This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft File: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft (raw, json) Hash identifier: jaRb+eOEtB7aU3jiy4gx5W6pbYMTUxLjCSQcFxJWnyk= Subject key identifier: A0:6D:A3:14:85:6B:D7:E6:6E:51:C7:5A:54:89:D1:09:C6:66:DE:67 Authority key identifier: B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17 Certificate issuer: /CN=b004f5869f5675f65f9b10cff4b65f74f76bed17 Certificate serial: 019B3C1021401560B28346DD12CD0973A49E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft Manifest number: 069E Signing time: Sat 20 Dec 2025 14:00:48 +0000 Manifest this update: Sat 20 Dec 2025 14:00:48 +0000 Manifest next update: Sun 21 Dec 2025 14:00:48 +0000 Files and hashes: 1: BxWtid_-E8rZCQpiPweDOTdOKeU.roa (hash: eIpy/irnZIzZ2iTcdnKoq7vKHPC2KdLXiq5W/929yzo=) 2: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl (hash: SV6p8xy8JpXyLf9s8qSVJGOMes6wcQBg5cYtIP8x9zY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:21:40:15:60:b2:83:46:dd:12:cd:09:73:a4:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b004f5869f5675f65f9b10cff4b65f74f76bed17 Validity Not Before: Dec 20 14:00:48 2025 GMT Not After : Dec 21 14:00:48 2025 GMT Subject: CN=a06da314856bd7e66e51c75a5489d109c666de67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:79:e4:0a:10:2c:cc:ce:a0:98:94:12:33:61: 60:4e:63:6c:16:26:1a:55:10:18:c1:54:9e:c0:71: 2a:09:34:80:11:21:8c:0b:c3:a6:fe:6b:e7:16:ae: 43:7b:8e:71:84:5c:2f:83:95:ae:f5:23:f9:8a:07: 2f:82:5c:67:91:70:02:2a:c2:a1:8c:d9:79:2d:aa: bb:c5:91:05:39:9c:61:a0:e3:c9:cd:23:7b:34:83: 71:5e:af:57:a1:26:2a:53:d4:b2:2c:5c:c1:2b:e3: 98:12:c1:42:3e:72:6f:5f:66:cd:66:d9:70:b7:1f: 25:cc:0d:28:90:d3:53:49:68:a5:15:df:f6:03:e4: f9:5b:e0:f0:ff:41:ec:71:48:19:c4:d4:54:31:67: 93:d7:7a:e9:2e:bb:cb:9d:2a:a8:f8:6b:8f:b7:80: bd:69:3e:d7:05:f1:2f:ca:cc:6e:27:3b:f1:0b:a7: 5a:7b:7c:b0:5b:e8:1f:c4:1f:79:28:9f:85:15:98: 23:36:d6:e3:87:ed:f5:15:6f:27:d4:dc:fa:41:a9: 2c:d7:31:a2:ad:1e:3a:76:30:3d:e6:c3:67:9b:cc: 9d:9b:a3:bb:a9:00:98:f0:9e:08:a6:f5:28:a9:fa: 51:ab:12:6b:9a:36:e5:be:97:63:9f:a4:71:1f:7f: 0d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6D:A3:14:85:6B:D7:E6:6E:51:C7:5A:54:89:D1:09:C6:66:DE:67 X509v3 Authority Key Identifier: keyid:B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:26:26:a5:34:b5:e9:ff:08:c2:d2:ce:5b:35:cb:74:db:82: