This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft File: SAGluBYVjweoyorLN-l-LyCwaRE.mft (raw, json) Hash identifier: lqv4YhWgWRSOjNmkP51xrTJMWD7uPsWM0QBziay1FLc= Subject key identifier: 41:3E:39:51:EB:78:8E:26:76:85:B6:1E:46:A4:39:44:47:17:CA:5E Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11 Certificate issuer: /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911 Certificate serial: 019B3F48882F1556EFA47026EA6790C20AAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft Manifest number: 1588 Signing time: Sun 21 Dec 2025 05:01:16 +0000 Manifest this update: Sun 21 Dec 2025 05:01:16 +0000 Manifest next update: Mon 22 Dec 2025 05:01:16 +0000 Files and hashes: 1: SAGluBYVjweoyorLN-l-LyCwaRE.crl (hash: KN8G33Cnc4rVlnzBbX75OfuSJHXgSL1Reluyim+0pVE=) 2: V2Y4d-TLmNFHJ4lClsc4ERneXIs.roa (hash: PHo5kCdxREAK30hAhZYcMgPNVkKaDt5dMWxCCahvYBE=) 3: bazUCWmUnVsUPI48K1m2IjF_KYM.roa (hash: AyYWdQS+wgobcYMMdY+5yoadUDioqr0YVD4DAeG57TU=) 4: vG2nuL1igzgqWJUWOISEpJLLdWQ.roa (hash: eVGIn7eVFi1uovTluqkckWewyyXRYQcdEO/+J7uhkjQ=) 5: z4qyX-331qkRpNendrVE2vuUwMg.roa (hash: 1tgnSBh6zavqUvITN/dHmAA7avLexZgbuVDSxY+JNpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:88:2f:15:56:ef:a4:70:26:ea:67:90:c2:0a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911 Validity Not Before: Dec 21 05:01:16 2025 GMT Not After : Dec 22 05:01:16 2025 GMT Subject: CN=413e3951eb788e267685b61e46a439444717ca5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d6:80:15:80:1a:2b:47:e1:8c:4f:98:56:53: 0a:ac:fb:1c:0a:14:ae:2b:3b:ba:e5:52:40:5e:6e: d9:6f:2b:18:bc:8f:e6:bb:2d:2a:b8:2a:80:fc:b9: e4:8f:63:0a:4b:e3:92:08:83:10:a4:f7:15:51:a9: 94:d1:c5:e6:48:19:0f:1c:c0:4b:a9:de:f2:ec:bb: 7c:b5:7b:f2:73:ce:f3:7f:2a:47:cb:05:55:0c:cf: ca:f9:5e:44:94:d6:54:26:30:f7:a9:1c:a9:4e:ea: 21:1d:44:e0:be:59:19:44:95:50:7b:52:ae:20:57: b0:ad:f3:eb:76:4f:fb:d7:1a:3e:22:d5:29:a4:a8: 70:45:60:09:2c:bc:b0:a8:3b:e3:bb:22:69:44:ed: ba:af:1d:18:ad:ce:73:da:d9:f3:10:25:15:97:c7: 27:3c:eb:ca:0e:a5:f6:f9:4e:7b:3c:44:5c:4e:a9: 30:45:32:17:a5:75:6c:c7:61:39:b8:3f:2f:e4:eb: 92:c9:5d:9b:9a:5e:cb:e9:29:43:af:a4:a9:e4:e1: 82:a2:4f:c3:4c:59:9f:7b:e8:06:a5:d9:db:22:2c: 6a:05:a5:2c:b8:36:6a:92:c4:b6:91:b1:1e:64:2f: dc:f7:d8:25:0a:12:ed:61:46:04:90:1c:e9:27:40: f9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3E:39:51:EB:78:8E:26:76:85:B6:1E:46:A4:39:44:47:17:CA:5E X509v3 Authority Key Identifier: keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:55:38:3f:78:de:ca:ef:29:36:76:72:68:7c:5b:6d:08:75: 92:69:23:6b:12:45:02:67:2d:a3:36:b8:d7:cd:50:00:bc:a0: 39:ad:00:32:46:a8:e3:37:86:53:19:13:45:79:4d:00:23:09: dc:5a:86:25:67:94:3b:a5:1e:8c:3b:ff:14:c2:d2:01:9a:88: 92:2d:e3:43:84:e1:8b:c9:c4:e0:a7:a4:2a:d4:96:c8:55:bb: 1d:19:10:4d:0e:0e:59:7c:53:c6:f5:c7:2d:1b:7c:8a:b1:14: aa:9c:d4:04:6f:65:09:dd:36:b6:f0:6c:16:8a:fc:c4:3f:90: 17:a9:47:8b:e7:aa:9b:77:74:c6:ae:bf:de:45:1a:da:4f:be: 28:aa:e6:4f:12:5d:61:4a:13:9c:9e:b5:de:d3:6f:ec:18:0c: af:f9:ca:b0:eb:af:03:45:17:32:0e:be:a9:ff:cf:17:11:40: b3:5e:e1:cd:e5:79:8c:ae:ef:40:80:dd:d6:a9:e7:76:78:0e: 90:87:06:b9:d3:98:52:1e:05:d4:1a:d9:fb:76:bc:94:cb:8d: fd:ca:7e:ec:56:9d:0b:74:0a:d0:b9:46:04:a4:50:9f:62:3a: 19:71:36:ed:bf:e5:1e:50:26:53:4f:8f:47:d4:79:44:9b:30: 8f:c0:14:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SIgvFVbvpHAm6meQwgqvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDFhNWI4MTYxNThmMDdhOGNhOGFjYjM3ZTk3ZTJmMjBi MDY5MTEwHhcNMjUxMjIxMDUwMTE2WhcNMjUxMjIyMDUwMTE2WjAzMTEwLwYDVQQD Eyg0MTNlMzk1MWViNzg4ZTI2NzY4NWI2MWU0NmE0Mzk0NDQ3MTdjYTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NaAFYAaK0fhjE+YVlMKrPscChSu Kzu65VJAXm7ZbysYvI/muy0quCqA/Lnkj2MKS+OSCIMQpPcVUamU0cXmSBkPHMBL qd7y7Lt8tXvyc87zfypHywVVDM/K+V5ElNZUJjD3qRypTuohHUTgvlkZRJVQe1Ku IFewrfPrdk/71xo+ItUppKhwRWAJLLywqDvjuyJpRO26rx0Yrc5z2tnzECUVl8cn POvKDqX2+U57PERcTqkwRTIXpXVsx2E5uD8v5OuSyV2bml7L6SlDr6Sp5OGCok/D TFmfe+gGpdnbIixqBaUsuDZqksS2kbEeZC/c99glChLtYUYEkBzpJ0D5XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEE+OVHreI4mdoW2HkakOURHF8peMB8GA1UdIwQY MBaAFEgBpbgWFY8HqMqKyzfpfi8gsGkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FHbHVCWVZqd2VveW9yTE4tbC1MeUN3YVJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS83MDkwYTktZmVlZC00ZWExLTg0NTkt ZWU4MTBiODNhZGNkLzEvU0FHbHVCWVZqd2VveW9yTE4tbC1MeUN3YVJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS83MDkwYTktZmVlZC00ZWExLTg0NTktZWU4MTBiODNhZGNk LzEvU0FHbHVCWVZqd2VveW9yTE4tbC1MeUN3YVJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVU4P3je yu8pNnZyaHxbbQh1kmkjaxJFAmctoza4181QALygOa0AMkao4zeGUxkTRXlNACMJ 3FqGJWeUO6UejDv/FMLSAZqIki3jQ4Thi8nE4KekKtSWyFW7HRkQTQ4OWXxTxvXH LRt8irEUqpzUBG9lCd02tvBsFor8xD+QF6lHi+eqm3d0xq6/3kUa2k++KKrmTxJd YUoTnJ613tNv7BgMr/nKsOuvA0UXMg6+qf/PFxFAs17hzeV5jK7vQIDd1qnndngO kIcGudOYUh4F1BrZ+3a8lMuN/cp+7FadC3QK0LlGBKRQn2I6GXE27b/lHlAmU0+P R9R5RJswj8AUsw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:28:41 2025 by rpki-client