This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft File: SAqutTeS1SAWm84oDD3Yb4N27GM.mft (raw, json) Hash identifier: zGINVkbwkr5GWsMgosPHHUVnNELu1r64rqgpukDEjAU= Subject key identifier: B0:BA:9C:CF:2C:13:9F:B4:B3:2D:F2:E3:10:C0:ED:67:AC:D9:A3:19 Authority key identifier: 48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63 Certificate issuer: /CN=480aaeb53792d520169bce280c3dd86f8376ec63 Certificate serial: 019B446EA10F7067B673725E843FD5CA9EDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 05:00:59 +0000 Manifest this update: Mon 22 Dec 2025 05:00:59 +0000 Manifest next update: Tue 23 Dec 2025 05:00:59 +0000 Files and hashes: 1: Kc84xCLoopoVZjLsNJRLj2XaVE4.roa (hash: EYoVSxaior1IONB3NcpWKZcJ8AkylxdNSnDbeuoh7e8=) 2: SAqutTeS1SAWm84oDD3Yb4N27GM.crl (hash: DjPpQJPi5pcHnQjiufaqwFWd2QetgO3dYqzFLfdsBVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:a1:0f:70:67:b6:73:72:5e:84:3f:d5:ca:9e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=480aaeb53792d520169bce280c3dd86f8376ec63 Validity Not Before: Dec 22 05:00:59 2025 GMT Not After : Dec 23 05:00:59 2025 GMT Subject: CN=b0ba9ccf2c139fb4b32df2e310c0ed67acd9a319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:73:7b:41:35:44:9e:00:1d:86:f6:79:32:c2: 5b:27:44:4e:24:73:63:39:82:40:1e:5b:33:cc:e2: 32:89:53:de:ad:08:fc:55:c6:2a:d7:ae:a1:fe:66: 60:a7:a4:9e:e7:93:a1:fc:76:92:7f:4b:16:5e:c6: c7:e5:9b:7e:f9:a7:9c:55:fb:32:b1:30:ce:f7:71: 19:06:00:99:47:e8:57:14:73:b0:fe:29:8e:c1:0b: 72:cd:9c:0a:61:5b:17:c7:ce:0d:73:66:98:62:c4: 99:b4:e9:f2:17:bd:99:e9:35:10:cb:4e:ff:a8:f2: 4d:bc:b0:d2:c6:49:ee:a3:89:82:f0:2b:50:35:1c: 40:fc:53:7d:c6:99:a5:f8:9e:2c:26:9e:5e:57:68: 6b:e5:42:3e:e9:71:61:04:66:09:cb:18:3b:39:3a: 49:fc:28:85:52:a4:9d:c0:fe:01:37:27:40:0c:05: 04:d9:ee:35:03:30:09:86:cc:5f:00:d8:93:52:b4: 20:87:1b:fa:e1:fb:b0:a7:52:b3:cb:5d:c8:0f:17: 0e:c5:4c:72:3a:7c:1f:01:88:13:0b:de:6f:61:24: 2d:ba:07:b0:92:3d:94:e8:7e:68:7c:02:79:bf:03: 9c:f9:09:43:a6:c4:8a:91:07:e8:14:06:bd:11:2e: db:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BA:9C:CF:2C:13:9F:B4:B3:2D:F2:E3:10:C0:ED:67:AC:D9:A3:19 X509v3 Authority Key Identifier: keyid:48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:41:fc:d8:18:c4:1e:a5:e2:91:e2:76:b8:56:91:c4:29:1d: d5:93:36:83:50:1a:39:1b:e3:d9:51:d0:e7:f1:db:04:1e:c4: 