This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json) Hash identifier: RE1H4rry7wT4JCQrXjZxMRnKZFP2UIfTrNRD1h/sxtQ= Subject key identifier: 1F:A8:24:B8:4D:03:84:99:34:1A:06:10:31:D5:F1:72:DF:54:3F:D6 Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59 Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959 Certificate serial: 019AF5E56A10C504A974D3D70D9104735F8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft Manifest number: 16F8 Signing time: Sat 06 Dec 2025 23:00:44 +0000 Manifest this update: Sat 06 Dec 2025 23:00:44 +0000 Manifest next update: Sun 07 Dec 2025 23:00:44 +0000 Files and hashes: 1: aXSOEWx3tVF7ynpp-Q3fBbDZg50.roa (hash: RSnTxORBukbARx6FRTZpYXAyjlGDaMBXkz61tBk9AhY=) 2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: rJTelhEVluBYm7BuGAA1Ry8Q3pc723AB5dLZHMV9Or0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:6a:10:c5:04:a9:74:d3:d7:0d:91:04:73:5f:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959 Validity Not Before: Dec 6 23:00:44 2025 GMT Not After : Dec 7 23:00:44 2025 GMT Subject: CN=1fa824b84d038499341a061031d5f172df543fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:57:89:1c:6f:b2:fb:ad:68:be:16:27:60:ab: ed:7d:2a:b2:1f:64:b4:cd:4a:86:d8:12:9d:8b:12: c8:7d:7c:54:aa:62:f3:ae:d9:75:2e:e6:7c:5b:a0: ec:85:b2:ed:0b:3f:01:ab:8c:e8:24:ba:05:7e:01: de:fc:9a:8d:f3:c7:c6:c9:47:f2:77:02:3f:7b:d9: 85:e7:2a:8f:02:04:61:8a:6e:24:72:d8:54:6d:2b: 3a:63:fd:02:94:22:09:91:05:27:d7:0f:4c:18:13: 4a:b7:7e:2e:19:dd:40:09:a8:57:7a:d4:46:72:40: 63:fe:20:7d:98:69:d5:37:73:56:79:23:4c:f2:01: 12:63:a3:08:fd:d2:cb:be:d8:1a:ac:40:6c:05:6d: 3b:62:a5:fd:0c:ea:cd:c2:9e:e9:20:de:22:6c:48: 11:39:08:5d:fa:e7:5e:cc:85:a1:37:2b:93:60:72: c7:fb:fc:48:d8:0a:fd:31:bd:c3:ad:d3:5b:dc:c7: 18:bc:95:be:bd:37:7a:ae:86:b1:c7:a2:ff:fe:94: c3:ae:5d:41:50:ef:66:79:b9:c3:f1:82:80:88:18: b6:e3:10:83:1e:4e:78:13:13:c6:e6:2f:b3:de:3e: 4a:95:3c:f8:87:ef:5f:06:cf:f0:46:91:12:d8:92: 9d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A8:24:B8:4D:03:84:99:34:1A:06:10:31:D5:F1:72:DF:54:3F:D6 X509v3 Authority Key Identifier: keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b0:9e:27:a8:95:52:01:eb:e7:a6:18:41:cd:f5:45:e5:15: d7:d3:cf:ff:df:e4:42:fa:1d:bc:97:ca:2c:99:d0:80:09:5a: a2:2b:d0:e0:3d:e1:fb:40:7e:36:44:6a:1c:61:65:de:00:20: 83:55:cb:11:bb:f2:16:f1:f9:a4:19:16:18:0e:81:f8:c0:f3: 2c:e1:92:11:a2:5b:b6:a7:6e:92:0e:c7:c4:75:a3:be:41:2c: 8a:17:46:b4:f3:56:0a:8e:f9:fa:2c:85:1c:75:0a:62:83:07: 31:4c:47:0d:1e:1b:42:7f:47:e9:4d:cf:7c:4e:a9:a5:04:9d: be:33:79:40:9e:1e:3b:cc:72:79:97:92:bc:a9:85:9e:de:d8: 61:51:96:58:eb:cd:9a:bf:cd:09:e3:5a:e4:a4:8f:c8:31:62: de:bd:1e:08:d0:91:a6:61:1d:f2:91:87:e4:76:03:b9:46:54: d1:94:41:eb:2c:93:65:de:f7:f7:75:1d:8c:a0:a8:ad:78:6c: 1f:b6:7d:41:64:12:f9:38:df:e0:3d:63:9b:4b:3a:8b:d3:a6: c8:31:c4:dc:98:8a:dd:d3:ad:68:41:9c:67:c4:50:1d:06:fd: aa:1c:8a:15:25:ed:b5:70:28:e4:f2:41:34:1b:04:37:87:dd: a6:de:f1:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15WoQxQSpdNPXDZEEc1+LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNTdmNTQ0ZjUzZjM1ZDhkMmU3M2NiMjk2NWI0ZjRkN2Qw MjI5NTkwHhcNMjUxMjA2MjMwMDQ0WhcNMjUxMjA3MjMwMDQ0WjAzMTEwLwYDVQQD EygxZmE4MjRiODRkMDM4NDk5MzQxYTA2MTAzMWQ1ZjE3MmRmNTQzZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1eJHG+y+61ovhYnYKvtfSqyH2S0 zUqG2BKdixLIfXxUqmLzrtl1LuZ8W6DshbLtCz8Bq4zoJLoFfgHe/JqN88fGyUfy dwI/e9mF5yqPAgRhim4kcthUbSs6Y/0ClCIJkQUn1w9MGBNKt34uGd1ACahXetRG ckBj/iB9mGnVN3NWeSNM8gESY6MI/dLLvtgarEBsBW07YqX9DOrNwp7pIN4ibEgR OQhd+udezIWhNyuTYHLH+/xI2Ar9Mb3DrdNb3McYvJW+vTd6roaxx6L//pTDrl1B UO9mebnD8YKAiBi24xCDHk54ExPG5i+z3j5KlTz4h+9fBs/wRpES2JKdIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+oJLhNA4SZNBoGEDHV8XLfVD/WMB8GA1UdIwQY MBaAFLBX9UT1PzXY0uc8spZbT019AilZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0ZmMVJQVV9OZGpTNXp5eWxsdFBUWDBDS1ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZmUwZTAtMzRmNy00MjllLTlmMzgt NGVhN2ExYWU5OGRlLzEvc0ZmMVJQVV9OZGpTNXp5eWxsdFBUWDBDS1ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZmUwZTAtMzRmNy00MjllLTlmMzgtNGVhN2ExYWU5OGRl LzEvc0ZmMVJQVV9OZGpTNXp5eWxsdFBUWDBDS1ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbCeJ6iV UgHr56YYQc31ReUV19PP/9/kQvodvJfKLJnQgAlaoivQ4D3h+0B+NkRqHGFl3gAg g1XLEbvyFvH5pBkWGA6B+MDzLOGSEaJbtqdukg7HxHWjvkEsihdGtPNWCo75+iyF HHUKYoMHMUxHDR4bQn9H6U3PfE6ppQSdvjN5QJ4eO8xyeZeSvKmFnt7YYVGWWOvN mr/NCeNa5KSPyDFi3r0eCNCRpmEd8pGH5HYDuUZU0ZRB6yyTZd7393UdjKCorXhs H7Z9QWQS+Tjf4D1jm0s6i9OmyDHE3JiK3dOtaEGcZ8RQHQb9qhyKFSXttXAo5PJB NBsEN4fdpt7x1g== -----END CERTIFICATE-----Generated at Sun Dec 7 03:59:46 2025 by rpki-client