This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft File: SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft (raw, json) Hash identifier: 6N7/XBYyeCsD7jKRLbQR9dMJ3jpQ2bIkaigiCoS8mwQ= Subject key identifier: DA:A9:39:E4:31:5B:B6:56:CD:33:41:98:54:41:98:93:94:1C:B2:C8 Authority key identifier: 49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61 Certificate issuer: /CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61 Certificate serial: 019AF31C66A38577EDF8F5E10EE2987CA2FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 10:01:56 +0000 Manifest this update: Sat 06 Dec 2025 10:01:56 +0000 Manifest next update: Sun 07 Dec 2025 10:01:56 +0000 Files and hashes: 1: 8J4KQUM3SG2tOx7Qy412tzcCyVE.roa (hash: WDRfkd7NWCeGm5AnO0id+VmgIMVtNw9JsJNLGC4miyg=) 2: F3xqvw__Ry6FbR1QISJmpPzSw80.roa (hash: lZUN0lo02iToEWBcU9heTh5ikClvs/fsdLuL0ZtWzgs=) 3: SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl (hash: QhIrrMulqYTLSlvLpIEN0iFUvCguoC0SkAB3CNZn0YM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:66:a3:85:77:ed:f8:f5:e1:0e:e2:98:7c:a2:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61 Validity Not Before: Dec 6 10:01:56 2025 GMT Not After : Dec 7 10:01:56 2025 GMT Subject: CN=daa939e4315bb656cd33419854419893941cb2c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c4:59:e6:89:42:fb:ca:5c:e3:2e:a5:f7:67: 37:07:56:0f:98:08:28:ac:d9:37:e9:f1:16:31:d1: 5f:87:33:55:ea:7e:58:97:8a:99:fd:dd:01:24:fa: 03:ce:58:10:e4:ee:5a:31:fc:4b:15:11:75:30:74: 12:a1:60:e2:f7:7a:8a:b0:7c:45:ea:dd:b5:e1:6b: 3b:1b:57:3f:60:6e:c4:6e:8c:53:99:ab:29:64:c5: e4:16:67:48:98:bd:89:6a:d9:71:ef:7b:ec:69:06: 17:d1:6d:a0:ca:d0:c5:b1:d7:19:a1:a6:4d:f0:04: 83:43:4d:36:64:6d:dc:cb:aa:68:fa:1f:39:73:9d: 89:7e:39:0d:73:5d:a2:e8:7c:f4:26:0b:c9:61:52: aa:43:3f:de:7d:be:e7:43:4d:2a:76:55:9b:85:72: 37:d4:4a:85:c1:c0:e8:56:2a:83:14:03:55:91:6d: 6b:7c:cf:d3:c7:a7:9e:e0:00:ec:1d:02:84:2f:64: 67:f2:96:88:bb:ff:27:90:7b:46:76:18:7d:da:48: 7f:93:b9:d3:22:a0:d0:74:c7:47:f1:7f:4d:9b:92: a6:bb:66:4b:eb:c9:e9:9e:78:4d:d7:af:cc:c3:73: 20:fd:2c:1a:c2:2b:fd:a8:37:14:9b:e9:76:e5:00: 28:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A9:39:E4:31:5B:B6:56:CD:33:41:98:54:41:98:93:94:1C:B2:C8 X509v3 Authority Key Identifier: keyid:49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:48:d9:51:7e:be:da:3a:16:91:e0:c4:db:04:df:d7:d6:88: 