This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft File: Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft (raw, json) Hash identifier: nhHv2Dseph9vNu02tjZ5GHodIbY2/T+/G24a9Hdd35Y= Subject key identifier: 6C:8B:55:37:92:FF:9F:0B:16:F2:0E:6E:F1:16:40:2B:31:32:F4:B6 Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF Certificate issuer: /CN=49af2153f02409a464e4d7461c802d4b8dd10dff Certificate serial: 019AF50BBC786FABD931B415751B3490B057 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 19:02:58 +0000 Manifest this update: Sat 06 Dec 2025 19:02:58 +0000 Manifest next update: Sun 07 Dec 2025 19:02:58 +0000 Files and hashes: 1: Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl (hash: ol77sFXieYudvXAh4GyAYpry7AGUD3X8vPMwPkYm3CA=) 2: g_lThlnsJq9LpMngQCd0Ev-AJxQ.roa (hash: J/8qgOiiWUFaiNrcnTWTtH2kw8HeWHNYJWQaiboNZV0=) 3: kx9kPAQ67ntw1Xkq0X26moD-pwk.roa (hash: X9S/3YSjUgYxw6y4t3NQ27+L1d2kR0+Z9uu+3WHTnVY=) 4: qokcHE99iTrXl6i5ZKbVWDs737c.roa (hash: i4+UG/3lSUIbQWMfcvfYr7tTK0L7q3cwt000JnF1onE=) 5: tsEpNfREWif2pmmZMW8i8IMX_NA.roa (hash: Z317i+maC8qfR96UM+ggVrhs1/7gBs3PFnoiv0k12gI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:bc:78:6f:ab:d9:31:b4:15:75:1b:34:90:b0:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff Validity Not Before: Dec 6 19:02:58 2025 GMT Not After : Dec 7 19:02:58 2025 GMT Subject: CN=6c8b553792ff9f0b16f20e6ef116402b3132f4b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:59:a0:75:ea:52:f1:66:36:93:8e:f4:40:e1: f7:28:42:91:a9:bd:fb:53:bd:3a:64:37:c0:f9:24: dc:34:dd:b8:c5:78:68:31:86:40:20:14:22:1f:6e: 36:34:df:13:86:2f:1c:c2:8f:d7:f0:44:7c:74:f5: fe:cc:ea:7b:10:c0:63:60:69:d4:e9:19:f0:a9:36: 6e:49:9c:89:d0:09:02:59:69:6f:af:03:41:08:13: 80:c3:3f:31:b0:a6:ac:c4:1f:46:98:4e:04:e9:7f: 8b:3e:ce:ff:1c:67:f3:fe:d4:36:24:c5:19:2b:ce: 10:a3:97:16:3c:d0:e1:0c:81:ef:84:0e:d0:e9:bf: 50:7a:d9:75:26:73:5c:bf:dc:a1:b8:48:8a:87:4e: 72:c3:09:09:f8:27:ba:4c:73:6f:75:18:90:b2:c4: 66:e5:25:01:d2:5d:26:2c:bc:52:9a:fa:a6:51:b9: 2f:1c:54:71:69:cc:32:7a:56:0a:6a:a0:4c:75:7e: 2a:37:c3:fc:a1:18:d3:74:4a:db:16:54:3e:eb:9b: 88:e4:f3:11:77:b8:24:60:17:c8:31:c6:29:9f:69: 3b:7c:7d:bd:92:5f:94:42:31:49:f6:f5:6a:ba:0c: 40:da:ad:93:e1:ba:88:64:3e:00:af:3b:23:51:49: a4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8B:55:37:92:FF:9F:0B:16:F2:0E:6E:F1:16:40:2B:31:32:F4:B6 X509v3 Authority Key Identifier: keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:f9:cd:dc:e7:3e:d2:a9:3e:9c:bf:9c:fd:b4:07:6d:d6:52: 