This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft File: Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft (raw, json) Hash identifier: ytbl634RLd8hqM/Pf3By0fkIKziPLWS0pYatW06GLA4= Subject key identifier: 31:98:AA:AA:CC:62:82:25:8B:CE:CC:24:05:25:A1:A1:70:1C:18:E0 Authority key identifier: 49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71 Certificate issuer: /CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71 Certificate serial: 019B3B6B9CB74ED158B1B0F286FFAE2AC9AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft Manifest number: 0FBE Signing time: Sat 20 Dec 2025 11:01:06 +0000 Manifest this update: Sat 20 Dec 2025 11:01:06 +0000 Manifest next update: Sun 21 Dec 2025 11:01:06 +0000 Files and hashes: 1: Mg03f5x9KEwTzrWMVXcY-DpbRQM.roa (hash: gHoeFO+xk1dFoFV2Z9UYHxVBDmrYCHhqpQCvP+8wkDE=) 2: Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl (hash: 2IKG/aN+XZcELDaaWLmMbsbPFJEHIW2TqxZeF24lZXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:9c:b7:4e:d1:58:b1:b0:f2:86:ff:ae:2a:c9:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71 Validity Not Before: Dec 20 11:01:06 2025 GMT Not After : Dec 21 11:01:06 2025 GMT Subject: CN=3198aaaacc6282258bcecc240525a1a1701c18e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:09:42:de:d5:05:19:bc:e4:8a:77:3c:69:23: 14:9f:84:95:92:90:26:21:f9:48:c7:f0:0f:88:19: 22:d6:7e:d1:17:de:df:13:13:a6:b3:d3:f0:c8:bc: 06:a3:8b:c5:56:3b:9a:3e:58:26:f7:1b:d5:fe:57: 2c:b8:06:6a:50:9f:99:25:cc:7a:a0:ff:54:4f:61: ec:c9:4e:1e:92:db:81:4b:6d:45:22:26:0c:e6:27: 87:d1:bf:9d:0e:f6:e3:66:cf:04:04:b0:9e:b9:3f: 6e:5e:bc:86:7d:cc:35:67:cf:81:c6:6e:1c:c7:d9: d4:10:91:a3:79:a8:c3:93:ca:53:4a:9a:5d:df:8b: ea:4d:79:6e:b2:33:9d:b1:81:bc:b9:35:6b:27:53: 1e:7a:17:52:39:f1:64:d5:94:20:7b:6e:ae:0c:80: cd:e2:54:aa:f5:ec:b1:77:6e:e3:f1:b2:f6:37:67: 14:40:e7:48:9a:f5:9c:e2:bc:02:3d:99:ba:91:e7: 8a:62:ce:7b:3b:63:9b:a9:86:a9:14:93:2d:0f:63: f5:7f:f2:c2:7f:8f:28:2b:16:19:e5:10:83:24:c3: 5e:45:e3:18:b7:23:6a:3d:11:de:51:aa:91:38:51: 6e:f4:ee:8f:9f:a0:ce:ad:d1:1d:e6:b8:29:82:a4: 00:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:98:AA:AA:CC:62:82:25:8B:CE:CC:24:05:25:A1:A1:70:1C:18:E0 X509v3 Authority Key Identifier: keyid:49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:9f:43:92:15:20:39:31:85:d0:fb:52:a2:38:28:a7:9a:fa: c3:e9:d2:ec:db:31:b0:83:a9:46:5b:1b:87:05:54:81:b6:e1: 