This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft File: SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft (raw, json) Hash identifier: fGc0hRlQDQ4tE9mJqTDxI2y5eJ3h7QgBSMnyQzSGRu0= Subject key identifier: 6A:29:20:6B:75:40:E6:3C:8D:04:53:F2:E5:E7:56:09:35:1F:63:45 Authority key identifier: 48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B Certificate issuer: /CN=483fb37d1fb0ccd216dadec40009561a844aa83b Certificate serial: 019AF31C2FFB5444E4BD4B8C343EB330D592 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft Manifest number: 0413 Signing time: Sat 06 Dec 2025 10:01:41 +0000 Manifest this update: Sat 06 Dec 2025 10:01:41 +0000 Manifest next update: Sun 07 Dec 2025 10:01:41 +0000 Files and hashes: 1: QFSVeDq1epR2B-cHpjlozBO3ocI.roa (hash: iTCal74oQdwW9uQJuhQCWg6av2cdFSN2Hzxn0oSQ9UI=) 2: SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl (hash: uU/CZ1u3/TFE748sOo8zAA6psqsWDPQK5x5oS/Baf9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:2f:fb:54:44:e4:bd:4b:8c:34:3e:b3:30:d5:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=483fb37d1fb0ccd216dadec40009561a844aa83b Validity Not Before: Dec 6 10:01:41 2025 GMT Not After : Dec 7 10:01:41 2025 GMT Subject: CN=6a29206b7540e63c8d0453f2e5e75609351f6345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a5:aa:a9:19:ab:9f:82:95:0c:9a:1e:8b:eb: 08:9d:5f:57:70:14:10:94:17:e6:84:bb:a8:33:00: 6c:7c:c0:1d:e6:25:f3:51:12:28:cf:f0:0a:c4:51: 85:1b:4e:c9:be:ea:32:37:b7:c0:c9:7c:7e:57:3a: c5:a1:fd:5d:14:70:f0:26:7b:c0:75:b0:f0:dd:8e: df:f4:4b:e0:ff:c9:64:e1:57:cd:29:cd:fa:67:e1: 85:55:96:0e:e1:3e:cd:11:75:e7:3d:49:76:f8:7a: e6:da:94:f9:d1:ca:0c:f0:0d:27:ab:3f:db:0b:17: bb:90:fa:1e:06:42:bb:22:cf:1e:fb:a5:00:22:d2: fb:2d:98:c3:d6:16:a7:3b:2c:1f:fb:28:c0:f6:a1: 5e:3b:4b:ef:de:51:0c:bf:ee:fe:20:4e:80:fc:49: fa:ae:a2:57:b9:ec:c9:8e:2f:60:1c:66:68:cb:37: 08:98:5f:12:4c:12:9a:f7:6b:a5:0e:b6:9f:c6:d6: 48:09:5c:11:63:87:43:f0:39:95:35:82:d7:6d:5c: 22:77:60:b6:b2:23:56:e8:9a:81:66:7c:79:d0:a9: 80:53:48:7c:78:cc:35:7b:a1:1e:fd:91:30:37:b8: 28:c9:9c:bb:39:39:34:86:d9:a9:9d:f7:51:ee:76: 18:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:29:20:6B:75:40:E6:3C:8D:04:53:F2:E5:E7:56:09:35:1F:63:45 X509v3 Authority Key Identifier: keyid:48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ad:44:86:84:f4:df:1d:3c:7d:43:bb:1d:2a:89:3a:42:2e: 