bf:8f:1f:fb:5f:6c:a9:6f:e5:b7:3d:8f:58:95:20:08:3f:df: 3c:f3:fd:8d:29:51:d1:30:39:20:8e:ff:1f:34:0a:fa:aa:98: 33:ef:a5:06:60:3e:63:7c:9c:96:23:df:f1:28:ba:1e:6c:f5: 20:09:6b:24:5e:24:d0:3d:78:e8:4c:7b:f6:37:ca:63:88:5c: 2f:8e:4a:f7:f5:eb:9f:62:0d:5f:cc:c0:de:4c:f2:b7:2a:53: 3b:ec:d0:0e:09:b3:d4:0b:f0:a1:83:0f:65:85:6c:fb:29:eb: 75:3f:60:78:4c:89:9c:dd:ad:74:c1:83:3a:c7:0c:3a:67:bf: 40:49:e3:2d:20:53:17:f4:c2:e8:90:ab:64:46:10:cc:9c:46: 3d:58:74:81:bd:30:6e:f1:74:40:e4:9e:cd:8b:64:8b:5d:9d: 18:dc:7c:c8:a5:75:be:a1:1e:93:6e:1e:44:fe:8e:22:48:44: df:fe:1e:3a:08:af:ef:8f:45:c2:14:71:c0:c3:33:94:1a:3f: 5a:1f:ce:d4:c5:93:63:af:e8:63:4f:05:03:fe:5f:68:20:87: cc:04:03:69:43:b2:f8:31:98:cc:a8:95:be:7c:42:72:88:41: c2:50:28:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ECFAFWCyg0bdEs0Jc6SeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMDRmNTg2OWY1Njc1ZjY1ZjliMTBjZmY0YjY1Zjc0Zjc2 YmVkMTcwHhcNMjUxMjIwMTQwMDQ4WhcNMjUxMjIxMTQwMDQ4WjAzMTEwLwYDVQQD EyhhMDZkYTMxNDg1NmJkN2U2NmU1MWM3NWE1NDg5ZDEwOWM2NjZkZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnnkChAszM6gmJQSM2FgTmNsFiYa VRAYwVSewHEqCTSAESGMC8Om/mvnFq5De45xhFwvg5Wu9SP5igcvglxnkXACKsKh jNl5Laq7xZEFOZxhoOPJzSN7NINxXq9XoSYqU9SyLFzBK+OYEsFCPnJvX2bNZtlw tx8lzA0okNNTSWilFd/2A+T5W+Dw/0HscUgZxNRUMWeT13rpLrvLnSqo+GuPt4C9 aT7XBfEvysxuJzvxC6dae3ywW+gfxB95KJ+FFZgjNtbjh+31FW8n1Nz6Qaks1zGi rR46djA95sNnm8ydm6O7qQCY8J4IpvUoqfpRqxJrmjblvpdjn6RxH38N/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBtoxSFa9fmblHHWlSJ0QnGZt5nMB8GA1UdIwQY MBaAFLAE9YafVnX2X5sQz/S2X3T3a+0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0FUMWhwOVdkZlpmbXhEUDlMWmZkUGRyN1JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8zMWEyZGYtZGNkZS00OWYyLThmMWUt MmZlY2RkODhlNTc1LzEvc0FUMWhwOVdkZlpmbXhEUDlMWmZkUGRyN1JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8zMWEyZGYtZGNkZS00OWYyLThmMWUtMmZlY2RkODhlNTc1 LzEvc0FUMWhwOVdkZlpmbXhEUDlMWmZkUGRyN1JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHCYmpTS1 6f8IwtLOWzXLdNuCv48f+19sqW/ltz2PWJUgCD/fPPP9jSlR0TA5II7/HzQK+qqY M++lBmA+Y3ycliPf8Si6Hmz1IAlrJF4k0D146Ex79jfKY4hcL45K9/Xrn2INX8zA 3kzytypTO+zQDgmz1AvwoYMPZYVs+ynrdT9geEyJnN2tdMGDOscMOme/QEnjLSBT F/TC6JCrZEYQzJxGPVh0gb0wbvF0QOSezYtki12dGNx8yKV1vqEek24eRP6OIkhE 3/4eOgiv749FwhRxwMMzlBo/Wh/O1MWTY6/oY08FA/5faCCHzAQDaUOy+DGYzKiV vnxCcohBwlAohg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:52:22 2025 by rpki-client