This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft File: SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json) Hash identifier: 9SdUlaQkvwbjMO6r1bFCy3V0+OD7LmidTSmRCFBQXKs= Subject key identifier: 2D:39:4B:EE:60:D3:6F:46:09:30:63:B2:31:B7:39:71:B5:54:2B:16 Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a Certificate serial: 019AF19BDD289DBAC930F5B0942DDCE69642 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft Manifest number: 0740 Signing time: Sat 06 Dec 2025 03:01:54 +0000 Manifest this update: Sat 06 Dec 2025 03:01:54 +0000 Manifest next update: Sun 07 Dec 2025 03:01:54 +0000 Files and hashes: 1: 3klZTNM9YhJqZUNp3PJkFRczFX8.roa (hash: OyXgZ5l4rO5Wt2TcoTvX9gJZ0hgPAdu2wTU0n6/gZoU=) 2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: LbsGV09J+emSkA6fZDtBSQzuDiWIcHoUI7xUrCc1BAU=) 3: W0AAJRLr6gi2r74kS95DxTYGfTw.roa (hash: MH+HQqYFMBeGJJqR0jYHA1u1MAdvWa+AHHutk6W2MvA=) 4: r0aCHKZqLV95OV5gwTfYdhHbA6Q.roa (hash: xjRrpFDO8g9sZNIp8GQ1hogAG1em04ZcPXgm2d8N7a8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:dd:28:9d:ba:c9:30:f5:b0:94:2d:dc:e6:96:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a Validity Not Before: Dec 6 03:01:54 2025 GMT Not After : Dec 7 03:01:54 2025 GMT Subject: CN=2d394bee60d36f46093063b231b73971b5542b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5a:6b:84:97:85:57:80:0a:8f:f8:f7:9d:96: cf:66:fe:6b:bc:44:31:e3:e6:7f:f8:3b:3d:41:4d: d9:4e:50:6c:2b:64:1e:79:fa:a5:de:7c:cd:70:bc: 0a:57:6a:94:3a:55:1b:f1:27:cb:cf:25:c9:d0:70: b0:1f:8c:4c:27:25:ef:30:b6:2f:f5:a1:d2:c5:c0: 95:35:66:6a:ad:dd:ae:8b:f6:63:d5:94:cc:6a:c8: c6:dd:42:83:55:7b:ea:62:59:f3:f7:d5:64:ec:c1: 90:fe:3d:60:59:c1:83:35:5d:1a:67:51:08:f4:23: 89:71:f0:00:67:c7:ee:48:1c:46:10:04:84:83:10: 38:d9:38:d2:46:b6:a6:12:3b:ac:a3:5c:8e:10:08: 24:5b:15:34:41:a1:a7:98:0e:2a:dd:83:c0:75:6e: 99:f8:91:76:87:a0:79:98:ae:da:c3:42:b5:89:e5: 43:09:42:79:ad:43:f3:3a:17:44:e3:b7:bd:d1:61: 1e:ee:5b:13:a9:ed:d3:95:c4:93:4c:56:c6:e2:c0: aa:99:bb:04:9d:77:a9:1c:db:fb:8e:a6:d6:6c:90: 6d:29:38:db:5e:ff:37:68:66:f0:e8:2f:43:37:ed: 13:45:e4:37:f4:57:47:cf:7a:1e:9e:96:6d:ac:28: 2c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:39:4B:EE:60:D3:6F:46:09:30:63:B2:31:B7:39:71:B5:54:2B:16 X509v3 Authority Key Identifier: keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:c7:dd:0d:6e:3a:93:ea:85:10:5f:de:df:e6:67:79:31:08: 25:98:4c:be:9d:1a:2b:dd:9d:78:c0:73:38:1c:d5:31:8d:c3: 30:45:17:cf:f9:3f:20:09:fc:ab:75:99:18:42:ae:61:27:fc: 47:c9:5c:de:d5:b3:e9:e5:d8:c9:90:0f:47:5e:c6:1a:1b:e3: 45:51:3d:30:3e:58:4d:10:14:42:a6:37:2b:41:14:e6:9a:5b: 26:a7:fd:95:60:8f:51:7a:01:10:ab:1d:05:91:47:e9:8f:7d: 64:34:1e:67:c1:44:5d:73:80:b8:2e:0a:f3:bb:ba:58:a6:41: c3:19:32:8b:89:0a:f5:05:03:8f:45:95:93:dc:d6:ec:7d:32: 39:f4:35:01:1f:a3:58:bf:93:67:61:ab:3f:c0:6b:1d:9d:b0: 9d:34:a8:e8:67:c8:ce:e6:2b:0e:ba:8a:36:eb:e4:94:f2:13: 98:62:43:ee:f2:aa:33:62:34:1c:36:1e:0b:54:4d:88:7c:44: f2:de:35:33:a4:9c:17:0d:b3:14:e0:55:ed:3b:c9:5d:d6:09: 2c:75:1f:2c:6a:0c:0a:3e:64:bd:55:9b:e0:a7:88:3b:56:fd: d8:b1:e0:8d:be:64:94:56:b1:77:a2:a6:ef:7a:c8:27:6f:fa: 64:d9:d8:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm90onbrJMPWwlC3c5pZCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NWRkYjY3OGM0YzBkMGM0ODhlZmQzYjgzNjcxNDIxODlm MzM1OGEwHhcNMjUxMjA2MDMwMTU0WhcNMjUxMjA3MDMwMTU0WjAzMTEwLwYDVQQD EygyZDM5NGJlZTYwZDM2ZjQ2MDkzMDYzYjIzMWI3Mzk3MWI1NTQyYjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFprhJeFV4AKj/j3nZbPZv5rvEQx 4+Z/+Ds9QU3ZTlBsK2Qeefql3nzNcLwKV2qUOlUb8SfLzyXJ0HCwH4xMJyXvMLYv 9aHSxcCVNWZqrd2ui/Zj1ZTMasjG3UKDVXvqYlnz99Vk7MGQ/j1gWcGDNV0aZ1EI 9COJcfAAZ8fuSBxGEASEgxA42TjSRramEjuso1yOEAgkWxU0QaGnmA4q3YPAdW6Z +JF2h6B5mK7aw0K1ieVDCUJ5rUPzOhdE47e90WEe7lsTqe3TlcSTTFbG4sCqmbsE nXepHNv7jqbWbJBtKTjbXv83aGbw6C9DN+0TReQ39FdHz3oenpZtrCgslQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC05S+5g029GCTBjsjG3OXG1VCsWMB8GA1UdIwQY MBaAFEhd22eMTA0MSI79O4NnFCGJ8zWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUt ZGViZmNkOWViMjBlLzEvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUtZGViZmNkOWViMjBl LzEvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsfdDW46 k+qFEF/e3+ZneTEIJZhMvp0aK92deMBzOBzVMY3DMEUXz/k/IAn8q3WZGEKuYSf8 R8lc3tWz6eXYyZAPR17GGhvjRVE9MD5YTRAUQqY3K0EU5ppbJqf9lWCPUXoBEKsd BZFH6Y99ZDQeZ8FEXXOAuC4K87u6WKZBwxkyi4kK9QUDj0WVk9zW7H0yOfQ1AR+j WL+TZ2GrP8BrHZ2wnTSo6GfIzuYrDrqKNuvklPITmGJD7vKqM2I0HDYeC1RNiHxE 8t41M6ScFw2zFOBV7TvJXdYJLHUfLGoMCj5kvVWb4KeIO1b92LHgjb5klFaxd6Km 73rIJ2/6ZNnY+g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:37:56 2025 by rpki-client