This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft File: SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft (raw, json) Hash identifier: NYXyFtr6oJ6SQPpzS+CYrBIy0qp8uEp0fcFWIJMACZQ= Subject key identifier: CA:5B:51:5D:66:A6:CC:6B:28:D6:36:2B:58:85:BE:CC:D1:75:54:4A Authority key identifier: 48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B Certificate issuer: /CN=483fb37d1fb0ccd216dadec40009561a844aa83b Certificate serial: 019B405B16B2AA9A62036729AF736243B67D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft Manifest number: 043B Signing time: Sun 21 Dec 2025 10:01:09 +0000 Manifest this update: Sun 21 Dec 2025 10:01:09 +0000 Manifest next update: Mon 22 Dec 2025 10:01:09 +0000 Files and hashes: 1: QFSVeDq1epR2B-cHpjlozBO3ocI.roa (hash: iTCal74oQdwW9uQJuhQCWg6av2cdFSN2Hzxn0oSQ9UI=) 2: SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl (hash: W3jmb46HPZfXQ/7YB80w+BiRBTCvHqiOS4nyRmykfYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:16:b2:aa:9a:62:03:67:29:af:73:62:43:b6:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=483fb37d1fb0ccd216dadec40009561a844aa83b Validity Not Before: Dec 21 10:01:09 2025 GMT Not After : Dec 22 10:01:09 2025 GMT Subject: CN=ca5b515d66a6cc6b28d6362b5885beccd175544a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3f:f0:67:6b:f7:81:07:d6:11:4a:e2:2b:61: 64:70:dc:0e:a6:7e:7c:b7:41:10:c1:de:4c:a3:c3: c3:7f:6c:94:91:91:59:a3:c3:9f:c9:b4:df:70:d8: a7:ca:03:fd:fd:67:d4:73:18:fe:dc:7d:a0:06:b7: 18:ed:18:6d:22:f7:fe:d2:42:a8:30:fb:57:d2:b4: 67:e3:3f:0d:96:87:e7:fa:14:c8:dc:db:45:8a:58: 8f:ca:16:72:c0:d7:fd:bb:34:46:16:73:8d:d6:d3: 96:3f:c5:0d:85:b1:41:3f:03:e6:3a:89:20:60:e7: 16:8b:a8:cc:7c:b0:22:66:a3:d8:d9:a4:66:0f:d8: eb:36:49:ff:be:d4:f0:8a:07:d3:f8:99:29:dc:d8: c0:e0:d2:ea:4e:cc:4c:f8:c8:80:14:6d:76:7a:8f: 0b:e1:0a:32:0c:45:9f:93:a3:39:08:97:0b:54:9f: 10:54:08:a2:df:05:4d:c4:86:3c:ef:49:8f:02:a1: 99:5d:13:ea:ee:4c:99:a6:1b:dc:97:8b:7f:65:c9: 2b:b0:68:8e:29:68:6d:be:04:9c:89:bc:20:14:15: ad:a0:79:8f:75:74:f7:58:c9:66:4d:f2:e1:31:62: 9e:ec:b5:aa:64:96:81:40:a9:9c:01:5e:85:ab:74: 7b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5B:51:5D:66:A6:CC:6B:28:D6:36:2B:58:85:BE:CC:D1:75:54:4A X509v3 Authority Key Identifier: keyid:48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:2f:2d:7b:af:0c:63:50:31:1a:38:e4:e9:1e:bd:8b:1f:88: 