This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft File: Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft (raw, json) Hash identifier: 33BYO3ghsK1mTJyBpfLJ4MddOp5+jGrlKYAlG9vO7/A= Subject key identifier: 65:A6:9A:FE:BE:9B:50:81:E3:70:2C:36:DA:4E:64:AF:8D:AB:A6:C8 Authority key identifier: 49:F9:B8:80:F2:59:B8:81:90:70:2C:22:BF:83:21:71:B7:59:74:34 Certificate issuer: /CN=49f9b880f259b88190702c22bf832171b7597434 Certificate serial: 019AF509D60068827165F66F7308B888C634 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft Manifest number: 13B6 Signing time: Sat 06 Dec 2025 19:00:53 +0000 Manifest this update: Sat 06 Dec 2025 19:00:53 +0000 Manifest next update: Sun 07 Dec 2025 19:00:53 +0000 Files and hashes: 1: Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl (hash: eSpjjxhO+LvuvvM8xi691d2pSNJAoFPp3mBNc/l6O7c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:d6:00:68:82:71:65:f6:6f:73:08:b8:88:c6:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f9b880f259b88190702c22bf832171b7597434 Validity Not Before: Dec 6 19:00:53 2025 GMT Not After : Dec 7 19:00:53 2025 GMT Subject: CN=65a69afebe9b5081e3702c36da4e64af8daba6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0f:92:c1:67:0f:99:aa:6e:ed:bd:85:f2:45: fb:bd:c9:c5:16:f0:bc:9e:16:cf:7f:c2:a7:18:4d: c3:14:10:7e:5f:20:04:e1:40:a2:34:46:41:cc:a6: 0c:5c:48:f0:ac:a7:38:e6:bd:79:cf:8c:86:3f:25: 83:bf:94:4c:c4:5e:f6:23:1f:7b:11:d0:4a:e4:43: c2:fb:00:13:b8:36:b6:f8:51:67:10:b8:06:d1:e7: 3f:48:5d:b2:9e:ac:f0:31:9b:71:0a:5c:f4:72:4b: 24:43:12:48:38:21:85:35:1a:9f:9c:17:f5:92:a2: 44:b6:73:55:45:61:3d:94:2a:5e:f6:d4:0f:50:d7: 37:b0:9e:56:5a:21:61:fa:bb:6c:e7:4e:3a:13:12: 67:5c:30:59:50:9c:12:f2:bb:02:5e:47:76:61:20: 8d:c6:6a:d5:1d:65:2f:87:60:42:80:c5:78:a0:8f: 19:d9:40:e0:2e:d9:b1:2f:5a:17:53:3a:e4:e0:1b: e7:ab:a5:c3:25:16:3a:83:8f:27:94:3c:b7:fb:80: 9e:ec:76:d9:26:bd:f7:77:65:1b:02:b0:8f:35:0f: 9b:3c:d2:38:56:16:8c:66:af:ad:9d:c7:dc:73:65: ac:e2:25:b8:b6:51:a0:88:38:29:8b:bc:ed:f1:cf: 17:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A6:9A:FE:BE:9B:50:81:E3:70:2C:36:DA:4E:64:AF:8D:AB:A6:C8 X509v3 Authority Key Identifier: keyid:49:F9:B8:80:F2:59:B8:81:90:70:2C:22:BF:83:21:71:B7:59:74:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:2c:9d:42:fc:7f:d0:bd:ae:df:d2:cb:15:19:70:51:05:58: 1c:67:84:08:f2:09:60:bb:a5:e2:41:79:34:10:be:48:3f:c2: