This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft File: SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft (raw, json) Hash identifier: ZvYHihzz69XL7AybVoyES3CcARILLvA5SzJUWoQQfW0= Subject key identifier: 9A:48:09:AA:AB:A2:5F:18:76:B5:32:95:1C:44:62:0D:85:6F:A5:87 Authority key identifier: 48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C Certificate issuer: /CN=485375191d1c2e50982108fdd407bbcf73e9795c Certificate serial: 019B1A29260AC6F41D6BAEBFF787E9FA57F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft Manifest number: 1142 Signing time: Sun 14 Dec 2025 00:01:02 +0000 Manifest this update: Sun 14 Dec 2025 00:01:02 +0000 Manifest next update: Mon 15 Dec 2025 00:01:02 +0000 Files and hashes: 1: JUMv7Yi2cpE5n4jH_daU8-Wkj_s.roa (hash: 8Ur2YBrwEIHwiqas+AFAXGNfkZXPANsLJAnLoARlVGk=) 2: SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl (hash: J79+sse2th25geYrn08iOHHMyMSCHRL1h+0DplKaf4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:26:0a:c6:f4:1d:6b:ae:bf:f7:87:e9:fa:57:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485375191d1c2e50982108fdd407bbcf73e9795c Validity Not Before: Dec 14 00:01:02 2025 GMT Not After : Dec 15 00:01:02 2025 GMT Subject: CN=9a4809aaaba25f1876b532951c44620d856fa587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3a:72:a0:a0:f9:b2:cd:68:b3:f6:c3:ee:a0: d8:38:76:95:b4:f7:02:bc:51:12:87:76:56:7d:80: 54:f4:84:fa:54:d6:7a:bd:f6:49:4a:54:82:1c:06: bf:b3:61:8b:af:29:fe:a5:bb:99:6b:35:ee:7c:38: a4:04:82:aa:f5:36:b7:e2:94:c9:e4:c5:93:c5:16: 8c:f2:bd:c2:76:09:c1:2d:3a:fb:7d:23:7b:63:17: 08:13:43:8b:4d:6c:ba:82:c0:89:f4:42:5f:14:08: 72:28:3c:aa:94:14:6e:21:5d:54:8d:a1:61:d8:ae: 1a:9c:d4:fa:a0:14:c5:39:78:54:6e:de:2a:67:db: 09:a1:77:81:cf:49:a3:5a:c4:92:33:9b:1a:97:a1: 8d:ab:39:a2:af:52:ca:df:82:50:d5:58:6d:17:8d: 5a:e4:2b:e4:46:cb:e9:3e:c3:b4:a5:b7:f0:b7:98: aa:74:21:e2:73:c0:f5:d9:4c:2d:9d:40:67:69:29: 5d:6c:f0:fe:79:a1:c1:c4:35:9a:75:a2:d4:d1:a0: c8:27:72:a0:08:94:93:cd:7c:c5:a0:7c:7c:d0:46: a3:04:2b:f3:e6:92:49:7e:21:07:9f:31:71:25:56: 81:91:5d:6e:62:45:86:1e:d8:18:8a:b6:55:42:d3: 17:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:48:09:AA:AB:A2:5F:18:76:B5:32:95:1C:44:62:0D:85:6F:A5:87 X509v3 Authority Key Identifier: keyid:48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:50:99:95:08:6a:2b:17:cf:2f:13:61:fa:a6:4a:e8:2c:13: 