This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft File: sf_ufb9_RWbqnjBUaywqLnM28vQ.mft (raw, json) Hash identifier: GnpItBWLkXKbEEb1Tw+AZFAjL+QlwEJnQbpftlWLj94= Subject key identifier: 1B:DD:73:14:86:5C:E0:5B:C0:82:73:32:5C:0D:F4:E5:53:82:9D:3F Authority key identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4 Certificate issuer: /CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4 Certificate serial: 019B1BA98FA5C50CE7398C05D4394FD09E30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft Manifest number: 177A Signing time: Sun 14 Dec 2025 07:00:55 +0000 Manifest this update: Sun 14 Dec 2025 07:00:55 +0000 Manifest next update: Mon 15 Dec 2025 07:00:55 +0000 Files and hashes: 1: DNhIHCVoBglUmAVlCkJ5G-L36yg.roa (hash: 31245JAwO/UkCcpQa4UanpWYM+ItoRpnBX/McoOb5tQ=) 2: FfGHuB6Qf_cay6wn_ZrJC4SPGUg.roa (hash: DYs9L8yM8et51Ym0pIsTXdtN2ADOJkVDLkBPalnCV9A=) 3: fIN0CuyWjIdLGQA-5hoaOxgsCEU.roa (hash: NyCjKtY4yfk/Nsn/Ck5PkA1Ia9CEltJSbyJgOPEbXmk=) 4: iipSuvIjR47VudmgbPEDa9JY9oY.roa (hash: UNIVy+xZ2R8yR9G0m1INDMtIUCeoWGaMGRk0QvHxxTQ=) 5: sf_ufb9_RWbqnjBUaywqLnM28vQ.crl (hash: GQ3+wBJhWpvtr976Gjf3gKWlz7fUeVOdJCoIPa1WY7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:a9:8f:a5:c5:0c:e7:39:8c:05:d4:39:4f:d0:9e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4 Validity Not Before: Dec 14 07:00:55 2025 GMT Not After : Dec 15 07:00:55 2025 GMT Subject: CN=1bdd7314865ce05bc08273325c0df4e553829d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:86:0e:57:4e:0f:f6:38:29:2e:3b:60:e4:a1: a1:59:4f:89:45:da:0b:d7:54:b2:6d:48:73:28:f1: 82:8c:53:c6:a7:03:73:0e:11:e9:9b:1e:8a:0b:8b: 1b:6a:b6:40:41:3f:b8:7f:42:15:08:e4:0f:3c:93: 32:d1:3e:59:42:81:ce:95:ad:6a:3e:8d:c3:64:86: 54:dd:31:50:4e:c8:6b:35:0b:9e:ac:90:de:7d:12: 59:83:9b:51:fa:c6:63:64:38:c5:b4:5d:22:c3:75: ab:a0:c9:42:47:c5:f0:12:c8:f4:e9:fa:ab:ef:ac: 77:a3:12:4b:4e:be:d8:d1:27:20:ca:7e:0c:41:e0: dd:04:1f:64:7a:d5:13:05:2b:fb:3b:6c:2f:cf:ea: 23:6c:59:89:22:4f:9c:3a:c5:ac:34:76:08:8f:22: fc:32:14:5f:23:a7:39:93:8c:8b:48:8c:8f:aa:05: dd:36:47:b1:21:d9:22:3d:12:13:5d:fd:c1:97:aa: fb:89:18:b3:cb:69:0e:c5:4b:8c:97:b6:7c:c1:9a: c7:af:24:3b:8a:02:5f:f3:68:10:85:c4:37:b0:da: 0b:72:ce:ad:82:73:ce:9f:94:b1:f9:93:ca:47:4f: a5:f3:a7:e7:ea:6d:ef:67:8e:2b:be:c1:07:c1:76: 44:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DD:73:14:86:5C:E0:5B:C0:82:73:32:5C:0D:F4:E5:53:82:9D:3F X509v3 Authority Key Identifier: