This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft File: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft (raw, json) Hash identifier: nbfBuKlxE+CoV0UScd1qjI6RZYxa+PO1C08BXBvPm1M= Subject key identifier: 0E:6C:45:92:8B:EE:21:51:55:35:59:0B:F4:64:1C:BC:A5:F0:F2:83 Authority key identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19 Certificate issuer: /CN=b0095ed011c94358245c32757d46bed860df4c19 Certificate serial: 019B5C0936A86B59D16187F5B22E84D4AC32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft Manifest number: 0741 Signing time: Fri 26 Dec 2025 19:01:06 +0000 Manifest this update: Fri 26 Dec 2025 19:01:06 +0000 Manifest next update: Sat 27 Dec 2025 19:01:06 +0000 Files and hashes: 1: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl (hash: z4GR5XVPU15zO1ri5fO4/2XCWi+9Y0MSe6crpSH3em4=) 2: t0wNgCpzIiHd0fZLik8oKup2IRU.roa (hash: eDGvGeZXSnNxXFSxZa5NU4er/BuDVU9oTOPF3gyQwp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 19:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:09:36:a8:6b:59:d1:61:87:f5:b2:2e:84:d4:ac:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0095ed011c94358245c32757d46bed860df4c19 Validity Not Before: Dec 26 19:01:06 2025 GMT Not After : Dec 27 19:01:06 2025 GMT Subject: CN=0e6c45928bee21515535590bf4641cbca5f0f283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:ff:52:d8:7e:d1:3b:94:a4:21:9d:1e:f4: 8a:29:7f:35:c2:ad:af:04:bb:39:13:9f:3b:ad:3c: 8b:2f:a3:3f:18:0d:2e:c1:1f:5a:06:fd:17:9c:a4: 1e:c8:56:27:cd:97:49:ca:d1:7f:1b:18:d9:6e:63: 0a:75:32:2b:c3:6f:96:05:26:ec:3b:80:87:5f:70: bc:6a:73:cc:89:07:cb:7e:84:d3:2c:03:2b:11:32: 11:00:d9:bb:e3:5e:67:70:c0:db:05:d2:2f:46:14: 15:cc:48:df:51:4f:a2:53:12:3f:a6:28:9f:39:54: 67:5d:b2:a7:47:2f:b0:43:d1:3e:a4:9d:ce:3f:b9: b6:b7:35:9c:39:b5:5e:a8:04:86:77:cf:ba:b0:82: 34:8c:d6:b9:9c:10:2a:35:b5:ea:bd:91:c7:23:2b: cb:e1:61:c2:fd:a1:12:c3:df:72:d5:60:d5:28:1d: ed:45:21:ef:30:31:8d:26:50:d0:2e:39:7f:b2:c0: 09:d5:7f:41:f9:ba:06:b4:9d:3f:26:57:e8:f1:08: ad:32:46:0f:40:07:d1:00:ba:90:a0:59:d8:f4:be: c4:5c:91:ae:c8:6b:9a:83:ef:9f:85:bf:bf:a5:38: d2:66:07:9a:2a:85:b4:7e:30:6f:b3:79:00:ee:01: e1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:6C:45:92:8B:EE:21:51:55:35:59:0B:F4:64:1C:BC:A5:F0:F2:83 X509v3 Authority Key Identifier: keyid:B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:e7:ad:de:66:5f:5e:19:fe:dd:8b:27:e6:dc:5a:5e:35:7c: 