This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft File: SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json) Hash identifier: LeQ9PhJhSFM+zo2eOGa0t41iTcQN5EC0jkb+Ci+uhnA= Subject key identifier: 97:5F:22:69:C3:68:CB:99:DA:62:B8:7B:14:E3:51:4D:CF:5F:B0:F4 Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a Certificate serial: 019B0CA4868656B0DBEE9097653C6F28BE56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft Manifest number: 074E Signing time: Thu 11 Dec 2025 09:01:07 +0000 Manifest this update: Thu 11 Dec 2025 09:01:07 +0000 Manifest next update: Fri 12 Dec 2025 09:01:07 +0000 Files and hashes: 1: 3klZTNM9YhJqZUNp3PJkFRczFX8.roa (hash: OyXgZ5l4rO5Wt2TcoTvX9gJZ0hgPAdu2wTU0n6/gZoU=) 2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: nTncJcayug6HDugIQvo5q1GZWSxg3O8hVAhNwvFUIXg=) 3: W0AAJRLr6gi2r74kS95DxTYGfTw.roa (hash: MH+HQqYFMBeGJJqR0jYHA1u1MAdvWa+AHHutk6W2MvA=) 4: r0aCHKZqLV95OV5gwTfYdhHbA6Q.roa (hash: xjRrpFDO8g9sZNIp8GQ1hogAG1em04ZcPXgm2d8N7a8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 09:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:a4:86:86:56:b0:db:ee:90:97:65:3c:6f:28:be:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a Validity Not Before: Dec 11 09:01:07 2025 GMT Not After : Dec 12 09:01:07 2025 GMT Subject: CN=975f2269c368cb99da62b87b14e3514dcf5fb0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:74:67:b5:d5:f3:07:a0:3f:61:6d:f8:c9:06: 6f:c2:98:c8:59:2e:02:85:ac:d5:cc:f6:1e:30:1c: 13:cc:24:c6:f9:13:95:40:45:07:d4:6d:00:f1:65: c3:21:67:5c:fe:63:6c:10:f3:b4:a7:0e:02:2a:47: 43:2d:99:4a:46:d9:9c:93:14:cc:ca:c7:4a:b2:12: cf:da:b0:38:21:fd:81:01:9d:cb:12:f0:dd:2f:67: 66:87:e4:00:3a:82:34:05:38:eb:f9:a0:72:15:96: 15:d7:d7:a6:08:90:9f:14:0e:ae:23:4b:ff:f2:5d: 7e:3c:5c:56:4d:bf:b9:ee:60:44:96:a7:c4:03:15: 6a:70:c5:55:8a:3a:5c:bd:94:a4:40:31:d3:94:f3: 88:d2:6e:7d:d9:4b:1e:13:39:2a:50:2d:94:16:da: 32:c2:3a:2a:d6:e6:2c:35:9e:4b:c5:76:54:f3:e9: 9c:ef:59:d5:7b:00:11:6f:70:ef:05:d0:f4:06:15: 07:9a:cb:ba:29:53:a1:32:8e:67:8d:19:6c:59:44: 1d:e9:4d:a3:e5:eb:9a:ba:20:36:2c:80:07:fb:32: 90:49:95:ba:1a:67:6e:46:cd:31:3b:64:13:0e:b0: 06:f9:f6:38:94:04:24:f1:8e:47:b1:0c:c2:4a:37: 00:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5F:22:69:C3:68:CB:99:DA:62:B8:7B:14:E3:51:4D:CF:5F:B0:F4 X509v3 Authority Key Identifier: keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:7b:bb:19:a0:7a:62:d6:45:2c:8d:67:c1:c8:8e:57:61:2b: 3a:e6:b8:cc:69:63:f9:41:8f:79:70:0c:4f:03:dd:73:85:af: 6d:f7:d2:98:31:03:39:be:51:1e:3b:08:fd:d1:79:ca:ba:8c: 19:ac:ba:3f:aa:06:3f:43:c1:70:83:96:30:48:c9:ac:ce:42: 71:e3:44:70:a6:da:7a:87:18:db:62:88:e3:67:b9:03:23:b0: 82:3f:7c:78:cc:41:dc:2e:5d:e8:33:f3:fe:8e:d8:9b:26:af: ec:7c:7a:23:9b:cc:80:2a:10:2b:75:d0:7a:e1:c4:61:28:f1: 39:64:aa:fc:1b:ed:a9:7b:26:3b:40:c9:64:4c:7a:84:cf:e0: 77:d2:53:3b:8c:1b:9e:b2:b7:50:44:f3:4b:33:7a:86:c6:52: ad:21:12:77:f7:e3:e3:7e:d2:d7:cd:8c:1b:76:9f:67:a0:6d: bc:61:97:62:8d:9b:de:7e:26:e4:ab:76:6d:fc:99:29:30:02: 7e:12:eb:1e:bc:6b:47:eb:dc:11:55:36:10:d2:33:f7:e4:82: 49:51:8e:a8:fb:9b:ca:52:cb:55:0d:c4:24:85:e3:0a:a6:a0: 69:79:18:a6:5c:74:9b:01:cf:c4:08:19:00:4b:c9:e4:14:05: 1e:92:8b:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsMpIaGVrDb7pCXZTxvKL5WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NWRkYjY3OGM0YzBkMGM0ODhlZmQzYjgzNjcxNDIxODlm MzM1OGEwHhcNMjUxMjExMDkwMTA3WhcNMjUxMjEyMDkwMTA3WjAzMTEwLwYDVQQD Eyg5NzVmMjI2OWMzNjhjYjk5ZGE2MmI4N2IxNGUzNTE0ZGNmNWZiMGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXRntdXzB6A/YW34yQZvwpjIWS4C hazVzPYeMBwTzCTG+ROVQEUH1G0A8WXDIWdc/mNsEPO0pw4CKkdDLZlKRtmckxTM ysdKshLP2rA4If2BAZ3LEvDdL2dmh+QAOoI0BTjr+aByFZYV19emCJCfFA6uI0v/ 8l1+PFxWTb+57mBElqfEAxVqcMVVijpcvZSkQDHTlPOI0m592UseEzkqUC2UFtoy wjoq1uYsNZ5LxXZU8+mc71nVewARb3DvBdD0BhUHmsu6KVOhMo5njRlsWUQd6U2j 5euauiA2LIAH+zKQSZW6GmduRs0xO2QTDrAG+fY4lAQk8Y5HsQzCSjcARQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdfImnDaMuZ2mK4exTjUU3PX7D0MB8GA1UdIwQY MBaAFEhd22eMTA0MSI79O4NnFCGJ8zWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUt ZGViZmNkOWViMjBlLzEvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUtZGViZmNkOWViMjBl LzEvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXu7GaB6 YtZFLI1nwciOV2ErOua4zGlj+UGPeXAMTwPdc4WvbffSmDEDOb5RHjsI/dF5yrqM Gay6P6oGP0PBcIOWMEjJrM5CceNEcKbaeocY22KI42e5AyOwgj98eMxB3C5d6DPz /o7Ymyav7Hx6I5vMgCoQK3XQeuHEYSjxOWSq/BvtqXsmO0DJZEx6hM/gd9JTO4wb nrK3UETzSzN6hsZSrSESd/fj437S182MG3afZ6BtvGGXYo2b3n4m5Kt2bfyZKTAC fhLrHrxrR+vcEVU2ENIz9+SCSVGOqPubylLLVQ3EJIXjCqagaXkYplx0mwHPxAgZ AEvJ5BQFHpKLVw== -----END CERTIFICATE-----Generated at Thu Dec 11 15:08:36 2025 by rpki-client