This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft File: sf_ufb9_RWbqnjBUaywqLnM28vQ.mft (raw, json) Hash identifier: bXg3tqkOh9AEoW5X6tsAdNnz0mMq8w0lSaRnqMCD2oQ= Subject key identifier: 56:FA:B9:F4:5A:E2:A5:B2:C7:A7:3F:97:16:E2:90:F6:19:CC:C2:60 Authority key identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4 Certificate issuer: /CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4 Certificate serial: 019AF12D1EFC002C7D472C31730B72E5BFEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:00:57 +0000 Manifest this update: Sat 06 Dec 2025 01:00:57 +0000 Manifest next update: Sun 07 Dec 2025 01:00:57 +0000 Files and hashes: 1: DNhIHCVoBglUmAVlCkJ5G-L36yg.roa (hash: 31245JAwO/UkCcpQa4UanpWYM+ItoRpnBX/McoOb5tQ=) 2: FfGHuB6Qf_cay6wn_ZrJC4SPGUg.roa (hash: DYs9L8yM8et51Ym0pIsTXdtN2ADOJkVDLkBPalnCV9A=) 3: fIN0CuyWjIdLGQA-5hoaOxgsCEU.roa (hash: NyCjKtY4yfk/Nsn/Ck5PkA1Ia9CEltJSbyJgOPEbXmk=) 4: iipSuvIjR47VudmgbPEDa9JY9oY.roa (hash: UNIVy+xZ2R8yR9G0m1INDMtIUCeoWGaMGRk0QvHxxTQ=) 5: sf_ufb9_RWbqnjBUaywqLnM28vQ.crl (hash: UQ+IUO1+vMXEOEmBhf3RwVMBiMPN/HfOyvXkYSPePYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:1e:fc:00:2c:7d:47:2c:31:73:0b:72:e5:bf:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4 Validity Not Before: Dec 6 01:00:57 2025 GMT Not After : Dec 7 01:00:57 2025 GMT Subject: CN=56fab9f45ae2a5b2c7a73f9716e290f619ccc260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:76:21:72:08:41:c2:fc:78:be:36:1d:aa:de: 35:d6:e5:09:0b:37:37:c9:08:f7:4b:de:5f:b0:d7: 58:e7:8e:62:41:24:4a:50:45:ab:0b:4e:84:04:20: 05:cb:d1:a1:95:93:a6:68:e3:8e:a5:98:0c:7c:1a: a0:a2:fc:ce:a1:26:f2:f6:80:54:d9:ba:90:e7:5e: 80:db:4e:80:45:19:b5:51:76:98:55:47:1b:bc:d1: 9e:cf:f3:28:4e:87:06:b6:c4:58:07:ff:ac:63:19: 59:a6:67:99:f0:01:b1:dc:34:47:51:fb:b3:0b:15: f8:30:82:19:4d:a6:e4:a8:4d:63:bb:3c:05:9c:98: 14:0e:a0:92:a1:04:77:f5:c6:df:65:04:a1:ee:57: da:80:5b:7b:75:3a:7d:f5:8f:28:f8:cf:d7:5f:5e: cf:96:0c:bc:9a:c6:cb:1a:fb:80:3c:8a:d6:a3:80: d9:9b:ec:0e:b2:bc:18:dd:25:e6:ed:0f:8d:66:51: 99:c1:17:da:cf:b7:5e:2b:00:94:fd:90:d7:0e:ba: f4:c3:b3:54:e4:e3:71:8b:43:68:95:48:59:aa:f8: fa:f2:e0:17:2a:9b:a8:4c:3e:21:7f:bb:2b:19:d3: ca:4d:98:d0:c2:10:8a:4d:bd:4b:9e:35:57:16:79: 26:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FA:B9:F4:5A:E2:A5:B2:C7:A7:3F:97:16:E2:90:F6:19:CC:C2:60 X509v3 Authority Key Identifier: keyid:B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:bb:9b:4a:f5:d7:93:0f:aa:1b:37:98:ee:16:86:d5:43:ff: 