This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
File: SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json)
Hash identifier: 35SLc6uRwUufyQmoK0vqTnUp1GtQAPscPTgBg2mIusY=
Subject key identifier: 67:2D:BE:69:B5:49:FD:67:67:97:2F:35:B9:F9:5A:BD:3F:CC:6C:5D
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019B0CA4D2FE22C3D7A37E500458F5D667B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
Manifest number: 1838
Signing time: Thu 11 Dec 2025 09:01:27 +0000
Manifest this update: Thu 11 Dec 2025 09:01:27 +0000
Manifest next update: Fri 12 Dec 2025 09:01:27 +0000
Files and hashes: 1: 0r3ZOs3tSGQOAwKzjx9H3w3zD1I.roa (hash: ImJALobce0VudmZQsXxpxY8sBnoTPMqNKew3nU3/sEU=)
2: 4a-EzwC6jcEZNutp1wLJOJsSJ5U.roa (hash: 60NeFyIQuFnQCA7ZWZ86ut/ZRlrjaBqbGPGUjZkcqBo=)
3: 5ZGlxXtHkl_D3voGj6rx85jwlZU.roa (hash: JM4dPNTX67vo7LYoTP+WEMvsk0f45bFlZOiulkq76Ww=)
4: 6M2vy0lXQ_7tjjvEV8gpPSTThuU.roa (hash: b5cu0WL7Qtxz50JCQiFAw4pft+pkECZSSQHywDd6X6k=)
5: 7sokSdMBchYZMEnBvod8waTOzqo.roa (hash: oYENQuxHUAl4Ib35jlGS9V7jC+uuxKfZxyKIG9teMqc=)
6: 9kKrY-00aHCLZ5_iE5q85XwU7ck.roa (hash: JZlIoGUSP8LhD5Ex99sUi6EUJNNOAyUQks5HiOIipSE=)
7: E5z2SlwXjTUl_dxuFn5Hj8DA13E.roa (hash: 9f37/tNohAMGdruEvWhcUxavSXF2Z9dpN0nP011TZfM=)
8: HqifaU4ZzX1zPEBC7D-B73EGf3M.roa (hash: 0M8aqRG6ut6LxfjbRqCgOybnHyYCc2Tx8toQYsRs7+g=)
9: IsmNaCvuzsXJ7mZx6ck2uhVnWfY.roa (hash: 5eWNodxG2i37/4nnN3ZMtyCR75XHHge/btm6KjXlzgs=)
10: J44Z4Tgcw-AV9S54DTd0WYqvfaQ.roa (hash: NmfJXb6jXjFVf2V7NROr+VC6Vzihrgt41O4Lov0gIgI=)
11: R3xayF97XK3f6WN53ZX5sxR54jo.roa (hash: 3PZ+HViUokDQMZxJmaE1uzBy+pQRq/4nLFWrCe3sMjU=)
12: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: OP8+MXWg4QF4fQFj0zecviJVJ76w1xL3JmVi6qpMiN0=)
13: VcWZUDSfSSKFrHgiIqRuCEBIomE.roa (hash: 8diyMJmOQ9BNiLPCYYS2Sa8Mn23tj7FWiq6+eMmQjW0=)
14: VgwcNuoBbQF8vGnu87-98unWzYI.roa (hash: xzpL3I9r8p4R1FCkPrlQ5XYcS0wswEmNqu/eM1IOMwU=)
15: _yzn5oDusX2X0X7GKZBcg6brbLE.roa (hash: 3Zb9XtEnFpg2ZnedyDM6Fmzs7qviCkwqPZ3m1FKhSy0=)
16: b81Y2U7ou3gE7qnhOIrH6wzIwHE.roa (hash: evIbesfBnQDx6fK9X24u14Wb1m4RUjoEvZ0+mfP0N8E=)