96:0a:08:ba:5d:4d:d3:7e:8a:61:d5:97:f4:c2:b2:3b:27:3d: 45:4e:1a:54:de:0e:73:dd:b4:0a:a8:0b:4d:1c:c7:7e:8c:c8: 2c:8b:ab:5e:4b:26:32:2f:54:90:70:7c:91:93:08:0d:74:78: 82:79:66:72:bb:01:00:e1:bc:f7:36:b7:db:75:23:2f:dc:cc: 05:77:11:ac:3b:bd:6c:c0:03:68:ca:88:63:69:4a:40:56:0b: 5a:a7:57:70:f9:a8:7d:a1:84:3d:f0:da:fa:e1:c9:5f:d9:8e: 1a:d7:d1:a2:53:bc:40:bf:d0:fc:bc:3e:5a:3b:f3:1d:92:54: 4e:a4:7f:6e:22:5e:43:0f:73:6b:66:56:4f:ba:84:d2:8b:64: 1e:2a:18:ea:14:32:1a:64:5c:41:43:4f:6d:59:da:41:3f:4c: 46:80:f9:62:85:57:9c:55:16:10:81:1f:ce:d0:fe:73:53:e3: 67:91:cc:df:5a:b8:39:fc:92:54:9a:de:33:86:a4:84:46:47: 8d:4c:81:02:12:27:da:3a:a5:c5:6a:1a:e5:9a:0a:0a:6d:74: 63:6f:b8:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a5y3TtFYsbDyhv+uKsmtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZmU4YzcyYWEzMmRlOTU3YjI0Y2Y5ZjczZjhhN2ZiMWFj ZjBiNzEwHhcNMjUxMjIwMTEwMTA2WhcNMjUxMjIxMTEwMTA2WjAzMTEwLwYDVQQD EygzMTk4YWFhYWNjNjI4MjI1OGJjZWNjMjQwNTI1YTFhMTcwMWMxOGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAlC3tUFGbzkinc8aSMUn4SVkpAm IflIx/APiBki1n7RF97fExOms9PwyLwGo4vFVjuaPlgm9xvV/lcsuAZqUJ+ZJcx6 oP9UT2HsyU4ektuBS21FIiYM5ieH0b+dDvbjZs8EBLCeuT9uXryGfcw1Z8+Bxm4c x9nUEJGjeajDk8pTSppd34vqTXlusjOdsYG8uTVrJ1MeehdSOfFk1ZQge26uDIDN 4lSq9eyxd27j8bL2N2cUQOdImvWc4rwCPZm6keeKYs57O2ObqYapFJMtD2P1f/LC f48oKxYZ5RCDJMNeReMYtyNqPRHeUaqROFFu9O6Pn6DOrdEd5rgpgqQACwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGYqqrMYoIli87MJAUloaFwHBjgMB8GA1UdIwQY MBaAFEn+jHKqMt6VeyTPn3P4p/sazwtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2Y2TWNxb3kzcFY3Sk0tZmNfaW4teHJQQzNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80MTE0YTctMzEyMi00ODY0LTg1YWUt NDI5N2U1NzI2MTdlLzEvU2Y2TWNxb3kzcFY3Sk0tZmNfaW4teHJQQzNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy80MTE0YTctMzEyMi00ODY0LTg1YWUtNDI5N2U1NzI2MTdl LzEvU2Y2TWNxb3kzcFY3Sk0tZmNfaW4teHJQQzNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB59DkhUg OTGF0PtSojgop5r6w+nS7NsxsIOpRlsbhwVUgbbhlgoIul1N036KYdWX9MKyOyc9 RU4aVN4Oc920CqgLTRzHfozILIurXksmMi9UkHB8kZMIDXR4gnlmcrsBAOG89za3 23UjL9zMBXcRrDu9bMADaMqIY2lKQFYLWqdXcPmofaGEPfDa+uHJX9mOGtfRolO8 QL/Q/Lw+WjvzHZJUTqR/biJeQw9za2ZWT7qE0otkHioY6hQyGmRcQUNPbVnaQT9M RoD5YoVXnFUWEIEfztD+c1PjZ5HM31q4OfySVJreM4akhEZHjUyBAhIn2jqlxWoa 5ZoKCm10Y2+49w== -----END CERTIFICATE-----Generated at Sat Dec 20 18:50:19 2025 by rpki-client