This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft File: SFF8v1-HKM7CSvPC6G7PuANT5g0.mft (raw, json) Hash identifier: nNoa78KhIjHZPunjAc/LIsV1gPQm9E+uljKusEKMTqk= Subject key identifier: 10:7F:F1:AF:D4:16:B0:A1:3E:44:4E:C8:50:7A:B9:C9:B9:8A:1B:42 Authority key identifier: 48:51:7C:BF:5F:87:28:CE:C2:4A:F3:C2:E8:6E:CF:B8:03:53:E6:0D Certificate issuer: /CN=48517cbf5f8728cec24af3c2e86ecfb80353e60d Certificate serial: 019AF389794DF08166CE7E1603E13D54B539 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft Manifest number: 0E42 Signing time: Sat 06 Dec 2025 12:01:04 +0000 Manifest this update: Sat 06 Dec 2025 12:01:04 +0000 Manifest next update: Sun 07 Dec 2025 12:01:04 +0000 Files and hashes: 1: SFF8v1-HKM7CSvPC6G7PuANT5g0.crl (hash: kDVAzjW1YB/jlSX2/TXdkYmkwAjkF84qdL3UO7jggD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:79:4d:f0:81:66:ce:7e:16:03:e1:3d:54:b5:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48517cbf5f8728cec24af3c2e86ecfb80353e60d Validity Not Before: Dec 6 12:01:04 2025 GMT Not After : Dec 7 12:01:04 2025 GMT Subject: CN=107ff1afd416b0a13e444ec8507ab9c9b98a1b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:02:24:0f:cd:e0:4c:41:bb:00:d8:7c:64:d3: f6:45:df:1f:e2:7b:6e:54:bc:0c:1f:0a:57:7f:2e: 5f:eb:36:e6:b8:87:e4:17:31:38:5e:90:f7:d5:79: ef:88:4a:45:f0:c4:5b:60:a7:84:ab:d8:71:2e:b6: 41:e3:c2:8b:85:f2:24:05:b3:ba:fd:f2:ff:39:5f: e5:4a:69:b6:24:15:39:79:eb:c8:59:9d:40:de:0a: 80:19:b8:bd:fa:a8:a5:99:04:16:6d:ef:6a:c2:e3: e7:5f:a0:aa:5c:5a:67:c1:a2:a0:ad:fb:2a:63:09: 04:0b:db:65:58:e5:c6:d1:32:db:05:7f:e9:df:b0: 93:87:2d:ae:33:c7:9b:6f:8b:6c:fd:79:31:9d:fc: 18:80:80:c7:9c:61:15:d4:94:f6:00:6e:54:e3:29: 83:40:80:3d:a3:49:50:f6:71:22:2d:6c:c1:99:2b: 96:9a:5e:dd:56:32:48:d1:81:be:9c:1c:23:02:69: b1:55:b1:70:e6:b1:2c:18:2d:cc:01:64:1c:a5:6b: 6c:c9:c1:2a:6f:e7:82:d1:e6:be:09:d4:ef:2a:f9: b2:5c:f8:d5:c0:d2:15:9e:3d:83:1f:de:c8:55:ad: 79:07:cd:40:be:11:d6:42:24:d3:dd:e5:a5:21:7f: 93:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7F:F1:AF:D4:16:B0:A1:3E:44:4E:C8:50:7A:B9:C9:B9:8A:1B:42 X509v3 Authority Key Identifier: keyid:48:51:7C:BF:5F:87:28:CE:C2:4A:F3:C2:E8:6E:CF:B8:03:53:E6:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:21:83:f3:11:c4:b1:9c:8b:2a:ad:0a:13:ae:20:54:64:ba: bd:c9:31:69:99:06:9d:3c:a9:eb:7b:80:b6:f8:53:e8:e5:06: 