17: c5HdWUcnb9avfH7VyB-fyRHw7eY.roa (hash: GGCIVXKsoNzmWovG/BFsg2GjwaIvm+vo2UR8DlePDS0=)
18: dHX9OeJUjAZUllLt71Z0XjT-y9s.roa (hash: p5O6HZkXJi4qcSxI8/WOPJB/VfnyI5jr5L/PpYxKHy4=)
19: iLq3_4XBIqdahBK6ZAbNC_BoDIk.roa (hash: yGHeMjl6w0xnIs7bhpeRABIGyuoMa8xkrNR26t1mdDM=)
20: iPxdZuzxvDtlhje1pBxfz_ffoSI.roa (hash: 5nZeFKjMPEJbsRI/uBt0UR440fY87EaeHxRz6CkKzyc=)
21: sXombvKi4nr7vxHECbDWlTCtz78.roa (hash: NLIx49ILN6SKs0Nh0AFpPfhfEs1G537segBfCzz3EEw=)
22: uE7Yr0mrdBcUX1IW6FuzHWklFWE.roa (hash: Txuv8knFAVKbDTm6XQpLWHHm/zIqEkh3sPLdu38MgYQ=)
23: ulYg4AG1ul90cUDOSHCVqM9kgX0.roa (hash: YyEEkcY+cM/W31h/eE29O/fYkGie+5JT9vHD80X8ftc=)
24: v3awz8QkP58mxnUs9B2fDSnWLXM.roa (hash: TAmNgPwah3we4uplBsSi3VCIYC8AT7YJO0o7AP89TEA=)
25: yJtgUHZrNGIphWEtuEirIf27Jww.roa (hash: zOQtzaZFlNqZsL/r+xQWgVSCPH9Fe6GrpDnDb0dgb2o=)
26: z9ae-Gs7r9KKpMcDJbVz7FmiTRs.roa (hash: JszRMzQKTmymxrpiY4Ap7YZRfZnYk8CJdCSLIzjXOQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 09:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0c:a4:d2:fe:22:c3:d7:a3:7e:50:04:58:f5:d6:67:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Dec 11 09:01:27 2025 GMT
Not After : Dec 12 09:01:27 2025 GMT
Subject: CN=672dbe69b549fd6767972f35b9f95abd3fcc6c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:f9:90:ed:71:e8:8d:63:5f:3e:68:14:c4:
24:e8:12:ed:17:50:b2:f0:4e:73:b8:43:93:5c:43:
0c:db:c8:3b:b1:f8:a3:16:2f:f6:c2:f5:a6:7c:5b:
dc:fd:2f:79:d1:96:dc:ba:25:41:42:d3:03:a7:55:
14:ed:48:12:d5:f8:dd:46:c9:45:6b:12:91:d3:8e:
f5:20:b8:4d:d1:47:88:1c:39:db:4a:20:67:0b:95:
35:83:fe:34:b0:a2:f4:94:2c:04:4e:e2:c7:bc:c1:
37:eb:bf:52:dd:9d:30:83:ac:f3:db:8d:8f:77:80:
3a:3a:7b:0f:f5:2c:c7:11:a9:d0:4b:f6:e2:e7:b3:
94:f8:a7:4f:5d:d9:c8:11:1c:f5:ca:c9:e6:86:b5:
ce:51:d4:4a:23:ea:9a:78:22:63:bc:55:ee:88:54:
13:74:39:90:ff:c3:e7:45:22:b3:9a:27:04:db:27:
b0:02:73:52:da:83:70:3a:ec:7d:3a:9e:7a:59:62:
02:3e:c5:23:f5:e4:26:ad:83:5b:89:f7:7a:e2:eb:
aa:7e:ec:83:5b:c8:58:ab:a7:a0:75:5f:1b:2f:7a:
5f:9e:f0:f7:24:c1:28:c6:3b:84:00:dd:0b:79:7b:
bf:7d:c1:01:9d:70:b9:45:4b:07:7d:39:ba:2d:b6:
25:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2D:BE:69:B5:49:FD:67:67:97:2F:35:B9:F9:5A:BD:3F:CC:6C:5D
