This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft File: SAa55i8bAPLPmNDcxYMpKvrLUi8.mft (raw, json) Hash identifier: V8z8yaH19bdLNIAVU28MD4WFCL5pV7kM5/wdrLe0FMo= Subject key identifier: F0:58:CD:32:02:D9:79:E8:78:97:42:02:44:16:6E:93:B8:47:1E:3A Authority key identifier: 48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F Certificate issuer: /CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f Certificate serial: 019B5CADDAB70CA38AEF3FBB9D8D452BCFFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft Manifest number: 125C Signing time: Fri 26 Dec 2025 22:00:56 +0000 Manifest this update: Fri 26 Dec 2025 22:00:56 +0000 Manifest next update: Sat 27 Dec 2025 22:00:56 +0000 Files and hashes: 1: SAa55i8bAPLPmNDcxYMpKvrLUi8.crl (hash: K/sJ3u6hZ7DnFGI+0gynP4E3F0YCMj5MBaViiGF9mEA=) 2: bOFB3LalOSOdSrbz-a4cUkkG03M.roa (hash: SZa6u36skxx1rALcmnxtRi0278XWZ89tCnch5FRpzoM=) 3: ipcAqlbQdh9QjilJG8UTA6cw-zw.roa (hash: RUMHng+Xlo2Ru6wmJaBAotc3mLSEqq30G4I26Jr98jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 22:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:ad:da:b7:0c:a3:8a:ef:3f:bb:9d:8d:45:2b:cf:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f Validity Not Before: Dec 26 22:00:56 2025 GMT Not After : Dec 27 22:00:56 2025 GMT Subject: CN=f058cd3202d979e87897420244166e93b8471e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:da:95:02:ed:59:cb:0b:7b:80:04:2b:35:56: 61:95:75:4d:24:04:3b:c3:e4:43:df:41:a2:3c:83: 08:d8:58:89:b2:29:18:1a:56:0b:6b:f5:1a:2d:c3: 2d:5c:bd:37:53:2c:d1:72:95:d5:96:94:0b:3b:dd: 2c:2c:3c:e4:b4:4b:d6:81:c2:11:27:c2:ea:63:35: 99:ce:cd:77:4b:b8:56:04:13:9b:76:59:27:2e:d2: 81:aa:fe:02:75:72:4a:2f:a9:7a:c8:36:83:de:20: 06:1e:53:16:86:a2:ac:2c:b2:9e:4f:b8:0d:07:d5: 13:e0:a2:64:e2:9b:8b:e6:e0:80:92:b6:d5:72:0e: 8f:69:7b:26:50:06:f1:49:73:7d:74:46:20:a4:b4: 4e:19:4e:55:4b:bd:e0:20:fa:9c:61:c4:9a:93:68: b5:41:3b:38:e6:fc:71:b6:3d:de:b1:15:43:b4:93: e7:c0:ae:c0:98:19:17:ea:60:76:82:7a:48:3b:4b: 30:e3:be:b2:4c:36:52:0e:b7:9e:aa:4d:b0:89:4b: 49:7c:d0:0f:cb:f0:cc:0a:de:e7:ed:b1:08:94:df: ad:c1:70:30:17:35:c5:1b:9d:9d:3b:07:a0:ce:cf: 5d:6a:e7:36:83:c3:42:24:1b:9f:73:e8:ce:44:47: 6f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:58:CD:32:02:D9:79:E8:78:97:42:02:44:16:6E:93:B8:47:1E:3A X509v3 Authority Key Identifier: keyid:48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:6d:3f:21:b5:3a:06:d2:9a:f1:1d:2c:d9:6f:17:1e:40:7d: 