This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft File: SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft (raw, json) Hash identifier: r4yR4XgOJMQDGfDw+z8AaE2B0+5jF0uvxaCm23hEAgA= Subject key identifier: 3A:EC:3F:78:D3:49:E1:D7:C7:E1:6C:F5:78:35:06:A6:39:27:11:A3 Authority key identifier: 49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31 Certificate issuer: /CN=49f2702d1a0726175e39af16974e5375dcaefc31 Certificate serial: 019B18A8CA7DA34ED0193BB13F1E4D6D9EB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft Manifest number: 16B5 Signing time: Sat 13 Dec 2025 17:01:13 +0000 Manifest this update: Sat 13 Dec 2025 17:01:13 +0000 Manifest next update: Sun 14 Dec 2025 17:01:13 +0000 Files and hashes: 1: SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl (hash: HycnlF6Cvyu4o8sedjI4QTH6vFuWC799pzNRtxJWKJE=) 2: YrgeNV0Q3t4Xw5uBv1-S6YoZvb0.roa (hash: j80OYLZ1mn+7VVYJkW8xMNJr5ib6X+eHYr4UT4vddFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:a8:ca:7d:a3:4e:d0:19:3b:b1:3f:1e:4d:6d:9e:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f2702d1a0726175e39af16974e5375dcaefc31 Validity Not Before: Dec 13 17:01:13 2025 GMT Not After : Dec 14 17:01:13 2025 GMT Subject: CN=3aec3f78d349e1d7c7e16cf5783506a6392711a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c2:f2:ff:ce:73:64:d8:84:58:3d:63:09:e3: d0:15:0d:3f:14:f2:cc:1c:e3:2c:04:49:77:cd:9d: e6:c5:04:9a:9f:de:01:e4:58:0f:42:a9:a7:f9:52: 30:0d:84:31:72:28:c3:f2:08:e6:0c:1f:2a:ee:2b: b5:e2:60:30:3f:77:a5:f6:71:38:23:1e:6e:2b:aa: 28:0f:b9:69:cb:70:27:5c:64:52:e4:51:b2:4f:74: 6a:f7:ea:b2:05:6b:d0:df:26:5b:c6:dc:ff:fc:d7: f8:14:6d:d3:0e:f4:56:d1:6f:c2:b4:33:9a:80:9c: d5:49:77:0d:60:b7:5c:7d:a2:ea:3f:99:44:36:fc: 59:95:c2:8c:21:2b:e7:b9:52:15:dd:34:b9:6c:c3: 6b:81:5f:a3:96:ca:65:9f:b3:13:e6:49:1f:ce:77: d9:93:a4:3a:16:52:0a:be:81:08:f2:ea:92:33:9c: e4:bd:61:57:5c:cc:db:b5:e4:82:b0:98:e6:39:6d: 74:e7:68:20:40:74:12:70:54:c1:64:3e:39:bc:a8: e7:24:07:5b:b2:ec:f9:ad:4d:d9:2b:90:07:c0:15: d0:28:fe:b9:fa:29:9e:e2:d4:a0:7c:c3:ff:e1:c2: 03:58:92:8f:e2:bd:56:62:63:69:52:ad:2b:bb:94: 9b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EC:3F:78:D3:49:E1:D7:C7:E1:6C:F5:78:35:06:A6:39:27:11:A3 X509v3 Authority Key Identifier: keyid:49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:50:f6:4d:27:c0:14:bb:0d:f2:0e:3a:ea:31:d7:e8:41:c9: a2:a0:b3:37:47:1c:85:25:7a:b7:4b:40:d6:01:1d:ca:52:89: fe:48:47:c0:92:ff:5d:77:4d:0b:da:81:59:5a:37:b2:36:6d: 8a:e2:3b:dc:64:39:df:85:35:bf:a0:4f:ab:d6:0c:0e:04:b0: ed:71:49:2d:9c:16:9a:03:22:ad:eb:36:de:9c:73:26:03:3c: 56:88:1d:48:72:2c:33:ed:64:aa:73:12:17:1b:da:c8:ee:d6: b7:a2:b0:b4:18:27:96:f4:65:d2:27:cc:9f:31:14:1e:08:b6: 96:66:9a:bc:d6:3d:a9:b0:39:db:5f:fa:f4:e8:08:1b:44:3d: c3:55:48:9a:b3:ec:cd:98:cf:bf:62:8f:7e:f6:20:7c:86:ee: 15:b4:7c:65:5a:5b:ae:b0:7a:11:62:a8:fa:cd:43:ab:91:d2: dd:71:22:1f:1a:fc:e5:56:a4:12:8e:36:34:d0:b5:11:d2:28: c6:c7:1d:b8:35:2d:8d:8f:07:52:3b:20:db:87:ce:e1:29:8f: a2:98:00:be:07:cf:d4:47:3c:e6:f5:66:43:20:12:7c:50:4d: 48:8a:05:4b:0c:a0:8d:10:df:50:7f:fc:c9:e5:4f:05:7a:35: 55:4c:ee:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYqMp9o07QGTuxPx5NbZ61MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjI3MDJkMWEwNzI2MTc1ZTM5YWYxNjk3NGU1Mzc1ZGNh ZWZjMzEwHhcNMjUxMjEzMTcwMTEzWhcNMjUxMjE0MTcwMTEzWjAzMTEwLwYDVQQD EygzYWVjM2Y3OGQzNDllMWQ3YzdlMTZjZjU3ODM1MDZhNjM5MjcxMWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsLy/85zZNiEWD1jCePQFQ0/FPLM HOMsBEl3zZ3mxQSan94B5FgPQqmn+VIwDYQxcijD8gjmDB8q7iu14mAwP3el9nE4 Ix5uK6ooD7lpy3AnXGRS5FGyT3Rq9+qyBWvQ3yZbxtz//Nf4FG3TDvRW0W/CtDOa gJzVSXcNYLdcfaLqP5lENvxZlcKMISvnuVIV3TS5bMNrgV+jlspln7MT5kkfznfZ k6Q6FlIKvoEI8uqSM5zkvWFXXMzbteSCsJjmOW1052ggQHQScFTBZD45vKjnJAdb suz5rU3ZK5AHwBXQKP65+ime4tSgfMP/4cIDWJKP4r1WYmNpUq0ru5SbLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrsP3jTSeHXx+Fs9Xg1BqY5JxGjMB8GA1UdIwQY MBaAFEnycC0aByYXXjmvFpdOU3XcrvwxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZKd0xSb0hKaGRlT2E4V2wwNVRkZHl1X0RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9jZjIzZTctNzNiZS00ZTMwLWE5ZTgt M2QxYTBlYmQwZjU5LzEvU2ZKd0xSb0hKaGRlT2E4V2wwNVRkZHl1X0RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9jZjIzZTctNzNiZS00ZTMwLWE5ZTgtM2QxYTBlYmQwZjU5 LzEvU2ZKd0xSb0hKaGRlT2E4V2wwNVRkZHl1X0RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFFD2TSfA FLsN8g466jHX6EHJoqCzN0cchSV6t0tA1gEdylKJ/khHwJL/XXdNC9qBWVo3sjZt iuI73GQ534U1v6BPq9YMDgSw7XFJLZwWmgMires23pxzJgM8VogdSHIsM+1kqnMS FxvayO7Wt6KwtBgnlvRl0ifMnzEUHgi2lmaavNY9qbA521/69OgIG0Q9w1VImrPs zZjPv2KPfvYgfIbuFbR8ZVpbrrB6EWKo+s1Dq5HS3XEiHxr85VakEo42NNC1EdIo xscduDUtjY8HUjsg24fO4SmPopgAvgfP1Ec85vVmQyASfFBNSIoFSwygjRDfUH/8 yeVPBXo1VUzuRA== -----END CERTIFICATE-----Generated at Sun Dec 14 00:02:36 2025 by rpki-client