This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft File: SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft (raw, json) Hash identifier: fFAq3vGqYDAJsaeZlMvdpkKU7wIhHOhR8xoMAtNhPr8= Subject key identifier: 09:26:59:EC:05:01:9F:F6:91:E6:58:36:42:CA:EA:50:21:23:42:86 Authority key identifier: 49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31 Certificate issuer: /CN=49f2702d1a0726175e39af16974e5375dcaefc31 Certificate serial: 019AF209570CAF052285FFEC1087CC49671B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft Manifest number: 16A1 Signing time: Sat 06 Dec 2025 05:01:29 +0000 Manifest this update: Sat 06 Dec 2025 05:01:29 +0000 Manifest next update: Sun 07 Dec 2025 05:01:29 +0000 Files and hashes: 1: SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl (hash: owSismkXG06BerBfJWB8gCwh5iwxahpC6G00G2s760Y=) 2: YrgeNV0Q3t4Xw5uBv1-S6YoZvb0.roa (hash: j80OYLZ1mn+7VVYJkW8xMNJr5ib6X+eHYr4UT4vddFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:57:0c:af:05:22:85:ff:ec:10:87:cc:49:67:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f2702d1a0726175e39af16974e5375dcaefc31 Validity Not Before: Dec 6 05:01:29 2025 GMT Not After : Dec 7 05:01:29 2025 GMT Subject: CN=092659ec05019ff691e6583642caea5021234286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:0a:d7:09:9b:6d:ce:bd:ba:62:a4:88:10: 76:ed:06:a0:da:d0:52:7b:7c:e7:1b:3a:72:81:5f: ba:9b:02:15:f0:af:7b:5a:0d:69:94:e6:4c:a4:05: cc:24:93:64:36:7e:3f:39:82:4a:ad:54:a1:27:15: ae:f1:ff:75:d4:6c:51:c5:4d:86:a7:9e:7f:99:b8: 6c:f5:9f:f0:b8:3d:20:69:ad:f7:9f:06:92:ed:fa: 76:a0:ca:0b:94:f2:58:bc:62:33:86:e4:49:5a:db: c6:9f:73:b9:36:ba:e6:80:98:89:fb:aa:87:b5:c6: 2d:60:fc:40:a2:e7:6e:4d:b4:8b:62:bb:7b:2b:41: 32:4f:c6:ea:b4:9d:d3:2a:ae:a9:b1:a4:89:23:e3: ab:ed:2c:af:34:b3:2f:2e:a5:aa:57:93:37:dd:5d: 3d:65:4e:c8:b5:b4:d9:9a:dd:12:25:55:92:64:92: 3b:92:78:ae:49:c9:b2:23:3f:cd:ff:cb:40:99:0c: 00:ed:20:86:01:9e:d8:4f:12:54:f2:74:3d:95:11: 01:d9:a2:e4:1e:02:eb:95:59:5f:f2:2d:23:8c:2f: 70:55:53:b6:32:77:99:ec:ce:3e:4c:60:31:22:04: 82:9f:f7:54:89:fe:9f:6e:36:30:a4:c1:c2:ec:9e: 46:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:26:59:EC:05:01:9F:F6:91:E6:58:36:42:CA:EA:50:21:23:42:86 X509v3 Authority Key Identifier: keyid:49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:e5:2d:7e:1a:69:5c:28:77:00:d1:0c:20:4e:39:67:c2:8b: 