This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft File: SFGWc90KnPV4lVIK83wqgYPc4Wg.mft (raw, json) Hash identifier: VxJaV/mjKRSsbap4mm2Ih80+m+1IVzNsiks0bpOr/6A= Subject key identifier: 9A:7D:AF:75:FC:6C:AA:2C:90:DD:E7:19:04:17:BD:8B:70:DD:68:1F Authority key identifier: 48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68 Certificate issuer: /CN=48519673dd0a9cf57895520af37c2a8183dce168 Certificate serial: 019B5B644F0E92179A8ED7BFE11A2898CE4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft Manifest number: 128D Signing time: Fri 26 Dec 2025 16:00:58 +0000 Manifest this update: Fri 26 Dec 2025 16:00:58 +0000 Manifest next update: Sat 27 Dec 2025 16:00:58 +0000 Files and hashes: 1: N_mB8DyGTMyRNtWdzOHezqUOwxA.roa (hash: 0iM1AEZNlQrcAYLQC9NYhgIr9GaQK1NMxQpbyZpHQKI=) 2: SFGWc90KnPV4lVIK83wqgYPc4Wg.crl (hash: bLOwWDqXQigtzqmuBRy5Mz747yZzTZ6wrmUaB2GBLVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:64:4f:0e:92:17:9a:8e:d7:bf:e1:1a:28:98:ce:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48519673dd0a9cf57895520af37c2a8183dce168 Validity Not Before: Dec 26 16:00:58 2025 GMT Not After : Dec 27 16:00:58 2025 GMT Subject: CN=9a7daf75fc6caa2c90dde7190417bd8b70dd681f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:43:9c:af:6e:90:d4:5e:09:af:5b:0d:26:54: f2:fc:c0:ed:ae:0d:81:75:e9:c8:9a:0e:df:be:4a: ab:41:c4:8e:7a:58:f0:bf:91:9c:a7:f7:d0:35:ed: 1d:0e:e1:42:3d:76:87:27:9c:5d:f2:c0:6d:40:a2: 7d:b1:ac:a9:1c:36:8b:a9:00:eb:ff:80:cc:69:23: 90:85:03:cc:67:93:b9:7e:36:17:a3:b4:5e:37:db: 48:90:d0:82:0d:3b:d5:03:70:ee:0b:65:34:04:b2: ee:3a:a4:ad:4d:5c:52:dc:fa:37:0d:6f:f3:04:e8: 64:94:9c:b7:ff:10:b3:d2:02:89:36:10:a5:40:94: 8d:7f:79:2e:fe:50:90:53:13:5f:28:05:97:dd:41: fc:75:60:46:ba:e3:e9:91:76:be:80:9a:33:08:20: 0d:4e:77:2f:ab:44:d7:84:91:71:a4:56:91:94:3e: 42:b0:78:1a:37:94:9d:40:df:40:69:8e:7c:ad:b1: 4d:ac:7a:ec:bb:81:c3:a9:98:b4:80:c7:02:6f:e3: 5b:3d:38:56:c8:02:5b:6e:0c:21:c0:6b:c3:59:0c: 8f:9b:55:41:03:81:5d:f0:48:c0:e5:f6:a5:ac:ee: 1b:7e:3e:98:ba:a7:1a:f7:e5:4f:3c:19:ce:67:89: 4a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7D:AF:75:FC:6C:AA:2C:90:DD:E7:19:04:17:BD:8B:70:DD:68:1F X509v3 Authority Key Identifier: keyid:48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:5a:08:dc:d3:72:62:9d:92:02:a0:c6:36:b0:b5:0a:f0:e5: 