This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft File: sf_ufb9_RWbqnjBUaywqLnM28vQ.mft (raw, json) Hash identifier: cdOdUoKU6C9GinfmmCq1vQJRhGsZnUH9j1sBAODi6sY= Subject key identifier: B8:89:1A:67:35:BB:53:87:4D:22:7D:6D:3C:88:D4:15:8F:4D:1C:69 Authority key identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4 Certificate issuer: /CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4 Certificate serial: 019B1F865566306FFB72758157CCD1A04198 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft Manifest number: 177C Signing time: Mon 15 Dec 2025 01:00:55 +0000 Manifest this update: Mon 15 Dec 2025 01:00:55 +0000 Manifest next update: Tue 16 Dec 2025 01:00:55 +0000 Files and hashes: 1: DNhIHCVoBglUmAVlCkJ5G-L36yg.roa (hash: 31245JAwO/UkCcpQa4UanpWYM+ItoRpnBX/McoOb5tQ=) 2: FfGHuB6Qf_cay6wn_ZrJC4SPGUg.roa (hash: DYs9L8yM8et51Ym0pIsTXdtN2ADOJkVDLkBPalnCV9A=) 3: fIN0CuyWjIdLGQA-5hoaOxgsCEU.roa (hash: NyCjKtY4yfk/Nsn/Ck5PkA1Ia9CEltJSbyJgOPEbXmk=) 4: iipSuvIjR47VudmgbPEDa9JY9oY.roa (hash: UNIVy+xZ2R8yR9G0m1INDMtIUCeoWGaMGRk0QvHxxTQ=) 5: sf_ufb9_RWbqnjBUaywqLnM28vQ.crl (hash: ag6PBBO3p3wTAXplZzBGNqckyNsdwe3fwHGUdM1izgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:86:55:66:30:6f:fb:72:75:81:57:cc:d1:a0:41:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4 Validity Not Before: Dec 15 01:00:55 2025 GMT Not After : Dec 16 01:00:55 2025 GMT Subject: CN=b8891a6735bb53874d227d6d3c88d4158f4d1c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d4:ef:90:10:62:ae:d5:d5:e1:f1:a3:e4:a6: af:c4:1f:79:c9:24:c8:4d:57:b7:ea:fd:0b:5c:0e: ca:79:64:36:86:c5:19:13:5e:9d:37:91:e5:e9:a9: 71:92:5e:da:7d:dc:54:f0:ae:90:27:49:89:c8:a1: 2e:29:a8:a5:ed:5d:b5:68:ac:e8:cc:90:e1:2d:4d: 94:fa:8b:38:9e:7c:97:15:bd:4c:96:f0:f7:40:71: 59:0e:cd:94:b9:ff:e6:3c:10:e7:d2:5a:71:29:bf: 5b:c5:97:b7:71:16:32:26:f7:1c:e4:2f:0d:e3:0b: b9:c9:f5:8e:3f:c5:cd:e8:4d:6f:08:0f:1e:6d:91: 7f:51:7c:40:b7:31:9a:fd:03:aa:b1:e9:42:b2:a8: b1:a3:e4:31:d4:13:97:b0:bd:13:e8:58:ff:51:13: df:a7:18:88:c8:9a:b8:f2:ce:68:f5:24:6d:ce:91: f6:b1:7f:63:c4:40:79:57:e5:ce:ef:f8:d9:92:1f: ef:bc:d6:54:ca:8d:75:80:87:76:31:4c:c0:53:7c: ae:88:65:5e:fe:4d:75:41:39:9e:a3:b7:7f:c3:e0: a1:da:fc:30:a8:8f:c5:5d:9b:bd:48:f0:bf:d2:48: 51:f4:d6:56:0b:17:13:ed:03:f8:78:c3:45:28:4e: ad:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:89:1A:67:35:BB:53:87:4D:22:7D:6D:3C:88:D4:15:8F:4D:1C:69 X509v3 Authority Key Identifier: