This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft File: SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft (raw, json) Hash identifier: 3JfpIlqGCzT1cOn5Uq+iBp5oHeq+lfvsbYmNM0f4aKw= Subject key identifier: 5F:B4:62:97:1F:BD:F4:FA:B0:D5:60:13:D8:3A:3B:30:27:61:0F:58 Authority key identifier: 49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55 Certificate issuer: /CN=49d01f70cf5f4deed93a8c15e494029e93abed55 Certificate serial: 019AF2090BACFA9D377DC4D0A24E6151A420 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft Manifest number: 0384 Signing time: Sat 06 Dec 2025 05:01:10 +0000 Manifest this update: Sat 06 Dec 2025 05:01:10 +0000 Manifest next update: Sun 07 Dec 2025 05:01:10 +0000 Files and hashes: 1: SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl (hash: vXuDvAGzDoNa33hm2s89KIJVs/gisyN5FhmHDSWSrbk=) 2: WxZz3Xq4Dubhk-2v4KkyD3DjymY.roa (hash: TcPVaB9byF2mn4BjYUtIE/4fQoQybO53Dwd3vhK7Z5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:0b:ac:fa:9d:37:7d:c4:d0:a2:4e:61:51:a4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49d01f70cf5f4deed93a8c15e494029e93abed55 Validity Not Before: Dec 6 05:01:10 2025 GMT Not After : Dec 7 05:01:10 2025 GMT Subject: CN=5fb462971fbdf4fab0d56013d83a3b3027610f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:92:3f:a8:29:68:b9:1d:04:66:73:b5:0d:4e: 13:0c:41:5d:90:fb:83:9f:8a:b8:f8:5d:a9:de:96: c8:87:26:e7:4f:b7:d9:db:95:3c:8f:8d:ab:72:7e: 18:07:c9:19:1e:e4:ab:4e:a4:45:8d:88:c8:85:db: 36:a7:bb:74:a3:f2:d9:65:9e:48:e7:71:d0:f6:3a: 31:45:a5:89:22:2e:90:a5:52:ce:30:65:26:c4:4d: fc:12:8c:16:99:50:ce:ee:64:f0:b4:9d:6d:17:ae: 1f:e6:bb:83:ea:71:79:92:d0:48:65:87:c7:16:71: c1:9f:50:ab:9d:74:3e:ff:67:e3:2b:65:f7:bf:7c: ff:44:12:cb:72:13:c8:87:b6:c7:1b:42:0d:e4:77: 45:ae:cf:be:a4:fd:46:3b:bd:5c:07:45:4c:e8:7e: f8:0c:3f:d7:3d:75:ac:f2:e8:38:3a:18:9a:9c:b9: cd:11:56:7b:51:35:8b:c3:fc:74:5d:b0:34:95:f3: 84:d8:5c:d2:d4:5b:d0:b0:27:34:09:11:07:f8:1a: 53:cd:98:69:77:0a:a5:00:71:46:52:99:a2:26:36: 3c:53:e9:17:7c:55:61:21:f7:97:3c:0a:87:4e:c4: fa:95:f7:fb:70:0e:8d:7a:0f:ba:85:d7:cb:12:3d: d3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B4:62:97:1F:BD:F4:FA:B0:D5:60:13:D8:3A:3B:30:27:61:0F:58 X509v3 Authority Key Identifier: keyid:49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:e5:eb:53:6b:28:8b:7f:37:3c:e8:36:ab:da:8b:08:be:f6: 