This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft File: SffBpGd-t4JtrmneAaaZtiAdYkQ.mft (raw, json) Hash identifier: Y3+hlq26U8dwmDGrNQoVhNbXnm+XP9MnmLu7mVoVWmo= Subject key identifier: 4E:1D:23:A3:D3:FC:C5:A1:35:7C:38:94:B8:0F:5B:AA:16:C9:0D:43 Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44 Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244 Certificate serial: 019B24AC7B788507BF1E76D12A1AE9846B1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft Manifest number: 0952 Signing time: Tue 16 Dec 2025 01:00:42 +0000 Manifest this update: Tue 16 Dec 2025 01:00:42 +0000 Manifest next update: Wed 17 Dec 2025 01:00:42 +0000 Files and hashes: 1: 1fEhDLG2T1y1zCMSekjeKTFgEiE.roa (hash: qkZRZL3uEJ/IofMfb0sGApiJ8jObyAIyttVh0abUKHc=) 2: SffBpGd-t4JtrmneAaaZtiAdYkQ.crl (hash: ZuMU8KWtJY+gJqFX+mmmLUftZiNcMqlejxDX24z8Dag=) 3: Ungcud01aQHgTMIDHqxKgOj76qo.roa (hash: vzFsWzaNMb5tmpdLeHM9BlzRIek6QkO8MJb/yx40U/I=) 4: aNjEb5eKDyYkgeaI_pw6s6Nyxio.roa (hash: LXIG7QItKisSD3lO6v16i6iN7S5ddhKshFToQIqNXAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:7b:78:85:07:bf:1e:76:d1:2a:1a:e9:84:6b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244 Validity Not Before: Dec 16 01:00:42 2025 GMT Not After : Dec 17 01:00:42 2025 GMT Subject: CN=4e1d23a3d3fcc5a1357c3894b80f5baa16c90d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7f:8c:6f:cc:e5:b4:95:27:25:07:4e:00:f5: 47:b1:99:fa:93:89:95:cf:10:b8:5c:09:95:de:ac: f6:b4:6a:c6:48:3c:bd:b0:9c:12:0a:f1:50:ee:eb: 14:5a:d6:68:0f:c0:c0:a3:50:28:60:0b:25:15:f8: 13:97:57:35:26:2e:77:7b:2a:78:d7:2f:be:a1:c8: d6:ca:3d:a6:63:ac:16:87:fc:1b:a3:34:86:c7:04: 7d:b7:36:02:b6:dd:0a:84:fc:6d:ea:1b:25:35:32: c8:2e:ca:28:da:05:ec:d2:20:6a:b0:bf:f7:21:a1: 4e:ba:31:a6:82:db:d0:9d:6d:c2:9c:2c:61:50:bd: 01:64:77:d0:60:6e:06:31:33:6c:40:7c:31:ca:0f: 46:dd:45:ef:8c:83:45:60:69:cc:9b:f7:54:63:c2: b1:fb:9f:2a:2c:6f:c2:01:3e:e6:a4:2e:11:7a:32: 09:6e:45:f8:ce:16:c9:c8:04:52:c6:73:52:fc:ed: b5:11:5c:05:0f:9f:5d:c1:f1:71:d7:ce:05:6d:a2: 89:8e:67:75:4b:ce:01:64:5b:54:75:fc:b6:ad:9c: 36:20:aa:9a:50:a9:8b:4d:80:e1:9a:56:89:78:21: 0a:9e:28:a8:3e:ed:29:d6:c7:91:7c:60:28:27:13: eb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1D:23:A3:D3:FC:C5:A1:35:7C:38:94:B8:0F:5B:AA:16:C9:0D:43 X509v3 Authority Key Identifier: keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b6:3f:e9:a3:83:ec:76:a7:4e:cc:4e:ca:54:23:b5:97:e2: b2:98:d2:a6:15:98:e3:bd:a3:75:e6:e8:7c:e0:07:c6:e4:80: 7f:4d:ec:89:37:14:ac:4a:11:34:f0:61:df:6a:7a:27:d1:1e: e2:7e:3f:c8:34:03:c9:49:62:7b:a3:90:dc:67:8b:0b:a9:9b: 99:9a:17:ce:ca:fd:58:9b:10:5f:64:7f:02:ef:2c:4f:06:5f: 54:3f:d2:99:c4:b2:5b:ab:6a:7f:9d:a8:9b:06:92:1c:56:0c: 04:e2:2d:c8:fa:3f:8b:3d:cd:83:b9:ed:a9:78:5b:b4:15:df: cc:3a:3f:13:f2:4f:fb:17:78:2f:f8:84:94:2a:ac:a1:63:ee: 88:2e:ab:ff:64:26:5f:35:3d:9e:0a:a5:20:03:0a:ec:c7:a3: 6e:91:13:33:69:cd:f1:4a:6c:a1:b4:67:3e:c3:9f:43:5e:b2: 1e:cf:1c:55:50:57:d9:65:c6:32:66:56:17:e9:42:99:08:3b: f8:d9:ce:30:aa:23:f2:4e:e4:ae:3f:8a:8b:d1:e0:68:35:42: 37:b8:25:2a:3f:27:9b:e6:73:48:cb:29:3f:5f:32:9e:75:6b: 5b:1e:cb:f5:03:95:6d:07:25:00:5c:cf:cc:09:5f:f6:2f:a7: 8d:fc:6d:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrHt4hQe/HnbRKhrphGscMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjdjMWE0Njc3ZWI3ODI2ZGFlNjlkZTAxYTY5OWI2MjAx ZDYyNDQwHhcNMjUxMjE2MDEwMDQyWhcNMjUxMjE3MDEwMDQyWjAzMTEwLwYDVQQD Eyg0ZTFkMjNhM2QzZmNjNWExMzU3YzM4OTRiODBmNWJhYTE2YzkwZDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3+Mb8zltJUnJQdOAPVHsZn6k4mV zxC4XAmV3qz2tGrGSDy9sJwSCvFQ7usUWtZoD8DAo1AoYAslFfgTl1c1Ji53eyp4 1y++ocjWyj2mY6wWh/wbozSGxwR9tzYCtt0KhPxt6hslNTLILsoo2gXs0iBqsL/3 IaFOujGmgtvQnW3CnCxhUL0BZHfQYG4GMTNsQHwxyg9G3UXvjINFYGnMm/dUY8Kx +58qLG/CAT7mpC4RejIJbkX4zhbJyARSxnNS/O21EVwFD59dwfFx184FbaKJjmd1 S84BZFtUdfy2rZw2IKqaUKmLTYDhmlaJeCEKniioPu0p1seRfGAoJxPrDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4dI6PT/MWhNXw4lLgPW6oWyQ1DMB8GA1UdIwQY MBaAFEn3waRnfreCba5p3gGmmbYgHWJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS80ZGJkNjMtNzZiMS00YjAzLTlkZWEt NTBjMTZiZGQ1YzI0LzEvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS80ZGJkNjMtNzZiMS00YjAzLTlkZWEtNTBjMTZiZGQ1YzI0 LzEvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbY/6aOD 7HanTsxOylQjtZfispjSphWY472jdebofOAHxuSAf03siTcUrEoRNPBh32p6J9Ee 4n4/yDQDyUlie6OQ3GeLC6mbmZoXzsr9WJsQX2R/Au8sTwZfVD/SmcSyW6tqf52o mwaSHFYMBOItyPo/iz3Ng7ntqXhbtBXfzDo/E/JP+xd4L/iElCqsoWPuiC6r/2Qm XzU9ngqlIAMK7MejbpETM2nN8UpsobRnPsOfQ16yHs8cVVBX2WXGMmZWF+lCmQg7 +NnOMKoj8k7krj+Ki9HgaDVCN7glKj8nm+ZzSMspP18ynnVrWx7L9QOVbQclAFzP zAlf9i+njfxtIQ== -----END CERTIFICATE-----Generated at Tue Dec 16 03:12:33 2025 by rpki-client