c8:c6:ff:20:fa:04:33:fd:38:80:9a:3f:65:28:a7:17:ab:27: 06:c4:b4:a0:dd:00:ec:09:a3:a7:21:a3:67:b0:55:a5:45:9f: 8d:6e:6a:b8:86:01:d9:50:e9:05:f5:30:c6:2d:fd:92:56:6e: 92:e3:aa:03:cb:52:e7:0e:a3:b4:84:9d:3b:aa:23:9f:5b:a2: 65:6e:9c:b7:67:ab:36:a3:6b:d3:13:f6:30:5c:e4:40:cd:c1: d5:8d:b8:68:27:17:62:0c:b5:b2:7d:76:f9:c9:b0:7a:20:91: aa:24:e7:ea:69:4e:1e:e3:3c:72:e9:4b:6a:fd:83:d3:83:7e: 40:13:49:0b:1c:f4:fe:fe:9b:21:38:fa:f6:90:4a:30:4c:ab: bc:9d:0c:54:8f:45:34:99:dc:2d:00:bd:c5:6d:92:be:0b:ee: 29:0a:07:86:35:fb:22:a9:d5:0c:0d:eb:9a:86:ac:15:97:e2: 30:e1:2b:cc:0f:c8:1a:14:ce:34:e8:58:d4:b6:56:08:64:23: 43:21:81:be:a8:5b:63:e4:c7:4e:c9:8c:fb:1c:07:1b:cf:d7: a2:fa:af:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CdYAaIJxZfZvcwi4iMY0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjliODgwZjI1OWI4ODE5MDcwMmMyMmJmODMyMTcxYjc1 OTc0MzQwHhcNMjUxMjA2MTkwMDUzWhcNMjUxMjA3MTkwMDUzWjAzMTEwLwYDVQQD Eyg2NWE2OWFmZWJlOWI1MDgxZTM3MDJjMzZkYTRlNjRhZjhkYWJhNmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw+SwWcPmapu7b2F8kX7vcnFFvC8 nhbPf8KnGE3DFBB+XyAE4UCiNEZBzKYMXEjwrKc45r15z4yGPyWDv5RMxF72Ix97 EdBK5EPC+wATuDa2+FFnELgG0ec/SF2ynqzwMZtxClz0ckskQxJIOCGFNRqfnBf1 kqJEtnNVRWE9lCpe9tQPUNc3sJ5WWiFh+rts5046ExJnXDBZUJwS8rsCXkd2YSCN xmrVHWUvh2BCgMV4oI8Z2UDgLtmxL1oXUzrk4Bvnq6XDJRY6g48nlDy3+4Ce7HbZ Jr33d2UbArCPNQ+bPNI4VhaMZq+tncfcc2Ws4iW4tlGgiDgpi7zt8c8XtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWmmv6+m1CB43AsNtpOZK+Nq6bIMB8GA1UdIwQY MBaAFEn5uIDyWbiBkHAsIr+DIXG3WXQ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZtNGdQSlp1SUdRY0N3aXY0TWhjYmRaZERRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hOTk4YmItM2JjMy00NTk3LThkY2Mt YzRmMjI1MzZhYjA1LzEvU2ZtNGdQSlp1SUdRY0N3aXY0TWhjYmRaZERRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9hOTk4YmItM2JjMy00NTk3LThkY2MtYzRmMjI1MzZhYjA1 LzEvU2ZtNGdQSlp1SUdRY0N3aXY0TWhjYmRaZERRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCydQvx/ 0L2u39LLFRlwUQVYHGeECPIJYLul4kF5NBC+SD/CyMb/IPoEM/04gJo/ZSinF6sn BsS0oN0A7AmjpyGjZ7BVpUWfjW5quIYB2VDpBfUwxi39klZukuOqA8tS5w6jtISd O6ojn1uiZW6ct2erNqNr0xP2MFzkQM3B1Y24aCcXYgy1sn12+cmweiCRqiTn6mlO HuM8culLav2D04N+QBNJCxz0/v6bITj69pBKMEyrvJ0MVI9FNJncLQC9xW2Svgvu KQoHhjX7IqnVDA3rmoasFZfiMOErzA/IGhTONOhY1LZWCGQjQyGBvqhbY+THTsmM +xwHG8/Xovqv6Q== -----END CERTIFICATE-----Generated at Sun Dec 7 02:47:47 2025 by rpki-client