This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft File: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft (raw, json) Hash identifier: sX/1Ai1GVTKugqj3UV17GrA64B9bIZ4AgPfR7c9Q9/Q= Subject key identifier: 7E:2A:53:08:95:D5:19:55:FA:54:E1:8D:96:21:40:B3:56:37:BB:EF Authority key identifier: B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F Certificate issuer: /CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f Certificate serial: 019B2EFB18FA3F2914B935CE5B543F1EB24C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft Manifest number: 0E90 Signing time: Thu 18 Dec 2025 01:02:46 +0000 Manifest this update: Thu 18 Dec 2025 01:02:46 +0000 Manifest next update: Fri 19 Dec 2025 01:02:46 +0000 Files and hashes: 1: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl (hash: 1Ds+u/pRlPpc3RzZOTanswLojcdBcQnvFpKBMcOhb+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fb:18:fa:3f:29:14:b9:35:ce:5b:54:3f:1e:b2:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f Validity Not Before: Dec 18 01:02:46 2025 GMT Not After : Dec 19 01:02:46 2025 GMT Subject: CN=7e2a530895d51955fa54e18d962140b35637bbef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e0:1d:68:01:87:89:47:eb:25:5e:e3:fd:61: 0b:56:06:c4:3a:86:52:48:13:47:bb:78:ca:44:ae: 1c:cd:05:34:93:5a:4c:01:36:a2:a3:44:a9:49:54: e6:68:bf:02:d1:82:d7:d0:c6:ac:c4:57:5a:81:0a: 85:4e:1f:f4:e7:43:df:58:d7:f9:bb:f8:07:d0:8c: cb:03:de:5e:2d:c2:d7:40:7b:03:40:c4:51:96:fe: 3d:03:f5:76:0d:c2:6a:9b:80:8b:b9:78:97:77:ea: 29:70:4a:da:0e:30:ad:55:c1:66:6c:31:af:1c:42: cc:37:59:25:99:e1:32:25:56:0c:c7:94:dc:aa:43: 9f:2b:f9:e5:d6:d2:c7:ee:fc:1f:d4:f5:a4:1c:e4: 9c:12:f6:09:72:8a:01:91:eb:7a:ff:be:3d:6b:83: ca:f4:44:2a:db:da:75:da:57:b2:d5:5b:b5:a3:ea: 6b:2f:c4:71:ac:19:36:a7:10:68:42:20:81:aa:8a: f8:03:92:1b:e6:e6:fa:4a:0c:9e:a7:6a:1c:2d:6e: d0:73:44:64:29:70:cc:6c:76:f7:6c:b7:9d:99:f5: 12:f4:c6:31:e6:d8:ff:48:5e:71:47:3e:d2:7d:2c: ad:bb:e6:3c:f8:70:72:a8:38:16:f8:ea:ea:b5:6d: c3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:2A:53:08:95:D5:19:55:FA:54:E1:8D:96:21:40:B3:56:37:BB:EF X509v3 Authority Key Identifier: keyid:B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:5c:78:c9:f1:9e:4c:12:6a:2b:e6:4c:b5:7f:2f:52:d3:1a: 5d:d7:5e:a4:34:7d:6b:06:cd:27:a7:f6:61:46:db:3d:62:b0: 17:c7:8f:21:53:2b:e2:87:7c:7b:4b:6d:a9:2c:54:65:59:62: 25:09:ab:bc:14:38:2a:a2:9e:c0:57:dd:b7:15:2f:81:ef:83: ed:2a:f6:87:8d:53:95:0f:cd:aa:8b:a8:39:37:0b:5c:c1:30: 8c:53:37:cb:2d:99:47:41:a1:94:b7:f1:30:36:48:bf:65:78: 4a:cd:c3:96:2c:d2:58:b9:37:11:91:e8:5b:2a:e5:96:48:db: 52:48:91:e3:42:b8:63:76:13:94:e5:e8:a6:61:0e:53:78:65: 4d:9c:b4:3b:e3:1b:1a:74:ba:b1:6b:b4:4f:7c:68:6f:df:77: f5:e1:db:e5:5c:61:16:9a:f2:3e:1a:36:29:07:2e:26:89:81: cd:04:df:d9:20:e7:dd:10:98:ac:db:c2:ef:84:67:f6:4b:0d: 26:4f:c3:a0:c1:72:94:5e:94:60:cd:8f:ea:0c:0d:29:62:93: 3c:c4:6d:5d:c0:e1:88:33:6b:b4:1b:b4:9a:5d:23:fd:0f:8e: 2e:46:3a:95:bf:5f:d7:48:5e:57:9e:21:9b:57:eb:da:82:f2: 8f:07:4e:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+xj6PykUuTXOW1Q/HrJMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZjAyNTJmZmE0MjA4M2E3ZGZkNWM2YzVlNzI3ZDY0Yjkx MWNkOWYwHhcNMjUxMjE4MDEwMjQ2WhcNMjUxMjE5MDEwMjQ2WjAzMTEwLwYDVQQD Eyg3ZTJhNTMwODk1ZDUxOTU1ZmE1NGUxOGQ5NjIxNDBiMzU2MzdiYmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOAdaAGHiUfrJV7j/WELVgbEOoZS SBNHu3jKRK4czQU0k1pMATaio0SpSVTmaL8C0YLX0MasxFdagQqFTh/050PfWNf5 u/gH0IzLA95eLcLXQHsDQMRRlv49A/V2DcJqm4CLuXiXd+opcEraDjCtVcFmbDGv HELMN1klmeEyJVYMx5TcqkOfK/nl1tLH7vwf1PWkHOScEvYJcooBket6/749a4PK 9EQq29p12ley1Vu1o+prL8RxrBk2pxBoQiCBqor4A5Ib5ub6Sgyep2ocLW7Qc0Rk KXDMbHb3bLedmfUS9MYx5tj/SF5xRz7SfSytu+Y8+HByqDgW+OrqtW3DiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4qUwiV1RlV+lThjZYhQLNWN7vvMB8GA1UdIwQY MBaAFLHwJS/6Qgg6ff1cbF5yfWS5Ec2fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2ZBbExfcENDRHA5X1Z4c1huSjlaTGtSelo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9jYmE0OTAtMTBmZi00MzdmLWI3Yjkt ZGU4MWExMzMzOTcyLzEvc2ZBbExfcENDRHA5X1Z4c1huSjlaTGtSelo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9jYmE0OTAtMTBmZi00MzdmLWI3YjktZGU4MWExMzMzOTcy LzEvc2ZBbExfcENDRHA5X1Z4c1huSjlaTGtSelo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOlx4yfGe TBJqK+ZMtX8vUtMaXddepDR9awbNJ6f2YUbbPWKwF8ePIVMr4od8e0ttqSxUZVli JQmrvBQ4KqKewFfdtxUvge+D7Sr2h41TlQ/NqouoOTcLXMEwjFM3yy2ZR0GhlLfx MDZIv2V4Ss3DlizSWLk3EZHoWyrllkjbUkiR40K4Y3YTlOXopmEOU3hlTZy0O+Mb GnS6sWu0T3xob9939eHb5VxhFpryPho2KQcuJomBzQTf2SDn3RCYrNvC74Rn9ksN Jk/DoMFylF6UYM2P6gwNKWKTPMRtXcDhiDNrtBu0ml0j/Q+OLkY6lb9f10heV54h m1fr2oLyjwdODQ== -----END CERTIFICATE-----Generated at Thu Dec 18 05:41:42 2025 by rpki-client