This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft File: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft (raw, json) Hash identifier: iWaia3AT3cBLchnSpGrd8ZLODRRNAruQ6Dbu1lh5mxw= Subject key identifier: 4F:8C:D8:8C:86:0E:30:56:8F:60:4C:18:12:F1:DC:72:70:4A:C2:D1 Authority key identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19 Certificate issuer: /CN=b0095ed011c94358245c32757d46bed860df4c19 Certificate serial: 019B48B993789857BD45B33F3C2B53C5BAD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft Manifest number: 0737 Signing time: Tue 23 Dec 2025 01:01:19 +0000 Manifest this update: Tue 23 Dec 2025 01:01:19 +0000 Manifest next update: Wed 24 Dec 2025 01:01:19 +0000 Files and hashes: 1: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl (hash: C3k23I+55F6lkoUv8varUaNWDj68AgWJlNoKX3ZkUwQ=) 2: t0wNgCpzIiHd0fZLik8oKup2IRU.roa (hash: eDGvGeZXSnNxXFSxZa5NU4er/BuDVU9oTOPF3gyQwp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:93:78:98:57:bd:45:b3:3f:3c:2b:53:c5:ba:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0095ed011c94358245c32757d46bed860df4c19 Validity Not Before: Dec 23 01:01:19 2025 GMT Not After : Dec 24 01:01:19 2025 GMT Subject: CN=4f8cd88c860e30568f604c1812f1dc72704ac2d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4e:22:fb:5a:8a:4c:26:1a:c1:1e:f4:5c:a9: 4d:62:af:2a:16:64:55:bd:60:2a:7f:94:22:22:ef: 79:15:9a:56:f0:33:79:f7:ee:b3:e1:9d:a6:57:36: 96:f6:ad:38:ed:ff:a8:0a:25:94:bb:04:c0:73:12: a8:c5:44:d2:f4:c8:2c:26:6e:2e:cc:8f:59:f9:03: fe:b7:13:79:2e:98:03:4f:f5:8e:1f:61:a9:01:53: 2a:97:dd:25:aa:a2:82:12:8c:bb:3e:6c:98:78:19: 5b:bd:1e:f2:f1:7f:2c:c4:c2:e4:9e:b0:b4:75:84: 5b:43:b3:ae:31:4b:9a:e6:0e:ae:d9:dc:2c:41:34: fc:92:6f:b4:42:19:a2:21:b0:97:e9:24:26:42:b2: 58:05:19:d3:a0:0d:4e:7a:af:ee:c7:77:13:45:69: c6:04:f0:ba:a1:b8:4f:87:77:8b:5f:4c:27:3a:10: 84:e8:2c:fb:f7:38:7d:f2:23:ad:63:34:b1:c1:bf: c6:17:70:be:0f:65:21:4f:ad:4d:76:d8:83:99:c0: a0:ba:84:2d:8f:c0:65:01:2e:72:77:6e:b1:e8:05: 3e:22:5b:af:9b:2d:d5:0e:14:11:86:ac:a9:06:3d: 47:09:db:e0:57:8e:aa:26:c2:2e:2b:5b:37:7b:c6: c4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8C:D8:8C:86:0E:30:56:8F:60:4C:18:12:F1:DC:72:70:4A:C2:D1 X509v3 Authority Key Identifier: keyid:B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:3c:19:2c:aa:e4:58:12:7a:3d:82:b5:68:9c:90:0b:f6:f4: 10:18:0a:61:b6:8f:fc:fa:3f:72:92:49:dd:90:99:50:42:59: