This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft File: SffBpGd-t4JtrmneAaaZtiAdYkQ.mft (raw, json) Hash identifier: QYoHCRxVVznIaChwEuW7OPtEHssxBJ3w0n4jPe8SAqc= Subject key identifier: 08:75:46:60:21:14:05:40:1D:7C:07:47:16:19:9D:F8:6A:81:BB:96 Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44 Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244 Certificate serial: 019AF46540D8A29FCA6A1FC4811C93D710BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft Manifest number: 0939 Signing time: Sat 06 Dec 2025 16:01:07 +0000 Manifest this update: Sat 06 Dec 2025 16:01:07 +0000 Manifest next update: Sun 07 Dec 2025 16:01:07 +0000 Files and hashes: 1: 1fEhDLG2T1y1zCMSekjeKTFgEiE.roa (hash: qkZRZL3uEJ/IofMfb0sGApiJ8jObyAIyttVh0abUKHc=) 2: SffBpGd-t4JtrmneAaaZtiAdYkQ.crl (hash: LEpw1c8nX9lU4ZQTs3eJ+nT+dxC/aQ021C848wIhBUU=) 3: Ungcud01aQHgTMIDHqxKgOj76qo.roa (hash: vzFsWzaNMb5tmpdLeHM9BlzRIek6QkO8MJb/yx40U/I=) 4: aNjEb5eKDyYkgeaI_pw6s6Nyxio.roa (hash: LXIG7QItKisSD3lO6v16i6iN7S5ddhKshFToQIqNXAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:40:d8:a2:9f:ca:6a:1f:c4:81:1c:93:d7:10:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244 Validity Not Before: Dec 6 16:01:07 2025 GMT Not After : Dec 7 16:01:07 2025 GMT Subject: CN=08754660211405401d7c074716199df86a81bb96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1f:65:8b:eb:ea:08:72:28:7a:30:07:06:90: 4a:6a:cb:ef:78:ac:85:38:f4:86:4d:aa:05:15:a1: 06:18:52:23:17:75:85:25:53:da:b5:e7:cb:30:b7: e5:69:11:3b:5f:ea:aa:38:93:e2:0b:7f:b6:ec:1e: 77:c3:6f:95:d5:e8:f0:12:6a:ca:95:db:30:ed:54: cf:27:b6:90:82:4f:de:67:cb:57:fd:dd:25:fc:78: 31:9a:96:44:12:05:71:7f:a5:11:34:c0:2f:ae:f8: 23:54:66:de:b2:66:17:7d:c5:11:1f:a5:f2:8f:23: 75:a4:a8:d7:04:d0:62:9e:46:4a:6a:be:aa:51:0b: 35:50:5b:1a:a0:4a:2f:69:db:28:fe:9a:4c:f3:c2: 56:09:c8:69:b5:93:1d:d1:90:6b:ba:f5:39:1d:14: c5:5f:9c:0f:e6:61:0c:8c:07:a7:85:bb:b2:6d:57: df:49:08:00:65:01:3d:18:3b:87:0e:82:67:95:f0: fb:46:53:98:6a:ae:af:bb:ba:26:eb:eb:67:08:9f: 69:1d:6e:4d:d9:83:dc:64:19:86:0f:f4:e0:00:10: b1:d7:33:e6:58:fa:b0:cb:54:c7:5b:42:c3:ea:ec: d0:f8:c4:fa:e8:3c:b8:87:e7:11:f1:6e:d7:a5:e6: a5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:75:46:60:21:14:05:40:1D:7C:07:47:16:19:9D:F8:6A:81:BB:96 X509v3 Authority Key Identifier: keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:8f:5c:c4:21:64:5e:b0:c9:68:99:5f:17:ae:72:32:c8:8c: 10:cd:7d:60:10:7d:78:e0:92:79:9b:01:83:5c:08:9f:b8:cf: 18:ba:f6:dc:ae:82:90:57:8c:6d:50:3b:05:05:b7:e3:48:14: ea:7c:29:60:b6:d5:db:aa:28:e7:28:55:1f:ec:8a:eb:e3:d2: b2:4e:25:2b:a2:54:6a:49:4c:76:a3:ca:a5:03:fe:fd:32:1d: fb:6c:ab:ca:27:4f:7f:15:27:24:dd:f6:37:01:20:67:d0:58: 76:7e:cb:5c:79:b0:b9:0d:80:24:ef:ae:76:39:24:17:d4:11: af:1e:4a:96:54:45:e9:e4:33:7a:13:99:e0:4f:45:27:f6:e3: 6f:cd:2e:12:a6:5d:11:b0:cc:d3:de:3a:05:0e:e2:8a:5d:56: 15:8f:a4:4d:41:d7:e5:41:da:4f:d1:e8:3e:cd:80:50:59:56: a1:3f:84:b9:07:73:ff:ed:d7:b4:50:ee:9d:39:00:c7:b1:3d: dd:c7:4c:bf:7c:99:a4:de:1f:04:ea:56:3a:aa:38:ef:15:55: 3f:8e:2a:b3:d8:ef:64:2c:38:ce:41:cf:34:6e:77:47:5f:4d: 54:26:62:4a:5e:54:dd:38:c7:74:38:80:66:57:ba:59:93:04: 25:8e:42:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZUDYop/Kah/EgRyT1xC8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjdjMWE0Njc3ZWI3ODI2ZGFlNjlkZTAxYTY5OWI2MjAx ZDYyNDQwHhcNMjUxMjA2MTYwMTA3WhcNMjUxMjA3MTYwMTA3WjAzMTEwLwYDVQQD EygwODc1NDY2MDIxMTQwNTQwMWQ3YzA3NDcxNjE5OWRmODZhODFiYjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh9li+vqCHIoejAHBpBKasvveKyF OPSGTaoFFaEGGFIjF3WFJVPatefLMLflaRE7X+qqOJPiC3+27B53w2+V1ejwEmrK ldsw7VTPJ7aQgk/eZ8tX/d0l/HgxmpZEEgVxf6URNMAvrvgjVGbesmYXfcURH6Xy jyN1pKjXBNBinkZKar6qUQs1UFsaoEovadso/ppM88JWCchptZMd0ZBruvU5HRTF X5wP5mEMjAenhbuybVffSQgAZQE9GDuHDoJnlfD7RlOYaq6vu7om6+tnCJ9pHW5N 2YPcZBmGD/TgABCx1zPmWPqwy1THW0LD6uzQ+MT66Dy4h+cR8W7XpealpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAh1RmAhFAVAHXwHRxYZnfhqgbuWMB8GA1UdIwQY MBaAFEn3waRnfreCba5p3gGmmbYgHWJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS80ZGJkNjMtNzZiMS00YjAzLTlkZWEt NTBjMTZiZGQ1YzI0LzEvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS80ZGJkNjMtNzZiMS00YjAzLTlkZWEtNTBjMTZiZGQ1YzI0 LzEvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbo9cxCFk XrDJaJlfF65yMsiMEM19YBB9eOCSeZsBg1wIn7jPGLr23K6CkFeMbVA7BQW340gU 6nwpYLbV26oo5yhVH+yK6+PSsk4lK6JUaklMdqPKpQP+/TId+2yryidPfxUnJN32 NwEgZ9BYdn7LXHmwuQ2AJO+udjkkF9QRrx5KllRF6eQzehOZ4E9FJ/bjb80uEqZd EbDM0946BQ7iil1WFY+kTUHX5UHaT9HoPs2AUFlWoT+EuQdz/+3XtFDunTkAx7E9 3cdMv3yZpN4fBOpWOqo47xVVP44qs9jvZCw4zkHPNG53R19NVCZiSl5U3TjHdDiA Zle6WZMEJY5C5A== -----END CERTIFICATE-----Generated at Sat Dec 6 18:37:13 2025 by rpki-client