This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft File: SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft (raw, json) Hash identifier: iTlt91svt1V86Hh1a/1jAXbPn0AU1/SnUoafNNnSqcQ= Subject key identifier: F0:F2:33:CA:C8:4B:61:5D:94:3A:B1:80:49:1F:E7:18:28:20:07:71 Authority key identifier: 48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA Certificate issuer: /CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca Certificate serial: 019B232BFCA284C892EBDA1E7B746E9D9C9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft Manifest number: 0160 Signing time: Mon 15 Dec 2025 18:00:43 +0000 Manifest this update: Mon 15 Dec 2025 18:00:43 +0000 Manifest next update: Tue 16 Dec 2025 18:00:43 +0000 Files and hashes: 1: SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl (hash: ER4IfVohc9xUadufwd2YqW1ruLlsKOgB6KnDLcMdRz0=) 2: zSp8Tcrfxe5_p3n3onsW-Ve9HcQ.roa (hash: hWOLO9tqL0286CUEjHeu7GROlem9sTgukzg2u3fOev0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:2b:fc:a2:84:c8:92:eb:da:1e:7b:74:6e:9d:9c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca Validity Not Before: Dec 15 18:00:43 2025 GMT Not After : Dec 16 18:00:43 2025 GMT Subject: CN=f0f233cac84b615d943ab180491fe71828200771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9b:14:d6:bf:16:61:44:34:53:f4:4c:09:29: 6a:bb:78:60:74:03:42:b2:72:d5:3c:60:e2:c1:ea: 61:b1:d8:f9:ff:d2:a8:9a:df:86:53:3e:64:c0:8d: 45:19:6a:e9:a2:f5:4b:d6:39:e8:81:18:8d:f7:25: b7:72:a5:0a:5b:12:0a:3d:86:d8:ba:05:1b:61:9c: 63:11:c5:6a:fa:95:6d:7a:78:56:4e:0e:37:b4:05: eb:51:20:82:f9:38:38:d9:c1:b8:80:e3:6f:50:34: 23:9d:6d:6d:84:ff:7e:ea:c0:6e:5c:fd:02:4b:86: e4:97:6b:f3:9a:d9:58:36:7f:eb:20:8b:f4:11:f7: bc:f2:2e:e3:c1:af:7c:a0:ce:cc:18:a3:83:f3:ad: 32:a3:82:5d:c0:ba:d0:9f:dc:16:ab:b3:f7:4b:40: 7f:eb:37:57:3d:ae:d7:5d:4b:81:d8:e1:2f:ea:1f: d2:1a:de:ec:4f:f6:3b:83:36:49:b8:87:d4:75:6f: cc:27:b3:4f:66:69:23:e2:c4:60:cc:03:ea:66:fd: 98:a3:11:b3:cf:34:9e:a5:68:e5:8b:e3:ca:9a:c6: 29:f1:51:1e:38:ad:6b:75:ff:00:03:6d:47:74:57: 56:2b:b0:6f:ac:5a:dd:ed:40:fc:49:7d:17:fe:be: 91:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F2:33:CA:C8:4B:61:5D:94:3A:B1:80:49:1F:E7:18:28:20:07:71 X509v3 Authority Key Identifier: keyid:48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:31:7b:23:4c:e3:a8:5a:e3:70:52:d0:f5:09:6f:ed:c8:1b: 92:c9:de:c6:bb:65:56:dd:47:3e:e0:d5:ec:59:9d:f3:9b:39: 