73:7b:b9:ba:80:e2:10:86:7e:0d:30:07:3d:f3:0b:77:c7:48: 48:31:d9:f1:e7:c9:3f:84:42:ee:63:36:20:b5:52:19:cc:30: 57:ac:cf:d8:27:6b:1d:3c:38:31:f4:c8:00:e7:08:0e:0e:a7: 19:64:2f:04:e5:86:25:c1:5f:c2:df:ab:27:ed:e8:28:04:2b: 2a:87:89:bb:e1:06:df:84:b8:c0:d9:5f:da:27:88:39:b5:c6: b0:1b:f6:a0:5a:af:69:c4:6e:7a:6a:de:f5:ab:c6:a2:1a:dc: d3:bf:e5:73:f2:b1:4b:7f:e7:87:55:a0:69:53:d5:a0:32:da: c6:a1:46:33:28:12:eb:a8:71:7e:cf:0a:93:82:9f:fc:a7:23: 15:da:ca:d5:f0:60:2b:e5:5a:02:df:93:41:4b:45:b8:3c:3c: 37:86:1a:49:88:c1:09:be:10:4e:f7:96:a2:28:f6:18:d1:c3: 82:3b:60:09:9c:ec:24:48:0b:f7:1b:c9:ad:d4:c1:c6:37:c4: c4:3f:33:6a:92:af:6e:03:a8:e2:45:c2:c5:97:d4:e3:01:95: e4:90:75:af:80:d0:a2:64:09:8c:30:aa:dc:31:3f:07:4f:b8: a1:46:4e:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHGajhXft+PXhDuKYfKL/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjM5ZDZjOGIyM2ZjZGMyMGU1MzE3NGU5MmZiM2Y1NmNh YThiNjEwHhcNMjUxMjA2MTAwMTU2WhcNMjUxMjA3MTAwMTU2WjAzMTEwLwYDVQQD EyhkYWE5MzllNDMxNWJiNjU2Y2QzMzQxOTg1NDQxOTg5Mzk0MWNiMmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cRZ5olC+8pc4y6l92c3B1YPmAgo rNk36fEWMdFfhzNV6n5Yl4qZ/d0BJPoDzlgQ5O5aMfxLFRF1MHQSoWDi93qKsHxF 6t214Ws7G1c/YG7EboxTmaspZMXkFmdImL2Jatlx73vsaQYX0W2gytDFsdcZoaZN 8ASDQ002ZG3cy6po+h85c52JfjkNc12i6Hz0JgvJYVKqQz/efb7nQ00qdlWbhXI3 1EqFwcDoViqDFANVkW1rfM/Tx6ee4ADsHQKEL2Rn8paIu/8nkHtGdhh92kh/k7nT IqDQdMdH8X9Nm5Kmu2ZL68npnnhN16/Mw3Mg/Swawiv9qDcUm+l25QAoTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqpOeQxW7ZWzTNBmFRBmJOUHLLIMB8GA1UdIwQY MBaAFEnznWyLI/zcIOUxdOkvs/VsqothMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZPZGJJc2pfTndnNVRGMDZTLXo5V3lxaTJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xNjQ2MGYtZTQ5OC00ZjdiLTliOTAt N2E1MDQzYzkxOGY5LzEvU2ZPZGJJc2pfTndnNVRGMDZTLXo5V3lxaTJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8xNjQ2MGYtZTQ5OC00ZjdiLTliOTAtN2E1MDQzYzkxOGY5 LzEvU2ZPZGJJc2pfTndnNVRGMDZTLXo5V3lxaTJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0kjZUX6+ 2joWkeDE2wTf19aIc3u5uoDiEIZ+DTAHPfMLd8dISDHZ8efJP4RC7mM2ILVSGcww V6zP2CdrHTw4MfTIAOcIDg6nGWQvBOWGJcFfwt+rJ+3oKAQrKoeJu+EG34S4wNlf 2ieIObXGsBv2oFqvacRuemre9avGohrc07/lc/KxS3/nh1WgaVPVoDLaxqFGMygS 66hxfs8Kk4Kf/KcjFdrK1fBgK+VaAt+TQUtFuDw8N4YaSYjBCb4QTveWoij2GNHD gjtgCZzsJEgL9xvJrdTBxjfExD8zapKvbgOo4kXCxZfU4wGV5JB1r4DQomQJjDCq 3DE/B0+4oUZODA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:00:14 2025 by rpki-client