This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft File: SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft (raw, json) Hash identifier: rq7OLDSQPf0UHLm4BaX1CAJ5OUpR4tYzSZIot01ZiYM= Subject key identifier: B2:B9:68:5C:AD:CE:86:67:56:B0:E3:5A:5E:1C:39:9C:45:60:FE:3D Authority key identifier: 49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88 Certificate issuer: /CN=49f80697fe2e2d97b591ad5b91580555a44d0388 Certificate serial: 019B077D9ED1383222187AC0217F673DC0F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft Manifest number: 1755 Signing time: Wed 10 Dec 2025 09:00:31 +0000 Manifest this update: Wed 10 Dec 2025 09:00:31 +0000 Manifest next update: Thu 11 Dec 2025 09:00:31 +0000 Files and hashes: 1: SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl (hash: Gq2A//p5gNxHx2y0nAF/ZSBIvEfkuK2e78J1Vb3pKiI=) 2: qamXgGdELqVwuCRXcGaE5fyjphY.roa (hash: XwiZQCHwX+Vwexgrkkuz5eMSgh62jyoQLxKiqhe1Bqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:7d:9e:d1:38:32:22:18:7a:c0:21:7f:67:3d:c0:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f80697fe2e2d97b591ad5b91580555a44d0388 Validity Not Before: Dec 10 09:00:31 2025 GMT Not After : Dec 11 09:00:31 2025 GMT Subject: CN=b2b9685cadce866756b0e35a5e1c399c4560fe3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a1:6f:07:1f:88:20:d8:3d:ce:56:f1:b2:8c: 5e:4b:31:ff:24:0c:fa:09:9a:ed:26:5f:d1:9e:da: ca:6f:ef:50:73:57:f4:1d:41:e9:79:37:3f:c5:81: 25:ba:37:a9:51:42:b0:74:7a:09:30:dd:22:03:56: 12:6e:84:f2:55:af:06:44:72:ae:98:e1:cf:ac:73: 36:77:65:67:b4:a7:49:0b:1e:79:01:06:73:78:86: 9a:97:bf:8b:a1:e6:51:92:e5:b7:cb:bd:71:6e:bf: 09:dc:84:bb:cf:01:e0:3e:03:7e:44:c5:a7:8f:dd: b3:90:c9:6a:61:fd:08:fb:1c:5e:40:f2:13:c9:fe: 66:79:a1:d7:86:f1:42:39:2d:93:c1:4c:cb:53:5d: f6:7f:29:03:ad:b2:82:62:d2:81:56:8c:81:c6:8d: cc:f8:21:fc:4b:03:ac:5e:76:93:c7:d9:b7:7e:6a: e5:e7:4a:7a:a5:af:8c:03:36:b7:9f:69:21:8a:87: 07:b1:9f:d5:1f:c4:2c:08:55:5d:91:f1:5d:a8:c8: 8c:68:e9:24:e1:5d:04:6b:8d:ac:7d:3c:c5:15:11: 31:78:71:c4:4b:df:10:4f:96:d9:60:ca:8f:71:4c: 8d:95:a6:31:13:c5:53:10:3e:92:c5:b3:90:97:2f: 3e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B9:68:5C:AD:CE:86:67:56:B0:E3:5A:5E:1C:39:9C:45:60:FE:3D X509v3 Authority Key Identifier: keyid:49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:86:5d:df:4f:63:41:89:ce:97:69:77:7e:11:e7:fc:d3:a7: 