This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft File: BSawPHFxhMNoCBflXiRV-F1zpBM.mft (raw, json) Hash identifier: JWZNE7oiNdRKo+jg3WJMlWMvFBTNZzWIGO53WUM8ERs= Subject key identifier: 40:AE:73:30:79:74:F2:4A:9A:84:83:5E:6C:1C:03:AC:DD:E0:31:0A Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13 Certificate issuer: /CN=0526b03c717184c3680817e55e2455f85d73a413 Certificate serial: 019B1426D2981AD28FD591412A1002C3EC05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft Manifest number: 11A9 Signing time: Fri 12 Dec 2025 20:00:47 +0000 Manifest this update: Fri 12 Dec 2025 20:00:47 +0000 Manifest next update: Sat 13 Dec 2025 20:00:47 +0000 Files and hashes: 1: 8c89w0Wi8wMsoXrghW5qP2-hNS0.roa (hash: D8vS3w3ktRdTzyzGgvoFRLHLzAmdAx/fg6SYcr4tnA0=) 2: BSawPHFxhMNoCBflXiRV-F1zpBM.crl (hash: k2BVHT8FkxVadRgU8euCj/IKbiREdg07FTvIRYleKN0=) 3: fCmxjuxg2kiGhVLozWEWvXwEU4U.roa (hash: M5qgc4FTv7281YHawHS2pyFS7vA+gmBBWWyMQstn7/0=) 4: nOiNWJ-i5dURvJrnb-UFxx1qFR4.roa (hash: Gb+jmLlW78LaJODUMsMQolCStI4IVcksSh8B2dzPGko=) 5: ppaVoCVyYt16HDG7WfOtkr7EeHs.roa (hash: Qez8a/FWG6eNLOTogKVCXP47/rGL1fBAom4YDZ6wxts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 20:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:14:26:d2:98:1a:d2:8f:d5:91:41:2a:10:02:c3:ec:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413 Validity Not Before: Dec 12 20:00:47 2025 GMT Not After : Dec 13 20:00:47 2025 GMT Subject: CN=40ae73307974f24a9a84835e6c1c03acdde0310a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:63:04:25:48:c6:a8:bf:9b:d5:7c:0c:19:45: 75:07:fe:ec:c0:52:c1:8b:23:b6:3e:ea:16:4d:5b: e6:fc:d3:05:f1:ab:58:fa:16:32:52:06:30:b1:7a: 45:64:79:0e:fe:d5:01:51:f3:15:43:7c:31:19:eb: 77:61:90:18:b7:03:9a:d1:fe:58:bc:ca:ad:6f:13: d3:4c:70:41:97:8b:52:3f:c3:07:2d:b6:d5:ff:cb: 65:7f:4d:35:0b:8a:9a:df:01:d2:dc:bb:62:dc:8e: a6:fe:89:c1:4e:fd:74:4e:d0:94:fb:14:70:7c:f2: 2d:e7:cd:69:f5:8b:73:b5:fc:52:f1:2e:ed:68:bb: ab:13:fb:30:f0:f3:13:b7:58:b9:4d:ab:36:c8:f2: 16:9f:11:03:23:b5:d0:90:fa:19:0b:ec:f0:80:1d: 30:bc:cd:b7:2f:1e:47:62:e9:95:71:ef:fa:97:dd: 93:c2:13:47:41:59:f0:6e:30:d0:61:09:05:a9:09: 7d:35:9d:73:b6:c6:9e:a8:9f:65:02:6b:15:b1:a8: 62:b4:2e:10:16:63:39:a7:c8:6c:90:81:83:87:5f: 5a:42:05:83:01:4c:4a:e8:1a:f7:87:fe:df:17:3c: 2e:27:d9:36:ea:9b:16:c7:20:1f:4b:87:31:ee:4c: 8f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AE:73:30:79:74:F2:4A:9A:84:83:5E:6C:1C:03:AC:DD:E0:31:0A