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:57:a9:f2:81:38:bb:e4:8a:e5:03:7f:b9:63:37:3d:5a:a5:
92:ea:c3:41:2e:df:76:ef:f0:e7:13:ba:3f:80:7c:59:38:eb:
4b:bd:cf:7e:10:62:e8:ed:e2:25:56:7b:c5:11:a0:3c:cb:b7:
98:71:75:f5:af:a7:18:06:36:4e:37:81:32:fa:9d:5d:61:53:
4b:0c:fe:48:81:8b:cb:dd:2c:40:70:e3:f3:ac:7e:fc:c3:6d:
6e:2d:cd:01:d3:2a:e1:0d:9f:8b:ac:67:22:54:24:fc:60:3f:
87:22:16:87:36:3a:54:8d:7a:0a:6a:40:02:f7:ca:ab:e8:0c:
9c:f9:2a:03:d8:8c:04:61:fa:10:ce:d4:2d:32:68:e5:42:d7:
ea:11:af:ff:1b:a8:21:08:17:86:b2:7e:06:ac:ce:8f:8b:ba:
7e:ec:7e:75:36:c6:4e:1b:5d:95:c8:ce:aa:95:f6:14:1c:16:
91:7f:cb:04:b3:72:05:0e:63:c3:b8:cf:a5:38:81:98:e3:c6:
ce:28:6b:9e:8b:be:81:3f:20:71:b7:f8:b3:a1:a0:4d:5b:58:
e1:6c:cc:7b:be:75:f3:68:21:00:c7:3a:20:ff:2b:59:53:6e:
67:49:c1:3c:b4:c2:5c:2b:6c:aa:b4:9b:c4:64:4c:c4:ee:89:
f8:8e:07:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsMpNL+IsPXo35QBFj11mexMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjUxMjExMDkwMTI3WhcNMjUxMjEyMDkwMTI3WjAzMTEwLwYDVQQD
Eyg2NzJkYmU2OWI1NDlmZDY3Njc5NzJmMzViOWY5NWFiZDNmY2M2YzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+b5kO1x6I1jXz5oFMQk6BLtF1Cy
8E5zuEOTXEMM28g7sfijFi/2wvWmfFvc/S950ZbcuiVBQtMDp1UU7UgS1fjdRslF
axKR0471ILhN0UeIHDnbSiBnC5U1g/40sKL0lCwETuLHvME3679S3Z0wg6zz242P
d4A6OnsP9SzHEanQS/bi57OU+KdPXdnIERz1ysnmhrXOUdRKI+qaeCJjvFXuiFQT
dDmQ/8PnRSKzmicE2yewAnNS2oNwOux9Op56WWICPsUj9eQmrYNbifd64uuqfuyD
W8hYq6egdV8bL3pfnvD3JMEoxjuEAN0LeXu/fcEBnXC5RUsHfTm6LbYltQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGctvmm1Sf1nZ5cvNbn5Wr0/zGxdMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1ep8oE4
u+SK5QN/uWM3PVqlkurDQS7fdu/w5xO6P4B8WTjrS73PfhBi6O3iJVZ7xRGgPMu3
mHF19a+nGAY2TjeBMvqdXWFTSwz+SIGLy90sQHDj86x+/MNtbi3NAdMq4Q2fi6xn
IlQk/GA/hyIWhzY6VI16CmpAAvfKq+gMnPkqA9iMBGH6EM7ULTJo5ULX6hGv/xuo
IQgXhrJ+BqzOj4u6fux+dTbGThtdlcjOqpX2FBwWkX/LBLNyBQ5jw7jPpTiBmOPG
zihrnou+gT8gcbf4s6GgTVtY4WzMe75182ghAMc6IP8rWVNuZ0nBPLTCXCtsqrSb
xGRMxO6J+I4Hsg==
-----END CERTIFICATE-----
Generated at Thu Dec 11 15:09:54 2025 by rpki-client