4a:52:07:33:90:4b:8d:20:dc:35:b6:c1:28:e0:01:79:a7:bf: 09:35:08:35:da:4f:fb:8b:46:d9:f4:19:6d:69:e2:80:5e:8e: fe:6f:a3:9b:59:f6:97:82:ff:1f:d4:a3:cd:b1:dc:70:e7:3d: 80:7e:25:b3:e0:6e:0d:49:f1:67:23:c5:0f:8d:6e:9f:79:84: 9c:86:b2:b5:9e:46:96:06:b0:64:fe:ba:42:9f:89:42:8f:1e: de:0b:01:06:b1:2b:69:bb:43:4a:23:4f:b6:b1:fd:ce:b4:d5: e0:85:fe:28:72:60:a1:a9:8e:69:2a:5a:06:48:b5:7a:ec:9e: 5e:9b:c5:13:e5:9b:9b:94:b2:e0:f6:b9:23:5f:a0:9b:68:0e: b6:d7:8c:87:6e:b6:26:c2:a8:8a:4b:9c:35:1c:a2:bf:e1:50: f8:75:9e:f7:eb:8f:a6:e9:b6:49:70:9d:1a:20:4d:f2:03:0a: 84:a3:60:a9:60:b1:c5:d1:1a:7e:63:51:fc:c4:0a:1d:8c:d0: 4e:09:5e:62:16:2a:d0:b4:2f:8c:e8:78:7d:41:95:de:28:75: fe:bb:66:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjK/yihMiS69oee3RunZycMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NTAxOGI1YzJmZWYxMjQ4YWI2ZWMwZDA3ZTk3MWVjYmNm NzM5Y2EwHhcNMjUxMjE1MTgwMDQzWhcNMjUxMjE2MTgwMDQzWjAzMTEwLwYDVQQD EyhmMGYyMzNjYWM4NGI2MTVkOTQzYWIxODA0OTFmZTcxODI4MjAwNzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJsU1r8WYUQ0U/RMCSlqu3hgdANC snLVPGDiwephsdj5/9Komt+GUz5kwI1FGWrpovVL1jnogRiN9yW3cqUKWxIKPYbY ugUbYZxjEcVq+pVtenhWTg43tAXrUSCC+Tg42cG4gONvUDQjnW1thP9+6sBuXP0C S4bkl2vzmtlYNn/rIIv0Efe88i7jwa98oM7MGKOD860yo4JdwLrQn9wWq7P3S0B/ 6zdXPa7XXUuB2OEv6h/SGt7sT/Y7gzZJuIfUdW/MJ7NPZmkj4sRgzAPqZv2YoxGz zzSepWjli+PKmsYp8VEeOK1rdf8AA21HdFdWK7BvrFrd7UD8SX0X/r6RnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDyM8rIS2FdlDqxgEkf5xgoIAdxMB8GA1UdIwQY MBaAFEhQGLXC/vEkirbsDQfpcey89znKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0ZBWXRjTC04U1NLdHV3TkItbHg3THozT2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84NTNlOGYtZmNkNC00NTY2LWE2NDgt ZTM3NDk5Njc5ZDQ2LzEvU0ZBWXRjTC04U1NLdHV3TkItbHg3THozT2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84NTNlOGYtZmNkNC00NTY2LWE2NDgtZTM3NDk5Njc5ZDQ2 LzEvU0ZBWXRjTC04U1NLdHV3TkItbHg3THozT2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDF7I0zj qFrjcFLQ9Qlv7cgbksnexrtlVt1HPuDV7Fmd85s5SlIHM5BLjSDcNbbBKOABeae/ CTUINdpP+4tG2fQZbWnigF6O/m+jm1n2l4L/H9SjzbHccOc9gH4ls+BuDUnxZyPF D41un3mEnIaytZ5GlgawZP66Qp+JQo8e3gsBBrErabtDSiNPtrH9zrTV4IX+KHJg oamOaSpaBki1euyeXpvFE+Wbm5Sy4Pa5I1+gm2gOtteMh262JsKoikucNRyiv+FQ +HWe9+uPpum2SXCdGiBN8gMKhKNgqWCxxdEafmNR/MQKHYzQTgleYhYq0LQvjOh4 fUGV3ih1/rtmJw== -----END CERTIFICATE-----Generated at Tue Dec 16 01:09:37 2025 by rpki-client