9a:c0:a1:d7:9a:a7:53:c3:d5:3e:b0:6a:3e:c3:e4:29:57:ee: 00:4c:72:b0:6a:89:c6:62:75:1b:1b:8d:73:fe:cd:db:cc:17: 9f:f3:79:fd:34:db:ab:50:43:72:2b:88:ba:b4:ad:a8:34:c9: 18:a6:b1:e0:49:c2:ed:3a:4d:de:52:6b:3e:86:e6:86:89:5b: 3e:5b:33:da:95:ee:3b:30:09:0c:48:7f:74:e3:c0:1b:59:56: 5a:4d:e3:f0:25:0d:8d:da:98:23:5c:49:2b:b1:5d:b6:69:92: a7:96:b2:ab:a8:0d:32:a5:a2:15:05:f7:13:8b:f8:68:39:d1: ab:41:65:9c:e9:e4:60:9d:77:d4:9f:88:de:27:02:bc:bd:16: b3:1b:d7:46:bc:cf:9c:e8:ad:cb:b9:ee:f9:1a:8d:04:7d:f9: 94:c7:03:da:33:aa:28:31:37:9a:6a:f9:af:52:d6:b9:dd:28: 29:f6:3b:9e:0a:17:ce:dd:44:ab:90:92:3f:ac:6c:ac:24:46: b7:33:8c:cd:38:3d:fa:16:19:56:c8:18:ca:9e:99:7e:32:c0: 56:70:b3:2a:a9:f7:9f:f1:20:75:e1:23:98:da:55:03:77:1b: 82:86:d2:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVcMrwUihf/sEIfMSWcbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjI3MDJkMWEwNzI2MTc1ZTM5YWYxNjk3NGU1Mzc1ZGNh ZWZjMzEwHhcNMjUxMjA2MDUwMTI5WhcNMjUxMjA3MDUwMTI5WjAzMTEwLwYDVQQD EygwOTI2NTllYzA1MDE5ZmY2OTFlNjU4MzY0MmNhZWE1MDIxMjM0Mjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjgK1wmbbc69umKkiBB27Qag2tBS e3znGzpygV+6mwIV8K97Wg1plOZMpAXMJJNkNn4/OYJKrVShJxWu8f911GxRxU2G p55/mbhs9Z/wuD0gaa33nwaS7fp2oMoLlPJYvGIzhuRJWtvGn3O5NrrmgJiJ+6qH tcYtYPxAouduTbSLYrt7K0EyT8bqtJ3TKq6psaSJI+Or7SyvNLMvLqWqV5M33V09 ZU7ItbTZmt0SJVWSZJI7kniuScmyIz/N/8tAmQwA7SCGAZ7YTxJU8nQ9lREB2aLk HgLrlVlf8i0jjC9wVVO2MneZ7M4+TGAxIgSCn/dUif6fbjYwpMHC7J5GlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkmWewFAZ/2keZYNkLK6lAhI0KGMB8GA1UdIwQY MBaAFEnycC0aByYXXjmvFpdOU3XcrvwxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZKd0xSb0hKaGRlT2E4V2wwNVRkZHl1X0RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9jZjIzZTctNzNiZS00ZTMwLWE5ZTgt M2QxYTBlYmQwZjU5LzEvU2ZKd0xSb0hKaGRlT2E4V2wwNVRkZHl1X0RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9jZjIzZTctNzNiZS00ZTMwLWE5ZTgtM2QxYTBlYmQwZjU5 LzEvU2ZKd0xSb0hKaGRlT2E4V2wwNVRkZHl1X0RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOUtfhpp XCh3ANEMIE45Z8KLmsCh15qnU8PVPrBqPsPkKVfuAExysGqJxmJ1GxuNc/7N28wX n/N5/TTbq1BDciuIurStqDTJGKax4EnC7TpN3lJrPobmholbPlsz2pXuOzAJDEh/ dOPAG1lWWk3j8CUNjdqYI1xJK7FdtmmSp5ayq6gNMqWiFQX3E4v4aDnRq0FlnOnk YJ131J+I3icCvL0WsxvXRrzPnOity7nu+RqNBH35lMcD2jOqKDE3mmr5r1LWud0o KfY7ngoXzt1Eq5CSP6xsrCRGtzOMzTg9+hYZVsgYyp6ZfjLAVnCzKqn3n/EgdeEj mNpVA3cbgobSDA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:45:31 2025 by rpki-client