11:c1:c4:f8:55:7d:7b:76:f3:61:68:a7:09:52:20:0c:ba:dd: a1:f7:ac:72:b0:5a:25:4a:1f:e8:c6:ae:e0:9d:8b:a2:ad:f2: 0d:fa:e9:7c:d8:e0:e4:85:35:c2:55:08:58:43:24:b5:2f:0e: d0:7b:52:ce:c3:65:f1:32:7a:32:f6:89:3f:6c:10:4c:4a:cb: 83:93:38:a3:da:91:cc:b7:19:61:70:82:2c:ed:03:00:a9:66: b8:05:fc:40:13:5b:d2:5a:05:74:ac:c5:65:39:64:cc:f1:c7: e2:f2:94:41:de:a6:b9:c8:f6:b6:df:c7:f7:98:fc:eb:bc:85: 60:c6:36:c1:8d:98:1f:de:17:1f:10:d9:66:a9:b0:16:8d:de: 98:6a:5f:cb:76:6b:52:c7:fe:ce:02:bb:0b:32:01:da:6f:f0: 2a:66:9a:9d:1b:05:c5:c4:cf:cd:c9:fa:11:71:4e:34:c4:25: 7f:c2:57:70:32:b6:4e:19:52:fb:de:45:14:ef:69:ec:2f:2b: fb:d8:41:3e:91:9d:c4:b4:a5:42:b7:03:41:db:a3:0f:be:f1: 42:0e:34:5f:c4:64:17:0a:c9:27:4e:f9:5b:ca:75:b5:e5:af: 52:66:76:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcrdq3DKOK7z+7nY1FK8/9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDZiOWU2MmYxYjAwZjJjZjk4ZDBkY2M1ODMyOTJhZmFj YjUyMmYwHhcNMjUxMjI2MjIwMDU2WhcNMjUxMjI3MjIwMDU2WjAzMTEwLwYDVQQD EyhmMDU4Y2QzMjAyZDk3OWU4Nzg5NzQyMDI0NDE2NmU5M2I4NDcxZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49qVAu1Zywt7gAQrNVZhlXVNJAQ7 w+RD30GiPIMI2FiJsikYGlYLa/UaLcMtXL03UyzRcpXVlpQLO90sLDzktEvWgcIR J8LqYzWZzs13S7hWBBObdlknLtKBqv4CdXJKL6l6yDaD3iAGHlMWhqKsLLKeT7gN B9UT4KJk4puL5uCAkrbVcg6PaXsmUAbxSXN9dEYgpLROGU5VS73gIPqcYcSak2i1 QTs45vxxtj3esRVDtJPnwK7AmBkX6mB2gnpIO0sw476yTDZSDreeqk2wiUtJfNAP y/DMCt7n7bEIlN+twXAwFzXFG52dOwegzs9dauc2g8NCJBufc+jOREdviQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBYzTIC2XnoeJdCAkQWbpO4Rx46MB8GA1UdIwQY MBaAFEgGueYvGwDyz5jQ3MWDKSr6y1IvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FhNTVpOGJBUExQbU5EY3hZTXBLdnJMVWk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iYWE0YmMtOTI0ZS00MzY0LTlmMTMt YTVjOTZlMjExNjA1LzEvU0FhNTVpOGJBUExQbU5EY3hZTXBLdnJMVWk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9iYWE0YmMtOTI0ZS00MzY0LTlmMTMtYTVjOTZlMjExNjA1 LzEvU0FhNTVpOGJBUExQbU5EY3hZTXBLdnJMVWk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWm0/IbU6 BtKa8R0s2W8XHkB9EcHE+FV9e3bzYWinCVIgDLrdofescrBaJUof6Mau4J2Loq3y DfrpfNjg5IU1wlUIWEMktS8O0HtSzsNl8TJ6MvaJP2wQTErLg5M4o9qRzLcZYXCC LO0DAKlmuAX8QBNb0loFdKzFZTlkzPHH4vKUQd6mucj2tt/H95j867yFYMY2wY2Y H94XHxDZZqmwFo3emGpfy3ZrUsf+zgK7CzIB2m/wKmaanRsFxcTPzcn6EXFONMQl f8JXcDK2ThlS+95FFO9p7C8r+9hBPpGdxLSlQrcDQdujD77xQg40X8RkFwrJJ075 W8p1teWvUmZ2JQ== -----END CERTIFICATE-----Generated at Sat Dec 27 08:09:02 2025 by rpki-client