This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft File: sffQCUrcmNmwMnIOgePbWqdYHHQ.mft (raw, json) Hash identifier: joEhYUOCIYdvuXQYeOZXEUuzp0/xZQtnIfeYBOlkSx8= Subject key identifier: DC:D9:89:EF:B5:3B:E5:6B:55:EE:AB:97:DD:DF:5C:B4:9F:3F:64:EB Authority key identifier: B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74 Certificate issuer: /CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74 Certificate serial: 019B32314BEBB4373673E7B4F12FC08DBA11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft Manifest number: 0D0A Signing time: Thu 18 Dec 2025 16:00:49 +0000 Manifest this update: Thu 18 Dec 2025 16:00:49 +0000 Manifest next update: Fri 19 Dec 2025 16:00:49 +0000 Files and hashes: 1: sffQCUrcmNmwMnIOgePbWqdYHHQ.crl (hash: AN64/aUXdltekawjK9nX0PhFcbUlORQP8I8eRV63Tog=) 2: tkngR5wwQ6qh3iGid8LqkeZO0Sg.roa (hash: XAoboSbFoG6N+OZ4mfDqaXa/N9sFsWbZUGbRzqL5oH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:4b:eb:b4:37:36:73:e7:b4:f1:2f:c0:8d:ba:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74 Validity Not Before: Dec 18 16:00:49 2025 GMT Not After : Dec 19 16:00:49 2025 GMT Subject: CN=dcd989efb53be56b55eeab97dddf5cb49f3f64eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9c:c9:57:8e:28:1c:f8:51:dc:bf:61:2c:39: b3:80:86:71:bd:d4:f0:75:1c:b1:7c:da:80:38:16: e3:e6:7b:22:14:70:e9:aa:64:88:a4:ac:f7:3a:e0: aa:af:be:6c:8d:0b:7a:aa:c7:96:b2:b7:82:18:e1: 39:69:70:3c:cc:8c:04:e0:38:a0:e7:45:f2:d7:df: da:d1:db:49:be:b2:28:4c:7f:24:93:21:ac:8f:dd: f4:6c:f8:e2:4d:61:c0:13:78:e6:81:6b:77:8d:3c: 10:13:20:9b:c4:36:90:a8:d4:d5:e8:52:6b:cd:ee: 6b:c8:e1:6f:94:10:dd:d1:26:b8:a5:05:a6:db:a7: 92:44:28:97:31:c0:58:ab:c6:fa:f8:f0:ae:3a:ff: 4d:2e:99:e5:f9:47:d0:44:b1:0d:01:c0:b6:2f:ce: 41:3d:05:77:e2:6d:93:63:fc:0f:61:00:5e:f5:95: 44:1f:7b:70:bd:0a:d9:57:fa:dd:31:3a:5d:00:77: 67:16:da:5c:17:fc:fe:04:1e:db:02:d1:5e:b8:f3: ad:ad:c2:27:e4:b7:76:37:a5:13:95:e8:0d:24:fa: 51:d2:d3:18:41:b0:87:48:e7:0d:f7:88:73:6e:d3: 82:df:21:68:87:04:b5:ff:37:2b:ec:a7:83:44:fd: 46:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D9:89:EF:B5:3B:E5:6B:55:EE:AB:97:DD:DF:5C:B4:9F:3F:64:EB X509v3 Authority Key Identifier: keyid:B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:83:b6:1c:dc:13:97:b9:b6:d5:6c:5d:cb:76:47:c9:7d:ee: d1:b5:a0:99:b0:60:3c:87:50:ec:c6:3c:be:1c:24:01:f3:fa: 