This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft File: SFGWc90KnPV4lVIK83wqgYPc4Wg.mft (raw, json) Hash identifier: dxtjMD0GW3cvj6gB3Y788CV7Tw3I4e/zOOX96glwZu8= Subject key identifier: 7C:83:D7:6D:B1:7B:74:06:FA:82:1B:8D:0E:5A:90:7F:16:55:00:5F Authority key identifier: 48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68 Certificate issuer: /CN=48519673dd0a9cf57895520af37c2a8183dce168 Certificate serial: 019AF31B4BF6BAEDEC4E9481E4F2589FB7F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft Manifest number: 1257 Signing time: Sat 06 Dec 2025 10:00:43 +0000 Manifest this update: Sat 06 Dec 2025 10:00:43 +0000 Manifest next update: Sun 07 Dec 2025 10:00:43 +0000 Files and hashes: 1: N_mB8DyGTMyRNtWdzOHezqUOwxA.roa (hash: 0iM1AEZNlQrcAYLQC9NYhgIr9GaQK1NMxQpbyZpHQKI=) 2: SFGWc90KnPV4lVIK83wqgYPc4Wg.crl (hash: pe2QPD3REGu9mHqF/qYRfd48RF/Cz3/FUMTYSYQHP8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:4b:f6:ba:ed:ec:4e:94:81:e4:f2:58:9f:b7:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48519673dd0a9cf57895520af37c2a8183dce168 Validity Not Before: Dec 6 10:00:43 2025 GMT Not After : Dec 7 10:00:43 2025 GMT Subject: CN=7c83d76db17b7406fa821b8d0e5a907f1655005f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0a:3d:34:23:9e:79:20:c2:48:7b:16:ad:7d: d6:6c:ef:1a:4a:8e:f7:3d:e3:49:d4:fc:d2:64:f3: 90:c4:83:ca:25:43:33:7b:76:d4:1f:6f:bd:a3:21: a0:e3:fe:8d:85:83:99:25:e0:11:fe:85:a8:95:e0: a5:d5:24:36:f3:b4:48:76:27:4d:7b:54:09:b8:ab: dc:e7:df:a8:5d:0e:2c:b6:d0:38:69:3b:c7:1a:0e: 06:57:20:d9:e2:6e:47:7f:f9:01:20:92:f9:50:a9: 6a:af:ba:90:0d:22:af:95:f4:b7:19:72:82:34:e1: c8:8f:27:1d:0f:31:b6:1c:e0:0b:81:8e:0d:c8:38: 41:16:c7:ba:72:32:aa:28:b8:44:4a:3f:23:55:3c: 01:e0:c9:8c:42:5b:d5:3b:66:01:42:19:da:53:c8: 2c:84:1f:46:11:15:88:aa:ad:0e:f2:ed:c4:e0:43: 29:80:2d:cf:f6:59:d5:8b:33:01:9d:74:93:29:3c: a1:18:77:20:d2:b6:66:f7:69:3e:40:21:ac:b3:cd: cd:e9:ec:ae:de:53:31:98:0a:06:14:df:48:c0:12: ea:f7:1e:72:e1:62:ba:c4:89:ca:6f:4d:b8:04:e1: 05:a1:20:ff:b2:2d:38:ae:fa:76:7c:f6:84:07:76: 94:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:83:D7:6D:B1:7B:74:06:FA:82:1B:8D:0E:5A:90:7F:16:55:00:5F X509v3 Authority Key Identifier: keyid:48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:22:e3:8d:88:9b:7b:78:e0:d3:d6:54:34:c2:6c:7b:6a:08: dc:ec:76:2e:b3:b5:1b:77:8c:a5:aa:38:04:fc:8d:54:79:4a: 78:23:47:23:6c:0f:c3:3a:f6:46:86:d9:92:4c:ca:40:5a:f8: a4:7c:fe:df:af:cc:2c:65:1a:06:85:3e:ef:35:f3:7f:4b:59: 57:6d:76:b2:ac:80:cc:20:10:c1:9f:da:00:40:d9:fa:04:00: eb:14:4d:c4:e7:dd:5d:e1:72:1b:a7:de:99:82:ee:18:d4:c5: d1:f5:5d:ed:14:c6:be:1f:e6:77:8d:33:95:dc:04:30:7a:b9: 16:c9:0e:ec:f5:d9:70:41:1a:4a:d6:ed:6b:d8:b1:fe:2c:1d: 6d:83:d7:6f:5f:4d:57:bd:18:f4:c7:f4:6d:92:f9:63:29:10: 35:31:37:3f:04:72:89:d7:3e:6c:8a:f4:e2:9d:f9:c0:4f:6a: 94:83:2a:8f:0c:d2:73:6c:a6:af:48:1c:c2:bc:76:bf:5e:37: 15:2d:da:f0:77:6c:0c:17:ab:d6:35:3c:42:b9:d4:51:54:e1: ab:67:eb:8c:63:63:5b:52:ea:18:68:5b:ed:62:71:ba:67:31: 1c:b6:73:4c:ab:ec:78:c4:13:bc:2a:46:74:07:29:5b:37:b5: 01:14:6a:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG0v2uu3sTpSB5PJYn7fxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NTE5NjczZGQwYTljZjU3ODk1NTIwYWYzN2MyYTgxODNk Y2UxNjgwHhcNMjUxMjA2MTAwMDQzWhcNMjUxMjA3MTAwMDQzWjAzMTEwLwYDVQQD Eyg3YzgzZDc2ZGIxN2I3NDA2ZmE4MjFiOGQwZTVhOTA3ZjE2NTUwMDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQo9NCOeeSDCSHsWrX3WbO8aSo73 PeNJ1PzSZPOQxIPKJUMze3bUH2+9oyGg4/6NhYOZJeAR/oWoleCl1SQ287RIdidN e1QJuKvc59+oXQ4sttA4aTvHGg4GVyDZ4m5Hf/kBIJL5UKlqr7qQDSKvlfS3GXKC NOHIjycdDzG2HOALgY4NyDhBFse6cjKqKLhESj8jVTwB4MmMQlvVO2YBQhnaU8gs hB9GERWIqq0O8u3E4EMpgC3P9lnVizMBnXSTKTyhGHcg0rZm92k+QCGss83N6eyu 3lMxmAoGFN9IwBLq9x5y4WK6xInKb024BOEFoSD/si04rvp2fPaEB3aUVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHyD122xe3QG+oIbjQ5akH8WVQBfMB8GA1UdIwQY MBaAFEhRlnPdCpz1eJVSCvN8KoGD3OFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8zYmQ1OWEtMmQwYy00MDkzLTkxM2Et ZmUzNmNlZGE2MzE2LzEvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8zYmQ1OWEtMmQwYy00MDkzLTkxM2EtZmUzNmNlZGE2MzE2 LzEvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiyLjjYib e3jg09ZUNMJse2oI3Ox2LrO1G3eMpao4BPyNVHlKeCNHI2wPwzr2RobZkkzKQFr4 pHz+36/MLGUaBoU+7zXzf0tZV212sqyAzCAQwZ/aAEDZ+gQA6xRNxOfdXeFyG6fe mYLuGNTF0fVd7RTGvh/md40zldwEMHq5FskO7PXZcEEaStbta9ix/iwdbYPXb19N V70Y9Mf0bZL5YykQNTE3PwRyidc+bIr04p35wE9qlIMqjwzSc2ymr0gcwrx2v143 FS3a8HdsDBer1jU8QrnUUVThq2frjGNjW1LqGGhb7WJxumcxHLZzTKvseMQTvCpG dAcpWze1ARRqAA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:02:22 2025 by rpki-client