This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft File: Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft (raw, json) Hash identifier: cXSigvmQt+hamhCjv/j3TkrQNL9ZhIW/QYoNEhY8ZvE= Subject key identifier: 0F:ED:82:E4:37:AA:88:C5:5C:F6:F6:68:5F:02:21:13:CF:FF:42:28 Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF Certificate issuer: /CN=49af2153f02409a464e4d7461c802d4b8dd10dff Certificate serial: 019AF6FA03A5169EFE73190B2BA168A218EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft Manifest number: 1767 Signing time: Sun 07 Dec 2025 04:02:51 +0000 Manifest this update: Sun 07 Dec 2025 04:02:51 +0000 Manifest next update: Mon 08 Dec 2025 04:02:51 +0000 Files and hashes: 1: Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl (hash: djJ4OW+WH+HQs8cPOJHNJ4D5EMwMcZp0lNAr4aYDJCk=) 2: g_lThlnsJq9LpMngQCd0Ev-AJxQ.roa (hash: J/8qgOiiWUFaiNrcnTWTtH2kw8HeWHNYJWQaiboNZV0=) 3: kx9kPAQ67ntw1Xkq0X26moD-pwk.roa (hash: X9S/3YSjUgYxw6y4t3NQ27+L1d2kR0+Z9uu+3WHTnVY=) 4: qokcHE99iTrXl6i5ZKbVWDs737c.roa (hash: i4+UG/3lSUIbQWMfcvfYr7tTK0L7q3cwt000JnF1onE=) 5: tsEpNfREWif2pmmZMW8i8IMX_NA.roa (hash: Z317i+maC8qfR96UM+ggVrhs1/7gBs3PFnoiv0k12gI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:fa:03:a5:16:9e:fe:73:19:0b:2b:a1:68:a2:18:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff Validity Not Before: Dec 7 04:02:51 2025 GMT Not After : Dec 8 04:02:51 2025 GMT Subject: CN=0fed82e437aa88c55cf6f6685f022113cfff4228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d3:26:a9:02:20:d3:32:6f:5b:bd:d4:f0:4c: 2e:dd:cb:fb:25:eb:d7:95:17:be:5b:1f:c2:38:da: 52:a4:0a:a1:25:4d:b2:92:ae:6f:0b:d9:0f:c0:87: d0:a6:94:fe:5f:03:8c:c3:1c:46:03:5a:4a:34:db: 95:93:f8:d5:15:03:fb:e6:e3:09:35:57:9b:eb:75: d1:13:34:cf:c2:a6:53:e1:e9:0d:ae:3d:22:6c:79: c4:2f:ce:22:bd:97:24:e2:26:e0:af:0c:57:e5:c2: 73:ee:8b:6d:0f:2c:68:cb:03:09:25:26:ae:4c:5e: 59:af:82:0e:11:b8:25:27:d3:c5:90:3c:9f:f8:a7: 3d:74:ac:84:4a:d5:0e:21:af:3d:37:a3:9f:c4:c4: a8:5b:01:03:70:63:f1:63:ac:52:e1:22:bb:a0:26: c1:e4:12:74:2b:ed:db:4c:f9:ea:a2:3c:01:92:25: e7:17:7f:90:bf:19:5f:95:2b:cd:2a:de:8b:5e:5a: f0:50:87:d8:99:e3:df:1c:ba:cf:12:d2:f8:40:af: fb:72:55:1f:49:1c:72:6d:61:83:23:8b:28:7d:60: 0e:6b:54:cc:fc:2b:96:f6:07:2b:7b:3b:07:eb:28: c1:d9:7b:37:b8:e3:20:40:ad:a8:2a:81:76:cf:d1: 25:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:ED:82:E4:37:AA:88:C5:5C:F6:F6:68:5F:02:21:13:CF:FF:42:28 X509v3 Authority Key Identifier: keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:cc:a7:17:5f:72:41:a4:9b:a7:d6:0d:8d:95:5a:cd:37:e2: 2c:6d:a2:64:78:c8:ba:94:f0:74:82:d2:51:f7:3f:75:a1:a9: b3:8f:b3:1c:f0:9a:04:85:9e:9d:0c:36:38:6e:5e:b0:5e:75: b6:26:ce:7d:b6:09:b1:3d:cf:b0:bd:87:af:46:4e:9e:9c:db: 97:dd:d4:d9:78:46:82:ec:48:6c:8e:4e:6b:d9:71:07:df:18: a4:50:35:96:e9:9f:ea:7a:88:7e:dd:90:aa:21:b8:3e:03:22: 71:59:02:a3:ad:8e:88:ca:87:b1:fa:3a:41:08:90:0f:e9:87: cb:1f:a4:f5:c6:97:fb:b1:2d:a9:31:8f:c1:57:15:0e:6f:55: 5b:8c:a9:18:56:42:cb:53:0e:dd:9d:b7:59:de:8a:d9:58:b7: 56:ec:a9:eb:9a:af:60:7c:5a:3a:4f:4f:b9:6d:e4:b1:38:e5: 4e:31:3a:9a:8e:c4:a1:58:e7:ac:27:f3:81:d6:95:20:35:e2: 6a:1b:39:c3:01:31:aa:05:68:3d:13:cf:5f:ce:d6:e7:28:87: 4e:5d:bc:0f:56:aa:2e:39:f0:e7:ca:6a:dc:59:15:01:5d:4e: ee:aa:8f:de:9b:f2:b4:69:0a:8e:4e:1a:89:a8:b3:f6:17:56: 15:1c:4a:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+gOlFp7+cxkLK6FoohjuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YWYyMTUzZjAyNDA5YTQ2NGU0ZDc0NjFjODAyZDRiOGRk MTBkZmYwHhcNMjUxMjA3MDQwMjUxWhcNMjUxMjA4MDQwMjUxWjAzMTEwLwYDVQQD EygwZmVkODJlNDM3YWE4OGM1NWNmNmY2Njg1ZjAyMjExM2NmZmY0MjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltMmqQIg0zJvW73U8Ewu3cv7JevX lRe+Wx/CONpSpAqhJU2ykq5vC9kPwIfQppT+XwOMwxxGA1pKNNuVk/jVFQP75uMJ NVeb63XREzTPwqZT4ekNrj0ibHnEL84ivZck4ibgrwxX5cJz7ottDyxoywMJJSau TF5Zr4IOEbglJ9PFkDyf+Kc9dKyEStUOIa89N6OfxMSoWwEDcGPxY6xS4SK7oCbB 5BJ0K+3bTPnqojwBkiXnF3+QvxlflSvNKt6LXlrwUIfYmePfHLrPEtL4QK/7clUf SRxybWGDI4sofWAOa1TM/CuW9gcrezsH6yjB2Xs3uOMgQK2oKoF2z9ElgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/tguQ3qojFXPb2aF8CIRPP/0IoMB8GA1UdIwQY MBaAFEmvIVPwJAmkZOTXRhyALUuN0Q3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2E4aFVfQWtDYVJrNU5kR0hJQXRTNDNSRGY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lYjI1YjUtNzFlYS00NjlkLTk0ODQt NGVhNmRmYjJlNWQzLzEvU2E4aFVfQWtDYVJrNU5kR0hJQXRTNDNSRGY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9lYjI1YjUtNzFlYS00NjlkLTk0ODQtNGVhNmRmYjJlNWQz LzEvU2E4aFVfQWtDYVJrNU5kR0hJQXRTNDNSRGY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMynF19y QaSbp9YNjZVazTfiLG2iZHjIupTwdILSUfc/daGps4+zHPCaBIWenQw2OG5esF51 tibOfbYJsT3PsL2Hr0ZOnpzbl93U2XhGguxIbI5Oa9lxB98YpFA1lumf6nqIft2Q qiG4PgMicVkCo62OiMqHsfo6QQiQD+mHyx+k9caX+7EtqTGPwVcVDm9VW4ypGFZC y1MO3Z23Wd6K2Vi3Vuyp65qvYHxaOk9PuW3ksTjlTjE6mo7EoVjnrCfzgdaVIDXi ahs5wwExqgVoPRPPX87W5yiHTl28D1aqLjnw58pq3FkVAV1O7qqP3pvytGkKjk4a iaiz9hdWFRxKHQ== -----END CERTIFICATE-----Generated at Sun Dec 7 08:42:49 2025 by rpki-client