This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft File: SAw7k_8qNPv6WuglVvZwNAy11ck.mft (raw, json) Hash identifier: FPs2pChasbzi4Ialkp4eHu84nlJlBbW0H5T67XVb4dY= Subject key identifier: 2A:A4:2C:93:2E:CE:F2:28:D5:B7:73:EC:50:E3:67:F3:D3:D8:3E:25 Authority key identifier: 48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9 Certificate issuer: /CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9 Certificate serial: 019B5073358B8D352C16B2D75D1D0ABF70C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 13:01:26 +0000 Manifest this update: Wed 24 Dec 2025 13:01:26 +0000 Manifest next update: Thu 25 Dec 2025 13:01:26 +0000 Files and hashes: 1: M6pYVSPeRii26Fe6-xA2oF6TOhY.roa (hash: ALWsaRUrnNv1Osi/17oum/JvXg9TackTfLVpB/IG6ok=) 2: SAw7k_8qNPv6WuglVvZwNAy11ck.crl (hash: eWOg8mShnOQDmxFYBoxLpoZg68pGBN2fVf6GJvoMq18=) 3: o_-CPWekkGbizNj3OifTY4NJDPc.roa (hash: uwNEErvUsdFhNjQ3+JpAmIUn/dDzO0Gs7xJ0LsO1aD4=) 4: xR8JRniMXIcnxz5B1H7wwKMwL8E.roa (hash: U8VTiajHorcJU61emonuHN7kXOWFA3+lZIhrr1YC8IY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:73:35:8b:8d:35:2c:16:b2:d7:5d:1d:0a:bf:70:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9 Validity Not Before: Dec 24 13:01:26 2025 GMT Not After : Dec 25 13:01:26 2025 GMT Subject: CN=2aa42c932ecef228d5b773ec50e367f3d3d83e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7b:07:4b:0d:80:da:3e:75:18:8b:99:8e:5c: 89:d9:c9:7b:1b:7a:e6:06:ce:25:be:11:de:38:16: 30:49:95:62:3a:5e:31:5a:df:4e:ab:ff:4d:e0:6b: 2b:97:a3:0c:08:ad:b7:87:cd:7a:40:f2:1a:84:1c: 50:01:cc:40:dc:03:9e:73:48:ff:94:d8:e0:e2:b9: 33:59:63:24:c2:fe:74:24:e4:6b:fd:fa:d1:76:b3: 33:4a:da:5e:99:f3:6c:06:3a:27:cf:66:6d:64:90: 9e:27:f5:aa:9c:4f:5f:72:93:98:3e:cd:ce:bc:05: 7c:23:72:27:44:ab:9d:2a:a7:6c:df:16:c0:d3:9a: f8:a4:99:cb:60:20:b5:ab:1a:4e:ba:54:80:0c:64: ab:2f:da:22:b8:1a:bc:78:b5:4f:b6:45:df:59:f9: d8:47:e9:ad:a3:b3:23:0d:6c:fd:2f:a8:c6:d6:c7: 80:45:95:3e:6f:4e:dd:fa:b6:1c:8e:4f:41:28:ac: f4:63:3b:0c:83:ff:7b:15:1c:90:92:f3:f6:fe:d1: 6f:80:aa:89:d3:fb:9c:39:4e:57:8b:be:d5:e3:b2: 96:3d:ef:88:ba:77:65:f7:0b:03:3b:a0:75:67:50: 2e:9d:ae:3b:cf:97:1e:a5:b1:18:d7:b8:39:bb:ac: 86:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A4:2C:93:2E:CE:F2:28:D5:B7:73:EC:50:E3:67:F3:D3:D8:3E:25 X509v3 Authority Key Identifier: keyid:48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:8b:00:a0:03:b5:d5:b0:52:2d:00:9e:8c:5d:08:84:74:a7: 