This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft File: SfA190v2NQvDef8uJTiC0kaO9Yg.mft (raw, json) Hash identifier: 5sPuL5lV5uQ9OhDfhx0r5NNkQ+8xpgYMN/+a5CMQSyY= Subject key identifier: 6C:B3:53:09:33:53:D2:BC:BC:CA:B9:84:53:52:25:62:11:95:5D:02 Authority key identifier: 49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88 Certificate issuer: /CN=49f035f74bf6350bc379ff2e253882d2468ef588 Certificate serial: 019AF42E82AB8C5EC895D7948E2E6972F53D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft Manifest number: 0478 Signing time: Sat 06 Dec 2025 15:01:20 +0000 Manifest this update: Sat 06 Dec 2025 15:01:20 +0000 Manifest next update: Sun 07 Dec 2025 15:01:20 +0000 Files and hashes: 1: SfA190v2NQvDef8uJTiC0kaO9Yg.crl (hash: T5RxFUNQNxPMD53Coppo7ajwcYhnjkSCyH6RqGS8JqY=) 2: wbmZO-HC2oZGGdDiSLm7Xy-yCzU.roa (hash: G5A8w6EKnJ7KNviXJvfO4lYZfTcipjXbs1g3Za2z4wg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:82:ab:8c:5e:c8:95:d7:94:8e:2e:69:72:f5:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f035f74bf6350bc379ff2e253882d2468ef588 Validity Not Before: Dec 6 15:01:20 2025 GMT Not After : Dec 7 15:01:20 2025 GMT Subject: CN=6cb353093353d2bcbccab9845352256211955d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1b:a7:00:75:0f:be:c5:0c:c1:c5:c6:ea:d2: e4:34:6e:2b:d1:bc:40:b2:09:77:8a:21:05:e9:08: 08:6e:e0:ad:bd:04:f5:9e:cc:72:4f:54:23:cc:8f: f6:5d:35:e4:d6:30:49:cb:97:80:3c:bc:a4:64:b5: dd:5f:03:58:4e:fb:f3:55:55:b5:aa:3a:de:94:a0: ca:37:6d:46:ac:df:4b:f9:8b:17:dc:e0:6d:c7:19: 47:78:b9:74:53:5d:b4:3e:fe:b3:84:6f:18:a0:1e: b4:1d:8c:1f:24:b7:5f:15:46:8a:d5:6b:b1:94:0f: 20:d6:ae:8d:19:89:90:20:36:46:13:ef:f9:f3:51: 63:22:e1:91:b1:c5:0c:55:60:3c:94:c2:08:31:4f: 8a:36:fd:77:ac:b2:21:72:19:c2:52:cc:55:8b:9c: b6:b6:25:1c:e8:9f:23:3e:a6:51:cb:e4:e9:38:eb: 98:3e:6a:67:a0:2c:86:2e:d1:8b:02:65:39:b5:75: c4:41:68:13:59:40:80:c8:ed:03:f6:03:d4:f1:7f: 20:ec:8a:6e:6f:10:ca:73:4c:b9:1e:f8:2a:d7:8d: 3a:15:f8:e3:cb:25:c2:9b:98:8c:a3:85:7e:87:52: 77:84:68:98:13:fd:bf:3e:84:ad:2f:b0:ab:8c:e2: e8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B3:53:09:33:53:D2:BC:BC:CA:B9:84:53:52:25:62:11:95:5D:02 X509v3 Authority Key Identifier: keyid:49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e2:1d:1e:f0:4e:3d:c5:a8:c1:53:64:af:2d:21:1a:67:13: 8d:e0:a1:7f:e7:a0:67:5e:18:b4:57:c9:ec:76:e6:e5:9b:1d: 