84:89:58:35:bb:e5:44:63:24:e4:d2:b2:f7:5a:73:bc:ad:b3: b2:5c:5f:15:f0:82:9c:a4:6d:76:3d:f2:1c:89:21:c2:54:a5: 00:d0:e0:3e:47:91:33:23:5e:8a:af:08:35:6c:9d:22:4e:7e: fa:5a:0b:f7:7e:4f:91:27:4f:79:f3:fe:29:e5:d0:e7:ce:90: 6d:8e:ab:2e:20:62:f6:57:cf:c8:c7:13:ad:39:da:df:28:17: c4:73:4d:d9:21:70:50:a6:08:ff:cc:69:55:e0:3f:f7:37:7f: 90:d2:00:6d:4f:e7:81:56:6d:71:47:c2:1d:ab:47:87:2a:93: cd:0f:50:da:c1:78:96:79:f7:59:2e:09:cc:b0:21:df:b2:09: 54:0e:f6:39:00:3b:ab:2a:14:14:d6:61:eb:e5:77:f1:dd:79: 40:8a:d2:9d:3d:14:59:4f:6b:fc:15:e9:74:dd:11:a1:10:f9: ed:29:36:eb:af:83:75:46:34:df:aa:84:37:82:82:26:00:3a: a2:21:ab:91:d5:3e:ae:7a:34:31:96:88:75:1e:84:70:ef:12: 3f:ef:17:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMUvrtDc2c+e08S/AjboRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZjdkMDA5NGFkYzk4ZDliMDMyNzIwZTgxZTNkYjVhYTc1 ODFjNzQwHhcNMjUxMjE4MTYwMDQ5WhcNMjUxMjE5MTYwMDQ5WjAzMTEwLwYDVQQD EyhkY2Q5ODllZmI1M2JlNTZiNTVlZWFiOTdkZGRmNWNiNDlmM2Y2NGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJzJV44oHPhR3L9hLDmzgIZxvdTw dRyxfNqAOBbj5nsiFHDpqmSIpKz3OuCqr75sjQt6qseWsreCGOE5aXA8zIwE4Dig 50Xy19/a0dtJvrIoTH8kkyGsj930bPjiTWHAE3jmgWt3jTwQEyCbxDaQqNTV6FJr ze5ryOFvlBDd0Sa4pQWm26eSRCiXMcBYq8b6+PCuOv9NLpnl+UfQRLENAcC2L85B PQV34m2TY/wPYQBe9ZVEH3twvQrZV/rdMTpdAHdnFtpcF/z+BB7bAtFeuPOtrcIn 5Ld2N6UTlegNJPpR0tMYQbCHSOcN94hzbtOC3yFohwS1/zcr7KeDRP1G9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzZie+1O+VrVe6rl93fXLSfP2TrMB8GA1UdIwQY MBaAFLH30AlK3JjZsDJyDoHj21qnWBx0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2ZmUUNVcmNtTm13TW5JT2dlUGJXcWRZSEhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lOGRkNmItNDYyNy00YTNjLWJhNzMt YTU0Yjg2OWRjZDI3LzEvc2ZmUUNVcmNtTm13TW5JT2dlUGJXcWRZSEhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9lOGRkNmItNDYyNy00YTNjLWJhNzMtYTU0Yjg2OWRjZDI3 LzEvc2ZmUUNVcmNtTm13TW5JT2dlUGJXcWRZSEhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYO2HNwT l7m21Wxdy3ZHyX3u0bWgmbBgPIdQ7MY8vhwkAfP6hIlYNbvlRGMk5NKy91pzvK2z slxfFfCCnKRtdj3yHIkhwlSlANDgPkeRMyNeiq8INWydIk5++loL935PkSdPefP+ KeXQ586QbY6rLiBi9lfPyMcTrTna3ygXxHNN2SFwUKYI/8xpVeA/9zd/kNIAbU/n gVZtcUfCHatHhyqTzQ9Q2sF4lnn3WS4JzLAh37IJVA72OQA7qyoUFNZh6+V38d15 QIrSnT0UWU9r/BXpdN0RoRD57Sk266+DdUY036qEN4KCJgA6oiGrkdU+rno0MZaI dR6EcO8SP+8XMg== -----END CERTIFICATE-----Generated at Thu Dec 18 17:50:31 2025 by rpki-client