This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft File: SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft (raw, json) Hash identifier: /tdViYYQxg4Zyeu9C+ka2i4uKQi+qRC8hNDZOAw8jpk= Subject key identifier: 16:CA:A8:E9:EF:4B:D7:F4:B8:3B:E5:92:92:DC:B8:D3:6E:5E:38:C6 Authority key identifier: 49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88 Certificate issuer: /CN=49f80697fe2e2d97b591ad5b91580555a44d0388 Certificate serial: 019AF42DE01A0E81E9B5452562F979FC9AA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft Manifest number: 174B Signing time: Sat 06 Dec 2025 15:00:38 +0000 Manifest this update: Sat 06 Dec 2025 15:00:38 +0000 Manifest next update: Sun 07 Dec 2025 15:00:38 +0000 Files and hashes: 1: SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl (hash: 5bh6MIOnwPDr0nTcYeoOeukbI2GJxU3htK9l95c+Wi0=) 2: qamXgGdELqVwuCRXcGaE5fyjphY.roa (hash: XwiZQCHwX+Vwexgrkkuz5eMSgh62jyoQLxKiqhe1Bqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:e0:1a:0e:81:e9:b5:45:25:62:f9:79:fc:9a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f80697fe2e2d97b591ad5b91580555a44d0388 Validity Not Before: Dec 6 15:00:38 2025 GMT Not After : Dec 7 15:00:38 2025 GMT Subject: CN=16caa8e9ef4bd7f4b83be59292dcb8d36e5e38c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:16:85:6d:d2:48:79:98:dd:8a:4f:cc:8a:8c: e3:f7:1e:40:d8:d1:9a:82:5e:23:1e:65:3b:32:1f: ff:eb:b6:3a:11:d0:c1:a1:3d:82:32:31:b2:ab:e1: ea:6a:7a:0f:6a:e6:c5:cd:f9:a7:5b:16:8b:88:7b: 94:88:9c:e8:1f:13:72:55:d0:32:34:05:61:bf:c3: 90:cc:63:55:c2:c3:5b:c9:a4:5f:57:12:85:94:d9: 54:22:39:d5:ba:2f:84:e7:7d:bd:a8:1f:e1:bf:08: ea:79:7d:93:35:1e:79:d3:46:30:30:8f:d4:37:35: fb:85:29:3e:65:8f:77:a6:91:8a:29:d3:76:e6:5f: a5:91:7c:79:3f:3e:a2:11:e4:04:a3:cc:32:4f:36: 02:3f:4e:72:bc:92:86:39:b4:54:f6:0a:cb:9f:37: f0:87:23:5a:16:29:ef:9b:aa:0f:44:51:14:ea:ee: 1c:c5:b7:dd:5c:1b:fd:91:90:53:2c:0b:67:72:00: cb:64:4e:4e:84:f7:9e:6b:bd:37:33:e7:03:13:60: d9:06:ed:cf:24:46:4c:d3:1e:92:48:33:91:c5:70: 86:3e:f3:0b:88:17:d6:e1:ad:e6:f2:3e:55:c7:04: 47:87:4f:9c:08:e8:7a:aa:3d:0b:71:94:2b:70:3c: 08:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CA:A8:E9:EF:4B:D7:F4:B8:3B:E5:92:92:DC:B8:D3:6E:5E:38:C6 X509v3 Authority Key Identifier: keyid:49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1a:d5:c8:25:a6:9a:33:71:83:07:33:0f:ff:a4:7e:f3:a0: