This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft File: SAGluBYVjweoyorLN-l-LyCwaRE.mft (raw, json) Hash identifier: DXViJPvtDb2rhuH/Smm1+1L989RD/wxsNDGcB9OmA0Y= Subject key identifier: A0:2E:D3:6B:EA:05:85:68:05:ED:39:71:36:08:C4:96:8A:7D:B9:F8 Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11 Certificate issuer: /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911 Certificate serial: 019B0D12E33D21F16A54B2C9ACB964DF3AA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft Manifest number: 156E Signing time: Thu 11 Dec 2025 11:01:40 +0000 Manifest this update: Thu 11 Dec 2025 11:01:40 +0000 Manifest next update: Fri 12 Dec 2025 11:01:40 +0000 Files and hashes: 1: SAGluBYVjweoyorLN-l-LyCwaRE.crl (hash: wlJuyxJvqLJ9Ydp3KUFzJNknZWf3fKeoJKxsbmoCafI=) 2: V2Y4d-TLmNFHJ4lClsc4ERneXIs.roa (hash: PHo5kCdxREAK30hAhZYcMgPNVkKaDt5dMWxCCahvYBE=) 3: bazUCWmUnVsUPI48K1m2IjF_KYM.roa (hash: AyYWdQS+wgobcYMMdY+5yoadUDioqr0YVD4DAeG57TU=) 4: vG2nuL1igzgqWJUWOISEpJLLdWQ.roa (hash: eVGIn7eVFi1uovTluqkckWewyyXRYQcdEO/+J7uhkjQ=) 5: z4qyX-331qkRpNendrVE2vuUwMg.roa (hash: 1tgnSBh6zavqUvITN/dHmAA7avLexZgbuVDSxY+JNpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 11:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:12:e3:3d:21:f1:6a:54:b2:c9:ac:b9:64:df:3a:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911 Validity Not Before: Dec 11 11:01:40 2025 GMT Not After : Dec 12 11:01:40 2025 GMT Subject: CN=a02ed36bea05856805ed39713608c4968a7db9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b7:2a:a4:9c:cc:b9:25:fa:90:e1:23:b8:4e: 1f:94:89:cc:79:99:93:e5:90:bb:47:33:90:2d:a3: fa:14:0e:1e:b5:a7:e4:2b:c6:b5:92:ab:ea:fd:eb: a3:4c:bc:2e:05:a4:19:87:b7:a4:4d:05:e1:2d:17: f2:cd:0a:39:8f:cc:0c:c5:85:ae:15:68:0c:e5:77: e5:56:fc:5b:74:56:a2:c5:17:1d:0e:df:10:8c:19: 50:1e:66:fa:3f:23:25:f4:c6:a0:6b:51:60:50:8b: b3:96:9a:3b:34:cb:b6:06:08:17:67:50:07:af:56: 6c:d1:b5:3e:74:1c:ca:bd:0d:d3:d6:ef:20:09:fe: b5:70:e4:10:3e:e8:0e:5e:1d:f5:b1:ab:68:99:1b: 06:53:f7:26:b9:4e:56:16:01:7f:ad:ff:e2:76:e4: ee:7e:8f:38:48:c1:6b:74:e5:71:1e:9f:4c:9e:32: 90:20:08:a6:92:a1:9a:6d:26:2d:7b:82:ad:39:16: 9a:68:31:a2:dd:79:3e:e6:dc:32:01:1e:bf:aa:e3: 5f:f9:62:16:47:bd:d3:4a:56:16:52:03:cc:e1:ac: 38:12:2e:a2:97:8a:41:96:2e:14:3a:ad:bb:ce:a1: 18:9e:54:a1:3a:c4:60:44:d7:92:ef:e9:da:ea:cd: 5c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2E:D3:6B:EA:05:85:68:05:ED:39:71:36:08:C4:96:8A:7D:B9:F8 X509v3 Authority Key Identifier: keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:93:1a:ad:a5:88:eb:e6:3d:3e:f4:26:12:48:a7:30:18:0c: 7d:ae:46:84:7e:f8:da:bd:3f:72:f8:0e:36:36:b0:e3:43:76: 35:1c:5e:5c:d5:6c:68:1d:36:83:60:81:72:0b:43:73:5d:e9: e4:81:58:95:82:ba:70:9c:a1:8f:cd:5f:f2:f7:18:b9:a1:a7: c0:55:66:28:5e:2c:d8:58:81:c4:f6:87:b1:60:39:74:d6:5a: 1d:13:51:79:aa:a0:65:16:2e:26:c4:51:6a:22:28:38:34:87: 6b:df:cb:9e:de:3a:51:f9:11:ab:9c:25:a3:3a:49:22:f1:a7: 40:68:d7:db:54:a0:c7:d3:b8:8e:4c:77:0e:30:14:b4:9d:a4: ba:42:b3:f2:01:f5:f6:77:f8:ad:1c:07:a7:98:f9:f3:64:81: b2:25:79:2f:78:4b:be:3f:6b:af:bd:59:3e:78:c9:0a:74:51: 40:48:ca:c3:18:b2:c5:a2:43:a1:98:14:c0:0f:38:7b:71:da: a4:3c:5d:cd:4a:5a:b1:0d:cd:bf:70:7b:f2:3b:1f:f9:78:a7: 09:ff:0e:57:ca:9b:9a:b1:6b:7d:e7:1d:26:24:f1:1b:27:5e: d2:15:eb:ca:9c:e0:98:ba:aa:a0:62:1a:6a:eb:3d:10:b9:d4: 48:58:7f:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNEuM9IfFqVLLJrLlk3zqlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDFhNWI4MTYxNThmMDdhOGNhOGFjYjM3ZTk3ZTJmMjBi MDY5MTEwHhcNMjUxMjExMTEwMTQwWhcNMjUxMjEyMTEwMTQwWjAzMTEwLwYDVQQD EyhhMDJlZDM2YmVhMDU4NTY4MDVlZDM5NzEzNjA4YzQ5NjhhN2RiOWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7cqpJzMuSX6kOEjuE4flInMeZmT 5ZC7RzOQLaP6FA4etafkK8a1kqvq/eujTLwuBaQZh7ekTQXhLRfyzQo5j8wMxYWu FWgM5XflVvxbdFaixRcdDt8QjBlQHmb6PyMl9Maga1FgUIuzlpo7NMu2BggXZ1AH r1Zs0bU+dBzKvQ3T1u8gCf61cOQQPugOXh31satomRsGU/cmuU5WFgF/rf/iduTu fo84SMFrdOVxHp9MnjKQIAimkqGabSYte4KtORaaaDGi3Xk+5twyAR6/quNf+WIW R73TSlYWUgPM4aw4Ei6il4pBli4UOq27zqEYnlShOsRgRNeS7+na6s1c9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAu02vqBYVoBe05cTYIxJaKfbn4MB8GA1UdIwQY MBaAFEgBpbgWFY8HqMqKyzfpfi8gsGkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FHbHVCWVZqd2VveW9yTE4tbC1MeUN3YVJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS83MDkwYTktZmVlZC00ZWExLTg0NTkt ZWU4MTBiODNhZGNkLzEvU0FHbHVCWVZqd2VveW9yTE4tbC1MeUN3YVJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS83MDkwYTktZmVlZC00ZWExLTg0NTktZWU4MTBiODNhZGNk LzEvU0FHbHVCWVZqd2VveW9yTE4tbC1MeUN3YVJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZMaraWI 6+Y9PvQmEkinMBgMfa5GhH742r0/cvgONjaw40N2NRxeXNVsaB02g2CBcgtDc13p 5IFYlYK6cJyhj81f8vcYuaGnwFVmKF4s2FiBxPaHsWA5dNZaHRNReaqgZRYuJsRR aiIoODSHa9/Lnt46UfkRq5wlozpJIvGnQGjX21Sgx9O4jkx3DjAUtJ2kukKz8gH1 9nf4rRwHp5j582SBsiV5L3hLvj9rr71ZPnjJCnRRQEjKwxiyxaJDoZgUwA84e3Ha pDxdzUpasQ3Nv3B78jsf+XinCf8OV8qbmrFrfecdJiTxGyde0hXrypzgmLqqoGIa aus9ELnUSFh/Qw== -----END CERTIFICATE-----Generated at Thu Dec 11 19:25:08 2025 by rpki-client