This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft File: sffQCUrcmNmwMnIOgePbWqdYHHQ.mft (raw, json) Hash identifier: MPmFm6FTXEkN/R00SSOrWaQW/lH1q4Gj2ExsPW3Ct3o= Subject key identifier: 74:4A:21:B3:41:1B:B7:8A:30:F1:04:30:0E:3D:81:BE:67:9F:97:4A Authority key identifier: B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74 Certificate issuer: /CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74 Certificate serial: 019AF277256D4E60BE96BBDC380387C98A31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft Manifest number: 0CE9 Signing time: Sat 06 Dec 2025 07:01:25 +0000 Manifest this update: Sat 06 Dec 2025 07:01:25 +0000 Manifest next update: Sun 07 Dec 2025 07:01:25 +0000 Files and hashes: 1: sffQCUrcmNmwMnIOgePbWqdYHHQ.crl (hash: jSVOEc07cb0S4pQFxMxqEOEQ4XmEMahEDMmCvPdnFQk=) 2: tkngR5wwQ6qh3iGid8LqkeZO0Sg.roa (hash: XAoboSbFoG6N+OZ4mfDqaXa/N9sFsWbZUGbRzqL5oH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:25:6d:4e:60:be:96:bb:dc:38:03:87:c9:8a:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74 Validity Not Before: Dec 6 07:01:25 2025 GMT Not After : Dec 7 07:01:25 2025 GMT Subject: CN=744a21b3411bb78a30f104300e3d81be679f974a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4d:83:fb:f2:93:a3:9a:bd:ae:3e:0b:69:82: 43:56:50:40:17:ee:d6:f0:e5:d3:f5:b4:7b:42:87: cf:9c:6d:1f:cf:67:5e:cb:fa:08:f5:58:14:bc:b1: d1:03:44:67:b2:01:37:ff:34:d1:ab:1c:eb:10:c7: 6d:cc:d3:db:a2:64:fc:3e:01:2e:32:11:86:d1:06: 6c:c8:6c:34:87:2b:0f:d3:0b:55:00:78:21:d4:5b: bf:2f:69:33:cd:0d:1b:1f:6e:51:9b:35:37:06:4f: 41:ba:d5:f7:e1:ba:15:d8:15:f9:de:b3:34:c2:c5: 4f:45:49:5a:00:f0:53:2f:c2:16:50:a0:4f:f4:7a: d6:7d:a7:8c:d1:a7:57:f4:c6:9c:25:0a:de:b5:07: 07:8d:34:f3:14:da:5f:70:20:b2:89:01:cd:52:fd: b3:33:5c:84:56:c9:ff:83:6b:92:9f:fa:92:0c:74: b9:af:5b:ea:ee:d0:ec:2f:89:d5:80:40:b5:09:0c: a1:8d:63:5a:04:98:04:72:34:9c:a3:bd:32:5d:e3: 7f:75:e2:df:d3:12:f3:12:3c:37:35:0d:e0:ce:0b: 68:4b:1c:74:26:4d:e9:08:c2:a1:a6:03:11:15:d8: c7:42:e7:63:be:2e:b4:f2:9e:56:2e:dd:3c:30:76: e2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:4A:21:B3:41:1B:B7:8A:30:F1:04:30:0E:3D:81:BE:67:9F:97:4A X509v3 Authority Key Identifier: keyid:B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:50:51:3d:a4:a4:95:88:13:37:a2:b1:ee:96:21:6b:ae:cc: a3:b4:80:72:8c:f3:a5:b3:e7:17:57:f0:cc:94:5f:1d:31:68: