This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft File: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft (raw, json) Hash identifier: I6Y4za2p52CMBXNATrBFTCcTcMQUi9jKmSCPjLvAOQc= Subject key identifier: 89:4B:C4:67:D6:EF:A3:35:6B:1F:98:4B:F9:96:95:D0:B4:15:4D:B1 Authority key identifier: B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17 Certificate issuer: /CN=b004f5869f5675f65f9b10cff4b65f74f76bed17 Certificate serial: 019B26D21D1C2DE9B1CDE4983C1C609AC00E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft Manifest number: 0693 Signing time: Tue 16 Dec 2025 11:01:02 +0000 Manifest this update: Tue 16 Dec 2025 11:01:02 +0000 Manifest next update: Wed 17 Dec 2025 11:01:02 +0000 Files and hashes: 1: BxWtid_-E8rZCQpiPweDOTdOKeU.roa (hash: eIpy/irnZIzZ2iTcdnKoq7vKHPC2KdLXiq5W/929yzo=) 2: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl (hash: AuvD8eG2mno+8KOGELB/ZDbk2duIgVeL4ziYdBrxwd8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d2:1d:1c:2d:e9:b1:cd:e4:98:3c:1c:60:9a:c0:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b004f5869f5675f65f9b10cff4b65f74f76bed17 Validity Not Before: Dec 16 11:01:02 2025 GMT Not After : Dec 17 11:01:02 2025 GMT Subject: CN=894bc467d6efa3356b1f984bf99695d0b4154db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f4:52:65:bd:cd:fa:22:9a:aa:c4:d4:f1:7b: bd:1c:a8:f9:6f:03:ed:09:84:de:0d:03:a3:3f:2e: 55:9f:82:8a:55:e1:9b:22:17:df:00:0d:b1:08:01: cf:a9:73:0a:ad:32:e4:33:a2:d4:60:62:77:c8:29: 16:7e:cf:25:4e:0d:a0:37:5f:d5:90:7f:0c:2e:4d: 89:9d:ee:e9:39:c5:d6:44:83:63:1d:d2:f1:fa:42: 49:1e:ac:5a:25:0e:1d:44:18:1c:29:1b:83:55:d1: 9c:d8:f3:b2:ea:25:89:02:7d:14:9e:2e:40:9c:19: 26:01:c0:b2:b1:f3:c0:a3:22:c2:40:ac:b7:aa:29: fc:2d:86:22:f8:df:46:62:e1:fe:f3:f9:a8:db:95: 11:2e:40:3a:d2:e8:ce:6f:6e:0b:57:02:24:9d:0b: cc:be:58:50:c2:aa:6b:58:fb:1e:7f:25:f6:26:89: fd:81:09:a1:85:bd:bc:f5:d8:4c:50:c6:ec:34:c8: 10:3d:12:e2:d9:55:7b:7e:23:20:a6:62:3a:56:88: e3:3a:3d:56:ad:f9:a0:e7:d0:81:63:8f:fb:fd:4a: ac:1b:a3:85:2b:fb:f7:e0:3d:f7:08:c6:8a:f5:ab: 20:ed:36:ab:d4:cb:bc:11:a0:46:55:c3:2d:d1:2b: 7f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4B:C4:67:D6:EF:A3:35:6B:1F:98:4B:F9:96:95:D0:B4:15:4D:B1 X509v3 Authority Key Identifier: keyid:B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:51:7d:c5:36:dc:b3:2c:d1:0c:aa:da:41:c4:2f:cc:e6:04: 