This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft File: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft (raw, json) Hash identifier: yJIaqUvk71QN6Z9PFgEuluJcPUWRXnFRRCdEREwPhlI= Subject key identifier: D7:85:E7:48:A8:20:25:12:02:08:78:CD:53:4F:B5:4D:71:17:FA:26 Authority key identifier: B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17 Certificate issuer: /CN=b004f5869f5675f65f9b10cff4b65f74f76bed17 Certificate serial: 019B194D64EE498B78E49E3A2FC3EBBB0810 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft Manifest number: 068C Signing time: Sat 13 Dec 2025 20:01:01 +0000 Manifest this update: Sat 13 Dec 2025 20:01:01 +0000 Manifest next update: Sun 14 Dec 2025 20:01:01 +0000 Files and hashes: 1: BxWtid_-E8rZCQpiPweDOTdOKeU.roa (hash: eIpy/irnZIzZ2iTcdnKoq7vKHPC2KdLXiq5W/929yzo=) 2: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl (hash: b6itCku2yCI18WwIhj5L9SxY3jNWxdFEO2sZJypcLUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:64:ee:49:8b:78:e4:9e:3a:2f:c3:eb:bb:08:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b004f5869f5675f65f9b10cff4b65f74f76bed17 Validity Not Before: Dec 13 20:01:01 2025 GMT Not After : Dec 14 20:01:01 2025 GMT Subject: CN=d785e748a8202512020878cd534fb54d7117fa26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b5:cd:a9:8b:60:fb:27:c5:c5:2e:ce:7a:27: c3:e8:1d:01:a7:e3:ce:ae:ec:1f:54:5f:9a:92:49: c0:17:2b:b0:a5:53:46:68:9b:29:f2:81:e1:10:8a: 63:b2:c9:b7:7f:2a:f4:77:d6:f0:31:f4:40:61:9f: 27:97:d0:77:4b:a0:5b:37:b9:9a:f9:14:81:97:3b: 32:d0:de:05:3d:8d:31:73:13:82:1a:44:b4:01:d9: 4f:2a:49:69:e7:1f:dd:7e:bb:f7:97:9a:87:3c:f6: 5a:66:ae:23:eb:ec:8b:c1:63:4d:b3:b0:3c:32:24: 30:c3:e4:d7:8a:e5:4d:e2:60:b9:d6:7f:b3:9b:02: 1e:ba:7f:41:a8:82:57:b8:38:21:30:43:7c:a7:38: 38:28:62:b3:fe:af:a4:db:2c:7b:6c:70:a1:b9:cf: 04:e4:2b:54:3f:bb:9d:1e:19:3b:56:ff:98:41:a2: db:19:f8:dc:bc:4a:3f:f1:7b:29:38:b5:1f:9d:ed: 09:f4:fe:9e:23:a0:9a:d5:44:ee:50:06:df:f1:04: a6:3a:28:e9:3f:75:55:95:c5:99:32:fb:cc:07:75: 35:01:cd:1d:15:59:07:e5:99:1c:5d:eb:65:40:03: 19:84:1b:08:4f:61:32:3f:ac:fa:8d:ee:bc:26:e5: 07:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:85:E7:48:A8:20:25:12:02:08:78:CD:53:4F:B5:4D:71:17:FA:26 X509v3 Authority Key Identifier: keyid:B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:96:4a:d8:4e:c7:b6:7b:be:1f:56:61:f2:1a:5d:d5:56:33: b0:5a:63:17:bc:96:a7:06:ac:23:18:57:6f:b7:ae:c4:51:74: 32:2a:57:07:07:6c:1e:1f:bf:4e:35:bd:ac:08:14:1f:59:74: a8:f5:ae:53:5b:2c:fc:01:8c:da:ef:b8:3a:92:1a:b1:dd:64: 3a:47:56:00:1a:be:80:93:0c:0d:e8:a4:95:8b:c9:83:bb:7f: ce:21:cd:93:83:46:2a:ca:b5:f7:c2:66:7f:56:7b:bd:b5:3e: a9:37:de:8f:74:e8:db:f3:10:60:e9:06:e5:da:00:d1:a8:cb: a6:1f:71:98:84:2e:5f:69:63:b4:b1:2d:55:24:09:c2:7a:85: 50:e4:80:1f:fd:8e:0b:7b:ac:c3:9a:da:c1:8b:d1:cd:ef:e5: 6f:7d:f0:1b:04:a0:7d:bb:ee:24:7d:dd:34:21:49:65:1b:35: d6:44:06:81:9c:41:04:f9:e1:64:71:22:2e:03:df:03:3f:10: 8a:e7:51:d4:b4:a0:35:48:4e:5a:a6:54:e2:6d:cf:e2:1d:a6: f2:fc:59:a4:dd:21:ae:5b:78:16:f1:4b:ea:33:e5:6a:82:db: 12:de:3a:a3:7e:bd:08:3f:1f:78:d8:e3:92:93:53:28:94:7b: 26:e6:93:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTWTuSYt45J46L8PruwgQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMDRmNTg2OWY1Njc1ZjY1ZjliMTBjZmY0YjY1Zjc0Zjc2 YmVkMTcwHhcNMjUxMjEzMjAwMTAxWhcNMjUxMjE0MjAwMTAxWjAzMTEwLwYDVQQD EyhkNzg1ZTc0OGE4MjAyNTEyMDIwODc4Y2Q1MzRmYjU0ZDcxMTdmYTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rXNqYtg+yfFxS7OeifD6B0Bp+PO ruwfVF+akknAFyuwpVNGaJsp8oHhEIpjssm3fyr0d9bwMfRAYZ8nl9B3S6BbN7ma +RSBlzsy0N4FPY0xcxOCGkS0AdlPKklp5x/dfrv3l5qHPPZaZq4j6+yLwWNNs7A8 MiQww+TXiuVN4mC51n+zmwIeun9BqIJXuDghMEN8pzg4KGKz/q+k2yx7bHChuc8E 5CtUP7udHhk7Vv+YQaLbGfjcvEo/8XspOLUfne0J9P6eI6Ca1UTuUAbf8QSmOijp P3VVlcWZMvvMB3U1Ac0dFVkH5ZkcXetlQAMZhBsIT2EyP6z6je68JuUHqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNeF50ioICUSAgh4zVNPtU1xF/omMB8GA1UdIwQY MBaAFLAE9YafVnX2X5sQz/S2X3T3a+0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0FUMWhwOVdkZlpmbXhEUDlMWmZkUGRyN1JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8zMWEyZGYtZGNkZS00OWYyLThmMWUt MmZlY2RkODhlNTc1LzEvc0FUMWhwOVdkZlpmbXhEUDlMWmZkUGRyN1JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8zMWEyZGYtZGNkZS00OWYyLThmMWUtMmZlY2RkODhlNTc1 LzEvc0FUMWhwOVdkZlpmbXhEUDlMWmZkUGRyN1JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqZZK2E7H tnu+H1Zh8hpd1VYzsFpjF7yWpwasIxhXb7euxFF0MipXBwdsHh+/TjW9rAgUH1l0 qPWuU1ss/AGM2u+4OpIasd1kOkdWABq+gJMMDeiklYvJg7t/ziHNk4NGKsq198Jm f1Z7vbU+qTfej3To2/MQYOkG5doA0ajLph9xmIQuX2ljtLEtVSQJwnqFUOSAH/2O C3usw5rawYvRze/lb33wGwSgfbvuJH3dNCFJZRs11kQGgZxBBPnhZHEiLgPfAz8Q iudR1LSgNUhOWqZU4m3P4h2m8vxZpN0hrlt4FvFL6jPlaoLbEt46o369CD8feNjj kpNTKJR7JuaTUQ== -----END CERTIFICATE-----Generated at Sun Dec 14 03:32:03 2025 by rpki-client