This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft File: SFMhasnZIXM78_SEOTo0SVwOKmc.mft (raw, json) Hash identifier: D+HwW1JMJCDDOIRNpaevNjMVA5j4cpYN2hyKk2soG3Y= Subject key identifier: 14:1D:4E:1F:C1:C0:1F:F3:C2:1E:24:48:5F:31:9B:C3:30:28:90:7A Authority key identifier: 48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67 Certificate issuer: /CN=4853216ac9d921733bf3f484393a34495c0e2a67 Certificate serial: 019B360E33D4DDB32BBB76184F141ABEC517 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft Manifest number: 0AE2 Signing time: Fri 19 Dec 2025 10:00:58 +0000 Manifest this update: Fri 19 Dec 2025 10:00:58 +0000 Manifest next update: Sat 20 Dec 2025 10:00:58 +0000 Files and hashes: 1: SFMhasnZIXM78_SEOTo0SVwOKmc.crl (hash: jtvuX+nMGeam8pTNMMtX64/Z2oDCT6uplw9ATCA7KVc=) 2: hajbKl16Cy4Tdq_wgIk77VxT_6Q.roa (hash: +x4Da87nsosWbKf7z+mFyLUyvFKLPH55B5hxOSqBXYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:33:d4:dd:b3:2b:bb:76:18:4f:14:1a:be:c5:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4853216ac9d921733bf3f484393a34495c0e2a67 Validity Not Before: Dec 19 10:00:58 2025 GMT Not After : Dec 20 10:00:58 2025 GMT Subject: CN=141d4e1fc1c01ff3c21e24485f319bc33028907a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ed:5d:12:8a:a1:9e:d5:3a:7a:56:e5:53:18: 67:2d:95:09:45:20:18:80:75:93:4f:dc:a3:13:80: 53:20:a3:fe:2c:99:48:c9:26:8d:ef:55:03:f7:07: 95:a0:a0:08:16:e2:c7:95:0e:7c:4f:e0:f2:72:d1: f4:00:04:9c:24:80:85:b2:58:88:6f:67:4c:e1:70: 30:7d:04:6d:5a:9a:69:2c:20:22:bf:c4:59:5d:d0: a4:f1:d8:a4:40:d5:95:b4:9f:90:5e:84:d8:ba:1d: 62:27:e6:16:82:3b:1e:f1:68:b8:92:5d:2a:b2:15: 63:89:8d:69:3a:9c:07:b0:40:a7:6b:cd:95:3e:a0: b5:13:c5:ba:dd:92:a0:0a:ca:ff:51:ce:ef:85:7e: f6:02:81:68:65:fb:0e:8a:88:94:0d:ec:83:0b:67: 08:e8:47:de:89:f0:ce:3e:f2:de:59:8b:ae:05:24: 22:36:c8:fd:a4:a7:97:da:5e:96:cf:e8:bf:20:d3: a8:a7:42:a6:ed:37:24:17:45:08:bf:6b:7a:e8:67: 0e:8a:64:c4:5a:95:17:b9:9f:51:73:c0:0e:35:46: eb:62:82:81:81:8e:f5:2c:76:39:20:36:57:32:03: 96:34:b6:14:98:36:d6:38:0a:90:9b:0d:52:d8:3a: 40:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1D:4E:1F:C1:C0:1F:F3:C2:1E:24:48:5F:31:9B:C3:30:28:90:7A X509v3 Authority Key Identifier: keyid:48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:4d:b7:32:9f:fe:b2:fd:b4:37:98:61:37:1e:a5:e9:f9:e6: 73:b3:b0:21:e0:19:c2:e0:7e:00:45:50:fb:2f:0a:ec:2d:7e: 6f:ea:10:2f:f1:6b:c4:44:31:66:c7:71:dc:87:f7:30:a0:88: 7a:ee:9e:d4:a0:58:d6:64:e5:38:57:a8:33:6d:e6:c1:fa:a4: 16:59:ea:9d:7c:74:bd:82:17:1e:e2:e4:f9:c6:51:98:97:83: 92:67:44:7b:e9:21:ef:9d:16:f3:e9:5d:c9:fc:6f:27:f3:fc: 49:eb:f9:ae:6b:fe:3b:cf:ba:4f:37:47:14:c1:c0:7d:9b:f9: 33:75:87:7a:a0:7e:9c:44:cb:a4:8d:29:32:ab:03:10:23:3f: 13:67:1b:7a:ae:e2:4f:89:fd:ac:fc:d6:7a:d3:9a:3e:15:77: 67:af:23:5f:57:fb:80:96:1d:72:31:dc:c0:dd:f0:cd:47:8b: cf:f2:7c:d9:8d:26:26:e8:5e:9b:d1:47:af:75:76:72:b9:96: 94:c3:45:8a:2b:72:21:fe:e0:5c:44:54:b3:38:2a:75:bd:4b: f3:bd:97:a0:d1:fe:65:b3:17:fc:06:8e:86:27:d7:c9:60:ed: ad:0d:91:c7:f2:3d:82:de:4b:d6:27:9d:07:ea:c8:21:f7:d8: 54:e5:a4:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DjPU3bMru3YYTxQavsUXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NTMyMTZhYzlkOTIxNzMzYmYzZjQ4NDM5M2EzNDQ5NWMw ZTJhNjcwHhcNMjUxMjE5MTAwMDU4WhcNMjUxMjIwMTAwMDU4WjAzMTEwLwYDVQQD EygxNDFkNGUxZmMxYzAxZmYzYzIxZTI0NDg1ZjMxOWJjMzMwMjg5MDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte1dEoqhntU6elblUxhnLZUJRSAY gHWTT9yjE4BTIKP+LJlIySaN71UD9weVoKAIFuLHlQ58T+DyctH0AAScJICFsliI b2dM4XAwfQRtWpppLCAiv8RZXdCk8dikQNWVtJ+QXoTYuh1iJ+YWgjse8Wi4kl0q shVjiY1pOpwHsECna82VPqC1E8W63ZKgCsr/Uc7vhX72AoFoZfsOioiUDeyDC2cI 6EfeifDOPvLeWYuuBSQiNsj9pKeX2l6Wz+i/INOop0Km7TckF0UIv2t66GcOimTE WpUXuZ9Rc8AONUbrYoKBgY71LHY5IDZXMgOWNLYUmDbWOAqQmw1S2DpAMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQdTh/BwB/zwh4kSF8xm8MwKJB6MB8GA1UdIwQY MBaAFEhTIWrJ2SFzO/P0hDk6NElcDipnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kZmFkZTktMzI5NC00ZmFiLWI2MDct MjgyOGM0OGUzNTk5LzEvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9kZmFkZTktMzI5NC00ZmFiLWI2MDctMjgyOGM0OGUzNTk5 LzEvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV023Mp/+ sv20N5hhNx6l6fnmc7OwIeAZwuB+AEVQ+y8K7C1+b+oQL/FrxEQxZsdx3If3MKCI eu6e1KBY1mTlOFeoM23mwfqkFlnqnXx0vYIXHuLk+cZRmJeDkmdEe+kh750W8+ld yfxvJ/P8Sev5rmv+O8+6TzdHFMHAfZv5M3WHeqB+nETLpI0pMqsDECM/E2cbeq7i T4n9rPzWetOaPhV3Z68jX1f7gJYdcjHcwN3wzUeLz/J82Y0mJuhem9FHr3V2crmW lMNFiityIf7gXERUszgqdb1L872XoNH+ZbMX/AaOhifXyWDtrQ2Rx/I9gt5L1ied B+rIIffYVOWkoA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:38:04 2025 by rpki-client