This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft File: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft (raw, json) Hash identifier: aVdiB4Ib9KFPVsd9H30bwR3VaS+Zpu6EtiUsEnFZMwo= Subject key identifier: 5E:73:1E:80:02:60:67:E5:0D:CA:9E:07:E2:FF:6E:EA:5E:FB:8A:29 Authority key identifier: B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F Certificate issuer: /CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f Certificate serial: 019B255313B2EF32FF8DA940B9F4E514AC26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft Manifest number: 0E8B Signing time: Tue 16 Dec 2025 04:02:40 +0000 Manifest this update: Tue 16 Dec 2025 04:02:40 +0000 Manifest next update: Wed 17 Dec 2025 04:02:40 +0000 Files and hashes: 1: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl (hash: fs0hs9LffDopA2vq3kU9Kx7A/ea0nlR3BRp8edvXz08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:53:13:b2:ef:32:ff:8d:a9:40:b9:f4:e5:14:ac:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f Validity Not Before: Dec 16 04:02:40 2025 GMT Not After : Dec 17 04:02:40 2025 GMT Subject: CN=5e731e80026067e50dca9e07e2ff6eea5efb8a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:91:ef:54:73:2f:30:ea:e6:42:86:4e:77:2b: 87:d3:4f:37:7a:53:cf:41:f6:6a:7b:8f:1c:e7:5a: 7f:50:91:bf:c4:2c:39:67:07:95:30:7e:d8:16:f7: e5:bb:af:ea:88:a6:19:fa:44:77:ef:a9:3b:dd:b4: 1c:5f:89:73:af:20:10:f3:17:c6:f1:6a:4b:59:fb: 33:f6:7c:ee:b0:0c:21:64:d3:6a:d9:ca:15:bb:60: e9:77:4b:65:9e:66:1e:10:f1:1c:e5:99:6c:c9:1f: 3c:38:7d:35:16:c1:8d:b7:13:64:ec:03:a8:00:7f: 87:99:8a:a0:ff:65:a9:be:96:5d:6f:9c:c8:3d:69: eb:ae:7c:f0:d6:3c:32:3d:cb:f3:fb:38:bf:0f:6e: c7:1f:f3:75:bd:cb:8a:6a:35:40:b6:f0:c7:55:60: f6:2f:45:14:c0:96:98:ab:68:e6:93:12:b7:d3:c5: fc:cd:46:75:98:ef:2b:e3:b0:cf:6b:1d:37:32:05: c9:36:aa:54:5a:86:d4:b0:7b:e2:d3:0a:1c:37:82: f3:ae:a7:94:8a:57:92:c3:56:2e:b4:be:0c:43:b3: d4:02:04:21:aa:3e:a4:17:c0:9f:d2:75:d3:4b:6a: 53:fc:b5:60:fa:3d:af:01:d1:c6:5f:29:10:66:08: c7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:73:1E:80:02:60:67:E5:0D:CA:9E:07:E2:FF:6E:EA:5E:FB:8A:29 X509v3 Authority Key Identifier: keyid:B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:fe:b9:c7:75:fd:f5:a8:f9:24:ca:a4:bf:37:74:d8:ab:0a: fd:d9:9e:1c:b6:56:52:11:b2:7c:df:6e:4e:d5:43:2b:37:6c: cd:68:af:4f:0d:ef:59:46:7c:25:61:3a:b5:9b:f0:b2:5e:3f: 2d:6d:0c:95:04:19:0d:dc:1f:54:f4:4e:de:05:25:94:31:69: 1f:88:32:a8:12:a0:47:2b:98:e9:9e:72:44:8c:ab:b7:e2:29: 24:9f:ae:67:6b:2a:b0:fc:8c:72:c2:0e:ee:f5:f9:85:03:27: 85:0e:4e:07:1d:83:b5:9e:50:83:00:61:07:d3:98:a0:1b:c1: 9d:8f:f5:35:ac:19:82:5f:ef:58:5d:f4:15:43:3f:0c:28:24: 97:d7:01:8a:18:b0:01:30:8e:6d:88:19:21:67:09:58:fe:f0: 42:b2:f5:8b:bd:29:b4:23:8d:1b:51:29:10:5a:b4:8a:73:f5: 0e:66:58:be:38:c8:f8:25:7d:8b:58:51:bc:98:10:7b:f1:e1: 04:33:a3:bf:25:68:7b:3a:65:ae:5a:96:13:f4:93:92:d7:6b: 58:06:30:7b:99:b6:ba:75:38:21:18:23:2b:37:62:86:d0:dc: 8c:d0:4a:55:fd:f6:3c:df:f6:36:cb:2e:c4:f7:23:25:2c:62: a4:8e:0c:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUxOy7zL/jalAufTlFKwmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZjAyNTJmZmE0MjA4M2E3ZGZkNWM2YzVlNzI3ZDY0Yjkx MWNkOWYwHhcNMjUxMjE2MDQwMjQwWhcNMjUxMjE3MDQwMjQwWjAzMTEwLwYDVQQD Eyg1ZTczMWU4MDAyNjA2N2U1MGRjYTllMDdlMmZmNmVlYTVlZmI4YTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5HvVHMvMOrmQoZOdyuH0083elPP QfZqe48c51p/UJG/xCw5ZweVMH7YFvflu6/qiKYZ+kR376k73bQcX4lzryAQ8xfG 8WpLWfsz9nzusAwhZNNq2coVu2Dpd0tlnmYeEPEc5ZlsyR88OH01FsGNtxNk7AOo AH+HmYqg/2WpvpZdb5zIPWnrrnzw1jwyPcvz+zi/D27HH/N1vcuKajVAtvDHVWD2 L0UUwJaYq2jmkxK308X8zUZ1mO8r47DPax03MgXJNqpUWobUsHvi0wocN4LzrqeU ileSw1YutL4MQ7PUAgQhqj6kF8Cf0nXTS2pT/LVg+j2vAdHGXykQZgjH7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5zHoACYGflDcqeB+L/bupe+4opMB8GA1UdIwQY MBaAFLHwJS/6Qgg6ff1cbF5yfWS5Ec2fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2ZBbExfcENDRHA5X1Z4c1huSjlaTGtSelo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9jYmE0OTAtMTBmZi00MzdmLWI3Yjkt ZGU4MWExMzMzOTcyLzEvc2ZBbExfcENDRHA5X1Z4c1huSjlaTGtSelo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9jYmE0OTAtMTBmZi00MzdmLWI3YjktZGU4MWExMzMzOTcy LzEvc2ZBbExfcENDRHA5X1Z4c1huSjlaTGtSelo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABP65x3X9 9aj5JMqkvzd02KsK/dmeHLZWUhGyfN9uTtVDKzdszWivTw3vWUZ8JWE6tZvwsl4/ LW0MlQQZDdwfVPRO3gUllDFpH4gyqBKgRyuY6Z5yRIyrt+IpJJ+uZ2sqsPyMcsIO 7vX5hQMnhQ5OBx2DtZ5QgwBhB9OYoBvBnY/1NawZgl/vWF30FUM/DCgkl9cBihiw ATCObYgZIWcJWP7wQrL1i70ptCONG1EpEFq0inP1DmZYvjjI+CV9i1hRvJgQe/Hh BDOjvyVoezplrlqWE/STktdrWAYwe5m2unU4IRgjKzdihtDcjNBKVf32PN/2Nssu xPcjJSxipI4MkA== -----END CERTIFICATE-----Generated at Tue Dec 16 10:53:13 2025 by rpki-client