This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft File: SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft (raw, json) Hash identifier: NwQ689Y6sXHPC2ZS5CLKt90Y7RR06bhxcWhLPurFx9Q= Subject key identifier: D3:D7:41:74:DB:51:93:A9:6C:03:E5:C9:0D:D0:14:EE:C1:ED:C2:FB Authority key identifier: 49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61 Certificate issuer: /CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61 Certificate serial: 019B217498CE39BA012E5FF68C7B612F990E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft Manifest number: 170B Signing time: Mon 15 Dec 2025 10:00:47 +0000 Manifest this update: Mon 15 Dec 2025 10:00:47 +0000 Manifest next update: Tue 16 Dec 2025 10:00:47 +0000 Files and hashes: 1: 8J4KQUM3SG2tOx7Qy412tzcCyVE.roa (hash: WDRfkd7NWCeGm5AnO0id+VmgIMVtNw9JsJNLGC4miyg=) 2: F3xqvw__Ry6FbR1QISJmpPzSw80.roa (hash: lZUN0lo02iToEWBcU9heTh5ikClvs/fsdLuL0ZtWzgs=) 3: SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl (hash: 71mzrKKKNRPTT+yduRF+swaoBqoVnoiEHv+JRnwVCQo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:98:ce:39:ba:01:2e:5f:f6:8c:7b:61:2f:99:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61 Validity Not Before: Dec 15 10:00:47 2025 GMT Not After : Dec 16 10:00:47 2025 GMT Subject: CN=d3d74174db5193a96c03e5c90dd014eec1edc2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:56:0f:05:81:3a:c5:51:fd:be:f2:a1:3e:7e: 05:4d:63:f4:c7:60:2d:0f:7d:38:30:0f:59:ab:6c: 0f:5d:06:c1:6e:bd:08:b4:c5:a9:e3:ae:c9:ec:70: 84:84:0d:73:38:4e:0d:32:a7:75:67:c9:d4:f8:42: b9:d2:03:51:e1:a3:3b:60:00:1f:78:ea:5a:82:44: 5b:e5:df:55:ef:b2:d5:a0:16:61:5a:db:4c:60:91: 81:b0:9f:4a:ca:75:f0:61:2a:6b:2b:3b:60:48:a8: b7:61:0a:43:2a:00:82:d5:d8:9c:55:a7:bb:20:0f: cb:6a:3e:3a:d5:de:5d:f5:54:26:f0:a8:d9:44:4c: 8e:51:82:32:e4:1f:02:6d:a4:43:66:c0:58:63:13: 9c:bf:b2:35:f0:57:ec:2a:43:d6:59:92:b6:30:f3: 20:45:4a:7f:58:51:92:fd:d2:32:0f:0f:a4:b9:47: f9:3c:e0:2e:41:2e:5a:25:e4:01:1b:9d:d1:6e:b8: 8b:eb:ca:e2:41:fb:aa:98:37:ce:1a:2b:e1:2e:bf: e9:57:a5:2b:89:d6:70:5c:33:b7:33:e7:a1:f9:a0: b8:d4:4a:26:05:0f:7a:92:08:6b:b0:d5:05:40:d4: 52:ce:19:a8:9d:6c:f2:25:f5:c0:d4:b4:b2:29:e5: 27:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D7:41:74:DB:51:93:A9:6C:03:E5:C9:0D:D0:14:EE:C1:ED:C2:FB X509v3 Authority Key Identifier: keyid:49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:d5:61:3d:64:20:d3:07:dd:3f:bd:6a:be:9c:94:8d:c4:9c: fa:5b:42:54:72:d1:67:53:66:f7:2f:ce:6e:f1:77:ce:e1:ff: 2d:43:f6:6c:db:ce:41:8b:06:7e:44:f9:d7:4b:23:c6:ef:f7: b1:a2:a3:e1:c5:43:3e:81:c1:42:58:fd:f4:98:e5:5b:cc:8a: 22:5b:b8:14:0e:59:54:da:a7:d3:04:a8:d5:67:78:c3:13:b5: 5e:a7:26:6e:61:86:df:8b:4a:d2:6f:a6:ff:2a:05:00:36:b1: e6:51:cf:28:bc:57:2a:7b:8d:21:6c:35:82:04:fe:9b:c2:c3: 8d:c6:3f:7f:cf:e0:31:16:0c:43:6e:e1:92:0e:88:87:ad:32: 37:65:fb:11:a3:6b:73:15:a9:33:c3:a3:bd:17:5f:e1:5b:98: 23:94:1a:0f:eb:a2:b1:b6:b6:ce:b6:0e:7a:51:96:61:38:c0: 6b:20:9b:1d:39:1b:a8:e7:db:4b:9b:1e:ed:89:c9:ed:64:6f: 16:d3:48:ad:d5:7f:81:0e:c1:59:51:50:d5:c8:b8:b8:9e:83: 55:94:89:4b:5a:5c:1e:8a:a9:2d:b1:01:10:f1:b4:27:a4:78: 33:61:01:af:2d:25:d3:1e:1a:d9:b5:4b:87:ae:92:50:c4:12: 4c:bf:20:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdJjOOboBLl/2jHthL5kOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjM5ZDZjOGIyM2ZjZGMyMGU1MzE3NGU5MmZiM2Y1NmNh YThiNjEwHhcNMjUxMjE1MTAwMDQ3WhcNMjUxMjE2MTAwMDQ3WjAzMTEwLwYDVQQD EyhkM2Q3NDE3NGRiNTE5M2E5NmMwM2U1YzkwZGQwMTRlZWMxZWRjMmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFYPBYE6xVH9vvKhPn4FTWP0x2At D304MA9Zq2wPXQbBbr0ItMWp467J7HCEhA1zOE4NMqd1Z8nU+EK50gNR4aM7YAAf eOpagkRb5d9V77LVoBZhWttMYJGBsJ9KynXwYSprKztgSKi3YQpDKgCC1dicVae7 IA/Laj461d5d9VQm8KjZREyOUYIy5B8CbaRDZsBYYxOcv7I18FfsKkPWWZK2MPMg RUp/WFGS/dIyDw+kuUf5POAuQS5aJeQBG53RbriL68riQfuqmDfOGivhLr/pV6Ur idZwXDO3M+eh+aC41EomBQ96kghrsNUFQNRSzhmonWzyJfXA1LSyKeUnPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPXQXTbUZOpbAPlyQ3QFO7B7cL7MB8GA1UdIwQY MBaAFEnznWyLI/zcIOUxdOkvs/VsqothMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZPZGJJc2pfTndnNVRGMDZTLXo5V3lxaTJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xNjQ2MGYtZTQ5OC00ZjdiLTliOTAt N2E1MDQzYzkxOGY5LzEvU2ZPZGJJc2pfTndnNVRGMDZTLXo5V3lxaTJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8xNjQ2MGYtZTQ5OC00ZjdiLTliOTAtN2E1MDQzYzkxOGY5 LzEvU2ZPZGJJc2pfTndnNVRGMDZTLXo5V3lxaTJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdVhPWQg 0wfdP71qvpyUjcSc+ltCVHLRZ1Nm9y/ObvF3zuH/LUP2bNvOQYsGfkT510sjxu/3 saKj4cVDPoHBQlj99JjlW8yKIlu4FA5ZVNqn0wSo1Wd4wxO1XqcmbmGG34tK0m+m /yoFADax5lHPKLxXKnuNIWw1ggT+m8LDjcY/f8/gMRYMQ27hkg6Ih60yN2X7EaNr cxWpM8OjvRdf4VuYI5QaD+uisba2zrYOelGWYTjAayCbHTkbqOfbS5se7YnJ7WRv FtNIrdV/gQ7BWVFQ1ci4uJ6DVZSJS1pcHoqpLbEBEPG0J6R4M2EBry0l0x4a2bVL h66SUMQSTL8gAQ== -----END CERTIFICATE-----Generated at Mon Dec 15 19:57:02 2025 by rpki-client