This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft File: sfcTzyBVLWxcI_CeezdmmEb5ylA.mft (raw, json) Hash identifier: 09pnLbkks25rzSrWUinhLm+deZTgN34wbFREmtfLeuE= Subject key identifier: 2A:D2:3F:D2:BC:C9:B5:65:A1:4E:63:B2:15:C0:C6:B0:E0:F1:1B:B5 Authority key identifier: B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50 Certificate issuer: /CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50 Certificate serial: 019B2D0B260C3D408F416C9E6AFA130BCA1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft Manifest number: 1784 Signing time: Wed 17 Dec 2025 16:01:03 +0000 Manifest this update: Wed 17 Dec 2025 16:01:03 +0000 Manifest next update: Thu 18 Dec 2025 16:01:03 +0000 Files and hashes: 1: RlSX_O9nuK4visZrcXhuUrMTobY.roa (hash: rJSur0He4KlKRGvS+jaXIpRrSe2/3CDqYP07r9YT8i0=) 2: _FEDHOA1DaPuw5szVg_jX1NChtc.roa (hash: NTy69zIQkKyjkxDfKJ+X67SWRMXHN0I5/tJxmftqgVU=) 3: sfcTzyBVLWxcI_CeezdmmEb5ylA.crl (hash: vQOSq09eWA+trQXJyB4WJtVQRbZkJj4FTCjYhWOYHZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:26:0c:3d:40:8f:41:6c:9e:6a:fa:13:0b:ca:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50 Validity Not Before: Dec 17 16:01:03 2025 GMT Not After : Dec 18 16:01:03 2025 GMT Subject: CN=2ad23fd2bcc9b565a14e63b215c0c6b0e0f11bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e7:74:04:1a:50:d9:48:1c:45:c1:7e:ff:3f: f7:b0:73:b2:06:ea:ba:9b:0a:2b:a3:f6:58:55:6e: 44:8c:f1:1d:47:b4:6a:c9:33:35:b5:e2:af:c3:81: 05:52:23:a4:7c:38:f5:d0:04:8c:5e:c7:46:3f:3f: eb:56:e1:72:df:5c:eb:f3:e5:cb:1f:ab:1f:86:ad: a4:d8:14:49:3d:f3:7a:17:0d:c7:69:09:0b:19:e7: a7:dd:83:35:e1:25:c1:aa:2c:52:3a:e0:7d:dd:26: 14:98:63:6f:89:fa:83:ca:95:b2:b0:07:dd:61:ec: a6:a9:15:b9:c6:90:ce:96:ad:af:ea:31:f8:e7:02: 4e:e8:43:a2:03:5b:b9:6a:ce:72:8a:53:b8:0b:9e: 6c:fd:ac:a7:05:11:3a:6f:1e:09:de:9e:e6:c0:a2: 2b:52:43:85:5d:d8:8e:e1:11:e1:b3:94:4d:52:e5: ae:6c:a1:9f:bb:66:8d:00:2f:68:65:7f:e0:0e:55: e7:48:82:51:6b:30:47:1b:1c:96:09:3d:2e:95:cf: 0c:9b:45:54:54:7f:5c:58:61:5f:b6:a4:bf:8c:b6: b4:eb:d6:98:83:a6:a9:96:15:09:66:f3:98:0b:c9: b1:da:f8:1f:d9:7a:a7:f2:07:84:97:6a:b8:4a:02: 0c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D2:3F:D2:BC:C9:B5:65:A1:4E:63:B2:15:C0:C6:B0:E0:F1:1B:B5 X509v3 Authority Key Identifier: keyid:B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:c9:af:41:42:a1:9e:30:df:d4:d7:74:53:61:e1:66:1a:ce: 