15:0f:77:37:a7:e1:02:6f:6d:59:1a:10:56:95:7c:32:a5:fc: 2b:ae:a9:34:79:1f:e6:7d:65:55:ae:60:86:95:62:6e:56:53: af:de:ec:a0:7f:bc:ce:44:2b:a6:f2:52:e4:37:84:a2:9c:36: ab:0b:99:a7:0c:33:4f:07:0a:36:9b:e9:15:88:24:24:02:b9: b3:39:36:6e:0e:32:75:c2:38:fe:f4:ed:09:5f:9c:b7:b5:33: e6:89:f6:12:24:59:04:5f:95:3f:79:66:8a:ff:3b:30:ea:28: bd:2e:b0:b0:f1:13:2e:8c:37:17:71:90:cb:c9:67:a8:8e:c6: 10:fc:5c:7b:9c:ea:93:c7:6f:5c:56:0f:9b:20:65:dc:cf:a2: 60:9d:59:9d:22:74:eb:a3:cd:c6:38:cb:ee:44:6c:a7:29:8d: 54:c0:d7:90:5f:86:45:f2:60:ba:10:08:ad:20:11:60:2c:84: ce:1d:b1:a5:09:36:1b:c2:24:82:9a:21:54:e5:99:4c:6d:f7: 82:f2:7f:bb:70:26:30:36:89:91:a9:a1:86:cd:3c:fb:d2:d7: 8a:21:ed:1c:a8:7d:88:14:9d:f8:70:e3:04:32:2f:33:cc:e9: bf:83:d5:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKSYKxvQda66/94fp+lf3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NTM3NTE5MWQxYzJlNTA5ODIxMDhmZGQ0MDdiYmNmNzNl OTc5NWMwHhcNMjUxMjE0MDAwMTAyWhcNMjUxMjE1MDAwMTAyWjAzMTEwLwYDVQQD Eyg5YTQ4MDlhYWFiYTI1ZjE4NzZiNTMyOTUxYzQ0NjIwZDg1NmZhNTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTpyoKD5ss1os/bD7qDYOHaVtPcC vFESh3ZWfYBU9IT6VNZ6vfZJSlSCHAa/s2GLryn+pbuZazXufDikBIKq9Ta34pTJ 5MWTxRaM8r3CdgnBLTr7fSN7YxcIE0OLTWy6gsCJ9EJfFAhyKDyqlBRuIV1UjaFh 2K4anNT6oBTFOXhUbt4qZ9sJoXeBz0mjWsSSM5sal6GNqzmir1LK34JQ1VhtF41a 5CvkRsvpPsO0pbfwt5iqdCHic8D12UwtnUBnaSldbPD+eaHBxDWadaLU0aDIJ3Kg CJSTzXzFoHx80EajBCvz5pJJfiEHnzFxJVaBkV1uYkWGHtgYirZVQtMXfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpICaqrol8YdrUylRxEYg2Fb6WHMB8GA1UdIwQY MBaAFEhTdRkdHC5QmCEI/dQHu89z6XlcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0ZOMUdSMGNMbENZSVFqOTFBZTd6M1BwZVZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iMjYwOWItYWUzOS00MjlmLWE1MDUt NmViZmY2NGJjYTFjLzEvU0ZOMUdSMGNMbENZSVFqOTFBZTd6M1BwZVZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iMjYwOWItYWUzOS00MjlmLWE1MDUtNmViZmY2NGJjYTFj LzEvU0ZOMUdSMGNMbENZSVFqOTFBZTd6M1BwZVZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1CZlQhq KxfPLxNh+qZK6CwTFQ93N6fhAm9tWRoQVpV8MqX8K66pNHkf5n1lVa5ghpViblZT r97soH+8zkQrpvJS5DeEopw2qwuZpwwzTwcKNpvpFYgkJAK5szk2bg4ydcI4/vTt CV+ct7Uz5on2EiRZBF+VP3lmiv87MOoovS6wsPETLow3F3GQy8lnqI7GEPxce5zq k8dvXFYPmyBl3M+iYJ1ZnSJ066PNxjjL7kRspymNVMDXkF+GRfJguhAIrSARYCyE zh2xpQk2G8IkgpohVOWZTG33gvJ/u3AmMDaJkamhhs08+9LXiiHtHKh9iBSd+HDj BDIvM8zpv4PVzg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:52:38 2025 by rpki-client