keyid:B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:cf:c4:4e:2c:5b:b6:da:cc:c3:e6:5d:33:09:a8:21:33:16: 33:4c:f0:ff:d1:e1:72:8e:e3:87:f0:1c:c0:30:8b:33:fd:6c: c9:8c:b0:29:df:63:40:dc:1c:da:d6:7b:af:fe:5b:80:6d:ba: 21:c2:d2:69:c2:28:cb:37:90:5f:62:e1:21:75:73:a3:ee:c5: 36:93:2c:0f:80:a0:69:19:8b:35:51:61:df:d6:ac:45:f9:6c: 3d:1a:e4:c6:ca:3e:62:26:02:3a:c7:2b:a2:ec:2b:da:ac:e3: 4f:ee:8a:07:c1:4b:f7:99:25:af:68:c3:bc:61:ab:88:13:d5: 60:fa:99:4c:55:ed:c0:84:57:00:4c:13:81:7d:57:75:86:5d: c0:fb:a1:7b:4c:d9:e3:32:bc:79:23:c6:92:c6:be:cd:85:10: 3f:f3:3b:4a:08:00:d9:b3:43:01:aa:69:a0:59:a4:49:c2:4e: ed:d5:4f:56:ee:bc:1f:ef:34:35:32:40:4c:0d:f4:18:b0:c8: db:65:c6:d1:22:f7:d1:f5:0a:54:40:a5:19:2a:e4:9c:0a:6d: 4f:b7:26:1d:ef:42:b5:6d:7c:1e:2f:c7:98:45:f8:d0:9b:25: 3b:24:42:7a:e5:5c:65:bb:fb:02:68:b8:51:89:80:06:42:ee: 24:d1:3c:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfhlVmMG/7cnWBV8zRoEGYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZmZlZTdkYmY3ZjQ1NjZlYTllMzA1NDZiMmMyYTJlNzMz NmYyZjQwHhcNMjUxMjE1MDEwMDU1WhcNMjUxMjE2MDEwMDU1WjAzMTEwLwYDVQQD EyhiODg5MWE2NzM1YmI1Mzg3NGQyMjdkNmQzYzg4ZDQxNThmNGQxYzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdTvkBBirtXV4fGj5KavxB95ySTI TVe36v0LXA7KeWQ2hsUZE16dN5Hl6alxkl7afdxU8K6QJ0mJyKEuKail7V21aKzo zJDhLU2U+os4nnyXFb1MlvD3QHFZDs2Uuf/mPBDn0lpxKb9bxZe3cRYyJvcc5C8N 4wu5yfWOP8XN6E1vCA8ebZF/UXxAtzGa/QOqselCsqixo+Qx1BOXsL0T6Fj/URPf pxiIyJq48s5o9SRtzpH2sX9jxEB5V+XO7/jZkh/vvNZUyo11gId2MUzAU3yuiGVe /k11QTmeo7d/w+Ch2vwwqI/FXZu9SPC/0khR9NZWCxcT7QP4eMNFKE6tjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLiJGmc1u1OHTSJ9bTyI1BWPTRxpMB8GA1UdIwQY MBaAFLH/7n2/f0Vm6p4wVGssKi5zNvL0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2ZfdWZiOV9SV2JxbmpCVWF5d3FMbk0yOHZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yZmNiYjItYzNjMC00YjFlLThhZDUt N2Y1Zjc4MzQ2ZDZmLzEvc2ZfdWZiOV9SV2JxbmpCVWF5d3FMbk0yOHZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yZmNiYjItYzNjMC00YjFlLThhZDUtN2Y1Zjc4MzQ2ZDZm LzEvc2ZfdWZiOV9SV2JxbmpCVWF5d3FMbk0yOHZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJM/ETixb ttrMw+ZdMwmoITMWM0zw/9Hhco7jh/AcwDCLM/1syYywKd9jQNwc2tZ7r/5bgG26 IcLSacIoyzeQX2LhIXVzo+7FNpMsD4CgaRmLNVFh39asRflsPRrkxso+YiYCOscr ouwr2qzjT+6KB8FL95klr2jDvGGriBPVYPqZTFXtwIRXAEwTgX1XdYZdwPuhe0zZ 4zK8eSPGksa+zYUQP/M7SggA2bNDAappoFmkScJO7dVPVu68H+80NTJATA30GLDI 22XG0SL30fUKVEClGSrknAptT7cmHe9CtW18Hi/HmEX40JslOyRCeuVcZbv7Ami4 UYmABkLuJNE8nQ== -----END CERTIFICATE-----Generated at Mon Dec 15 04:57:58 2025 by rpki-client