39:bf:d2:97:fc:d6:7d:04:06:79:8d:fa:95:00:65:77:c3:c2: dd:19:7f:07:47:13:e2:7e:e0:e3:7e:7e:3d:6c:f2:cd:8f:32: 1d:f3:8a:40:44:b0:b9:86:98:17:6c:95:f5:4d:75:4e:b4:19: b5:a3:4b:3a:90:47:6b:84:ca:ab:81:55:5c:86:fb:39:fb:72: 1f:d2:bc:b5:6b:d3:53:33:2f:52:3e:70:72:1e:04:20:5a:a9: 23:85:1c:26:e6:f2:45:82:da:e1:22:02:86:14:14:09:18:ea: 9e:41:78:ff:63:15:87:79:69:98:3a:cc:a8:ec:7f:25:6b:9a: e7:bd:0c:57:73:89:23:0e:cf:21:46:02:51:88:9b:bc:3d:42: 03:ef:4b:6c:65:fd:dc:d2:e4:d9:6a:93:02:51:56:56:6e:58: 4e:0a:39:a8:de:b1:b4:44:7b:3c:27:16:da:5e:e0:62:ba:02: ef:05:16:6f:78:3a:ce:30:02:2f:b3:8d:dc:88:a7:63:7a:cb: 56:63:a2:43:0e:47:b3:70:66:18:2f:ce:47:81:d7:fe:3a:e9: fa:b7:0b:81:d6:10:be:5d:93:41:9e:68:b1:3a:a8:3b:0f:ca: f1:b9:bb:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZE8Okheajte/4RoomM5NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NTE5NjczZGQwYTljZjU3ODk1NTIwYWYzN2MyYTgxODNk Y2UxNjgwHhcNMjUxMjI2MTYwMDU4WhcNMjUxMjI3MTYwMDU4WjAzMTEwLwYDVQQD Eyg5YTdkYWY3NWZjNmNhYTJjOTBkZGU3MTkwNDE3YmQ4YjcwZGQ2ODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUOcr26Q1F4Jr1sNJlTy/MDtrg2B denImg7fvkqrQcSOeljwv5Gcp/fQNe0dDuFCPXaHJ5xd8sBtQKJ9saypHDaLqQDr /4DMaSOQhQPMZ5O5fjYXo7ReN9tIkNCCDTvVA3DuC2U0BLLuOqStTVxS3Po3DW/z BOhklJy3/xCz0gKJNhClQJSNf3ku/lCQUxNfKAWX3UH8dWBGuuPpkXa+gJozCCAN Tncvq0TXhJFxpFaRlD5CsHgaN5SdQN9AaY58rbFNrHrsu4HDqZi0gMcCb+NbPThW yAJbbgwhwGvDWQyPm1VBA4Fd8EjA5falrO4bfj6Yuqca9+VPPBnOZ4lKsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJp9r3X8bKoskN3nGQQXvYtw3WgfMB8GA1UdIwQY MBaAFEhRlnPdCpz1eJVSCvN8KoGD3OFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8zYmQ1OWEtMmQwYy00MDkzLTkxM2Et ZmUzNmNlZGE2MzE2LzEvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8zYmQ1OWEtMmQwYy00MDkzLTkxM2EtZmUzNmNlZGE2MzE2 LzEvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVoI3NNy Yp2SAqDGNrC1CvDlOb/Sl/zWfQQGeY36lQBld8PC3Rl/B0cT4n7g435+PWzyzY8y HfOKQESwuYaYF2yV9U11TrQZtaNLOpBHa4TKq4FVXIb7OftyH9K8tWvTUzMvUj5w ch4EIFqpI4UcJubyRYLa4SIChhQUCRjqnkF4/2MVh3lpmDrMqOx/JWua570MV3OJ Iw7PIUYCUYibvD1CA+9LbGX93NLk2WqTAlFWVm5YTgo5qN6xtER7PCcW2l7gYroC 7wUWb3g6zjACL7ON3IinY3rLVmOiQw5Hs3BmGC/OR4HX/jrp+rcLgdYQvl2TQZ5o sTqoOw/K8bm7jQ== -----END CERTIFICATE-----Generated at Fri Dec 26 23:04:14 2025 by rpki-client