7c:a0:09:bd:78:6f:47:63:c4:40:cf:f9:be:53:35:b1:37:21: 6a:5c:7d:9b:9b:4d:d9:ad:a6:b8:3e:e7:19:dd:40:cf:69:44: ca:d9:c4:f0:6e:4f:c0:05:7f:76:39:2d:74:3c:43:36:08:76: 50:46:83:eb:b3:ec:57:0b:40:00:1c:a2:77:08:21:24:21:9a: 6a:89:85:ca:a4:c3:9e:1b:3b:2e:27:ce:f6:43:4b:6f:98:d4: e8:fb:80:8a:ce:95:56:3b:fd:26:37:48:4d:fb:56:e5:0a:cf: 81:da:22:2a:78:bf:6f:8f:4b:c0:a7:8b:fb:ba:6d:c3:e8:84: 32:5c:cb:9c:13:8b:83:67:0e:e2:fa:9f:19:18:45:75:8c:d9: d6:a9:72:19:cf:b2:17:b0:11:fe:46:c0:f9:01:98:95:86:34: a7:7b:ce:36:66:d3:cf:e4:f8:40:fe:1f:a9:bf:3c:93:d9:eb: eb:2d:9c:21:70:87:2d:93:76:23:4b:c0:b8:cf:98:7f:2a:02: d2:99:60:cb:f7:6b:78:b1:89:c0:7e:d9:89:ca:a9:61:fb:32: 0a:9e:c5:27:69:d9:b6:b5:aa:21:79:22:4a:4b:d7:29:88:a5: 49:ae:72:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQus+p03fcTQok5hUaQgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZDAxZjcwY2Y1ZjRkZWVkOTNhOGMxNWU0OTQwMjllOTNh YmVkNTUwHhcNMjUxMjA2MDUwMTEwWhcNMjUxMjA3MDUwMTEwWjAzMTEwLwYDVQQD Eyg1ZmI0NjI5NzFmYmRmNGZhYjBkNTYwMTNkODNhM2IzMDI3NjEwZjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pI/qClouR0EZnO1DU4TDEFdkPuD n4q4+F2p3pbIhybnT7fZ25U8j42rcn4YB8kZHuSrTqRFjYjIhds2p7t0o/LZZZ5I 53HQ9joxRaWJIi6QpVLOMGUmxE38EowWmVDO7mTwtJ1tF64f5ruD6nF5ktBIZYfH FnHBn1CrnXQ+/2fjK2X3v3z/RBLLchPIh7bHG0IN5HdFrs++pP1GO71cB0VM6H74 DD/XPXWs8ug4OhianLnNEVZ7UTWLw/x0XbA0lfOE2FzS1FvQsCc0CREH+BpTzZhp dwqlAHFGUpmiJjY8U+kXfFVhIfeXPAqHTsT6lff7cA6Neg+6hdfLEj3TwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+0YpcfvfT6sNVgE9g6OzAnYQ9YMB8GA1UdIwQY MBaAFEnQH3DPX03u2TqMFeSUAp6Tq+1VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2RBZmNNOWZUZTdaT293VjVKUUNucE9yN1ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84MjE1NzItMzQ0NS00OTEwLWExNWMt ZjRjMTY2YzgzZjg4LzEvU2RBZmNNOWZUZTdaT293VjVKUUNucE9yN1ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC84MjE1NzItMzQ0NS00OTEwLWExNWMtZjRjMTY2YzgzZjg4 LzEvU2RBZmNNOWZUZTdaT293VjVKUUNucE9yN1ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+XrU2so i383POg2q9qLCL72fKAJvXhvR2PEQM/5vlM1sTchalx9m5tN2a2muD7nGd1Az2lE ytnE8G5PwAV/djktdDxDNgh2UEaD67PsVwtAAByidwghJCGaaomFyqTDnhs7LifO 9kNLb5jU6PuAis6VVjv9JjdITftW5QrPgdoiKni/b49LwKeL+7ptw+iEMlzLnBOL g2cO4vqfGRhFdYzZ1qlyGc+yF7AR/kbA+QGYlYY0p3vONmbTz+T4QP4fqb88k9nr 6y2cIXCHLZN2I0vAuM+YfyoC0plgy/dreLGJwH7ZicqpYfsyCp7FJ2nZtrWqIXki SkvXKYilSa5ySQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:52:01 2025 by rpki-client