This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft File: SfJiM_W7QibCp6e5ADAI0Z40eFs.mft (raw, json) Hash identifier: FU/09mYD57oE8wo3fZYwsKU9ekPDIT5/e8flsuYvGjM= Subject key identifier: 59:CA:75:7A:2A:B8:A6:23:67:08:C5:9C:AC:4F:B2:CB:E5:4B:ED:52 Authority key identifier: 49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B Certificate issuer: /CN=49f26233f5bb4226c2a7a7b9003008d19e34785b Certificate serial: 019B5C40012AA6FA0FAD5D0B8DB11C615B87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft Manifest number: 1327 Signing time: Fri 26 Dec 2025 20:00:56 +0000 Manifest this update: Fri 26 Dec 2025 20:00:56 +0000 Manifest next update: Sat 27 Dec 2025 20:00:56 +0000 Files and hashes: 1: SfJiM_W7QibCp6e5ADAI0Z40eFs.crl (hash: 4rTkKHwoZJhkHmK2VcrF+7s7PcN9lhS0w3YMlOH8Yio=) 2: TmwIzb5OMEe4RHPaC68IjB6na0k.roa (hash: dW1pEtOcDuseosGnHRvKaebls+Ju6AZ6FoBVPM8QbJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:40:01:2a:a6:fa:0f:ad:5d:0b:8d:b1:1c:61:5b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f26233f5bb4226c2a7a7b9003008d19e34785b Validity Not Before: Dec 26 20:00:56 2025 GMT Not After : Dec 27 20:00:56 2025 GMT Subject: CN=59ca757a2ab8a6236708c59cac4fb2cbe54bed52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5e:ef:e7:c4:92:b7:19:91:13:4f:c5:bd:5b: 09:a0:97:ac:e8:14:c4:1e:c0:93:ee:e8:2e:14:3a: 1a:42:d6:98:9c:91:b9:82:f4:91:ce:5d:ba:28:45: 80:cd:d4:e7:50:7e:6e:0a:e9:ce:88:a6:67:42:81: 0d:ec:e8:1a:dd:43:33:d1:a4:95:69:25:97:85:b0: 0c:7e:12:48:3b:bb:37:4a:ef:8c:d2:8c:88:dc:60: d6:ef:4d:dc:6a:8b:94:19:ed:42:cb:9f:f4:30:09: 42:b7:ae:f9:4b:22:1b:0a:34:a3:3e:7b:42:35:0f: 36:c0:4a:11:c1:d6:53:04:ae:2e:bf:4d:8c:24:24: 54:51:d4:ac:90:8c:50:49:aa:0d:d0:53:96:80:20: 7d:cf:56:10:39:4e:6e:0a:fa:7d:dc:89:69:41:a3: d1:b8:06:47:30:5d:09:be:67:51:db:e9:0d:f9:64: b7:75:28:d2:b6:ca:7e:76:30:89:66:7e:8c:a5:f8: a8:08:ab:3a:62:d3:e4:fb:75:35:bf:6f:3a:46:e6: 5d:a5:1d:bb:0c:83:0b:44:da:3d:22:36:f2:0b:02: 4c:0d:ee:55:59:4e:97:a2:d2:5d:9c:08:94:6b:34: 6a:a9:71:84:d7:47:08:87:c3:eb:8a:55:9c:2d:84: 81:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CA:75:7A:2A:B8:A6:23:67:08:C5:9C:AC:4F:B2:CB:E5:4B:ED:52 X509v3 Authority Key Identifier: keyid:49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c8:0c:33:9d:07:bb:04:50:16:dd:da:e3:8f:ff:de:54:b9: 62:5f:e5:ac:c2:3d:d1:4a:1f:44:51:14:47:26:bf:ff:1c:e4: b1:8b:0c:11:ea:08:8f:b2:f0:60:31:a3:be:0a:98:de:9e:73: 6a:c5:e7:9b:99:0e:b6:aa:35:af:6b:f6:bf:88:83:f6:b5:69: 14:ba:c1:44:be:51:c5:13:bc:d2:be:41:58:8d:76:a1:6e:40: 89:88:eb:a9:ad:2f:f4:0e:86:fb:2b:c3:7b:33:20:e8:12:c4: 90:23:e8:fe:7b:09:07:5a:fb:30:b0:fb:e6:e5:88:c3:7d:fa: ad:86:4f:2a:62:0b:b3:d0:19:5c:95:83:35:70:d8:e1:ff:21: 94:d3:75:ca:3c:05:06:96:86:b4:88:9e:79:ec:d2:6f:81:4e: 93:f7:58:e6:82:89:e3:15:15:e0:9d:0e:27:02:0d:61:e6:68: ce:4a:52:8e:f1:fe:dd:87:66:0a:ba:bc:12:19:62:d6:aa:08: 5c:d9:de:7a:d0:dc:37:5b:c3:8b:e4:83:91:23:c3:d1:84:95: 85:71:6a:a1:96:4b:ef:15:cc:39:61:88:e3:d3:04:c5:23:28: 68:be:f7:04:dd:e3:13:08:02:4f:b7:73:07:de:45:b7:1c:51: ea:34:4f:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcQAEqpvoPrV0LjbEcYVuHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjI2MjMzZjViYjQyMjZjMmE3YTdiOTAwMzAwOGQxOWUz NDc4NWIwHhcNMjUxMjI2MjAwMDU2WhcNMjUxMjI3MjAwMDU2WjAzMTEwLwYDVQQD Eyg1OWNhNzU3YTJhYjhhNjIzNjcwOGM1OWNhYzRmYjJjYmU1NGJlZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V7v58SStxmRE0/FvVsJoJes6BTE HsCT7uguFDoaQtaYnJG5gvSRzl26KEWAzdTnUH5uCunOiKZnQoEN7Oga3UMz0aSV aSWXhbAMfhJIO7s3Su+M0oyI3GDW703caouUGe1Cy5/0MAlCt675SyIbCjSjPntC NQ82wEoRwdZTBK4uv02MJCRUUdSskIxQSaoN0FOWgCB9z1YQOU5uCvp93IlpQaPR uAZHMF0JvmdR2+kN+WS3dSjStsp+djCJZn6MpfioCKs6YtPk+3U1v286RuZdpR27 DIMLRNo9IjbyCwJMDe5VWU6XotJdnAiUazRqqXGE10cIh8PrilWcLYSBFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFnKdXoquKYjZwjFnKxPssvlS+1SMB8GA1UdIwQY MBaAFEnyYjP1u0ImwqenuQAwCNGeNHhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZKaU1fVzdRaWJDcDZlNUFEQUkwWjQwZUZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZmRmNmQtY2JhNi00NDk0LTkwMjgt NTc3ZTk5MzViZDc1LzEvU2ZKaU1fVzdRaWJDcDZlNUFEQUkwWjQwZUZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84ZmRmNmQtY2JhNi00NDk0LTkwMjgtNTc3ZTk5MzViZDc1 LzEvU2ZKaU1fVzdRaWJDcDZlNUFEQUkwWjQwZUZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsgMM50H uwRQFt3a44//3lS5Yl/lrMI90UofRFEURya//xzksYsMEeoIj7LwYDGjvgqY3p5z asXnm5kOtqo1r2v2v4iD9rVpFLrBRL5RxRO80r5BWI12oW5AiYjrqa0v9A6G+yvD ezMg6BLEkCPo/nsJB1r7MLD75uWIw336rYZPKmILs9AZXJWDNXDY4f8hlNN1yjwF BpaGtIieeezSb4FOk/dY5oKJ4xUV4J0OJwINYeZozkpSjvH+3YdmCrq8Ehli1qoI XNneetDcN1vDi+SDkSPD0YSVhXFqoZZL7xXMOWGI49MExSMoaL73BN3jEwgCT7dz B95FtxxR6jRPyw== -----END CERTIFICATE-----Generated at Fri Dec 26 23:04:03 2025 by rpki-client