55:39:27:82:1c:8e:6d:5c:6b:68:c6:d2:cf:85:c9:a6:f5:d2: fa:46:e9:9b:64:47:06:00:3f:29:fc:74:20:b6:2c:61:7a:58: 23:b6:b3:78:5d:42:2a:b1:7c:4e:d4:bd:85:81:43:48:0b:8b: 44:6b:55:80:6a:ab:58:bb:b1:88:a7:4b:88:34:65:0f:54:b0: 1a:d8:4c:ac:a1:a5:f4:1a:41:e2:53:28:2f:86:57:a4:10:9c: 00:22:9b:67:1e:43:d7:05:36:44:0a:cb:dd:91:9f:d9:10:dd: 13:3e:51:15:31:50:3d:96:98:69:96:84:bc:af:a7:0a:62:0c: 4f:76:07:28:15:d5:55:09:78:f5:d5:d8:fc:0c:e8:c6:d8:b5: fc:14:ac:45:f3:78:71:c8:8b:ac:13:15:9d:de:e9:84:83:1f: 44:15:85:6f:1a:9f:1a:9d:bf:17:6c:eb:27:c7:96:5b:6a:2f: a1:85:43:6c:91:81:a6:aa:33:ab:03:0a:36:6c:8e:13:0e:48: da:e8:9a:b2:79:0b:cf:b4:02:86:70:7b:35:7c:3c:0d:e8:04: 46:21:a1:25:0c:6b:34:a9:ce:a6:91:ef:78:1e:d6:20:23:00: 16:d6:04:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstCyYMPUCPQWyeavoTC8oeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZjcxM2NmMjA1NTJkNmM1YzIzZjA5ZTdiMzc2Njk4NDZm OWNhNTAwHhcNMjUxMjE3MTYwMTAzWhcNMjUxMjE4MTYwMTAzWjAzMTEwLwYDVQQD EygyYWQyM2ZkMmJjYzliNTY1YTE0ZTYzYjIxNWMwYzZiMGUwZjExYmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOd0BBpQ2UgcRcF+/z/3sHOyBuq6 mworo/ZYVW5EjPEdR7RqyTM1teKvw4EFUiOkfDj10ASMXsdGPz/rVuFy31zr8+XL H6sfhq2k2BRJPfN6Fw3HaQkLGeen3YM14SXBqixSOuB93SYUmGNvifqDypWysAfd YeymqRW5xpDOlq2v6jH45wJO6EOiA1u5as5yilO4C55s/aynBRE6bx4J3p7mwKIr UkOFXdiO4RHhs5RNUuWubKGfu2aNAC9oZX/gDlXnSIJRazBHGxyWCT0ulc8Mm0VU VH9cWGFftqS/jLa069aYg6aplhUJZvOYC8mx2vgf2Xqn8geEl2q4SgIMxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrSP9K8ybVloU5jshXAxrDg8Ru1MB8GA1UdIwQY MBaAFLH3E88gVS1sXCPwnns3ZphG+cpQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2ZjVHp5QlZMV3hjSV9DZWV6ZG1tRWI1eWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mMWFmMjktN2YwOS00ZjljLWFjZDYt Njk0ZDc4YjMyZDIwLzEvc2ZjVHp5QlZMV3hjSV9DZWV6ZG1tRWI1eWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mMWFmMjktN2YwOS00ZjljLWFjZDYtNjk0ZDc4YjMyZDIw LzEvc2ZjVHp5QlZMV3hjSV9DZWV6ZG1tRWI1eWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8mvQUKh njDf1Nd0U2HhZhrOVTknghyObVxraMbSz4XJpvXS+kbpm2RHBgA/Kfx0ILYsYXpY I7azeF1CKrF8TtS9hYFDSAuLRGtVgGqrWLuxiKdLiDRlD1SwGthMrKGl9BpB4lMo L4ZXpBCcACKbZx5D1wU2RArL3ZGf2RDdEz5RFTFQPZaYaZaEvK+nCmIMT3YHKBXV VQl49dXY/Azoxti1/BSsRfN4cciLrBMVnd7phIMfRBWFbxqfGp2/F2zrJ8eWW2ov oYVDbJGBpqozqwMKNmyOEw5I2uiasnkLz7QChnB7NXw8DegERiGhJQxrNKnOppHv eB7WICMAFtYERQ== -----END CERTIFICATE-----Generated at Wed Dec 17 18:44:40 2025 by rpki-client