d5:a2:b7:df:da:89:16:77:df:7d:30:c7:1d:d0:4a:24:88:20: 1d:7b:26:5c:c1:05:a2:6e:6f:77:e6:ff:c3:95:21:ae:56:0b: 11:da:71:91:8a:83:27:3d:be:a0:ec:c5:ac:73:06:d2:b9:79: 9f:4c:e9:b1:7f:5f:e0:3a:b1:9b:77:f0:59:e4:3e:76:97:5a: 0c:18:50:0c:0e:65:9c:ef:99:00:6a:fd:06:be:7c:dd:75:b1: b1:60:f3:d4:58:51:48:a1:eb:f5:51:25:2e:fb:74:a6:19:c5: a4:1f:f3:dd:fd:bc:39:b4:41:dc:3c:66:1d:29:a2:a2:e9:66: 1a:2c:6f:13:72:82:65:b5:2c:2b:25:c7:67:eb:32:03:44:04: cb:62:bf:90:b7:c1:eb:9e:74:43:0a:f1:4f:4f:71:89:ad:73: ea:b3:54:a1:87:0b:2a:70:95:6a:7c:37:87:f8:80:e0:81:2e: db:c6:de:7e:4d:08:06:56:76:99:01:91:4f:5d:b0:59:38:51: 2b:57:cd:c1:15:a0:e2:35:67:f0:b1:19:20:a0:a0:84:51:4a: 69:9b:12:d0:62:05:30:be:66:c5:bc:26:e6:a1:81:4b:1d:40: 09:fb:83:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LeAaDoHptUUlYvl5/JqkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjgwNjk3ZmUyZTJkOTdiNTkxYWQ1YjkxNTgwNTU1YTQ0 ZDAzODgwHhcNMjUxMjA2MTUwMDM4WhcNMjUxMjA3MTUwMDM4WjAzMTEwLwYDVQQD EygxNmNhYThlOWVmNGJkN2Y0YjgzYmU1OTI5MmRjYjhkMzZlNWUzOGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RaFbdJIeZjdik/Miozj9x5A2NGa gl4jHmU7Mh//67Y6EdDBoT2CMjGyq+HqanoPaubFzfmnWxaLiHuUiJzoHxNyVdAy NAVhv8OQzGNVwsNbyaRfVxKFlNlUIjnVui+E5329qB/hvwjqeX2TNR5500YwMI/U NzX7hSk+ZY93ppGKKdN25l+lkXx5Pz6iEeQEo8wyTzYCP05yvJKGObRU9grLnzfw hyNaFinvm6oPRFEU6u4cxbfdXBv9kZBTLAtncgDLZE5OhPeea703M+cDE2DZBu3P JEZM0x6SSDORxXCGPvMLiBfW4a3m8j5VxwRHh0+cCOh6qj0LcZQrcDwItQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbKqOnvS9f0uDvlkpLcuNNuXjjGMB8GA1UdIwQY MBaAFEn4Bpf+Li2XtZGtW5FYBVWkTQOIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZnR2xfNHVMWmUxa2ExYmtWZ0ZWYVJOQTRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8yNGRmNzItZmNjYy00OGRmLWE1YWUt MWE2NGE4MDc3YjE0LzEvU2ZnR2xfNHVMWmUxa2ExYmtWZ0ZWYVJOQTRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8yNGRmNzItZmNjYy00OGRmLWE1YWUtMWE2NGE4MDc3YjE0 LzEvU2ZnR2xfNHVMWmUxa2ExYmtWZ0ZWYVJOQTRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxrVyCWm mjNxgwczD/+kfvOg1aK339qJFnfffTDHHdBKJIggHXsmXMEFom5vd+b/w5UhrlYL EdpxkYqDJz2+oOzFrHMG0rl5n0zpsX9f4Dqxm3fwWeQ+dpdaDBhQDA5lnO+ZAGr9 Br583XWxsWDz1FhRSKHr9VElLvt0phnFpB/z3f28ObRB3DxmHSmioulmGixvE3KC ZbUsKyXHZ+syA0QEy2K/kLfB6550QwrxT09xia1z6rNUoYcLKnCVanw3h/iA4IEu 28befk0IBlZ2mQGRT12wWThRK1fNwRWg4jVn8LEZIKCghFFKaZsS0GIFML5mxbwm 5qGBSx1ACfuDCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:15:58 2025 by rpki-client