This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft File: SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft (raw, json) Hash identifier: DHsn55Nj+Ro8GKytajLyYAskZ3b+a+BclufJeS+CmcU= Subject key identifier: 20:F7:56:53:D8:51:98:4C:B9:D2:F8:74:09:5A:2F:E9:4A:BC:DC:CD Authority key identifier: 48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B Certificate issuer: /CN=480423aa17d04f56c690040345d6762bbfd1f88b Certificate serial: 019B2B1D80BC22A767E42984CD8B031C32AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft Manifest number: 1237 Signing time: Wed 17 Dec 2025 07:01:52 +0000 Manifest this update: Wed 17 Dec 2025 07:01:52 +0000 Manifest next update: Thu 18 Dec 2025 07:01:52 +0000 Files and hashes: 1: SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl (hash: 7DGhDRFPb2p2urvjNMKsgp2LgOPN+i/mubNPJ260gPc=) 2: a4eWXe9mLzZdOuJF4g-i_sTPTK8.roa (hash: Nl6At3QtcKnCDV2p7jnqUB0ktT1iDDCBQexgyMCnTTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:80:bc:22:a7:67:e4:29:84:cd:8b:03:1c:32:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=480423aa17d04f56c690040345d6762bbfd1f88b Validity Not Before: Dec 17 07:01:52 2025 GMT Not After : Dec 18 07:01:52 2025 GMT Subject: CN=20f75653d851984cb9d2f874095a2fe94abcdccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:50:aa:56:6d:59:33:f7:b4:bb:e6:84:a0:fc: 56:8c:10:37:b0:38:1b:b4:1b:05:66:db:b8:76:26: 66:55:74:e5:fc:d8:59:84:83:03:09:7c:de:49:3b: 08:04:42:fa:b8:f0:8f:1e:1d:54:6d:c1:1c:31:b0: 09:b2:16:99:d3:6c:91:7e:73:3a:69:06:57:8e:70: e4:5a:8c:f3:ca:56:2b:75:59:17:80:e1:88:96:57: 92:4e:a8:56:bf:de:4c:18:2a:d0:dd:86:7d:c0:e4: 30:ae:d5:f8:d9:8e:44:46:15:42:f8:ae:ec:47:ec: 89:4b:fa:3f:83:4f:b1:3e:55:8d:8b:76:33:04:58: e4:e7:1a:d2:a3:89:bf:60:ca:92:be:62:7b:bc:22: 14:a6:8d:74:02:98:54:f6:a3:be:32:ef:60:c4:04: 72:bd:8b:b0:91:dd:61:78:03:f7:3f:93:73:42:c7: 3b:9c:4a:37:7c:84:ff:66:d3:18:35:b7:28:2b:b6: b2:58:60:93:db:a2:2a:93:22:b6:01:5e:6f:66:9d: c0:cb:09:8c:42:e4:72:23:14:6c:02:a2:9f:e6:42: 6a:c1:18:ea:06:1a:49:e6:77:5c:d6:96:db:6b:8a: ca:b1:5c:3b:64:d5:b3:cc:96:eb:6d:d8:9e:18:ad: fe:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F7:56:53:D8:51:98:4C:B9:D2:F8:74:09:5A:2F:E9:4A:BC:DC:CD X509v3 Authority Key Identifier: keyid:48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:4d:26:dc:b1:a2:9e:8b:52:7c:89:4f:dc:48:8f:af:e5:a5: