZeHJAiEj cb4fj2zpfSRNdFIySo0i9H5C0ksb+xevYuPNne7IaeGx1l73tj9wAx3ATn5Xad9+ UZykQWVuIdFkUBAmgkX2xA03IAEP6RONy6x6WT+6W0hPqNWU2hWe1yPU3Jkfh1rQ O2WI0l2JucwlpmxTne4gDHu0Z+BLXNFMwqyBhtrcWNXOcBTgA/hvQgjM5tDDjpuG uwohq5Hl3d5/6JzSJt3MYa7JwRUr2lAMqfxW8xByBYTmmucSpfhA20M5McN5XcEA rYBrPUXP3DZcyH9UcYr2Kw/rPWFTBs+sndXBNqhHJeXobfVyZjUWDfi7p8iMQj8K OwNP4QHyU//s0g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:42 2025 by rpki-client