00:7e:6f:b7:0b:4c:0a:a4:a9:b3:a5:1d:d6:9c:fe:36:7d:61: 73:41:fd:21:74:01:4b:7a:2b:03:3e:36:b7:0a:59:d2:ea:87: 02:84:0d:aa:b0:50:47:b3:a1:2f:4a:75:40:06:b0:aa:06:cb: 7f:50:81:5f:d8:c7:48:f3:52:75:dd:90:18:b9:09:55:29:44: f0:46:d1:73:29:95:0c:21:c2:94:e2:04:44:cf:45:a1:95:f0: df:c0:b0:16:32:2a:54:c2:49:d2:7f:75:15:c5:c6:bc:62:c6: 14:96:6d:b2:85:1b:ac:b6:09:08:ff:f7:6e:36:9b:42:ff:74: 18:b3:92:a7:3a:7b:a4:a9:52:56:8f:ce:fc:b0:00:15:cb:9d: ff:44:09:f6:78:a6:c5:c8:7c:d9:2a:36:2f:55:7c:50:2e:1d: 06:ce:19:5f:ec:62:ca:5d:de:4e:60:a5:32:a6:6c:1b:bb:18: 67:b8:e0:4b:4a:85:b4:71:76:6b:36:b4:e8:aa:15:20:1d:0f: 14:93:dd:eb:3b:e9:c4:88:59:8f:1e:c9:b6:23:f8:b1:b6:e8: 9a:99:7f:e0:61:ff:b7:50:4e:a3:72:1f:4d:be:4d:9c:e9:e7: ac:c3:8e:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C7x4b6vZMbQVdRs0kLBXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YWYyMTUzZjAyNDA5YTQ2NGU0ZDc0NjFjODAyZDRiOGRk MTBkZmYwHhcNMjUxMjA2MTkwMjU4WhcNMjUxMjA3MTkwMjU4WjAzMTEwLwYDVQQD Eyg2YzhiNTUzNzkyZmY5ZjBiMTZmMjBlNmVmMTE2NDAyYjMxMzJmNGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVmgdepS8WY2k470QOH3KEKRqb37 U706ZDfA+STcNN24xXhoMYZAIBQiH242NN8Thi8cwo/X8ER8dPX+zOp7EMBjYGnU 6RnwqTZuSZyJ0AkCWWlvrwNBCBOAwz8xsKasxB9GmE4E6X+LPs7/HGfz/tQ2JMUZ K84Qo5cWPNDhDIHvhA7Q6b9Qetl1JnNcv9yhuEiKh05ywwkJ+Ce6THNvdRiQssRm 5SUB0l0mLLxSmvqmUbkvHFRxacwyelYKaqBMdX4qN8P8oRjTdErbFlQ+65uI5PMR d7gkYBfIMcYpn2k7fH29kl+UQjFJ9vVqugxA2q2T4bqIZD4ArzsjUUmkSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGyLVTeS/58LFvIObvEWQCsxMvS2MB8GA1UdIwQY MBaAFEmvIVPwJAmkZOTXRhyALUuN0Q3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2E4aFVfQWtDYVJrNU5kR0hJQXRTNDNSRGY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lYjI1YjUtNzFlYS00NjlkLTk0ODQt NGVhNmRmYjJlNWQzLzEvU2E4aFVfQWtDYVJrNU5kR0hJQXRTNDNSRGY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9lYjI1YjUtNzFlYS00NjlkLTk0ODQtNGVhNmRmYjJlNWQz LzEvU2E4aFVfQWtDYVJrNU5kR0hJQXRTNDNSRGY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPnN3Oc+ 0qk+nL+c/bQHbdZSAH5vtwtMCqSps6Ud1pz+Nn1hc0H9IXQBS3orAz42twpZ0uqH AoQNqrBQR7OhL0p1QAawqgbLf1CBX9jHSPNSdd2QGLkJVSlE8EbRcymVDCHClOIE RM9FoZXw38CwFjIqVMJJ0n91FcXGvGLGFJZtsoUbrLYJCP/3bjabQv90GLOSpzp7 pKlSVo/O/LAAFcud/0QJ9nimxch82So2L1V8UC4dBs4ZX+xiyl3eTmClMqZsG7sY Z7jgS0qFtHF2aza06KoVIB0PFJPd6zvpxIhZjx7JtiP4sbbompl/4GH/t1BOo3If Tb5NnOnnrMOOgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:34:00 2025 by rpki-client