d6:76:6d:2b:42:25:7c:e9:a6:24:8d:e2:17:02:57:01:d4:c6: ab:45:ba:05:53:1b:ce:6c:f0:e9:ed:57:62:10:c2:75:7a:72: e6:19:54:a7:89:71:f3:8f:d7:dd:28:05:76:b3:79:70:b4:0d: aa:3f:80:d2:8f:b8:da:a0:ee:fe:47:6b:51:6e:95:58:35:34: f5:d7:5c:ae:87:61:37:06:44:5b:94:41:e8:4a:f0:fa:36:b9: ee:d6:08:16:72:bd:a5:b3:80:d2:9a:4b:c1:b0:c8:16:b7:6d: fa:7d:1e:61:cb:7f:d9:08:6c:95:3b:12:4f:0d:f2:6b:bc:d5: d3:d3:87:e0:3e:86:d3:0c:d2:f6:3d:30:40:27:e9:be:94:dd: c2:2b:7d:f4:c6:08:66:4e:42:40:b1:11:d2:d9:79:be:81:a4: 48:d1:7c:8e:96:73:37:e8:74:5b:b4:75:3f:ed:d1:13:f0:9d: 6c:71:8d:5a:22:dd:56:a5:c4:51:96:92:36:12:24:45:77:74: ed:67:5e:c5:10:55:68:00:6d:6b:c7:27:f4:bb:39:31:bd:2d: 18:11:6c:fd:27:79:4c:54:7b:d4:0c:dc:d6:be:79:9d:be:e3: dd:6f:db:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHYC8Iqdn5CmEzYsDHDKtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDQyM2FhMTdkMDRmNTZjNjkwMDQwMzQ1ZDY3NjJiYmZk MWY4OGIwHhcNMjUxMjE3MDcwMTUyWhcNMjUxMjE4MDcwMTUyWjAzMTEwLwYDVQQD EygyMGY3NTY1M2Q4NTE5ODRjYjlkMmY4NzQwOTVhMmZlOTRhYmNkY2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolCqVm1ZM/e0u+aEoPxWjBA3sDgb tBsFZtu4diZmVXTl/NhZhIMDCXzeSTsIBEL6uPCPHh1UbcEcMbAJshaZ02yRfnM6 aQZXjnDkWozzylYrdVkXgOGIlleSTqhWv95MGCrQ3YZ9wOQwrtX42Y5ERhVC+K7s R+yJS/o/g0+xPlWNi3YzBFjk5xrSo4m/YMqSvmJ7vCIUpo10AphU9qO+Mu9gxARy vYuwkd1heAP3P5NzQsc7nEo3fIT/ZtMYNbcoK7ayWGCT26IqkyK2AV5vZp3AywmM QuRyIxRsAqKf5kJqwRjqBhpJ5ndc1pbba4rKsVw7ZNWzzJbrbdieGK3+gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCD3VlPYUZhMudL4dAlaL+lKvNzNMB8GA1UdIwQY MBaAFEgEI6oX0E9WxpAEA0XWdiu/0fiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FRanFoZlFUMWJHa0FRRFJkWjJLN19SLUlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9mMGY1ZmYtYTgyMC00ZGJhLThlZTEt Y2RhNTc0MjZkZTIyLzEvU0FRanFoZlFUMWJHa0FRRFJkWjJLN19SLUlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9mMGY1ZmYtYTgyMC00ZGJhLThlZTEtY2RhNTc0MjZkZTIy LzEvU0FRanFoZlFUMWJHa0FRRFJkWjJLN19SLUlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANk0m3LGi notSfIlP3EiPr+Wl1nZtK0IlfOmmJI3iFwJXAdTGq0W6BVMbzmzw6e1XYhDCdXpy 5hlUp4lx84/X3SgFdrN5cLQNqj+A0o+42qDu/kdrUW6VWDU09ddcrodhNwZEW5RB 6Erw+ja57tYIFnK9pbOA0ppLwbDIFrdt+n0eYct/2QhslTsSTw3ya7zV09OH4D6G 0wzS9j0wQCfpvpTdwit99MYIZk5CQLER0tl5voGkSNF8jpZzN+h0W7R1P+3RE/Cd bHGNWiLdVqXEUZaSNhIkRXd07WdexRBVaABta8cn9Ls5Mb0tGBFs/Sd5TFR71Azc 1r55nb7j3W/bdg== -----END CERTIFICATE-----Generated at Wed Dec 17 11:20:46 2025 by rpki-client