This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: CwJc+QgVSHugFPXySWX6tWOcjg6JrA4T34JDU0/9yMc= Subject key identifier: 79:3A:A0:00:10:52:3E:73:F4:1B:22:F9:D9:5B:DB:50:53:68:13:50 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 019B3A2184D85493DF2135DC7D9DAAE79AE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 1389 Signing time: Sat 20 Dec 2025 05:00:33 +0000 Manifest this update: Sat 20 Dec 2025 05:00:33 +0000 Manifest next update: Sun 21 Dec 2025 05:00:33 +0000 Files and hashes: 1: 0Masll6bbXJowlWVdStYbs2tx6E.roa (hash: Rro7robf4OQi2SafD/+wvUIv6rGO8rIKSIcGQQxuDhQ=) 2: GbtphNgjK0vdnL4zh4ndNFpMq98.roa (hash: u7HLBqxJEFs0R6rzUwZQDioPq2mneZLMKiZ7WWFYBQg=) 3: HIdYT19grrvIrsLvbv9c-RyNoYM.roa (hash: gMWRLPsAhHALB5C0CyTnC2YpfuJ8OqfVcPAvIC+/69E=) 4: OUt5ZB5ErN_qim9RPT1gdy6_fsA.roa (hash: jUTt0o3pm+pyLvb6Ukj+eNNJ2nE69gsAdM4+2ox59R8=) 5: R_OlpiLM8AchN0LvgG-brNSPeok.roa (hash: Ha2jaeCRdAo3cD1S+TwOcwXV50R2/YikiY9fj+5QfSk=) 6: T-i1HnnAiZlugAgaa37LNPgeYyA.roa (hash: JZrI/oiF2iHcbj3PFgspIgoRlLncbc7mtmuIlUx+R6U=) 7: _SIVUqOCoAD9QAv9j_FoehRwqCQ.roa (hash: sSOjeJjB03HHhjQxuEaox3x4XiuehbGVKeOJQiC5f04=) 8: euxOi9Xp3n7AyiSfCEP-xOv9hDo.roa (hash: hqClLQ+yTS1bqIE58Fj5bi8zXosgwwjJT2D8au7VfQ0=) 9: jOUyMLPZrMuzuioMpl1NXAy1D0s.roa (hash: 1gb8evtP88wWeN9HxrerPINOz1+CcWlzI+mgwi1QVJ8=) 10: oTdRqWCGB_YZL-zzysNmCsUI8OU.roa (hash: Z3CxIW13t+FC0u78Ynw/b8NpKjP4IiiiZzM5isLuBQ4=) 11: opjBwsfQwaZJKVugJJ6MF-vgLQw.roa (hash: MNlxdTCVbR2yhgEH9HVAaomJahjdfDcmr5j99PJZjnc=) 12: orAKfjl1fXW4_m23ZUuKco1b-BY.roa (hash: SPzJt2ubmkoDTY2BGadUCK43CwJNkqbV55KtpGnjnsE=) 13: qjtTNxOEgSr0b6Weeb9JJHyFnhM.roa (hash: Eb0gxKs3qeMLVvYaIgIGm1oY4DsjaHktiucw1gfNHns=) 14: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: mGzaLIakECs7vY9jfS/+Wthlaiq+ySSGNmvXTTNb82g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:84:d8:54:93:df:21:35:dc:7d:9d:aa:e7:9a:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Dec 20 05:00:33 2025 GMT Not After : Dec 21 05:00:33 2025 GMT Subject: CN=793aa00010523e73f41b22f9d95bdb5053681350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:74:de:40:24:b7:eb:30:fb:9d:19:1b:2d:b6: ff:3e:9b:41:ec:ba:22:7c:62:ef:b9:3b:31:cc:00: 76:ff:ef:2e:d7:97:d4:e0:31:ff:1c:73:91:97:c7: 26:3c:3d:83:a6:21:66:31:23:42:50:41:e6:f8:a6: ea:ce:d7:27:d8:f7:87:89:80:21:a5:46:da:81:5d: 23:e2:97:8c:f5:f2:0f:a1:75:d6:45:cc:fc:5d:98: 0d:ed:96:a1:e1:cf:16:5e:e2:aa:15:69:4d:d8:4f: 60:41:9a:0a:bb:c0:4e:53:f8:58:65:a5:b6:d1:25: 42:00:d7:f1:8b:57:ab:d4:56:c3:80:8d:f4:10:37: a6:10:07:b6:23:06:70:c1:05:81:0a:a9:dd:29:ee: de:86:7a:03:64:0f:30:cd:c3:44:91:a6:10:2f:ff: bc:f6:49:c6:21:7c:9b:13:e4:ef:60:fd:bf:1b:c4: c2:91:7b:0b:68:2a:e3:4b:54:ae:cf:19:4f:84:c5: 14:b1:87:14:77:a4:74:0c:d7:5e:a9:43:bf:5b:d5: 73:3e:57:5e:ce:8f:1a:ab:fd:f1:2b:07:84:46:1e: 68:a5:68:77:3f:19:44:48:13:e3:79:f2:1f:bc:13: ee:cb:63:7d:42:a6:a8:44:e8:1e:b6:05:e9:8d:ad: e9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3A:A0:00:10:52:3E:73:F4:1B:22:F9:D9:5B:DB:50:53:68:13:50 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:e2:47:ba:a7:1b:f9:7e:0e:ad:7c:84:75:82:98:b9:d8:a3: 0f:f8:ff:21:2c:23:54:2c:0b:47:3c:55:d1:94:3a:7a:fd:0e: 73:d6:41:d2:ba:bd:f5:04:cb:bd:e4:c0:8d:83:95:15:28:9a: c6:38:8f:28:33:54:d4:66:8d:08:54:91:db:1a:a3:cb:ae:36: c9:14:4c:3b:08:c2:4f:bd:bd:7d:78:1a:93:e9:0d:62:bc:01: 0b:38:5b:3a:79:b3:05:46:a9:f9:95:e6:01:24:4f:53:22:7d: 3d:9a:b8:27:c2:f2:d3:29:af:12:79:3e:76:5e:51:c8:c8:93: 17:0f:c3:ec:18:30:75:5c:a4:31:92:70:26:1b:ec:29:fa:60: ae:e2:c7:53:b2:45:bc:6c:ef:de:97:59:8f:9d:a2:59:7f:51: 6a:1f:f0:28:63:da:51:23:ee:af:7a:a7:87:1a:c8:43:84:b2: f7:10:c1:28:dc:27:50:0f:92:51:8e:ff:d8:2b:17:99:81:f8: 7b:18:b3:67:02:08:93:b8:51:3a:06:ba:97:86:7b:8c:bb:e2: 7d:06:fd:63:61:a0:91:ba:40:12:5a:c9:b7:ef:2b:46:23:6f: 08:77:af:83:8a:93:e8:d8:6a:ab:58:c6:4a:7c:f4:b7:6a:8c: 94:e9:fa:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IYTYVJPfITXcfZ2q55rhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjUxMjIwMDUwMDMzWhcNMjUxMjIxMDUwMDMzWjAzMTEwLwYDVQQD Eyg3OTNhYTAwMDEwNTIzZTczZjQxYjIyZjlkOTViZGI1MDUzNjgxMzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HTeQCS36zD7nRkbLbb/PptB7Loi fGLvuTsxzAB2/+8u15fU4DH/HHORl8cmPD2DpiFmMSNCUEHm+Kbqztcn2PeHiYAh pUbagV0j4peM9fIPoXXWRcz8XZgN7Zah4c8WXuKqFWlN2E9gQZoKu8BOU/hYZaW2 0SVCANfxi1er1FbDgI30EDemEAe2IwZwwQWBCqndKe7ehnoDZA8wzcNEkaYQL/+8 9knGIXybE+TvYP2/G8TCkXsLaCrjS1SuzxlPhMUUsYcUd6R0DNdeqUO/W9VzPlde zo8aq/3xKweERh5opWh3PxlESBPjefIfvBPuy2N9QqaoROgetgXpja3pdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHk6oAAQUj5z9Bsi+dlb21BTaBNQMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOJHuqcb +X4OrXyEdYKYudijD/j/ISwjVCwLRzxV0ZQ6ev0Oc9ZB0rq99QTLveTAjYOVFSia xjiPKDNU1GaNCFSR2xqjy642yRRMOwjCT729fXgak+kNYrwBCzhbOnmzBUap+ZXm ASRPUyJ9PZq4J8Ly0ymvEnk+dl5RyMiTFw/D7BgwdVykMZJwJhvsKfpgruLHU7JF vGzv3pdZj52iWX9Rah/wKGPaUSPur3qnhxrIQ4Sy9xDBKNwnUA+SUY7/2CsXmYH4 exizZwIIk7hROga6l4Z7jLvifQb9Y2GgkbpAElrJt+8rRiNvCHevg4qT6Nhqq1jG Snz0t2qMlOn6tA== -----END CERTIFICATE-----Generated at Sat Dec 20 13:18:44 2025 by rpki-client