10:de:65:30:e4:c0:15:76:5f:16:e1:2e:82:30:80:c1:a3:70: ed:47:32:69:a9:51:01:39:a6:66:9e:3d:f8:6f:d4:36:26:09: f8:81:5c:1b:71:d8:f1:49:8b:5f:14:a6:ad:2e:e7:cf:dc:a0: cf:38:fb:2c:7e:11:4a:f9:a8:58:4f:4f:a2:3d:4b:a2:d9:c3: 09:2a:02:88:37:90:50:e6:71:1b:ca:05:45:34:df:bf:2e:07: 44:b3:78:34:c6:24:e9:a4:e0:57:fc:b8:a2:85:14:e6:34:cb: 93:16:40:88:28:87:e0:01:ea:ee:e2:58:22:e2:36:80:a2:22: 6b:c5:92:59:14:aa:f0:a4:ab:a3:70:f0:ef:ad:ed:57:e9:04: 55:7b:a7:e1:97:1f:c2:3d:ef:cc:8a:22:ea:c5:24:d8:c6:91: 79:18:5f:01:84:37:9b:ca:44:d3:de:84:4c:26:44:ce:d2:f7: 0d:79:43:e2:82:39:c0:74:0a:16:4f:67:a2:0d:f2:95:e7:51: 62:49:d3:c5:ee:05:5b:42:8d:ea:f3:20:56:a4:50:6d:09:75: af:68:06:ac:d2:bd:18:ff:3d:35:c3:01:5a:27:51:17:47:6c: a7:6b:cf:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcCTaoa1nRYYf1si6E1KwyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMDk1ZWQwMTFjOTQzNTgyNDVjMzI3NTdkNDZiZWQ4NjBk ZjRjMTkwHhcNMjUxMjI2MTkwMTA2WhcNMjUxMjI3MTkwMTA2WjAzMTEwLwYDVQQD EygwZTZjNDU5MjhiZWUyMTUxNTUzNTU5MGJmNDY0MWNiY2E1ZjBmMjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo//Uth+0TuUpCGdHvSKKX81wq2v BLs5E587rTyLL6M/GA0uwR9aBv0XnKQeyFYnzZdJytF/GxjZbmMKdTIrw2+WBSbs O4CHX3C8anPMiQfLfoTTLAMrETIRANm7415ncMDbBdIvRhQVzEjfUU+iUxI/piif OVRnXbKnRy+wQ9E+pJ3OP7m2tzWcObVeqASGd8+6sII0jNa5nBAqNbXqvZHHIyvL 4WHC/aESw99y1WDVKB3tRSHvMDGNJlDQLjl/ssAJ1X9B+boGtJ0/Jlfo8QitMkYP QAfRALqQoFnY9L7EXJGuyGuag++fhb+/pTjSZgeaKoW0fjBvs3kA7gHhmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5sRZKL7iFRVTVZC/RkHLyl8PKDMB8GA1UdIwQY MBaAFLAJXtARyUNYJFwydX1Gvthg30wZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0FsZTBCSEpRMWdrWERKMWZVYS0yR0RmVEJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS80OWNkZWMtNjlmMC00NTQwLTg5YmEt ZWE0NTk2OTk1MGNjLzEvc0FsZTBCSEpRMWdrWERKMWZVYS0yR0RmVEJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS80OWNkZWMtNjlmMC00NTQwLTg5YmEtZWE0NTk2OTk1MGNj LzEvc0FsZTBCSEpRMWdrWERKMWZVYS0yR0RmVEJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANeet3mZf Xhn+3Ysn5txaXjV8EN5lMOTAFXZfFuEugjCAwaNw7UcyaalRATmmZp49+G/UNiYJ +IFcG3HY8UmLXxSmrS7nz9ygzzj7LH4RSvmoWE9Poj1LotnDCSoCiDeQUOZxG8oF RTTfvy4HRLN4NMYk6aTgV/y4ooUU5jTLkxZAiCiH4AHq7uJYIuI2gKIia8WSWRSq 8KSro3Dw763tV+kEVXun4Zcfwj3vzIoi6sUk2MaReRhfAYQ3m8pE096ETCZEztL3 DXlD4oI5wHQKFk9nog3yledRYknTxe4FW0KN6vMgVqRQbQl1r2gGrNK9GP89NcMB WidRF0dsp2vPZg== -----END CERTIFICATE-----Generated at Sat Dec 27 02:49:00 2025 by rpki-client