89:d4:80:df:ac:2c:d1:6c:28:c8:ba:3a:81:cb:5c:30:bb:9a: 0b:a9:dd:c8:66:84:3b:15:86:bb:1c:d7:1e:89:6e:91:26:ce: 06:6d:0c:20:67:0b:cd:32:12:96:d4:94:da:0b:01:b8:08:c2: 4a:58:39:c1:95:6f:5f:7b:fc:07:c0:65:c0:68:98:26:e9:13: 9b:06:1b:14:d5:38:ce:1e:48:ee:f8:f0:dc:05:f5:eb:cb:e3: 34:87:73:3b:7f:b6:63:f9:92:69:19:3e:10:e6:ed:05:e2:0d: 88:c9:1d:51:f5:a2:b6:dd:42:9d:18:92:99:19:9d:2f:2e:22: 50:f0:ff:67:1d:54:90:a9:be:55:83:61:68:63:9b:28:07:1b: 18:c7:69:dd:3e:1d:2b:90:3b:fa:b3:60:f4:65:48:4f:cb:da: 8c:ab:4b:f0:14:7f:32:56:56:5e:32:15:b8:40:04:02:bf:d2: 6b:91:fc:e3:84:b9:f7:af:48:b6:a5:f7:94:78:4a:7f:cd:3d: 1d:e0:ce:7e:f3:51:d9:1b:f3:60:94:c2:95:2f:9c:6c:d0:18: 74:f4:ed:41:74:0e:da:00:b4:36:23:e9:74:03:20:f1:f4:e0: 14:b5:84:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHC/7VETkvUuMND6zMNWSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4M2ZiMzdkMWZiMGNjZDIxNmRhZGVjNDAwMDk1NjFhODQ0 YWE4M2IwHhcNMjUxMjA2MTAwMTQxWhcNMjUxMjA3MTAwMTQxWjAzMTEwLwYDVQQD Eyg2YTI5MjA2Yjc1NDBlNjNjOGQwNDUzZjJlNWU3NTYwOTM1MWY2MzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6WqqRmrn4KVDJoei+sInV9XcBQQ lBfmhLuoMwBsfMAd5iXzURIoz/AKxFGFG07JvuoyN7fAyXx+VzrFof1dFHDwJnvA dbDw3Y7f9Evg/8lk4VfNKc36Z+GFVZYO4T7NEXXnPUl2+Hrm2pT50coM8A0nqz/b Cxe7kPoeBkK7Is8e+6UAItL7LZjD1hanOywf+yjA9qFeO0vv3lEMv+7+IE6A/En6 rqJXuezJji9gHGZoyzcImF8STBKa92ulDrafxtZICVwRY4dD8DmVNYLXbVwid2C2 siNW6JqBZnx50KmAU0h8eMw1e6Ee/ZEwN7goyZy7OTk0htmpnfdR7nYY0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGopIGt1QOY8jQRT8uXnVgk1H2NFMB8GA1UdIwQY MBaAFEg/s30fsMzSFtrexAAJVhqESqg7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0QtemZSLXd6TklXMnQ3RUFBbFdHb1JLcURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hMWViNjYtY2M4Ny00YTkwLTljNWQt ZWUzY2E3NGJiYjc5LzEvU0QtemZSLXd6TklXMnQ3RUFBbFdHb1JLcURzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9hMWViNjYtY2M4Ny00YTkwLTljNWQtZWUzY2E3NGJiYjc5 LzEvU0QtemZSLXd6TklXMnQ3RUFBbFdHb1JLcURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaq1EhoT0 3x08fUO7HSqJOkIuidSA36ws0WwoyLo6gctcMLuaC6ndyGaEOxWGuxzXHolukSbO Bm0MIGcLzTISltSU2gsBuAjCSlg5wZVvX3v8B8BlwGiYJukTmwYbFNU4zh5I7vjw 3AX168vjNIdzO3+2Y/mSaRk+EObtBeINiMkdUfWitt1CnRiSmRmdLy4iUPD/Zx1U kKm+VYNhaGObKAcbGMdp3T4dK5A7+rNg9GVIT8vajKtL8BR/MlZWXjIVuEAEAr/S a5H844S5969ItqX3lHhKf809HeDOfvNR2RvzYJTClS+cbNAYdPTtQXQO2gC0NiPp dAMg8fTgFLWEwA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:38:45 2025 by rpki-client