X509v3 Authority Key Identifier: keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:46:ff:00:fe:0b:83:e9:c8:dc:cb:52:38:12:4a:4a:16:ca: a7:44:35:68:70:b0:fa:60:46:78:99:da:84:c3:77:8f:ca:c9: 16:ce:be:fe:9b:7b:b8:9e:05:3c:00:27:2e:49:28:78:50:06: c9:0f:7c:9c:e0:db:36:7d:93:ab:66:14:b1:f5:6f:38:a7:c4: 38:5c:77:2e:9f:3e:88:dd:0f:c0:80:ca:ac:7a:08:62:35:7b: 1a:da:2a:86:16:61:07:a3:bf:3c:7d:4c:0a:70:da:a5:4f:ea: 67:39:5f:72:8d:e4:53:53:af:b3:e4:e9:66:d2:57:35:da:ca: a3:aa:d7:37:6c:ef:1a:d7:2e:67:cf:85:bf:3a:07:92:3d:0e: b0:bf:9d:8e:d9:da:04:67:03:8e:94:c9:73:8a:0c:99:5d:56: c7:a8:8c:04:5f:29:ec:55:34:65:59:e4:35:c9:48:39:7b:5c: 89:f0:ba:4f:93:37:1e:32:23:14:ab:21:51:84:a5:b6:a9:c2: e1:e8:32:c6:40:41:34:60:7d:6c:fb:2d:62:66:e0:ef:28:ba: 2a:de:57:c3:37:9e:d8:c1:91:bd:7f:f4:e2:aa:2a:9d:62:c2: f8:97:b9:28:30:57:d6:c6:08:18:b8:23:35:39:22:71:f7:fe: 58:7f:93:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsUJtKYGtKP1ZFBKhACw+wFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MjZiMDNjNzE3MTg0YzM2ODA4MTdlNTVlMjQ1NWY4NWQ3 M2E0MTMwHhcNMjUxMjEyMjAwMDQ3WhcNMjUxMjEzMjAwMDQ3WjAzMTEwLwYDVQQD Eyg0MGFlNzMzMDc5NzRmMjRhOWE4NDgzNWU2YzFjMDNhY2RkZTAzMTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmMEJUjGqL+b1XwMGUV1B/7swFLB iyO2PuoWTVvm/NMF8atY+hYyUgYwsXpFZHkO/tUBUfMVQ3wxGet3YZAYtwOa0f5Y vMqtbxPTTHBBl4tSP8MHLbbV/8tlf001C4qa3wHS3Lti3I6m/onBTv10TtCU+xRw fPIt581p9YtztfxS8S7taLurE/sw8PMTt1i5Tas2yPIWnxEDI7XQkPoZC+zwgB0w vM23Lx5HYumVce/6l92TwhNHQVnwbjDQYQkFqQl9NZ1ztsaeqJ9lAmsVsahitC4Q FmM5p8hskIGDh19aQgWDAUxK6Br3h/7fFzwuJ9k26psWxyAfS4cx7kyPOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECuczB5dPJKmoSDXmwcA6zd4DEKMB8GA1UdIwQY MBaAFAUmsDxxcYTDaAgX5V4kVfhdc6QTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9hMzM4M2EtMDRlYi00M2Y4LWE5NTMt M2JmMDRhMmE5M2Q4LzEvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9hMzM4M2EtMDRlYi00M2Y4LWE5NTMtM2JmMDRhMmE5M2Q4 LzEvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkb/AP4L g+nI3MtSOBJKShbKp0Q1aHCw+mBGeJnahMN3j8rJFs6+/pt7uJ4FPAAnLkkoeFAG yQ98nODbNn2Tq2YUsfVvOKfEOFx3Lp8+iN0PwIDKrHoIYjV7GtoqhhZhB6O/PH1M CnDapU/qZzlfco3kU1Ovs+TpZtJXNdrKo6rXN2zvGtcuZ8+FvzoHkj0OsL+djtna BGcDjpTJc4oMmV1Wx6iMBF8p7FU0ZVnkNclIOXtcifC6T5M3HjIjFKshUYSltqnC 4egyxkBBNGB9bPstYmbg7yi6Kt5Xwzee2MGRvX/04qoqnWLC+Je5KDBX1sYIGLgj NTkicff+WH+TLA== -----END CERTIFICATE-----Generated at Sat Dec 13 03:45:02 2025 by rpki-client