This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft File: SfJiM_W7QibCp6e5ADAI0Z40eFs.mft (raw, json) Hash identifier: 4lN/+jDcywLbA7q+X/8UGvxAaL1uab6VeU4jKbdH1t0= Subject key identifier: 55:95:2E:18:24:3E:A1:FB:A2:D4:D5:14:16:9E:1E:9C:50:4D:C7:82 Authority key identifier: 49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B Certificate issuer: /CN=49f26233f5bb4226c2a7a7b9003008d19e34785b Certificate serial: 019B2DE6B3F97149D6101BFFAF71B3869DFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft Manifest number: 130F Signing time: Wed 17 Dec 2025 20:00:52 +0000 Manifest this update: Wed 17 Dec 2025 20:00:52 +0000 Manifest next update: Thu 18 Dec 2025 20:00:52 +0000 Files and hashes: 1: SfJiM_W7QibCp6e5ADAI0Z40eFs.crl (hash: fo7ftp8BH8GdIxRhC+6ovTHeNWUuc8Hd8mM+c2OgH+I=) 2: TmwIzb5OMEe4RHPaC68IjB6na0k.roa (hash: dW1pEtOcDuseosGnHRvKaebls+Ju6AZ6FoBVPM8QbJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:e6:b3:f9:71:49:d6:10:1b:ff:af:71:b3:86:9d:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f26233f5bb4226c2a7a7b9003008d19e34785b Validity Not Before: Dec 17 20:00:52 2025 GMT Not After : Dec 18 20:00:52 2025 GMT Subject: CN=55952e18243ea1fba2d4d514169e1e9c504dc782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:95:0e:3f:81:5f:71:d7:48:53:8e:47:0c:63: 8a:90:4e:f6:b0:e3:34:ae:f9:88:08:61:53:2c:b4: 94:6e:25:f2:72:42:4b:6b:4d:e7:31:ab:ab:14:f0: bc:7e:1e:86:0f:4b:56:f5:41:92:27:29:50:44:a5: db:97:33:41:8b:3e:e4:3e:3b:7e:77:6f:a4:b5:26: 3f:9e:e6:f9:0c:8c:56:bd:2f:bb:32:ed:fb:0d:11: a7:9b:88:97:ea:6c:82:96:68:30:66:a5:ea:a9:6e: 79:9e:3e:6c:cb:d1:4e:91:45:44:72:20:eb:db:30: 10:55:89:6b:ff:f1:70:9e:a9:b8:fe:cf:6c:2c:f3: 15:9d:36:14:e6:67:00:49:74:7d:bb:63:d1:27:25: cc:d0:e7:ca:3a:aa:7a:6e:e5:6c:1d:a2:80:27:f4: e0:bc:63:a3:8e:bb:79:56:c2:79:71:1f:b4:1b:b3: 08:91:67:b8:57:04:64:97:73:9c:29:96:2f:15:8f: 75:cc:66:5b:81:c4:ca:87:39:7a:b1:27:5a:1e:fc: a6:dc:2a:d8:b6:0f:fb:2e:bf:0a:9f:8e:7f:bd:cb: 77:48:b3:6f:9b:27:c1:d0:1c:24:d2:42:9d:d7:53: 94:cf:b5:7c:bd:c9:a5:91:1b:4c:af:f0:60:e6:9f: 8e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:95:2E:18:24:3E:A1:FB:A2:D4:D5:14:16:9E:1E:9C:50:4D:C7:82 X509v3 Authority Key Identifier: keyid:49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:5d:f3:cb:ef:5e:0b:e7:38:4b:0f:4e:a2:49:a1:ac:ad:da: 4f:56:5d:61:ea:f3:6f:ed:f7:20:bf:eb:2e:3e:22:ac:6c:6d: 