keyid:B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:9d:5f:e1:56:21:4f:14:8d:78:70:ab:0f:2c:2d:e5:7d:d8: 78:a2:78:13:2f:43:15:28:8b:9f:50:45:73:8b:9d:df:bc:67: 88:83:ca:57:df:db:68:39:5a:19:76:ba:18:5a:5a:0e:3c:18: 12:1c:21:6d:86:8d:75:9a:35:cf:4a:46:c0:fa:d5:f6:b0:70: f8:0e:60:c8:17:14:fa:f0:03:3b:9f:6d:d5:b7:c1:d6:b9:60: e5:32:c2:f4:78:c5:de:3c:d7:45:c7:4e:6f:bc:4c:31:65:64: ee:78:7f:44:f1:47:6e:dc:ca:72:6a:5e:d0:25:59:a0:fb:10: 7b:20:36:ba:46:f8:3a:91:dd:cd:ee:db:66:d7:59:9a:14:18: f1:f1:f6:6f:3d:90:90:c6:55:84:6d:e2:03:e2:65:78:18:fa: af:8a:97:74:35:6f:32:f9:2b:10:49:02:23:92:6d:b6:e6:9b: 3b:fc:a9:1c:96:03:64:0f:06:f1:18:94:6f:f5:c6:a5:2c:7b: 6c:f8:b8:43:bd:f5:ed:52:3c:93:97:98:fa:f4:ef:35:ad:51: 4a:34:7c:c7:e7:e9:6e:53:0f:cc:c6:a1:bb:b2:a7:10:a1:d7: 10:2c:05:e9:cd:3e:16:3c:87:02:d3:09:a5:3d:2d:fd:a9:88: b1:78:87:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqY+lxQznOYwF1DlP0J4wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZmZlZTdkYmY3ZjQ1NjZlYTllMzA1NDZiMmMyYTJlNzMz NmYyZjQwHhcNMjUxMjE0MDcwMDU1WhcNMjUxMjE1MDcwMDU1WjAzMTEwLwYDVQQD EygxYmRkNzMxNDg2NWNlMDViYzA4MjczMzI1YzBkZjRlNTUzODI5ZDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84YOV04P9jgpLjtg5KGhWU+JRdoL 11SybUhzKPGCjFPGpwNzDhHpmx6KC4sbarZAQT+4f0IVCOQPPJMy0T5ZQoHOla1q Po3DZIZU3TFQTshrNQuerJDefRJZg5tR+sZjZDjFtF0iw3WroMlCR8XwEsj06fqr 76x3oxJLTr7Y0Scgyn4MQeDdBB9ketUTBSv7O2wvz+ojbFmJIk+cOsWsNHYIjyL8 MhRfI6c5k4yLSIyPqgXdNkexIdkiPRITXf3Bl6r7iRizy2kOxUuMl7Z8wZrHryQ7 igJf82gQhcQ3sNoLcs6tgnPOn5Sx+ZPKR0+l86fn6m3vZ44rvsEHwXZEawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvdcxSGXOBbwIJzMlwN9OVTgp0/MB8GA1UdIwQY MBaAFLH/7n2/f0Vm6p4wVGssKi5zNvL0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2ZfdWZiOV9SV2JxbmpCVWF5d3FMbk0yOHZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yZmNiYjItYzNjMC00YjFlLThhZDUt N2Y1Zjc4MzQ2ZDZmLzEvc2ZfdWZiOV9SV2JxbmpCVWF5d3FMbk0yOHZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yZmNiYjItYzNjMC00YjFlLThhZDUtN2Y1Zjc4MzQ2ZDZm LzEvc2ZfdWZiOV9SV2JxbmpCVWF5d3FMbk0yOHZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJ1f4VYh TxSNeHCrDywt5X3YeKJ4Ey9DFSiLn1BFc4ud37xniIPKV9/baDlaGXa6GFpaDjwY EhwhbYaNdZo1z0pGwPrV9rBw+A5gyBcU+vADO59t1bfB1rlg5TLC9HjF3jzXRcdO b7xMMWVk7nh/RPFHbtzKcmpe0CVZoPsQeyA2ukb4OpHdze7bZtdZmhQY8fH2bz2Q kMZVhG3iA+JleBj6r4qXdDVvMvkrEEkCI5JttuabO/ypHJYDZA8G8RiUb/XGpSx7 bPi4Q7317VI8k5eY+vTvNa1RSjR8x+fpblMPzMahu7KnEKHXECwF6c0+FjyHAtMJ pT0t/amIsXiHnQ== -----END CERTIFICATE-----Generated at Sun Dec 14 13:26:14 2025 by rpki-client