This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft File: SfCTu46K0RxMg07f0t9U1By0n3k.mft (raw, json) Hash identifier: HzdcZnxDEzUGoVXHeEZfNV1CPxT6800P7YUu0B/nBJQ= Subject key identifier: EF:8A:EF:5F:5A:F1:CB:EA:0E:AE:55:31:F5:B1:4B:F7:01:68:0D:A7 Authority key identifier: 49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79 Certificate issuer: /CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79 Certificate serial: 019AF27709055E4A8FB13C7B8EF5CA82000E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft Manifest number: 05C4 Signing time: Sat 06 Dec 2025 07:01:18 +0000 Manifest this update: Sat 06 Dec 2025 07:01:18 +0000 Manifest next update: Sun 07 Dec 2025 07:01:18 +0000 Files and hashes: 1: 5GNPm8h48A-gwMWqDZ4JoMYcVZc.roa (hash: 9ZBWY++nE/D6/RJTqjkk/4Q4ufkyFaszCX0qNKOcYVk=) 2: SfCTu46K0RxMg07f0t9U1By0n3k.crl (hash: zWjjtP52biGBNUrygfqKGfCiKZft2PUpk4fUyRUK/VM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:09:05:5e:4a:8f:b1:3c:7b:8e:f5:ca:82:00:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79 Validity Not Before: Dec 6 07:01:18 2025 GMT Not After : Dec 7 07:01:18 2025 GMT Subject: CN=ef8aef5f5af1cbea0eae5531f5b14bf701680da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ed:23:a8:f5:55:e6:0b:2d:c7:87:34:f9:98: 6f:b5:45:c0:db:c6:84:40:22:e3:5e:77:f4:ed:71: 82:b6:87:b7:67:cc:b7:16:84:21:3b:4b:13:60:75: 80:d0:2f:73:27:35:e6:7c:46:50:9b:5a:57:0f:71: b4:c1:2a:5a:a8:be:07:63:ee:b8:ac:27:5b:1e:b0: 46:de:f7:c1:4b:dd:5c:72:18:cd:ef:71:63:27:65: e9:16:61:98:aa:1b:4a:0e:d1:99:42:09:f8:14:ec: fd:b2:26:c3:1d:8f:e9:34:9b:2a:56:d2:73:00:c7: 6b:02:28:84:96:e5:27:e5:4c:5b:92:70:b7:8d:63: 8e:7a:a3:74:9c:35:21:ab:6a:01:0a:ef:6c:ca:f3: f5:d9:60:88:1a:59:01:c7:b6:af:49:54:8c:64:84: c4:28:86:5a:9a:48:70:7a:43:06:00:10:9f:ef:d2: b2:fe:96:11:24:d9:e4:b3:62:72:31:fd:cb:9e:2c: a2:d7:63:e3:63:1b:bd:14:86:58:e9:0e:fb:46:4c: 85:bc:b0:af:f9:4e:0c:d8:bc:25:b1:81:f8:a2:46: c8:c9:6c:ca:2a:81:3e:c6:26:2c:06:95:23:ff:f4: fd:47:b4:af:a7:49:6b:49:c4:fa:cf:c1:b8:79:d4: ac:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8A:EF:5F:5A:F1:CB:EA:0E:AE:55:31:F5:B1:4B:F7:01:68:0D:A7 X509v3 Authority Key Identifier: keyid:49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:53:59:af:2b:61:68:f6:b7:8c:f7:f4:db:01:91:95:6e:a5: 88:65:04:cd:29:a5:ad:8c:ff:b9:72:b7:a1:f0:c9:88:14:f1: bc:d6:39:be:32:87:06:92:23:b0:28:40:70:a1:39:15:1c:bd: d0:77:05:10:9b:08:db:53:28:d0:88:1e:8c:7f:e7:e3:32:3d: df:33:dc:a4:e1:77:12:35:8e:5e:3a:53:fd:40:7b:5c:3d:be: 20:df:2d:76:62:3f:54:01:c4:fd:85:64:fc:81:48:7b:60:ba: c3:f7:c5:7d:42:24:17:70:2b:50:84:c2:51:25:50:c3:3b:ab: 36:ba:a3:32:04:67:5a:ef:7d:ab:d1:85:ce:b1:3a:a3:05:02: 7e:3b:77:88:2a:84:be:fd:70:33:d7:03:29:28:85:54:50:6e: 68:e4:ac:9a:68:cb:25:80:09:73:55:2d:40:b7:6a:6a:b6:51: 5d:14:32:1a:43:24:4e:69:5b:d6:9c:65:1d:8d:9b:9e:35:f9: ab:b8:8d:3f:a1:cf:c4:a4:1e:4b:31:c6:ac:ef:ad:97:1b:5e: 5d:e4:9a:51:9b:3b:ee:e6:31:92:e3:a6:5f:cf:02:d4:be:4c: 6f:65:ee:c4:2b:22:8e:ca:4a:d7:30:b7:90:7c:0c:ad:8c:36: 85:85:d0:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwkFXkqPsTx7jvXKggAOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjA5M2JiOGU4YWQxMWM0YzgzNGVkZmQyZGY1NGQ0MWNi NDlmNzkwHhcNMjUxMjA2MDcwMTE4WhcNMjUxMjA3MDcwMTE4WjAzMTEwLwYDVQQD EyhlZjhhZWY1ZjVhZjFjYmVhMGVhZTU1MzFmNWIxNGJmNzAxNjgwZGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve0jqPVV5gstx4c0+ZhvtUXA28aE QCLjXnf07XGCtoe3Z8y3FoQhO0sTYHWA0C9zJzXmfEZQm1pXD3G0wSpaqL4HY+64 rCdbHrBG3vfBS91cchjN73FjJ2XpFmGYqhtKDtGZQgn4FOz9sibDHY/pNJsqVtJz AMdrAiiEluUn5UxbknC3jWOOeqN0nDUhq2oBCu9syvP12WCIGlkBx7avSVSMZITE KIZamkhwekMGABCf79Ky/pYRJNnks2JyMf3Lniyi12PjYxu9FIZY6Q77RkyFvLCv +U4M2LwlsYH4okbIyWzKKoE+xiYsBpUj//T9R7Svp0lrScT6z8G4edSsQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+K719a8cvqDq5VMfWxS/cBaA2nMB8GA1UdIwQY MBaAFEnwk7uOitEcTINO39LfVNQctJ95MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZDVHU0NkswUnhNZzA3ZjB0OVUxQnkwbjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80ZmZlOTItMDBjZS00ZmFhLTg4NWMt ZTk2MTdkNjZhNzRiLzEvU2ZDVHU0NkswUnhNZzA3ZjB0OVUxQnkwbjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS80ZmZlOTItMDBjZS00ZmFhLTg4NWMtZTk2MTdkNjZhNzRi LzEvU2ZDVHU0NkswUnhNZzA3ZjB0OVUxQnkwbjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlNZryth aPa3jPf02wGRlW6liGUEzSmlrYz/uXK3ofDJiBTxvNY5vjKHBpIjsChAcKE5FRy9 0HcFEJsI21Mo0IgejH/n4zI93zPcpOF3EjWOXjpT/UB7XD2+IN8tdmI/VAHE/YVk /IFIe2C6w/fFfUIkF3ArUITCUSVQwzurNrqjMgRnWu99q9GFzrE6owUCfjt3iCqE vv1wM9cDKSiFVFBuaOSsmmjLJYAJc1UtQLdqarZRXRQyGkMkTmlb1pxlHY2bnjX5 q7iNP6HPxKQeSzHGrO+tlxteXeSaUZs77uYxkuOmX88C1L5Mb2XuxCsijspK1zC3 kHwMrYw2hYXQuA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:16:36 2025 by rpki-client