5c:dd:be:c6:19:8c:f3:f6:da:e9:59:14:55:3e:6c:b2:1d:a9: e5:03:cc:d8:11:e3:1a:8d:ea:3a:89:6c:cc:35:23:25:a9:42: a0:36:e3:0f:8c:b3:2e:d2:8c:42:4e:68:5a:71:d9:c6:a4:5a: 27:67:96:c9:a6:e6:ca:a3:e1:93:a2:07:6b:4f:2e:36:e8:37: 04:7d:99:fe:8e:16:79:a4:77:82:7f:1b:8a:7e:ca:32:b9:26: 06:6f:37:dc:19:4d:63:4f:3a:f7:0c:4a:a8:d4:00:43:39:fb: 80:33:f4:f9:06:0d:97:5a:8f:7a:1c:f0:62:14:34:18:ec:df: 95:30:e3:dc:a4:72:4e:c7:a4:44:16:f4:aa:47:b0:77:4c:a6: b5:79:77:91:97:45:f6:f1:2e:10:56:bc:6c:bb:9a:23:a5:73: ce:8f:be:05:9a:94:2f:bb:ca:dc:d0:de:82:1d:38:9d:66:a8: cd:d1:6d:9b:9f:6e:97:a9:5a:52:5b:0a:d7:8f:f0:09:68:04: d5:eb:c1:1a:df:88:56:0e:d9:14:d1:92:04:18:df:ab:f2:f3: e4:ce:13:93:39:d6:73:ae:69:6b:63:e8:cc:f2:1e:1a:10:4a: 75:20:42:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHfZ7RODIiGHrAIX9nPcD5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjgwNjk3ZmUyZTJkOTdiNTkxYWQ1YjkxNTgwNTU1YTQ0 ZDAzODgwHhcNMjUxMjEwMDkwMDMxWhcNMjUxMjExMDkwMDMxWjAzMTEwLwYDVQQD EyhiMmI5Njg1Y2FkY2U4NjY3NTZiMGUzNWE1ZTFjMzk5YzQ1NjBmZTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aFvBx+IINg9zlbxsoxeSzH/JAz6 CZrtJl/RntrKb+9Qc1f0HUHpeTc/xYElujepUUKwdHoJMN0iA1YSboTyVa8GRHKu mOHPrHM2d2VntKdJCx55AQZzeIaal7+LoeZRkuW3y71xbr8J3IS7zwHgPgN+RMWn j92zkMlqYf0I+xxeQPITyf5meaHXhvFCOS2TwUzLU132fykDrbKCYtKBVoyBxo3M +CH8SwOsXnaTx9m3fmrl50p6pa+MAza3n2khiocHsZ/VH8QsCFVdkfFdqMiMaOkk 4V0Ea42sfTzFFRExeHHES98QT5bZYMqPcUyNlaYxE8VTED6SxbOQly8+0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLK5aFytzoZnVrDjWl4cOZxFYP49MB8GA1UdIwQY MBaAFEn4Bpf+Li2XtZGtW5FYBVWkTQOIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZnR2xfNHVMWmUxa2ExYmtWZ0ZWYVJOQTRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8yNGRmNzItZmNjYy00OGRmLWE1YWUt MWE2NGE4MDc3YjE0LzEvU2ZnR2xfNHVMWmUxa2ExYmtWZ0ZWYVJOQTRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8yNGRmNzItZmNjYy00OGRmLWE1YWUtMWE2NGE4MDc3YjE0 LzEvU2ZnR2xfNHVMWmUxa2ExYmtWZ0ZWYVJOQTRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIZd309j QYnOl2l3fhHn/NOnXN2+xhmM8/ba6VkUVT5ssh2p5QPM2BHjGo3qOolszDUjJalC oDbjD4yzLtKMQk5oWnHZxqRaJ2eWyabmyqPhk6IHa08uNug3BH2Z/o4WeaR3gn8b in7KMrkmBm833BlNY0869wxKqNQAQzn7gDP0+QYNl1qPehzwYhQ0GOzflTDj3KRy TsekRBb0qkewd0ymtXl3kZdF9vEuEFa8bLuaI6Vzzo++BZqUL7vK3NDegh04nWao zdFtm59ul6laUlsK14/wCWgE1evBGt+IVg7ZFNGSBBjfq/Lz5M4TkznWc65pa2Po zPIeGhBKdSBCag== -----END CERTIFICATE-----Generated at Wed Dec 10 15:05:08 2025 by rpki-client