This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft File: SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft (raw, json) Hash identifier: i5anOVUpKg6s58KdyyrCp4MveZVrF0T6go14PKGuOxI= Subject key identifier: A8:8B:DD:7C:E8:11:84:81:6A:B3:97:52:84:4E:E3:3C:39:5D:DA:09 Authority key identifier: 48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA Certificate issuer: /CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca Certificate serial: 019AF0F5D118A52B4F1C4F5EF9366762B777 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft Manifest number: 0146 Signing time: Sat 06 Dec 2025 00:00:32 +0000 Manifest this update: Sat 06 Dec 2025 00:00:32 +0000 Manifest next update: Sun 07 Dec 2025 00:00:32 +0000 Files and hashes: 1: SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl (hash: DUVoxEa6Ylzs4vCcrpmmH0S+V59Kex3sNXBlurSp580=) 2: zSp8Tcrfxe5_p3n3onsW-Ve9HcQ.roa (hash: hWOLO9tqL0286CUEjHeu7GROlem9sTgukzg2u3fOev0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:d1:18:a5:2b:4f:1c:4f:5e:f9:36:67:62:b7:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca Validity Not Before: Dec 6 00:00:32 2025 GMT Not After : Dec 7 00:00:32 2025 GMT Subject: CN=a88bdd7ce81184816ab39752844ee33c395dda09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9f:15:31:d4:52:f5:b3:fb:08:e0:ae:8e:dc: f5:93:78:33:04:c0:f4:79:fe:55:c7:36:ef:3c:7b: f3:29:83:f8:9a:06:36:73:cf:ac:93:a0:2f:48:7f: 8b:3a:f0:fc:94:43:df:45:4a:a5:04:af:0c:95:ec: 4f:c9:76:40:60:2f:e5:3c:63:71:73:aa:d2:e0:cd: 5c:15:a6:d5:88:7e:af:6c:67:7e:36:1f:3c:ca:d3: d5:75:5d:63:85:bb:51:ee:ae:71:ba:fd:c1:e7:98: f5:50:38:23:33:80:71:83:ac:13:e1:c9:b3:b1:57: aa:df:b3:6d:e0:e5:61:f5:b4:7f:82:5c:27:40:a6: 1b:fd:ae:e5:a9:4c:a3:c8:0d:76:36:12:63:22:22: 8c:51:ca:ed:73:1c:c3:62:0f:59:b2:e8:af:45:50: ec:55:e2:f0:e7:a1:a1:86:2d:66:4b:07:5f:c2:54: 39:aa:40:94:e9:84:21:1b:79:78:63:e5:9a:d0:56: 41:d7:75:3c:c6:21:88:27:18:37:7d:18:b4:07:1e: 3a:3a:07:cc:39:61:db:fd:5b:b5:d5:b7:70:fb:2e: e7:72:dd:be:d6:f5:71:70:7f:0f:14:92:30:a9:4b: 69:5f:d7:c5:51:cc:ce:45:f5:30:8e:c5:48:f6:83: f8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8B:DD:7C:E8:11:84:81:6A:B3:97:52:84:4E:E3:3C:39:5D:DA:09 X509v3 Authority Key Identifier: keyid:48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:3f:c1:88:65:22:f0:56:bf:22:a0:e5:ec:bc:22:33:ad:9d: cf:fd:1a:de:92:89:c0:7a:e7:f5:5b:b1:1f:bd:15:57:e8:17: a8:3e:e8:3c:01:ea:c5:3d:ae:2d:22:eb:15:06:d7:0a:15:cc: 1e:60:9b:27:88:d4:8e:29:ae:7f:6f:6b:2b:9f:87:0f:cc:12: 5a:17:2c:83:82:25:d4:67:ea:99:ee:3e:45:bb:98:2b:d9:de: 98:3c:7e:cd:90:f2:11:c1:cf:33:c7:61:b0:e3:69:6f:b2:0f: 73:0f:58:d6:c1:a6:f1:26:1c:38:2f:3f:4a:27:07:72:a7:17: 73:68:24:29:7f:6b:fb:20:c2:4d:7d:8e:53:b1:26:b1:01:67: 20:c7:06:aa:c3:95:f2:91:46:42:24:61:5f:76:04:93:90:1a: fd:ea:55:30:28:1e:7b:85:80:7b:97:51:04:1b:5d:14:ad:f0: 39:f9:1f:ec:ef:39:ac:e6:be:5f:a3:25:ea:81:97:d0:b6:82: 80:2c:63:3c:a0:ae:09:f0:ab:50:54:71:e5:3e:35:7b:b0:ec: f7:a2:10:e4:cd:7f:f3:c8:b9:dd:8a:86:07:26:91:1d:f9:9e: 3a:64:bd:90:ca:8a:8c:15:c9:a4:3a:5c:17:84:70:f9:a3:ed: 1a:51:89:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9dEYpStPHE9e+TZnYrd3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NTAxOGI1YzJmZWYxMjQ4YWI2ZWMwZDA3ZTk3MWVjYmNm NzM5Y2EwHhcNMjUxMjA2MDAwMDMyWhcNMjUxMjA3MDAwMDMyWjAzMTEwLwYDVQQD EyhhODhiZGQ3Y2U4MTE4NDgxNmFiMzk3NTI4NDRlZTMzYzM5NWRkYTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ8VMdRS9bP7COCujtz1k3gzBMD0 ef5VxzbvPHvzKYP4mgY2c8+sk6AvSH+LOvD8lEPfRUqlBK8MlexPyXZAYC/lPGNx c6rS4M1cFabViH6vbGd+Nh88ytPVdV1jhbtR7q5xuv3B55j1UDgjM4Bxg6wT4cmz sVeq37Nt4OVh9bR/glwnQKYb/a7lqUyjyA12NhJjIiKMUcrtcxzDYg9ZsuivRVDs VeLw56Ghhi1mSwdfwlQ5qkCU6YQhG3l4Y+Wa0FZB13U8xiGIJxg3fRi0Bx46OgfM OWHb/Vu11bdw+y7nct2+1vVxcH8PFJIwqUtpX9fFUczORfUwjsVI9oP4awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKiL3XzoEYSBarOXUoRO4zw5XdoJMB8GA1UdIwQY MBaAFEhQGLXC/vEkirbsDQfpcey89znKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0ZBWXRjTC04U1NLdHV3TkItbHg3THozT2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84NTNlOGYtZmNkNC00NTY2LWE2NDgt ZTM3NDk5Njc5ZDQ2LzEvU0ZBWXRjTC04U1NLdHV3TkItbHg3THozT2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84NTNlOGYtZmNkNC00NTY2LWE2NDgtZTM3NDk5Njc5ZDQ2 LzEvU0ZBWXRjTC04U1NLdHV3TkItbHg3THozT2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgD/BiGUi 8Fa/IqDl7LwiM62dz/0a3pKJwHrn9VuxH70VV+gXqD7oPAHqxT2uLSLrFQbXChXM HmCbJ4jUjimuf29rK5+HD8wSWhcsg4Il1Gfqme4+RbuYK9nemDx+zZDyEcHPM8dh sONpb7IPcw9Y1sGm8SYcOC8/SicHcqcXc2gkKX9r+yDCTX2OU7EmsQFnIMcGqsOV 8pFGQiRhX3YEk5Aa/epVMCgee4WAe5dRBBtdFK3wOfkf7O85rOa+X6Ml6oGX0LaC gCxjPKCuCfCrUFRx5T41e7Ds96IQ5M1/88i53YqGByaRHfmeOmS9kMqKjBXJpDpc F4Rw+aPtGlGJQg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:37:07 2025 by rpki-client