27:6b:d1:83:e0:18:e4:6c:af:73:2a:da:d9:3b:91:76:8b:9d: 04:25:cc:95:d5:21:ba:fa:0c:6b:8b:0b:e9:c8:bd:ca:ca:df: 36:40:c6:f1:b5:db:25:d5:7f:1b:bf:2a:c4:82:24:8a:84:83: 84:56:aa:4c:e9:b2:f6:c1:d7:67:be:86:84:df:b7:7e:03:27: 21:6b:43:4e:a2:cb:29:3a:10:f1:cc:87:45:61:c6:62:72:12: 0e:b4:d3:31:a8:18:14:aa:6b:68:cd:b9:60:80:c4:7a:61:5e: 77:02:f0:f1:28:d0:bf:9b:2e:3a:d2:05:22:85:2d:64:8c:62: 62:72:fc:1a:9a:b0:f9:a0:39:df:c9:a0:89:b9:01:17:ed:62: c2:21:e9:68:76:de:70:5e:2d:b8:5f:fe:1a:36:3b:61:17:4e: fe:66:66:28:05:f4:b2:38:24:3d:cb:97:ab:2e:b4:03:16:bd: e1:95:84:e9:25:2a:68:af:1c:17:80:c5:66:45:2f:26:4d:40: db:35:7a:5d:b0:32:dd:33:30:b0:c7:2f:7e:cf:6f:97:b3:8a: 7e:5d:de:51:4b:5b:d0:97:3f:1f:ab:24:f5:38:67:42:99:97: 4b:c7:85:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsm0h0cLemxzeSYPBxgmsAOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMDRmNTg2OWY1Njc1ZjY1ZjliMTBjZmY0YjY1Zjc0Zjc2 YmVkMTcwHhcNMjUxMjE2MTEwMTAyWhcNMjUxMjE3MTEwMTAyWjAzMTEwLwYDVQQD Eyg4OTRiYzQ2N2Q2ZWZhMzM1NmIxZjk4NGJmOTk2OTVkMGI0MTU0ZGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPRSZb3N+iKaqsTU8Xu9HKj5bwPt CYTeDQOjPy5Vn4KKVeGbIhffAA2xCAHPqXMKrTLkM6LUYGJ3yCkWfs8lTg2gN1/V kH8MLk2Jne7pOcXWRINjHdLx+kJJHqxaJQ4dRBgcKRuDVdGc2POy6iWJAn0Uni5A nBkmAcCysfPAoyLCQKy3qin8LYYi+N9GYuH+8/mo25URLkA60ujOb24LVwIknQvM vlhQwqprWPsefyX2Jon9gQmhhb289dhMUMbsNMgQPRLi2VV7fiMgpmI6VojjOj1W rfmg59CBY4/7/UqsG6OFK/v34D33CMaK9asg7Tar1Mu8EaBGVcMt0St/xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIlLxGfW76M1ax+YS/mWldC0FU2xMB8GA1UdIwQY MBaAFLAE9YafVnX2X5sQz/S2X3T3a+0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0FUMWhwOVdkZlpmbXhEUDlMWmZkUGRyN1JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8zMWEyZGYtZGNkZS00OWYyLThmMWUt MmZlY2RkODhlNTc1LzEvc0FUMWhwOVdkZlpmbXhEUDlMWmZkUGRyN1JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8zMWEyZGYtZGNkZS00OWYyLThmMWUtMmZlY2RkODhlNTc1 LzEvc0FUMWhwOVdkZlpmbXhEUDlMWmZkUGRyN1JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj1F9xTbc syzRDKraQcQvzOYEJ2vRg+AY5Gyvcyra2TuRdoudBCXMldUhuvoMa4sL6ci9ysrf NkDG8bXbJdV/G78qxIIkioSDhFaqTOmy9sHXZ76GhN+3fgMnIWtDTqLLKToQ8cyH RWHGYnISDrTTMagYFKpraM25YIDEemFedwLw8SjQv5suOtIFIoUtZIxiYnL8Gpqw +aA538mgibkBF+1iwiHpaHbecF4tuF/+GjY7YRdO/mZmKAX0sjgkPcuXqy60Axa9 4ZWE6SUqaK8cF4DFZkUvJk1A2zV6XbAy3TMwsMcvfs9vl7OKfl3eUUtb0Jc/H6sk 9ThnQpmXS8eF+g== -----END CERTIFICATE-----Generated at Tue Dec 16 19:18:13 2025 by rpki-client