This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: mol5O6rMK5zStDDCkLZoa2bK+bi4McxIlsmGK4dxw0o= Subject key identifier: 80:13:01:84:C8:62:F3:14:87:4F:10:DA:E0:6D:35:F9:EE:05:D9:10 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 019AEED16EC1FE2E0276FE08C9458043E997 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 1362 Signing time: Fri 05 Dec 2025 14:01:34 +0000 Manifest this update: Fri 05 Dec 2025 14:01:34 +0000 Manifest next update: Sat 06 Dec 2025 14:01:34 +0000 Files and hashes: 1: 0Masll6bbXJowlWVdStYbs2tx6E.roa (hash: Rro7robf4OQi2SafD/+wvUIv6rGO8rIKSIcGQQxuDhQ=) 2: GbtphNgjK0vdnL4zh4ndNFpMq98.roa (hash: u7HLBqxJEFs0R6rzUwZQDioPq2mneZLMKiZ7WWFYBQg=) 3: HIdYT19grrvIrsLvbv9c-RyNoYM.roa (hash: gMWRLPsAhHALB5C0CyTnC2YpfuJ8OqfVcPAvIC+/69E=) 4: OUt5ZB5ErN_qim9RPT1gdy6_fsA.roa (hash: jUTt0o3pm+pyLvb6Ukj+eNNJ2nE69gsAdM4+2ox59R8=) 5: R_OlpiLM8AchN0LvgG-brNSPeok.roa (hash: Ha2jaeCRdAo3cD1S+TwOcwXV50R2/YikiY9fj+5QfSk=) 6: T-i1HnnAiZlugAgaa37LNPgeYyA.roa (hash: JZrI/oiF2iHcbj3PFgspIgoRlLncbc7mtmuIlUx+R6U=) 7: _SIVUqOCoAD9QAv9j_FoehRwqCQ.roa (hash: sSOjeJjB03HHhjQxuEaox3x4XiuehbGVKeOJQiC5f04=) 8: euxOi9Xp3n7AyiSfCEP-xOv9hDo.roa (hash: hqClLQ+yTS1bqIE58Fj5bi8zXosgwwjJT2D8au7VfQ0=) 9: jOUyMLPZrMuzuioMpl1NXAy1D0s.roa (hash: 1gb8evtP88wWeN9HxrerPINOz1+CcWlzI+mgwi1QVJ8=) 10: oTdRqWCGB_YZL-zzysNmCsUI8OU.roa (hash: Z3CxIW13t+FC0u78Ynw/b8NpKjP4IiiiZzM5isLuBQ4=) 11: opjBwsfQwaZJKVugJJ6MF-vgLQw.roa (hash: MNlxdTCVbR2yhgEH9HVAaomJahjdfDcmr5j99PJZjnc=) 12: orAKfjl1fXW4_m23ZUuKco1b-BY.roa (hash: SPzJt2ubmkoDTY2BGadUCK43CwJNkqbV55KtpGnjnsE=) 13: qjtTNxOEgSr0b6Weeb9JJHyFnhM.roa (hash: Eb0gxKs3qeMLVvYaIgIGm1oY4DsjaHktiucw1gfNHns=) 14: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: hTc1f/mbbepOLk/YlImEe/7pGSM501T55zDiD7OwAnk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 14:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:d1:6e:c1:fe:2e:02:76:fe:08:c9:45:80:43:e9:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Dec 5 14:01:34 2025 GMT Not After : Dec 6 14:01:34 2025 GMT Subject: CN=80130184c862f314874f10dae06d35f9ee05d910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:67:ea:a0:03:4c:35:05:3c:f8:e7:d7:8a:da: 56:75:73:43:8c:0c:d0:46:01:b0:86:dc:d4:96:de: 96:e2:b0:50:4f:30:00:ad:05:bd:bf:45:71:fb:e9: f5:ba:10:c7:b5:76:13:b9:96:32:0b:d8:4d:ee:af: e8:cf:ed:f4:80:3e:e7:01:a0:47:5a:eb:d1:b8:9f: 29:48:66:7b:d5:86:78:62:46:46:d1:21:b7:fb:9f: eb:c5:f3:27:b7:69:bf:61:52:8d:20:31:ca:7b:de: 09:4f:08:66:6c:d0:88:48:53:13:40:00:1c:1b:38: 67:60:18:a6:d1:f0:ac:d4:f3:ae:d7:bd:94:09:36: dd:ea:6b:42:80:1c:43:62:34:af:4c:0b:ac:f8:5c: f5:0e:8c:58:a1:a5:bb:29:92:f5:38:0d:9d:fc:07: 67:70:62:7b:27:16:d9:d2:eb:d4:ba:09:51:4d:de: 3a:5a:73:b0:75:ea:f0:04:f1:f7:57:e8:c1:f2:10: 0b:df:d2:99:9a:c5:de:37:fe:ec:bb:df:0f:2f:4d: 09:b3:35:ac:81:6d:0d:5d:fe:b8:03:ec:cd:58:b1: 41:88:d9:a1:7c:78:e5:fa:21:2f:20:d7:1a:39:1a: b4:11:0f:e5:61:c0:25:42:d7:b5:7d:09:2f:ab:fe: 3c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:13:01:84:C8:62:F3:14:87:4F:10:DA:E0:6D:35:F9:EE:05:D9:10 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2a:56:1d:e3:3e:a5:f5:69:f3:41:23:06:b7:3b:46:30:5b: c4:81:8b:50:ed:26:3a:a8:56:07:79:85:c7:81:a6:03:a5:27: 01:c1:e8:bb:7c:41:eb:82:49:91:ae:b7:2d:af:2d:55:05:11: cd:0e:04:62:33:57:8d:0a:1f:25:a0:22:ca:ce:04:d7:9c:5a: 07:c8:29:e7:ee:44:eb:9b:35:72:3e:0b:8e:0f:9d:d3:8f:d3: 2b:ed:82:7c:5e:7f:a9:06:19:34:85:dc:0c:49:3c:25:6a:b0: d5:8f:96:fc:24:de:8c:32:29:ab:e9:8d:23:a6:f5:a1:7d:de: 2b:90:b2:04:89:74:10:62:0a:01:ff:9e:15:1b:f6:9a:8e:f7: ce:a7:77:4a:3a:9c:fc:45:76:06:33:01:c2:cc:bb:49:97:be: 82:24:7c:cd:99:b2:dc:c6:a1:bd:66:8a:cf:bf:d8:13:0f:75: 29:9e:b0:67:33:bc:92:0e:52:8e:8e:fb:5a:7b:93:8f:b9:af: a3:41:e8:4c:b6:60:ad:1c:74:e7:d4:16:fd:ba:64:5d:31:a9: 12:66:02:c5:71:e2:3f:aa:52:5f:1c:d3:61:24:8a:b8:1c:f1: 18:06:4c:f4:49:9f:0b:c2:ff:3e:71:3a:d9:c8:65:f6:a7:fe: 26:d4:5e:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZru0W7B/i4Cdv4IyUWAQ+mXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjUxMjA1MTQwMTM0WhcNMjUxMjA2MTQwMTM0WjAzMTEwLwYDVQQD Eyg4MDEzMDE4NGM4NjJmMzE0ODc0ZjEwZGFlMDZkMzVmOWVlMDVkOTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2fqoANMNQU8+OfXitpWdXNDjAzQ RgGwhtzUlt6W4rBQTzAArQW9v0Vx++n1uhDHtXYTuZYyC9hN7q/oz+30gD7nAaBH WuvRuJ8pSGZ71YZ4YkZG0SG3+5/rxfMnt2m/YVKNIDHKe94JTwhmbNCISFMTQAAc GzhnYBim0fCs1POu172UCTbd6mtCgBxDYjSvTAus+Fz1DoxYoaW7KZL1OA2d/Adn cGJ7JxbZ0uvUuglRTd46WnOwderwBPH3V+jB8hAL39KZmsXeN/7su98PL00JszWs gW0NXf64A+zNWLFBiNmhfHjl+iEvINcaORq0EQ/lYcAlQte1fQkvq/48twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIATAYTIYvMUh08Q2uBtNfnuBdkQMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATSpWHeM+ pfVp80EjBrc7RjBbxIGLUO0mOqhWB3mFx4GmA6UnAcHou3xB64JJka63La8tVQUR zQ4EYjNXjQofJaAiys4E15xaB8gp5+5E65s1cj4Ljg+d04/TK+2CfF5/qQYZNIXc DEk8JWqw1Y+W/CTejDIpq+mNI6b1oX3eK5CyBIl0EGIKAf+eFRv2mo73zqd3Sjqc /EV2BjMBwsy7SZe+giR8zZmy3MahvWaKz7/YEw91KZ6wZzO8kg5Sjo77WnuTj7mv o0HoTLZgrRx059QW/bpkXTGpEmYCxXHiP6pSXxzTYSSKuBzxGAZM9EmfC8L/PnE6 2chl9qf+JtReig== -----END CERTIFICATE-----Generated at Sat Dec 6 00:24:49 2025 by rpki-client