2d:9f:a7:69:25:08:66:bf:14:86:c0:59:c2:9b:d2:d0:2a:3c: 17:dd:eb:09:ad:fa:4a:fa:16:13:ce:1b:ed:1c:fe:21:83:d4: aa:1e:1d:6b:6f:63:92:a4:ee:0f:e5:3f:e4:41:6d:1d:58:47: 7c:77:93:14:23:9c:60:ab:bf:b5:ab:5b:a9:69:81:c8:ee:56: 19:2b:48:1c:02:28:28:73:b3:99:f6:c7:27:5d:97:82:fe:c8: 00:cc:28:cd:5e:3e:75:49:2b:d5:c6:68:83:87:01:f4:90:45: e1:0a:d5:5c:fe:74:e4:f3:88:7b:2f:60:7e:0f:77:41:ca:da: 2e:72:d9:d7:4e:db:63:ef:9d:33:13:fd:ed:6c:42:69:15:b6: 2f:f0:bb:e0:a0:f9:c4:52:ac:62:41:f0:b6:5a:01:cc:25:7b: d3:49:70:2c:99:e4:13:03:49:62:7d:79:fb:5a:1d:da:7b:d7: 78:ab:28:b8:62:56:15:2e:63:57:ec:da:5a:57:ff:bd:84:22: 02:ee:ec:09:67:14:e8:e8:35:c1:a9:d5:c5:20:34:52:87:c4: a7:8e:1e:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbqEPcGe2c3JehD/Vyp7aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MGFhZWI1Mzc5MmQ1MjAxNjliY2UyODBjM2RkODZmODM3 NmVjNjMwHhcNMjUxMjIyMDUwMDU5WhcNMjUxMjIzMDUwMDU5WjAzMTEwLwYDVQQD EyhiMGJhOWNjZjJjMTM5ZmI0YjMyZGYyZTMxMGMwZWQ2N2FjZDlhMzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23N7QTVEngAdhvZ5MsJbJ0ROJHNj OYJAHlszzOIyiVPerQj8VcYq166h/mZgp6Se55Oh/HaSf0sWXsbH5Zt++aecVfsy sTDO93EZBgCZR+hXFHOw/imOwQtyzZwKYVsXx84Nc2aYYsSZtOnyF72Z6TUQy07/ qPJNvLDSxknuo4mC8CtQNRxA/FN9xpml+J4sJp5eV2hr5UI+6XFhBGYJyxg7OTpJ /CiFUqSdwP4BNydADAUE2e41AzAJhsxfANiTUrQghxv64fuwp1Kzy13IDxcOxUxy OnwfAYgTC95vYSQtugewkj2U6H5ofAJ5vwOc+QlDpsSKkQfoFAa9ES7blwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLC6nM8sE5+0sy3y4xDA7Wes2aMZMB8GA1UdIwQY MBaAFEgKrrU3ktUgFpvOKAw92G+DduxjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FxdXRUZVMxU0FXbTg0b0REM1liNE4yN0dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zZDU3OWYtODE1YS00NDZlLThlZDkt ZDE2NjkxYWQ2OWZhLzEvU0FxdXRUZVMxU0FXbTg0b0REM1liNE4yN0dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8zZDU3OWYtODE1YS00NDZlLThlZDktZDE2NjkxYWQ2OWZh LzEvU0FxdXRUZVMxU0FXbTg0b0REM1liNE4yN0dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWEH82BjE HqXikeJ2uFaRxCkd1ZM2g1AaORvj2VHQ5/HbBB7ELZ+naSUIZr8UhsBZwpvS0Co8 F93rCa36SvoWE84b7Rz+IYPUqh4da29jkqTuD+U/5EFtHVhHfHeTFCOcYKu/tatb qWmByO5WGStIHAIoKHOzmfbHJ12Xgv7IAMwozV4+dUkr1cZog4cB9JBF4QrVXP50 5POIey9gfg93QcraLnLZ107bY++dMxP97WxCaRW2L/C74KD5xFKsYkHwtloBzCV7 00lwLJnkEwNJYn15+1od2nvXeKsouGJWFS5jV+zaWlf/vYQiAu7sCWcU6Og1wanV xSA0UofEp44ecA== -----END CERTIFICATE-----Generated at Mon Dec 22 12:48:32 2025 by rpki-client