This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft File: SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft (raw, json) Hash identifier: wa1xd5JnzHmoV30TlpPCh37+iq5DeoybAZIzvRKs12Y= Subject key identifier: 84:4E:D7:0D:66:D3:98:16:3F:14:D4:5C:0F:65:D0:24:B1:AE:6F:9D Authority key identifier: 48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C Certificate issuer: /CN=485375191d1c2e50982108fdd407bbcf73e9795c Certificate serial: 019AF19B10FD6433B59CCAE37395784FC1EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft Manifest number: 112D Signing time: Sat 06 Dec 2025 03:01:02 +0000 Manifest this update: Sat 06 Dec 2025 03:01:02 +0000 Manifest next update: Sun 07 Dec 2025 03:01:02 +0000 Files and hashes: 1: JUMv7Yi2cpE5n4jH_daU8-Wkj_s.roa (hash: 8Ur2YBrwEIHwiqas+AFAXGNfkZXPANsLJAnLoARlVGk=) 2: SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl (hash: 2p++0CC0lW1ZxFb5fbUqJARM6X9Hcc4561nB+4C+PKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:10:fd:64:33:b5:9c:ca:e3:73:95:78:4f:c1:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485375191d1c2e50982108fdd407bbcf73e9795c Validity Not Before: Dec 6 03:01:02 2025 GMT Not After : Dec 7 03:01:02 2025 GMT Subject: CN=844ed70d66d398163f14d45c0f65d024b1ae6f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:be:92:6d:4d:e1:4e:19:a9:31:a5:ca:23:ea: b5:55:e9:8e:45:b2:63:03:26:4f:58:ff:2d:1b:ba: 54:85:56:db:4b:9f:5c:fe:61:3d:0d:3e:41:89:37: a6:2d:ae:84:b5:50:82:12:09:36:04:ad:b9:c2:83: 24:59:b2:72:f6:56:3d:c2:9b:95:54:f5:17:ea:67: 22:f1:86:07:35:a7:82:98:87:ca:d1:29:96:34:98: 81:10:5e:6d:5c:7f:a0:00:97:56:a3:9d:b6:24:0b: a9:1a:4b:94:7d:35:78:e3:19:47:1a:87:14:bf:66: 35:a5:7a:34:80:8a:1f:e3:94:de:6b:18:80:62:b7: 6c:15:b6:44:98:74:4e:d1:6f:d0:25:dd:bc:29:88: e0:85:84:bd:4f:3b:37:83:16:b5:bd:eb:b3:a2:74: 8b:73:8d:41:b6:76:71:a9:33:b8:86:7d:e2:1a:10: 8e:22:0c:25:e3:eb:3c:e1:7b:be:d7:cc:0b:3b:f9: 5a:69:e8:36:ba:ae:fe:28:57:43:e2:db:f8:75:80: c3:dd:01:5d:27:20:5e:c3:9a:cf:31:14:50:a9:82: 5b:8d:f6:3b:70:93:8e:41:c1:6b:72:bb:b7:ce:4e: 40:0f:bc:8c:4a:bc:84:1c:d2:b2:4b:9b:9b:95:ac: 3e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4E:D7:0D:66:D3:98:16:3F:14:D4:5C:0F:65:D0:24:B1:AE:6F:9D X509v3 Authority Key Identifier: keyid:48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e7:b5:d7:16:d2:44:a6:c6:5e:37:e7:ec:c8:32:d2:d4:0f: 