43:b8:e4:44:78:67:a8:e4:af:37:3a:50:96:43:bf:b2:9d:c5: d2:e0:2b:c0:22:af:9d:0f:05:99:53:79:48:de:dd:6a:4f:33: 3b:25:9a:fe:76:68:30:64:12:2a:cb:cc:a0:29:2f:5c:60:cc: ca:e6:7f:e9:b3:23:dd:2d:b1:53:2b:f1:10:ad:8a:6d:98:7a: a4:bb:f7:f9:4c:1b:69:b4:92:e1:3f:d6:dd:9f:a8:c6:a8:4d: 66:08:9c:c0:9a:e2:b7:74:d0:6e:a8:6e:15:a4:a2:bc:bb:ad: 38:ea:2b:4d:96:15:a3:41:69:21:de:c7:3e:e2:48:d2:a4:1b: 8a:f1:00:0a:eb:67:8f:dd:8b:18:68:93:7c:1a:96:06:38:04: db:5c:da:67:32:63:82:d2:2d:8a:a2:20:63:06:0a:4c:b1:a7: 64:bb:4a:07:70:1b:24:23:cf:ff:0d:16:49:00:b3:4a:b0:66: 1b:7b:e5:84:c7:09:d9:45:d1:03:b7:0b:1d:a1:86:98:e4:22: 26:38:fd:db:4f:14:0a:36:18:f5:41:00:2a:f4:25:e2:21:a5: 9e:c4:fb:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziXlN8IFmzn4WA+E9VLU5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NTE3Y2JmNWY4NzI4Y2VjMjRhZjNjMmU4NmVjZmI4MDM1 M2U2MGQwHhcNMjUxMjA2MTIwMTA0WhcNMjUxMjA3MTIwMTA0WjAzMTEwLwYDVQQD EygxMDdmZjFhZmQ0MTZiMGExM2U0NDRlYzg1MDdhYjljOWI5OGExYjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/QIkD83gTEG7ANh8ZNP2Rd8f4ntu VLwMHwpXfy5f6zbmuIfkFzE4XpD31XnviEpF8MRbYKeEq9hxLrZB48KLhfIkBbO6 /fL/OV/lSmm2JBU5eevIWZ1A3gqAGbi9+qilmQQWbe9qwuPnX6CqXFpnwaKgrfsq YwkEC9tlWOXG0TLbBX/p37CThy2uM8ebb4ts/XkxnfwYgIDHnGEV1JT2AG5U4ymD QIA9o0lQ9nEiLWzBmSuWml7dVjJI0YG+nBwjAmmxVbFw5rEsGC3MAWQcpWtsycEq b+eC0ea+CdTvKvmyXPjVwNIVnj2DH97IVa15B81AvhHWQiTT3eWlIX+TqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBB/8a/UFrChPkROyFB6ucm5ihtCMB8GA1UdIwQY MBaAFEhRfL9fhyjOwkrzwuhuz7gDU+YNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0ZGOHYxLUhLTTdDU3ZQQzZHN1B1QU5UNWcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZDJmMmQtYTQyNS00NGFiLTliNWQt OGMzYjQwMjg1NTY2LzEvU0ZGOHYxLUhLTTdDU3ZQQzZHN1B1QU5UNWcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZDJmMmQtYTQyNS00NGFiLTliNWQtOGMzYjQwMjg1NTY2 LzEvU0ZGOHYxLUhLTTdDU3ZQQzZHN1B1QU5UNWcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbyGD8xHE sZyLKq0KE64gVGS6vckxaZkGnTyp63uAtvhT6OUGQ7jkRHhnqOSvNzpQlkO/sp3F 0uArwCKvnQ8FmVN5SN7dak8zOyWa/nZoMGQSKsvMoCkvXGDMyuZ/6bMj3S2xUyvx EK2KbZh6pLv3+UwbabSS4T/W3Z+oxqhNZgicwJrit3TQbqhuFaSivLutOOorTZYV o0FpId7HPuJI0qQbivEACutnj92LGGiTfBqWBjgE21zaZzJjgtItiqIgYwYKTLGn ZLtKB3AbJCPP/w0WSQCzSrBmG3vlhMcJ2UXRA7cLHaGGmOQiJjj9208UCjYY9UEA KvQl4iGlnsT77g== -----END CERTIFICATE-----Generated at Sat Dec 6 19:40:08 2025 by rpki-client