59:bf:d0:d5:a5:3d:f9:a6:34:14:1d:ae:eb:ff:33:4a:33:92: fb:49:e1:2e:47:ae:d3:d0:76:fe:c9:77:1d:72:26:56:e6:58: cd:e2:eb:60:59:15:f4:3c:3b:0b:f3:9d:4b:52:42:eb:f8:03: 39:d7:65:40:3b:0a:7b:06:b9:c4:a0:20:7b:c6:1f:6a:b5:cb: e8:d3:0c:8b:a4:90:e7:e3:ef:b2:a8:f3:ae:10:94:ec:83:ac: d2:b3:fc:d5:e0:45:e6:06:07:27:05:8a:a0:c0:63:8b:68:75: 2e:0f:99:03:b1:99:ad:8f:d4:2d:fd:6a:06:3a:df:3b:3e:f4: 6e:d3:2c:aa:be:52:be:83:02:02:68:e4:14:29:36:78:13:57: 43:4a:b0:fa:dc:cd:2f:ef:09:0c:3f:48:63:9c:ff:bd:cd:c4: 6f:9f:31:d3:b0:f4:9e:e3:91:53:8a:71:e9:02:a1:62:5c:85: 82:c2:f4:b5:a1:87:99:53:bf:44:7f:6d:9f:fc:e4:30:40:21: f3:e3:23:d6:f7:8b:b7:6a:35:5b:db:4a:e5:fb:ff:bf:6f:29: a6:7b:f9:b3:8b:5e:f2:50:73:a5:af:92:26:a0:bd:40:46:37: d6:d2:21:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWxayqppiA2cpr3NiQ7Z9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4M2ZiMzdkMWZiMGNjZDIxNmRhZGVjNDAwMDk1NjFhODQ0 YWE4M2IwHhcNMjUxMjIxMTAwMTA5WhcNMjUxMjIyMTAwMTA5WjAzMTEwLwYDVQQD EyhjYTViNTE1ZDY2YTZjYzZiMjhkNjM2MmI1ODg1YmVjY2QxNzU1NDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT/wZ2v3gQfWEUriK2FkcNwOpn58 t0EQwd5Mo8PDf2yUkZFZo8OfybTfcNinygP9/WfUcxj+3H2gBrcY7RhtIvf+0kKo MPtX0rRn4z8Nlofn+hTI3NtFiliPyhZywNf9uzRGFnON1tOWP8UNhbFBPwPmOokg YOcWi6jMfLAiZqPY2aRmD9jrNkn/vtTwigfT+Jkp3NjA4NLqTsxM+MiAFG12eo8L 4QoyDEWfk6M5CJcLVJ8QVAii3wVNxIY870mPAqGZXRPq7kyZphvcl4t/ZckrsGiO KWhtvgScibwgFBWtoHmPdXT3WMlmTfLhMWKe7LWqZJaBQKmcAV6Fq3R7bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpbUV1mpsxrKNY2K1iFvszRdVRKMB8GA1UdIwQY MBaAFEg/s30fsMzSFtrexAAJVhqESqg7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0QtemZSLXd6TklXMnQ3RUFBbFdHb1JLcURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hMWViNjYtY2M4Ny00YTkwLTljNWQt ZWUzY2E3NGJiYjc5LzEvU0QtemZSLXd6TklXMnQ3RUFBbFdHb1JLcURzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9hMWViNjYtY2M4Ny00YTkwLTljNWQtZWUzY2E3NGJiYjc5 LzEvU0QtemZSLXd6TklXMnQ3RUFBbFdHb1JLcURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAli8te68M Y1AxGjjk6R69ix+IWb/Q1aU9+aY0FB2u6/8zSjOS+0nhLkeu09B2/sl3HXImVuZY zeLrYFkV9Dw7C/OdS1JC6/gDOddlQDsKewa5xKAge8YfarXL6NMMi6SQ5+Pvsqjz rhCU7IOs0rP81eBF5gYHJwWKoMBji2h1Lg+ZA7GZrY/ULf1qBjrfOz70btMsqr5S voMCAmjkFCk2eBNXQ0qw+tzNL+8JDD9IY5z/vc3Eb58x07D0nuORU4px6QKhYlyF gsL0taGHmVO/RH9tn/zkMEAh8+Mj1veLt2o1W9tK5fv/v28ppnv5s4te8lBzpa+S JqC9QEY31tIh/Q== -----END CERTIFICATE-----Generated at Sun Dec 21 18:55:15 2025 by rpki-client