This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft File: SFk-QNpaUvMi21oEwg-0htThVQI.mft (raw, json) Hash identifier: RGRxAnktikPIucCVTogVNYwMENVgmlby9oe4ubSxjTY= Subject key identifier: E3:2D:DD:70:32:DB:09:1F:00:94:D4:D3:C3:4C:A8:13:88:26:46:F0 Authority key identifier: 48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02 Certificate issuer: /CN=48593e40da5a52f322db5a04c20fb486d4e15502 Certificate serial: 019AF12DEA55ED26C5A4C0366574B7B0A455 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft Manifest number: 141C Signing time: Sat 06 Dec 2025 01:01:49 +0000 Manifest this update: Sat 06 Dec 2025 01:01:49 +0000 Manifest next update: Sun 07 Dec 2025 01:01:49 +0000 Files and hashes: 1: SFk-QNpaUvMi21oEwg-0htThVQI.crl (hash: WnufKiLzmcVSL3SOVa+jNCa04rav3ua+JP+NI+B14N4=) 2: Xe1gxuRIIOL95lwNFDlJJ4LeD98.roa (hash: E3ThdKoNF/zSVQO/0Rh8O4e1tJqwTsPdKIVV0WmD0l8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:ea:55:ed:26:c5:a4:c0:36:65:74:b7:b0:a4:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48593e40da5a52f322db5a04c20fb486d4e15502 Validity Not Before: Dec 6 01:01:49 2025 GMT Not After : Dec 7 01:01:49 2025 GMT Subject: CN=e32ddd7032db091f0094d4d3c34ca813882646f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:57:e6:55:80:ec:81:7b:78:70:44:b8:d8:90: fe:be:15:e5:ac:22:27:d2:99:a7:22:59:9f:92:3b: 2c:64:e6:4d:81:7f:c4:31:02:55:a2:61:fc:65:d6: 13:02:98:18:db:6b:86:9a:fb:65:b6:d3:ea:9e:7b: 19:be:e6:10:ea:f6:f3:24:b5:74:5d:63:48:63:05: d3:09:ce:a1:7b:08:78:87:3d:73:58:c9:79:92:e7: 63:e7:35:1a:67:79:82:03:92:a8:9a:f3:b1:8a:ea: 48:f1:45:19:6f:1c:4a:32:27:36:93:08:66:a2:95: 90:fa:51:ee:0a:a3:56:5b:86:57:23:bb:4f:fe:e9: 9c:15:10:58:42:81:13:36:0f:28:ac:57:48:c7:84: d6:ed:27:ac:84:67:48:c2:27:bf:d1:bb:2c:bb:cc: 02:b5:05:f5:3e:40:c0:bc:1d:a2:95:7e:e9:9e:15: e4:9b:c4:e0:42:bd:e1:79:88:33:f4:fd:68:14:ab: 0a:75:dd:a7:8c:70:40:99:6c:a2:33:ee:6a:41:86: 71:60:56:8b:7f:72:72:df:01:49:eb:e6:53:77:89: 76:8f:b7:1e:63:60:4b:1b:55:80:46:71:15:65:8c: f4:a3:21:5f:23:fa:96:07:21:53:0c:c2:5e:30:e7: 78:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2D:DD:70:32:DB:09:1F:00:94:D4:D3:C3:4C:A8:13:88:26:46:F0 X509v3 Authority Key Identifier: keyid:48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:0c:ef:cb:ff:27:c7:37:92:cb:53:1c:f2:61:f2:6b:ce:c8: 97:03:b6:fe:53:ff:3c:2b:ab:0a:ed:43:e0:e9:45:b3:bf:aa: e0:b5:c4:a7:c8:38:d4:42:62:bd:3a:e4:0e:18:d1:2e:c1:0e: 16:2a:aa:8d:80:83:ff:82:19:e5:23:96:e0:94:db:e0:74:96: f0:5c:e1:23:68:1e:d1:05:51:5a:51:6f:47:dd:31:8d:fd:fc: 67:51:78:12:05:4a:ab:80:ba:ee:f3:df:40:03:a7:e6:64:c5: 13:32:4f:0a:45:a6:35:53:d2:85:3b:b8:c9:54:fe:c2:e0:94: 83:b0:f5:16:c2:48:0a:51:4a:f0:48:e7:48:d5:26:a8:26:b6: 78:52:32:37:8c:d8:f5:ef:f6:d5:b3:26:3c:13:64:a6:c1:ad: 00:02:df:7a:60:23:f7:3a:4f:d2:11:be:21:2c:c7:03:6f:89: 6d:6e:70:3e:be:44:10:2b:31:f0:49:80:f5:5d:b6:5a:07:81: cc:4e:f1:e1:ce:d3:f0:f5:eb:e1:30:b4:fe:b0:46:96:ca:0c: 69:2d:a5:a7:3e:ca:c2:07:e5:43:f7:53:7e:0f:b4:4b:24:9e: 76:75:27:77:e4:40:b8:b3:ee:40:fd:d7:72:cf:7e:03:96:a6: 22:b9:61:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLepV7SbFpMA2ZXS3sKRVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NTkzZTQwZGE1YTUyZjMyMmRiNWEwNGMyMGZiNDg2ZDRl MTU1MDIwHhcNMjUxMjA2MDEwMTQ5WhcNMjUxMjA3MDEwMTQ5WjAzMTEwLwYDVQQD EyhlMzJkZGQ3MDMyZGIwOTFmMDA5NGQ0ZDNjMzRjYTgxMzg4MjY0NmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVfmVYDsgXt4cES42JD+vhXlrCIn 0pmnIlmfkjssZOZNgX/EMQJVomH8ZdYTApgY22uGmvtlttPqnnsZvuYQ6vbzJLV0 XWNIYwXTCc6hewh4hz1zWMl5kudj5zUaZ3mCA5KomvOxiupI8UUZbxxKMic2kwhm opWQ+lHuCqNWW4ZXI7tP/umcFRBYQoETNg8orFdIx4TW7SeshGdIwie/0bssu8wC tQX1PkDAvB2ilX7pnhXkm8TgQr3heYgz9P1oFKsKdd2njHBAmWyiM+5qQYZxYFaL f3Jy3wFJ6+ZTd4l2j7ceY2BLG1WARnEVZYz0oyFfI/qWByFTDMJeMOd4AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMt3XAy2wkfAJTU08NMqBOIJkbwMB8GA1UdIwQY MBaAFEhZPkDaWlLzIttaBMIPtIbU4VUCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0ZrLVFOcGFVdk1pMjFvRXdnLTBodFRoVlFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NzAwYzgtZjlhYi00MmE3LWIxZmEt ZTY4YTA4ZDllNTRmLzEvU0ZrLVFOcGFVdk1pMjFvRXdnLTBodFRoVlFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NzAwYzgtZjlhYi00MmE3LWIxZmEtZTY4YTA4ZDllNTRm LzEvU0ZrLVFOcGFVdk1pMjFvRXdnLTBodFRoVlFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgzvy/8n xzeSy1Mc8mHya87IlwO2/lP/PCurCu1D4OlFs7+q4LXEp8g41EJivTrkDhjRLsEO FiqqjYCD/4IZ5SOW4JTb4HSW8FzhI2ge0QVRWlFvR90xjf38Z1F4EgVKq4C67vPf QAOn5mTFEzJPCkWmNVPShTu4yVT+wuCUg7D1FsJIClFK8EjnSNUmqCa2eFIyN4zY 9e/21bMmPBNkpsGtAALfemAj9zpP0hG+ISzHA2+JbW5wPr5EECsx8EmA9V22WgeB zE7x4c7T8PXr4TC0/rBGlsoMaS2lpz7KwgflQ/dTfg+0SySednUnd+RAuLPuQP3X cs9+A5amIrlhOw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:56 2025 by rpki-client