71:8b:25:ee:2b:67:97:7e:f1:f7:f9:d8:80:26:70:e5:d5:71: 77:d2:97:de:91:7e:eb:01:46:0e:ff:66:01:06:a9:71:66:ef: 3f:84:d9:b5:2c:70:6e:0f:d6:0e:d9:a4:05:db:5f:aa:ce:df: bf:ab:d2:7e:0c:1b:8b:85:e8:8b:0b:7a:5f:2d:87:d2:dc:73: 43:6f:a8:e7:38:cd:9a:49:e3:41:1b:d7:67:c9:72:b7:1d:35: 05:11:69:31:80:eb:af:3b:07:54:32:3e:03:0b:cb:ee:72:98: 55:8b:db:95:36:ad:bb:83:e6:0b:0f:94:b6:d2:d2:27:9d:c5: e5:a2:6e:5f:af:bd:27:c2:71:93:09:96:05:99:46:7e:6c:e3: e9:ba:21:cd:fb:3f:96:8b:bb:5a:9a:2e:27:7b:d6:a3:f6:6c: ed:5d:0c:92:17:10:6d:95:2f:36:24:98:1a:43:ed:e5:24:80: b6:53:03:b5:50:c0:e6:47:95:fd:26:34:b5:b1:82:a1:f7:61: b4:c9:71:8a:bf:6f:99:73:9d:2e:41:c0:ca:5e:a3:c7:d5:ee: 24:e5:fc:98:dd:10:a4:c7:13:a0:06:c5:1d:65:a2:57:3f:e6: da:25:b6:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxD9ZDO1nMrjc5V4T8HuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NTM3NTE5MWQxYzJlNTA5ODIxMDhmZGQ0MDdiYmNmNzNl OTc5NWMwHhcNMjUxMjA2MDMwMTAyWhcNMjUxMjA3MDMwMTAyWjAzMTEwLwYDVQQD Eyg4NDRlZDcwZDY2ZDM5ODE2M2YxNGQ0NWMwZjY1ZDAyNGIxYWU2ZjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5L6SbU3hThmpMaXKI+q1VemORbJj AyZPWP8tG7pUhVbbS59c/mE9DT5BiTemLa6EtVCCEgk2BK25woMkWbJy9lY9wpuV VPUX6mci8YYHNaeCmIfK0SmWNJiBEF5tXH+gAJdWo522JAupGkuUfTV44xlHGocU v2Y1pXo0gIof45TeaxiAYrdsFbZEmHRO0W/QJd28KYjghYS9Tzs3gxa1veuzonSL c41BtnZxqTO4hn3iGhCOIgwl4+s84Xu+18wLO/laaeg2uq7+KFdD4tv4dYDD3QFd JyBew5rPMRRQqYJbjfY7cJOOQcFrcru3zk5AD7yMSryEHNKyS5ublaw+3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRO1w1m05gWPxTUXA9l0CSxrm+dMB8GA1UdIwQY MBaAFEhTdRkdHC5QmCEI/dQHu89z6XlcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0ZOMUdSMGNMbENZSVFqOTFBZTd6M1BwZVZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iMjYwOWItYWUzOS00MjlmLWE1MDUt NmViZmY2NGJjYTFjLzEvU0ZOMUdSMGNMbENZSVFqOTFBZTd6M1BwZVZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iMjYwOWItYWUzOS00MjlmLWE1MDUtNmViZmY2NGJjYTFj LzEvU0ZOMUdSMGNMbENZSVFqOTFBZTd6M1BwZVZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOe11xbS RKbGXjfn7Mgy0tQPcYsl7itnl37x9/nYgCZw5dVxd9KX3pF+6wFGDv9mAQapcWbv P4TZtSxwbg/WDtmkBdtfqs7fv6vSfgwbi4Xoiwt6Xy2H0txzQ2+o5zjNmknjQRvX Z8lytx01BRFpMYDrrzsHVDI+AwvL7nKYVYvblTatu4PmCw+UttLSJ53F5aJuX6+9 J8JxkwmWBZlGfmzj6bohzfs/lou7WpouJ3vWo/Zs7V0MkhcQbZUvNiSYGkPt5SSA tlMDtVDA5keV/SY0tbGCofdhtMlxir9vmXOdLkHAyl6jx9XuJOX8mN0QpMcToAbF HWWiVz/m2iW2vQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:43:59 2025 by rpki-client