49:9a:18:6a:df:6b:a0:55:9f:d9:4a:e9:3e:57:6c:8a:53:fa: 95:33:7a:5c:e8:00:9e:e9:ce:3f:74:c9:5a:fb:02:f7:3d:04: de:0a:e9:94:f7:c1:88:9d:c3:fb:a9:9e:58:c2:13:28:22:3f: 88:9d:cc:9f:f5:ac:01:c0:02:13:5c:1f:ae:3a:85:0b:6d:78: c2:93:51:d3:0c:22:4e:31:62:9f:6d:b3:78:a3:a5:31:fb:cc: a9:f8:37:ed:5b:ee:7f:f2:1f:a8:54:8b:f2:21:c5:52:6a:46: 32:cb:eb:2a:b6:f2:23:dc:80:69:84:a2:1c:ab:46:d8:90:a7: c7:c1:ec:e7:16:09:d1:2e:fa:cc:99:bf:56:4c:cd:e5:18:63: c4:09:87:50:11:d2:23:95:46:32:84:c9:2c:7e:3d:10:e5:63: b2:a5:60:23:69:85:44:21:b1:05:44:e3:92:d5:ef:68:2e:2a: b5:76:25:7c:1a:66:95:9b:49:a0:99:4b:e5:01:5d:5b:56:7c: 4e:de:11:c5:e9:25:0a:99:32:86:85:51:85:8e:d9:c7:15:6b: 03:24:07:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZst5rP5cUnWEBv/r3Gzhp36MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjI2MjMzZjViYjQyMjZjMmE3YTdiOTAwMzAwOGQxOWUz NDc4NWIwHhcNMjUxMjE3MjAwMDUyWhcNMjUxMjE4MjAwMDUyWjAzMTEwLwYDVQQD Eyg1NTk1MmUxODI0M2VhMWZiYTJkNGQ1MTQxNjllMWU5YzUwNGRjNzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpUOP4FfcddIU45HDGOKkE72sOM0 rvmICGFTLLSUbiXyckJLa03nMaurFPC8fh6GD0tW9UGSJylQRKXblzNBiz7kPjt+ d2+ktSY/nub5DIxWvS+7Mu37DRGnm4iX6myClmgwZqXqqW55nj5sy9FOkUVEciDr 2zAQVYlr//Fwnqm4/s9sLPMVnTYU5mcASXR9u2PRJyXM0OfKOqp6buVsHaKAJ/Tg vGOjjrt5VsJ5cR+0G7MIkWe4VwRkl3OcKZYvFY91zGZbgcTKhzl6sSdaHvym3CrY tg/7Lr8Kn45/vct3SLNvmyfB0Bwk0kKd11OUz7V8vcmlkRtMr/Bg5p+ObwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWVLhgkPqH7otTVFBaeHpxQTceCMB8GA1UdIwQY MBaAFEnyYjP1u0ImwqenuQAwCNGeNHhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZKaU1fVzdRaWJDcDZlNUFEQUkwWjQwZUZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZmRmNmQtY2JhNi00NDk0LTkwMjgt NTc3ZTk5MzViZDc1LzEvU2ZKaU1fVzdRaWJDcDZlNUFEQUkwWjQwZUZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84ZmRmNmQtY2JhNi00NDk0LTkwMjgtNTc3ZTk5MzViZDc1 LzEvU2ZKaU1fVzdRaWJDcDZlNUFEQUkwWjQwZUZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFl3zy+9e C+c4Sw9OokmhrK3aT1ZdYerzb+33IL/rLj4irGxtSZoYat9roFWf2UrpPldsilP6 lTN6XOgAnunOP3TJWvsC9z0E3grplPfBiJ3D+6meWMITKCI/iJ3Mn/WsAcACE1wf rjqFC214wpNR0wwiTjFin22zeKOlMfvMqfg37Vvuf/IfqFSL8iHFUmpGMsvrKrby I9yAaYSiHKtG2JCnx8Hs5xYJ0S76zJm/VkzN5RhjxAmHUBHSI5VGMoTJLH49EOVj sqVgI2mFRCGxBUTjktXvaC4qtXYlfBpmlZtJoJlL5QFdW1Z8Tt4RxeklCpkyhoVR hY7ZxxVrAyQHHA== -----END CERTIFICATE-----Generated at Wed Dec 17 22:26:56 2025 by rpki-client