This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft File: Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft (raw, json) Hash identifier: Vm0el8l3/DIPyCWNDwtxIBaP0AuXOfpJB3VBgweQoss= Subject key identifier: 1F:A3:4C:CD:EF:90:74:92:27:19:82:88:75:49:54:C3:CA:DB:74:E9 Authority key identifier: 49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71 Certificate issuer: /CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71 Certificate serial: 019AF209211A65D1E99ABFC49ED014AF3691 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft Manifest number: 0F98 Signing time: Sat 06 Dec 2025 05:01:15 +0000 Manifest this update: Sat 06 Dec 2025 05:01:15 +0000 Manifest next update: Sun 07 Dec 2025 05:01:15 +0000 Files and hashes: 1: Mg03f5x9KEwTzrWMVXcY-DpbRQM.roa (hash: gHoeFO+xk1dFoFV2Z9UYHxVBDmrYCHhqpQCvP+8wkDE=) 2: Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl (hash: KqE8TZvpvlYrkhbmMgavk5jKIYXF23ndVd/Ze0yVeB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:21:1a:65:d1:e9:9a:bf:c4:9e:d0:14:af:36:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71 Validity Not Before: Dec 6 05:01:15 2025 GMT Not After : Dec 7 05:01:15 2025 GMT Subject: CN=1fa34ccdef90749227198288754954c3cadb74e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f6:af:c6:55:e9:15:35:7d:2a:6f:ce:e8:85: 09:bc:26:8f:39:d9:cf:0a:db:84:40:51:b1:e3:f2: 5b:4f:16:d2:1a:93:1b:ca:f7:15:af:05:13:69:a7: a1:2e:ec:0a:38:dc:fb:67:25:6b:77:ac:e3:d6:64: e7:ba:74:30:32:1c:0d:c8:d3:f1:ed:be:e9:90:c5: 55:72:30:5d:d1:82:e8:cc:1c:c1:e8:8e:06:db:8c: f3:b2:d4:b5:37:52:2c:85:d7:e5:57:d2:24:8d:1c: 34:2d:f0:2f:02:f0:e7:64:fe:76:35:61:a0:a8:53: 07:e2:87:9b:9c:05:f3:0b:5d:8a:e9:7f:27:6d:83: 9b:c2:7a:fc:ec:69:56:37:73:01:30:ac:3f:a8:73: 61:70:f8:c5:35:de:92:cd:49:75:42:50:e8:2b:97: c3:f5:9d:e5:36:96:f2:d9:2d:7c:55:c7:8c:ec:a6: f9:da:7a:56:c4:6b:23:42:73:b5:5a:03:06:a5:ec: 0e:14:f0:2f:b4:e9:08:85:bb:2c:65:7e:3b:2c:94: aa:c3:71:b7:98:19:7a:99:f7:2b:d8:d8:87:bd:e1: ae:1c:4f:d7:ab:02:79:ca:ea:48:f0:4f:71:19:2b: 87:07:f5:b9:13:4e:39:f9:0b:e6:1e:be:f8:29:19: c8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A3:4C:CD:EF:90:74:92:27:19:82:88:75:49:54:C3:CA:DB:74:E9 X509v3 Authority Key Identifier: keyid:49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:48:cb:13:1f:40:4e:b0:e2:14:d7:a5:4b:57:38:0b:f4:a4: 23:44:23:8d:1e:18:6f:17:6d:ec:6c:f4:8b:6b:c4:8f:2a:88: 8f:ec:86:13:63:5e:d4:25:0b:08:b3:75:6e:56:ad:7b:2c:e6: 4e:c5:35:f6:55:5b:ee:5b:1a:1e:d7:f4:5f:34:36:33:8e:9c: c0:c0:1c:87:09:1a:97:27:9b:93:2e:ad:57:84:9f:21:1b:89: 98:48:41:80:07:b7:26:e5:60:0f:63:05:80:9e:f2:f0:59:ba: b2:11:21:cb:ee:41:82:05:53:ac:03:8d:0a:02:c9:41:79:98: c9:c9:e8:72:54:de:58:6e:16:f5:1c:a9:0b:e4:6d:7c:e5:67: f6:0f:b0:5d:a7:6a:a7:ae:3d:30:43:85:aa:f1:13:12:dc:d3: 52:67:16:1d:97:93:b7:08:86:99:3b:d2:41:a4:43:b7:8e:7c: e7:fe:07:8e:62:f6:33:8f:62:b3:37:fd:ea:e6:97:50:10:86: eb:df:89:dd:cb:05:1c:65:81:cf:7f:47:7d:11:6c:8f:8d:c6: 6f:d8:eb:9a:76:fc:78:06:d8:86:ae:77:51:73:9e:ea:d6:df: e5:ba:18:d2:d3:1a:51:e7:b1:48:15:12:46:ac:08:3d:cf:ec: ff:17:04:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSEaZdHpmr/EntAUrzaRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZmU4YzcyYWEzMmRlOTU3YjI0Y2Y5ZjczZjhhN2ZiMWFj ZjBiNzEwHhcNMjUxMjA2MDUwMTE1WhcNMjUxMjA3MDUwMTE1WjAzMTEwLwYDVQQD EygxZmEzNGNjZGVmOTA3NDkyMjcxOTgyODg3NTQ5NTRjM2NhZGI3NGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfavxlXpFTV9Km/O6IUJvCaPOdnP CtuEQFGx4/JbTxbSGpMbyvcVrwUTaaehLuwKONz7ZyVrd6zj1mTnunQwMhwNyNPx 7b7pkMVVcjBd0YLozBzB6I4G24zzstS1N1IshdflV9IkjRw0LfAvAvDnZP52NWGg qFMH4oebnAXzC12K6X8nbYObwnr87GlWN3MBMKw/qHNhcPjFNd6SzUl1QlDoK5fD 9Z3lNpby2S18VceM7Kb52npWxGsjQnO1WgMGpewOFPAvtOkIhbssZX47LJSqw3G3 mBl6mfcr2NiHveGuHE/XqwJ5yupI8E9xGSuHB/W5E045+QvmHr74KRnI6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+jTM3vkHSSJxmCiHVJVMPK23TpMB8GA1UdIwQY MBaAFEn+jHKqMt6VeyTPn3P4p/sazwtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2Y2TWNxb3kzcFY3Sk0tZmNfaW4teHJQQzNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80MTE0YTctMzEyMi00ODY0LTg1YWUt NDI5N2U1NzI2MTdlLzEvU2Y2TWNxb3kzcFY3Sk0tZmNfaW4teHJQQzNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy80MTE0YTctMzEyMi00ODY0LTg1YWUtNDI5N2U1NzI2MTdl LzEvU2Y2TWNxb3kzcFY3Sk0tZmNfaW4teHJQQzNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPEjLEx9A TrDiFNelS1c4C/SkI0QjjR4Ybxdt7Gz0i2vEjyqIj+yGE2Ne1CULCLN1blateyzm TsU19lVb7lsaHtf0XzQ2M46cwMAchwkalyebky6tV4SfIRuJmEhBgAe3JuVgD2MF gJ7y8Fm6shEhy+5BggVTrAONCgLJQXmYycnoclTeWG4W9RypC+RtfOVn9g+wXadq p649MEOFqvETEtzTUmcWHZeTtwiGmTvSQaRDt4585/4HjmL2M49iszf96uaXUBCG 69+J3csFHGWBz39HfRFsj43Gb9jrmnb8eAbYhq53UXOe6tbf5boY0tMaUeexSBUS RqwIPc/s/xcEaA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:32 2025 by rpki-client