dc:0d:ab:08:bb:71:ef:b0:63:19:51:c4:86:da:32:f6:a5:9e: ec:12:8d:6f:88:5f:dd:68:2f:79:fa:71:bb:78:d5:41:10:75: 97:01:4c:d9:d8:e4:bd:06:b6:e0:4c:be:d1:ae:17:9f:83:99: f1:35:63:0d:be:aa:6a:80:56:88:5d:f7:1b:07:a1:8f:ef:89: 73:c9:fc:c1:58:da:6e:21:cf:20:0e:4c:44:33:95:1a:c1:c9: f8:d6:9e:69:b9:49:df:e9:7a:6d:19:d2:d6:38:8e:0a:a3:40: ce:bc:26:af:9f:99:fc:30:74:e7:fe:3c:ad:c7:2c:0a:96:47: b4:d1:f6:6c:be:5f:75:f5:cb:5d:bf:0d:62:0f:a2:59:09:a0: cd:e6:3a:11:bf:1b:e7:9e:17:4f:cd:0a:26:99:76:80:90:7e: e4:04:fc:b8:d2:41:69:59:93:27:9b:81:2a:af:57:76:76:d6: b6:c4:df:6f:73:2a:36:a5:8f:f2:7a:c9:77:ac:20:01:54:26: 0f:ba:26:2a:8e:9b:76:1e:fb:f6:56:4c:f0:39:e1:99:6a:94: 28:1f:44:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuZN4mFe9RbM/PCtTxbrUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMDk1ZWQwMTFjOTQzNTgyNDVjMzI3NTdkNDZiZWQ4NjBk ZjRjMTkwHhcNMjUxMjIzMDEwMTE5WhcNMjUxMjI0MDEwMTE5WjAzMTEwLwYDVQQD Eyg0ZjhjZDg4Yzg2MGUzMDU2OGY2MDRjMTgxMmYxZGM3MjcwNGFjMmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk4i+1qKTCYawR70XKlNYq8qFmRV vWAqf5QiIu95FZpW8DN59+6z4Z2mVzaW9q047f+oCiWUuwTAcxKoxUTS9MgsJm4u zI9Z+QP+txN5LpgDT/WOH2GpAVMql90lqqKCEoy7PmyYeBlbvR7y8X8sxMLknrC0 dYRbQ7OuMUua5g6u2dwsQTT8km+0QhmiIbCX6SQmQrJYBRnToA1Oeq/ux3cTRWnG BPC6obhPh3eLX0wnOhCE6Cz79zh98iOtYzSxwb/GF3C+D2UhT61NdtiDmcCguoQt j8BlAS5yd26x6AU+Iluvmy3VDhQRhqypBj1HCdvgV46qJsIuK1s3e8bEUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+M2IyGDjBWj2BMGBLx3HJwSsLRMB8GA1UdIwQY MBaAFLAJXtARyUNYJFwydX1Gvthg30wZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0FsZTBCSEpRMWdrWERKMWZVYS0yR0RmVEJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS80OWNkZWMtNjlmMC00NTQwLTg5YmEt ZWE0NTk2OTk1MGNjLzEvc0FsZTBCSEpRMWdrWERKMWZVYS0yR0RmVEJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS80OWNkZWMtNjlmMC00NTQwLTg5YmEtZWE0NTk2OTk1MGNj LzEvc0FsZTBCSEpRMWdrWERKMWZVYS0yR0RmVEJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDwZLKrk WBJ6PYK1aJyQC/b0EBgKYbaP/Po/cpJJ3ZCZUEJZ3A2rCLtx77BjGVHEhtoy9qWe 7BKNb4hf3Wgvefpxu3jVQRB1lwFM2djkvQa24Ey+0a4Xn4OZ8TVjDb6qaoBWiF33 Gwehj++Jc8n8wVjabiHPIA5MRDOVGsHJ+NaeablJ3+l6bRnS1jiOCqNAzrwmr5+Z /DB05/48rccsCpZHtNH2bL5fdfXLXb8NYg+iWQmgzeY6Eb8b554XT80KJpl2gJB+ 5AT8uNJBaVmTJ5uBKq9XdnbWtsTfb3MqNqWP8nrJd6wgAVQmD7omKo6bdh779lZM 8DnhmWqUKB9EJw== -----END CERTIFICATE-----Generated at Tue Dec 23 06:05:11 2025 by rpki-client