This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft File: saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json) Hash identifier: 039+CQhFfkvMsAmgIUFdTIAAx4M4GY3p/mI3DOm5mio= Subject key identifier: 14:89:15:C0:46:39:67:DF:B8:84:CD:C5:CC:4E:15:C0:37:29:2E:2F Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8 Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8 Certificate serial: 019B3AC64070BD44012DB2C49A7E1628438D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft Manifest number: 1794 Signing time: Sat 20 Dec 2025 08:00:29 +0000 Manifest this update: Sat 20 Dec 2025 08:00:29 +0000 Manifest next update: Sun 21 Dec 2025 08:00:29 +0000 Files and hashes: 1: 9PRjxeCqIjFBKjj9ZCsSUjWebm8.roa (hash: RUbumQikWEUJw86fkVBXkNxglUvMLn5BU1sBdU5SK10=) 2: Bjn95uhuPOZfmvC5Hlwb47V9emA.roa (hash: eI7zCms4yUIVsMumVhbxjLkGPCR2Oes6ouNTkj3JCYQ=) 3: fMf7eyqEUG6wDxNfLym83Kyd4aQ.roa (hash: 1Tc3rrxlFqoaEb/zNF3iOU0XDowc7uiSsGwcEKpC398=) 4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: NduEMujKbEDZ//FvW8GvyM4XA36gJOEGhRLiEqHwd5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:40:70:bd:44:01:2d:b2:c4:9a:7e:16:28:43:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8 Validity Not Before: Dec 20 08:00:29 2025 GMT Not After : Dec 21 08:00:29 2025 GMT Subject: CN=148915c0463967dfb884cdc5cc4e15c037292e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f6:76:f2:cb:3f:b9:a6:db:e3:90:ef:c7:5f: ec:0a:2f:08:0b:26:8a:3e:a6:47:97:95:78:ed:9a: c0:62:86:a4:c4:db:02:b8:c6:66:71:64:c3:5d:9b: 26:3e:d7:7c:87:ee:af:80:6a:76:60:8e:5e:66:2c: 13:1d:5a:7c:83:34:2b:b6:62:08:10:31:b2:9a:9e: 4c:6b:22:87:e3:62:db:d0:70:48:f4:ad:fb:24:10: 13:6e:af:cc:3d:94:1a:e8:8e:1e:39:71:84:40:f8: 5c:e7:ef:ea:2e:ad:ec:ed:a6:4f:d3:07:8c:02:ae: e7:df:b3:4f:63:9c:4b:9d:5c:9c:a7:ac:e2:1f:57: b9:98:e5:56:92:c8:8f:37:9b:0c:bd:ed:7e:34:4c: 60:f8:2c:81:41:83:2d:92:8e:db:9c:16:74:54:8e: bc:97:33:8c:3e:fc:11:e0:e4:19:e0:b5:d2:33:c6: 30:c4:b0:2c:7e:31:91:6a:4e:82:fd:02:86:55:74: 7d:cc:aa:f2:d8:46:31:49:57:a9:c1:38:18:24:27: ca:98:d3:1d:db:f8:09:cc:99:51:08:3b:f0:a6:0e: 3c:1d:c4:84:e8:b7:a0:1c:66:16:d8:0d:f9:5f:da: 31:37:c8:0f:33:1a:57:5a:5b:a5:2a:8f:b5:79:8a: 26:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:89:15:C0:46:39:67:DF:B8:84:CD:C5:CC:4E:15:C0:37:29:2E:2F X509v3 Authority Key Identifier: keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:b8:f7:99:f5:99:e7:d2:a7:88:b4:8b:55:a9:f2:1f:6e:1e: 