17:7a:a3:56:d0:0b:00:94:59:0b:b3:63:1b:4b:15:ad:26:4c: c7:29:cf:07:2a:69:10:39:3f:91:7e:40:1e:a9:87:5b:e4:8a: a4:97:ef:0d:ef:b8:d8:d1:0a:f5:64:18:97:52:a1:d7:37:bc: 8d:09:9a:41:2f:26:87:c3:83:7e:90:2b:0c:93:45:c8:23:9a: 5d:d2:7f:48:f0:fe:d0:e1:ca:76:2d:87:15:13:b1:74:09:68: 94:fa:3a:1a:03:21:0b:76:eb:01:42:d6:de:52:40:12:0a:11: 34:fb:73:33:bb:eb:0c:09:51:42:9e:55:2f:19:e7:c2:97:fa: 4a:28:e0:1e:40:6b:16:80:71:dd:fd:ed:e3:5e:1c:ba:60:46: e1:5c:f3:64:1d:db:dc:b0:90:37:82:8e:84:b0:28:3b:16:bd: 55:3b:6d:7a:e3:51:aa:f0:2a:fb:52:4f:23:41:cb:0a:0a:ed: af:0b:c9:53:8a:8c:41:6d:08:2d:5f:87:61:90:e4:17:61:70: e4:d1:f0:5b:df:bc:b2:d6:9d:00:23:71:cd:99:9b:8a:60:76: 05:8a:20:8b:78:df:d7:62:5b:a8:bc:20:36:65:c4:99:c7:e2: 70:a8:ed:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQczWLjTUsFrLXXR0Kv3DFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MGMzYjkzZmYyYTM0ZmJmYTVhZTgyNTU2ZjY3MDM0MGNi NWQ1YzkwHhcNMjUxMjI0MTMwMTI2WhcNMjUxMjI1MTMwMTI2WjAzMTEwLwYDVQQD EygyYWE0MmM5MzJlY2VmMjI4ZDViNzczZWM1MGUzNjdmM2QzZDgzZTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XsHSw2A2j51GIuZjlyJ2cl7G3rm Bs4lvhHeOBYwSZViOl4xWt9Oq/9N4Gsrl6MMCK23h816QPIahBxQAcxA3AOec0j/ lNjg4rkzWWMkwv50JORr/frRdrMzStpemfNsBjonz2ZtZJCeJ/WqnE9fcpOYPs3O vAV8I3InRKudKqds3xbA05r4pJnLYCC1qxpOulSADGSrL9oiuBq8eLVPtkXfWfnY R+mto7MjDWz9L6jG1seARZU+b07d+rYcjk9BKKz0YzsMg/97FRyQkvP2/tFvgKqJ 0/ucOU5Xi77V47KWPe+Iundl9wsDO6B1Z1Auna47z5cepbEY17g5u6yG/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqkLJMuzvIo1bdz7FDjZ/PT2D4lMB8GA1UdIwQY MBaAFEgMO5P/KjT7+lroJVb2cDQMtdXJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0F3N2tfOHFOUHY2V3VnbFZ2WndOQXkxMWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xODAwYTQtNTBmYy00ZmY4LTllMzYt NDljNmZkYmJhZmI3LzEvU0F3N2tfOHFOUHY2V3VnbFZ2WndOQXkxMWNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xODAwYTQtNTBmYy00ZmY4LTllMzYtNDljNmZkYmJhZmI3 LzEvU0F3N2tfOHFOUHY2V3VnbFZ2WndOQXkxMWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASIsAoAO1 1bBSLQCejF0IhHSnF3qjVtALAJRZC7NjG0sVrSZMxynPByppEDk/kX5AHqmHW+SK pJfvDe+42NEK9WQYl1Kh1ze8jQmaQS8mh8ODfpArDJNFyCOaXdJ/SPD+0OHKdi2H FROxdAlolPo6GgMhC3brAULW3lJAEgoRNPtzM7vrDAlRQp5VLxnnwpf6SijgHkBr FoBx3f3t414cumBG4VzzZB3b3LCQN4KOhLAoOxa9VTtteuNRqvAq+1JPI0HLCgrt rwvJU4qMQW0ILV+HYZDkF2Fw5NHwW9+8stadACNxzZmbimB2BYogi3jf12JbqLwg NmXEmcficKjtbQ== -----END CERTIFICATE-----Generated at Wed Dec 24 15:44:57 2025 by rpki-client