a6:18:60:3a:d4:7a:4f:34:31:12:02:77:6c:90:14:a8:e2:28: d4:46:07:4e:d8:f0:51:71:93:1e:be:dc:5d:50:bd:1a:3e:78: a3:42:5d:30:b4:3f:2f:86:06:2a:2b:9d:fa:e6:22:65:89:dd: 29:3a:8e:49:82:79:25:20:d1:94:90:11:62:53:f8:b4:f4:d2: 7d:cd:bb:fc:eb:67:6d:d1:0a:14:8b:ad:66:07:fb:80:97:f0: 6d:d6:19:3d:d8:1a:d5:a5:1f:28:52:78:d7:75:91:1e:45:1e: 4d:dd:4f:04:67:39:d4:e2:44:6d:bd:5f:04:ec:6f:80:6c:85: ab:80:c7:e8:29:b2:63:ac:79:fe:4e:68:94:e6:2f:6e:ef:1b: 76:ff:0c:46:a7:50:4e:9c:2f:a5:4e:35:08:72:3b:fb:8b:12: 46:60:8e:30:4a:f7:7d:f5:6b:a0:40:9b:dc:52:e6:c9:5e:d9: 9f:f2:16:dc:d7:04:4e:14:58:51:88:f8:ec:86:20:72:98:ff: 2d:ab:71:40:5a:c4:24:71:64:bf:0a:06:51:97:66:e8:5e:d0: 5f:6e:7d:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyVtTmC+lrvcOAOHyYoxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZjdkMDA5NGFkYzk4ZDliMDMyNzIwZTgxZTNkYjVhYTc1 ODFjNzQwHhcNMjUxMjA2MDcwMTI1WhcNMjUxMjA3MDcwMTI1WjAzMTEwLwYDVQQD Eyg3NDRhMjFiMzQxMWJiNzhhMzBmMTA0MzAwZTNkODFiZTY3OWY5NzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk2D+/KTo5q9rj4LaYJDVlBAF+7W 8OXT9bR7QofPnG0fz2dey/oI9VgUvLHRA0RnsgE3/zTRqxzrEMdtzNPbomT8PgEu MhGG0QZsyGw0hysP0wtVAHgh1Fu/L2kzzQ0bH25RmzU3Bk9ButX34boV2BX53rM0 wsVPRUlaAPBTL8IWUKBP9HrWfaeM0adX9MacJQretQcHjTTzFNpfcCCyiQHNUv2z M1yEVsn/g2uSn/qSDHS5r1vq7tDsL4nVgEC1CQyhjWNaBJgEcjSco70yXeN/deLf 0xLzEjw3NQ3gzgtoSxx0Jk3pCMKhpgMRFdjHQudjvi608p5WLt08MHbiWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRKIbNBG7eKMPEEMA49gb5nn5dKMB8GA1UdIwQY MBaAFLH30AlK3JjZsDJyDoHj21qnWBx0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2ZmUUNVcmNtTm13TW5JT2dlUGJXcWRZSEhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lOGRkNmItNDYyNy00YTNjLWJhNzMt YTU0Yjg2OWRjZDI3LzEvc2ZmUUNVcmNtTm13TW5JT2dlUGJXcWRZSEhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9lOGRkNmItNDYyNy00YTNjLWJhNzMtYTU0Yjg2OWRjZDI3 LzEvc2ZmUUNVcmNtTm13TW5JT2dlUGJXcWRZSEhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVBRPaSk lYgTN6Kx7pYha67Mo7SAcozzpbPnF1fwzJRfHTFophhgOtR6TzQxEgJ3bJAUqOIo 1EYHTtjwUXGTHr7cXVC9Gj54o0JdMLQ/L4YGKiud+uYiZYndKTqOSYJ5JSDRlJAR YlP4tPTSfc27/OtnbdEKFIutZgf7gJfwbdYZPdga1aUfKFJ413WRHkUeTd1PBGc5 1OJEbb1fBOxvgGyFq4DH6CmyY6x5/k5olOYvbu8bdv8MRqdQTpwvpU41CHI7+4sS RmCOMEr3ffVroECb3FLmyV7Zn/IW3NcEThRYUYj47IYgcpj/LatxQFrEJHFkvwoG UZdm6F7QX259zQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:39 2025 by rpki-client