This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft File: SfJiM_W7QibCp6e5ADAI0Z40eFs.mft (raw, json) Hash identifier: EH5xaL58gvrvBSzbHUOw/tmwL02yjoDZ+hxgf65kzPI= Subject key identifier: 1C:86:DF:E2:4F:07:49:22:18:16:51:1D:9E:30:5E:C8:78:C4:17:C7 Authority key identifier: 49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B Certificate issuer: /CN=49f26233f5bb4226c2a7a7b9003008d19e34785b Certificate serial: 019AF208FA38AF41612CC099D2BC658D57AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft Manifest number: 12F0 Signing time: Sat 06 Dec 2025 05:01:05 +0000 Manifest this update: Sat 06 Dec 2025 05:01:05 +0000 Manifest next update: Sun 07 Dec 2025 05:01:05 +0000 Files and hashes: 1: SfJiM_W7QibCp6e5ADAI0Z40eFs.crl (hash: 20zahmeOptYjn5xqdGNlyxk9T69ItzXmhATCG+LuNL8=) 2: TmwIzb5OMEe4RHPaC68IjB6na0k.roa (hash: dW1pEtOcDuseosGnHRvKaebls+Ju6AZ6FoBVPM8QbJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:fa:38:af:41:61:2c:c0:99:d2:bc:65:8d:57:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f26233f5bb4226c2a7a7b9003008d19e34785b Validity Not Before: Dec 6 05:01:05 2025 GMT Not After : Dec 7 05:01:05 2025 GMT Subject: CN=1c86dfe24f0749221816511d9e305ec878c417c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:13:c6:02:9a:5c:2c:5b:9c:c6:51:f0:ad:75: c8:b6:f1:26:2d:a3:1e:a3:d4:ad:44:a7:3d:0c:af: 80:bd:69:83:41:3b:f0:f6:6e:2f:ac:4d:02:75:4a: ab:58:db:27:0e:28:bf:7a:0c:5c:e3:b6:c3:c1:7d: 03:e9:5e:60:a8:b5:42:fe:17:13:b4:d3:f5:b5:f5: 41:58:c0:ba:50:50:43:1f:68:c0:c7:96:17:7d:72: 6b:2c:e1:b2:11:96:04:ce:97:24:cf:61:7a:32:f8: 41:aa:89:6a:8c:c9:e7:ed:3f:37:15:39:dc:62:e5: c9:17:66:7c:17:80:cd:d9:57:2a:fb:6c:4b:11:dc: 5a:11:e5:2e:59:b2:46:03:c6:a6:84:9e:8d:dd:5a: 2c:2e:c2:bb:77:fb:44:43:4f:4c:7c:d7:04:bb:5f: a1:fc:99:95:6b:d7:f9:f2:93:27:76:1c:1a:ff:e1: c6:fc:2c:6c:34:cd:d6:ff:d4:32:a6:88:70:12:ff: d5:19:e9:e5:27:a2:53:7e:dc:64:b5:b5:29:e3:fb: a2:d1:08:f6:8c:11:6d:36:05:a4:0c:9f:d9:cf:f8: 92:f9:fe:07:2f:57:4a:f1:b7:93:6a:0b:57:9e:40: d7:fe:da:d4:ff:0d:34:34:0f:3b:a3:9c:89:e8:d4: 32:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:86:DF:E2:4F:07:49:22:18:16:51:1D:9E:30:5E:C8:78:C4:17:C7 X509v3 Authority Key Identifier: keyid:49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:ee:0e:ac:a8:89:79:41:c9:67:7c:ab:73:e4:25:af:a4:03: 2b:1d:e2:1e:97:29:9b:20:82:f8:28:0e:5c:aa:c9:b3:8f:e0: e6:ea:c8:89:51:d0:5b:d8:db:5f:f9:9d:3e:20:27:2f:5d:ef: 6d:a2:66:2b:9d:77:9d:e7:5d:ab:b8:4e:b9:d6:30:54:b7:58: 48:54:68:bc:39:93:96:ed:02:4e:ad:92:21:e1:03:91:6d:e4: 79:b2:0d:ae:59:6b:90:bd:eb:32:f8:af:d5:82:13:1f:f7:85: 57:67:a0:b2:02:6e:24:b5:72:4d:e0:08:32:60:d8:95:0a:7c: 41:7f:af:1e:49:9e:6a:ab:0d:49:36:c3:48:78:31:61:98:74: 75:e8:28:0e:14:2e:b8:d9:8e:7e:71:6c:9e:2c:5b:d6:80:29: 4c:61:ff:76:73:dc:1f:19:0c:23:75:00:2a:eb:fc:0a:42:37: e3:d5:00:5c:1f:94:de:33:54:9b:96:12:a7:58:27:14:8f:d7: 59:b1:df:c4:31:2f:43:74:aa:f7:cd:8e:53:21:22:fd:fb:ea: b7:0d:87:22:09:90:ed:1f:28:eb:9b:87:a2:3a:92:38:c2:12: 13:30:38:fd:27:26:57:fa:f2:93:5f:3e:98:4a:fd:68:2d:e7: c9:81:c0:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPo4r0FhLMCZ0rxljVevMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjI2MjMzZjViYjQyMjZjMmE3YTdiOTAwMzAwOGQxOWUz NDc4NWIwHhcNMjUxMjA2MDUwMTA1WhcNMjUxMjA3MDUwMTA1WjAzMTEwLwYDVQQD EygxYzg2ZGZlMjRmMDc0OTIyMTgxNjUxMWQ5ZTMwNWVjODc4YzQxN2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RPGAppcLFucxlHwrXXItvEmLaMe o9StRKc9DK+AvWmDQTvw9m4vrE0CdUqrWNsnDii/egxc47bDwX0D6V5gqLVC/hcT tNP1tfVBWMC6UFBDH2jAx5YXfXJrLOGyEZYEzpckz2F6MvhBqolqjMnn7T83FTnc YuXJF2Z8F4DN2Vcq+2xLEdxaEeUuWbJGA8amhJ6N3VosLsK7d/tEQ09MfNcEu1+h /JmVa9f58pMndhwa/+HG/CxsNM3W/9QypohwEv/VGenlJ6JTftxktbUp4/ui0Qj2 jBFtNgWkDJ/Zz/iS+f4HL1dK8beTagtXnkDX/trU/w00NA87o5yJ6NQyjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFByG3+JPB0kiGBZRHZ4wXsh4xBfHMB8GA1UdIwQY MBaAFEnyYjP1u0ImwqenuQAwCNGeNHhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZKaU1fVzdRaWJDcDZlNUFEQUkwWjQwZUZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZmRmNmQtY2JhNi00NDk0LTkwMjgt NTc3ZTk5MzViZDc1LzEvU2ZKaU1fVzdRaWJDcDZlNUFEQUkwWjQwZUZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84ZmRmNmQtY2JhNi00NDk0LTkwMjgtNTc3ZTk5MzViZDc1 LzEvU2ZKaU1fVzdRaWJDcDZlNUFEQUkwWjQwZUZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFe4OrKiJ eUHJZ3yrc+Qlr6QDKx3iHpcpmyCC+CgOXKrJs4/g5urIiVHQW9jbX/mdPiAnL13v baJmK513neddq7hOudYwVLdYSFRovDmTlu0CTq2SIeEDkW3kebINrllrkL3rMviv 1YITH/eFV2egsgJuJLVyTeAIMmDYlQp8QX+vHkmeaqsNSTbDSHgxYZh0degoDhQu uNmOfnFsnixb1oApTGH/dnPcHxkMI3UAKuv8CkI349UAXB+U3jNUm5YSp1gnFI/X WbHfxDEvQ3Sq982OUyEi/fvqtw2HIgmQ7R8o65uHojqSOMISEzA4/ScmV/ryk18+ mEr9aC3nyYHA7w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:56:18 2025 by rpki-client