30:25:d4:14:6f:8e:e5:19:27:6d:68:be:80:3c:96:15:f6:a6: e2:7b:53:ab:b2:a2:ed:93:51:a5:58:00:dc:d0:4a:eb:11:6c: 29:31:28:75:a2:89:94:b3:d7:2a:4a:30:c3:82:45:e8:67:77: de:60:b2:e3:76:b3:8e:c2:0c:aa:40:61:84:b4:0d:f5:bb:ea: 28:ee:36:04:a2:70:c9:0d:75:9f:07:09:1d:4f:8c:3f:71:da: d3:6d:a1:74:ba:1e:81:57:47:ad:c0:8e:0d:87:6e:46:c9:02: 59:1a:fd:25:5d:80:ba:97:13:20:3c:2e:cc:d7:3c:dd:68:e6: 40:f8:d5:78:ad:78:33:a6:af:b1:1d:ab:6b:c7:6f:da:5b:33: 23:7c:0a:0c:e4:5d:d7:51:12:0f:c8:80:93:52:d6:4b:32:68: 3d:ed:f7:bc:5a:ed:b1:e6:a1:3a:33:b9:13:a7:e0:dd:3b:c9: d4:2b:ee:4c:8d:97:41:c9:b0:9a:1b:8f:09:3c:66:8f:6c:b7: 2f:33:83:be:89:af:da:66:2e:6a:c5:f4:80:5b:1e:da:ed:5d: b9:cc:39:14:38:30:69:17:5d:17:b0:b6:d8:6e:1e:04:b6:b5: c7:cb:1e:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xkBwvUQBLbLEmn4WKEONMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTRhNjAxY2EzNWM2YzgzNzZiODlhYWY0NDNiNjNlYTQz OWNkYjgwHhcNMjUxMjIwMDgwMDI5WhcNMjUxMjIxMDgwMDI5WjAzMTEwLwYDVQQD EygxNDg5MTVjMDQ2Mzk2N2RmYjg4NGNkYzVjYzRlMTVjMDM3MjkyZTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvZ28ss/uabb45Dvx1/sCi8ICyaK PqZHl5V47ZrAYoakxNsCuMZmcWTDXZsmPtd8h+6vgGp2YI5eZiwTHVp8gzQrtmII EDGymp5MayKH42Lb0HBI9K37JBATbq/MPZQa6I4eOXGEQPhc5+/qLq3s7aZP0weM Aq7n37NPY5xLnVycp6ziH1e5mOVWksiPN5sMve1+NExg+CyBQYMtko7bnBZ0VI68 lzOMPvwR4OQZ4LXSM8YwxLAsfjGRak6C/QKGVXR9zKry2EYxSVepwTgYJCfKmNMd 2/gJzJlRCDvwpg48HcSE6LegHGYW2A35X9oxN8gPMxpXWlulKo+1eYomIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSJFcBGOWffuITNxcxOFcA3KS4vMB8GA1UdIwQY MBaAFLGkpgHKNcbIN2uJqvRDtj6kOc24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FTbUFjbzF4c2czYTRtcTlFTzJQcVE1emJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kZmVjNDAtYjg2ZS00OTRjLWJhMTAt M2E1NjI4Y2M4MWQ5LzEvc2FTbUFjbzF4c2czYTRtcTlFTzJQcVE1emJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9kZmVjNDAtYjg2ZS00OTRjLWJhMTAtM2E1NjI4Y2M4MWQ5 LzEvc2FTbUFjbzF4c2czYTRtcTlFTzJQcVE1emJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7j3mfWZ 59KniLSLVanyH24eMCXUFG+O5RknbWi+gDyWFfam4ntTq7Ki7ZNRpVgA3NBK6xFs KTEodaKJlLPXKkoww4JF6Gd33mCy43azjsIMqkBhhLQN9bvqKO42BKJwyQ11nwcJ HU+MP3Ha022hdLoegVdHrcCODYduRskCWRr9JV2AupcTIDwuzNc83WjmQPjVeK14 M6avsR2ra8dv2lszI3wKDORd11ESD8iAk1LWSzJoPe33vFrtseahOjO5E6fg3TvJ 1CvuTI2XQcmwmhuPCTxmj2y3LzODvomv2mYuasX0gFse2u1ducw5FDgwaRddF7C2 2G4eBLa1x8seDA== -----END CERTIFICATE-----Generated at Sat Dec 20 17:14:20 2025 by rpki-client