8b:2e:e8:76:c8:b0:1c:9d:a0:72:57:a6:a7:5d:c3:8e:2a:7d: 37:a5:c5:8d:bc:8c:2c:98:1a:b8:89:4e:72:a9:e3:e1:16:74: bc:50:c5:f6:06:6a:35:c1:02:b8:85:38:7b:5d:57:62:f9:3e: 55:b5:53:25:f4:d3:96:8a:84:aa:8c:b7:36:2a:72:5f:75:38: 6d:bc:f7:56:60:3c:4f:f1:f2:42:ac:ce:df:c7:f3:e7:6f:cb: ae:d1:88:da:af:82:72:3a:0a:09:4d:8d:6c:b1:09:de:75:d0: cc:56:e8:95:d4:9b:ab:d9:78:99:3a:6d:e2:48:21:d2:3d:df: fa:69:ee:ad:92:28:42:71:51:25:5c:4e:b4:81:4e:c1:b6:2e: 4d:8f:7f:2c:92:11:05:49:6c:22:47:ce:71:63:e0:ec:1f:61: 5a:1a:70:95:f9:eb:55:0c:36:63:c1:5a:85:ba:51:5a:e5:ee: ea:85:d4:61:80:63:2f:68:e1:07:58:96:b1:00:93:5f:d8:0b: 15:ba:7f:6a:7a:b5:f4:b7:82:0b:cc:b0:da:98:1c:29:64:27: 3c:47:70:67:39:40:ab:66:58:1a:70:8d:2a:66:22:3c:0d:63: 39:e6:b2:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLR78ACx9Rywxcwty5b/sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZmZlZTdkYmY3ZjQ1NjZlYTllMzA1NDZiMmMyYTJlNzMz NmYyZjQwHhcNMjUxMjA2MDEwMDU3WhcNMjUxMjA3MDEwMDU3WjAzMTEwLwYDVQQD Eyg1NmZhYjlmNDVhZTJhNWIyYzdhNzNmOTcxNmUyOTBmNjE5Y2NjMjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nYhcghBwvx4vjYdqt411uUJCzc3 yQj3S95fsNdY545iQSRKUEWrC06EBCAFy9GhlZOmaOOOpZgMfBqgovzOoSby9oBU 2bqQ516A206ARRm1UXaYVUcbvNGez/MoTocGtsRYB/+sYxlZpmeZ8AGx3DRHUfuz CxX4MIIZTabkqE1juzwFnJgUDqCSoQR39cbfZQSh7lfagFt7dTp99Y8o+M/XX17P lgy8msbLGvuAPIrWo4DZm+wOsrwY3SXm7Q+NZlGZwRfaz7deKwCU/ZDXDrr0w7NU 5ONxi0NolUhZqvj68uAXKpuoTD4hf7srGdPKTZjQwhCKTb1LnjVXFnkmGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFb6ufRa4qWyx6c/lxbikPYZzMJgMB8GA1UdIwQY MBaAFLH/7n2/f0Vm6p4wVGssKi5zNvL0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2ZfdWZiOV9SV2JxbmpCVWF5d3FMbk0yOHZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yZmNiYjItYzNjMC00YjFlLThhZDUt N2Y1Zjc4MzQ2ZDZmLzEvc2ZfdWZiOV9SV2JxbmpCVWF5d3FMbk0yOHZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yZmNiYjItYzNjMC00YjFlLThhZDUtN2Y1Zjc4MzQ2ZDZm LzEvc2ZfdWZiOV9SV2JxbmpCVWF5d3FMbk0yOHZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrubSvXX kw+qGzeY7haG1UP/iy7odsiwHJ2gclemp13Djip9N6XFjbyMLJgauIlOcqnj4RZ0 vFDF9gZqNcECuIU4e11XYvk+VbVTJfTTloqEqoy3NipyX3U4bbz3VmA8T/HyQqzO 38fz52/LrtGI2q+CcjoKCU2NbLEJ3nXQzFboldSbq9l4mTpt4kgh0j3f+mnurZIo QnFRJVxOtIFOwbYuTY9/LJIRBUlsIkfOcWPg7B9hWhpwlfnrVQw2Y8FahbpRWuXu 6oXUYYBjL2jhB1iWsQCTX9gLFbp/anq19LeCC8yw2pgcKWQnPEdwZzlAq2ZYGnCN KmYiPA1jOeayFg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:07 2025 by rpki-client