18:b6:90:b8:92:13:20:0e:60:cc:47:96:7a:c3:dc:d3:a3:23: 1e:69:53:37:35:c7:76:f0:c0:04:f2:28:6c:22:ab:74:79:52: 02:b4:9c:ff:e1:6c:60:67:94:d1:26:46:11:40:cc:15:43:43: a4:92:6c:0c:42:f7:0b:b4:af:43:44:13:1c:1f:34:ac:c2:af: 09:f1:ad:f1:69:c9:9e:ef:ad:ca:6f:e6:3a:49:8e:b5:93:0d: 0c:c8:0e:85:04:e8:01:e8:ef:50:30:08:f0:d3:06:6d:7a:ce: 1f:ac:d6:c0:78:2d:c9:e0:c0:d4:6c:48:6a:03:60:83:54:c5: 17:da:38:a7:d4:ad:6b:63:87:b4:1e:ba:7c:36:02:9c:71:b7: 6d:87:1b:be:27:57:05:a8:e7:00:75:21:8a:8e:56:46:e0:c9: 02:39:9e:90:06:1a:58:89:8d:f9:0e:ea:e1:3e:ab:ab:8e:6e: d1:56:cb:05:44:10:c0:bb:07:8b:38:b3:34:2a:8c:ea:11:b1: 02:73:93:8f:80:26:3d:38:13:1e:1f:5c:98:57:7d:0a:0d:a3: 4f:12:0c:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LoKrjF7IldeUji5pcvU9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjAzNWY3NGJmNjM1MGJjMzc5ZmYyZTI1Mzg4MmQyNDY4 ZWY1ODgwHhcNMjUxMjA2MTUwMTIwWhcNMjUxMjA3MTUwMTIwWjAzMTEwLwYDVQQD Eyg2Y2IzNTMwOTMzNTNkMmJjYmNjYWI5ODQ1MzUyMjU2MjExOTU1ZDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhunAHUPvsUMwcXG6tLkNG4r0bxA sgl3iiEF6QgIbuCtvQT1nsxyT1QjzI/2XTXk1jBJy5eAPLykZLXdXwNYTvvzVVW1 qjrelKDKN21GrN9L+YsX3OBtxxlHeLl0U120Pv6zhG8YoB60HYwfJLdfFUaK1Wux lA8g1q6NGYmQIDZGE+/581FjIuGRscUMVWA8lMIIMU+KNv13rLIhchnCUsxVi5y2 tiUc6J8jPqZRy+TpOOuYPmpnoCyGLtGLAmU5tXXEQWgTWUCAyO0D9gPU8X8g7Ipu bxDKc0y5Hvgq1406FfjjyyXCm5iMo4V+h1J3hGiYE/2/PoStL7CrjOLoEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGyzUwkzU9K8vMq5hFNSJWIRlV0CMB8GA1UdIwQY MBaAFEnwNfdL9jULw3n/LiU4gtJGjvWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZBMTkwdjJOUXZEZWY4dUpUaUMwa2FPOVlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMmZkOGUtMmQzOC00YWIxLTg0YjUt OWVmMTI5ZWFkZTc4LzEvU2ZBMTkwdjJOUXZEZWY4dUpUaUMwa2FPOVlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wMmZkOGUtMmQzOC00YWIxLTg0YjUtOWVmMTI5ZWFkZTc4 LzEvU2ZBMTkwdjJOUXZEZWY4dUpUaUMwa2FPOVlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+IdHvBO PcWowVNkry0hGmcTjeChf+egZ14YtFfJ7Hbm5ZsdGLaQuJITIA5gzEeWesPc06Mj HmlTNzXHdvDABPIobCKrdHlSArSc/+FsYGeU0SZGEUDMFUNDpJJsDEL3C7SvQ0QT HB80rMKvCfGt8WnJnu+tym/mOkmOtZMNDMgOhQToAejvUDAI8NMGbXrOH6zWwHgt yeDA1GxIagNgg1TFF9o4p9Sta2OHtB66fDYCnHG3bYcbvidXBajnAHUhio5WRuDJ AjmekAYaWImN+Q7q4T6rq45u0VbLBUQQwLsHizizNCqM6hGxAnOTj4AmPTgTHh9c mFd9Cg2jTxIMWA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:37:11 2025 by rpki-client