This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft File: saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft (raw, json) Hash identifier: Q3fDODS/GLzeGQNYgD5EqKoxZV/jnko96/537ucTf9M= Subject key identifier: 82:0F:BA:B4:D1:CE:55:8E:6B:39:96:F3:52:17:DD:7C:D8:1D:A9:09 Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57 Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257 Certificate serial: 019B09A34A5AF6937B8EB26562863B0B078A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft Manifest number: 0FDC Signing time: Wed 10 Dec 2025 19:00:54 +0000 Manifest this update: Wed 10 Dec 2025 19:00:54 +0000 Manifest next update: Thu 11 Dec 2025 19:00:54 +0000 Files and hashes: 1: cAAFdZGeVooBzCSUhqsDEyrnbqI.roa (hash: gbj8YLQEZGk70onIHa1ffFfmO4WgyObojVI+6+is2V4=) 2: saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl (hash: 1cGHVECSuvh5tp4Chw2QX/X6jSFeqVoAg13XxeK1Qw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:a3:4a:5a:f6:93:7b:8e:b2:65:62:86:3b:0b:07:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257 Validity Not Before: Dec 10 19:00:54 2025 GMT Not After : Dec 11 19:00:54 2025 GMT Subject: CN=820fbab4d1ce558e6b3996f35217dd7cd81da909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6a:eb:36:b8:19:d0:c5:02:85:56:5f:21:7e: 71:23:1b:d2:7b:d2:2c:1f:7f:14:fc:91:0f:f5:b9: e3:74:5e:50:99:3f:c6:11:37:b0:2e:1b:34:92:3c: f6:52:39:96:a3:20:04:c2:d2:5b:69:f1:4f:1f:38: 2b:5f:9e:7c:69:2e:a5:d5:8b:71:e5:20:8e:8c:0a: cd:b0:8f:9a:78:dd:6e:00:2e:46:27:3d:1e:09:b6: ce:fc:a5:a9:78:2a:c8:8f:b1:58:e7:ae:eb:0b:d9: cf:78:cf:d8:21:de:17:23:fc:3b:72:29:5c:bd:58: a7:e6:2c:6f:83:4f:e0:bd:0c:71:23:19:d2:dd:c9: 87:25:fa:35:48:65:2d:ee:d1:c7:51:fa:08:d2:98: 0a:cb:09:a9:bf:5e:76:e3:48:b2:33:ce:89:e0:41: 13:f2:54:4d:8b:04:87:ca:43:fd:f0:de:3d:5b:39: f4:7f:0f:5e:81:a7:99:79:7c:6d:14:ce:7c:88:3c: 0b:b6:ed:d2:07:80:d1:ef:29:86:c7:da:f2:69:bd: 51:d6:c1:1f:b5:52:55:ac:d5:b8:e9:74:44:99:d0: d0:04:e1:02:27:94:ec:e3:0f:0a:60:f5:97:15:99: e8:b5:fb:ed:28:b0:a5:17:d2:f2:56:6b:cf:f8:10: 48:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0F:BA:B4:D1:CE:55:8E:6B:39:96:F3:52:17:DD:7C:D8:1D:A9:09 X509v3 Authority Key Identifier: keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:29:3f:6e:17:66:99:88:fb:83:4f:32:41:8a:fa:50:07:2b: 9a:eb:77:96:22:10:ab:85:b4:c2:1f:7e:38:69:12:8a:db:61: 83:67:9b:3e:ef:16:11:cc:f5:ce:3e:22:76:8a:93:a0:89:46: 53:90:36:ea:9c:d2:bd:6b:81:b6:a2:60:10:14:d7:4e:e8:82: 32:8a:6a:56:bb:f7:8c:50:c9:b4:2e:78:ca:f1:d9:47:50:9c: a2:3a:ac:5b:7b:58:88:de:fe:af:5b:24:54:74:e3:e8:6e:08: cf:2b:db:69:09:c1:31:04:e7:4a:58:50:65:51:1b:88:85:87: 61:83:7b:d3:98:e7:b1:72:db:8b:8c:b3:b2:00:e9:d6:cc:e6: 4c:57:30:13:85:87:fd:34:d9:d0:9c:4a:18:59:03:ae:a1:71: 84:20:bd:66:db:42:4a:40:52:32:6d:a2:d9:aa:e1:df:ec:e5: a3:30:52:67:e4:6d:85:38:a9:c2:dd:ce:8a:ba:b6:41:d1:e8: f7:14:3b:fd:32:bc:0f:e1:24:1f:1a:ab:f2:a3:a1:b5:e3:9f: f0:64:e3:cc:79:cb:62:75:34:b1:4e:e6:ad:4f:8d:1b:0b:af: a4:bb:a2:39:b5:2a:f2:4b:49:12:3f:7d:70:8f:f9:13:ca:f5: 93:3e:68:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsJo0pa9pN7jrJlYoY7CweKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTg5YjY3YzY2ZGViZjVkZWQzZjI4ODBiYjQ5NDFkMzA0 MTEyNTcwHhcNMjUxMjEwMTkwMDU0WhcNMjUxMjExMTkwMDU0WjAzMTEwLwYDVQQD Eyg4MjBmYmFiNGQxY2U1NThlNmIzOTk2ZjM1MjE3ZGQ3Y2Q4MWRhOTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmrrNrgZ0MUChVZfIX5xIxvSe9Is H38U/JEP9bnjdF5QmT/GETewLhs0kjz2UjmWoyAEwtJbafFPHzgrX558aS6l1Ytx 5SCOjArNsI+aeN1uAC5GJz0eCbbO/KWpeCrIj7FY567rC9nPeM/YId4XI/w7cilc vVin5ixvg0/gvQxxIxnS3cmHJfo1SGUt7tHHUfoI0pgKywmpv15240iyM86J4EET 8lRNiwSHykP98N49Wzn0fw9egaeZeXxtFM58iDwLtu3SB4DR7ymGx9ryab1R1sEf tVJVrNW46XREmdDQBOECJ5Ts4w8KYPWXFZnotfvtKLClF9LyVmvP+BBICwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIPurTRzlWOazmW81IX3XzYHakJMB8GA1UdIwQY MBaAFLGom2fGbev13tPyiAu0lB0wQRJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iYzRkN2ItM2NiNy00ZjMzLTg5ZTct MjEwMGJmMGYxNDBhLzEvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9iYzRkN2ItM2NiNy00ZjMzLTg5ZTctMjEwMGJmMGYxNDBh LzEvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcyk/bhdm mYj7g08yQYr6UAcrmut3liIQq4W0wh9+OGkSitthg2ebPu8WEcz1zj4idoqToIlG U5A26pzSvWuBtqJgEBTXTuiCMopqVrv3jFDJtC54yvHZR1CcojqsW3tYiN7+r1sk VHTj6G4IzyvbaQnBMQTnSlhQZVEbiIWHYYN705jnsXLbi4yzsgDp1szmTFcwE4WH /TTZ0JxKGFkDrqFxhCC9ZttCSkBSMm2i2arh3+zlozBSZ+RthTipwt3Oirq2QdHo 9xQ7/TK8D+EkHxqr8qOhteOf8GTjzHnLYnU0sU7mrU+NGwuvpLuiObUq8ktJEj99 cI/5E8r1kz5o0Q== -----END CERTIFICATE-----Generated at Wed Dec 10 23:03:38 2025 by rpki-client