This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft File: SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft (raw, json) Hash identifier: xwqvAc4/vBByJJiLKNyA5FBghNtHRfl/VRHxmssmxnc= Subject key identifier: 4E:F0:3F:50:29:F3:0D:D5:A3:51:BA:E6:C6:A5:FC:65:02:AA:92:46 Authority key identifier: 49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55 Certificate issuer: /CN=49d01f70cf5f4deed93a8c15e494029e93abed55 Certificate serial: 019B2FD4CDC9612299DA97D0CDA167AE43DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft Manifest number: 03A4 Signing time: Thu 18 Dec 2025 05:00:33 +0000 Manifest this update: Thu 18 Dec 2025 05:00:33 +0000 Manifest next update: Fri 19 Dec 2025 05:00:33 +0000 Files and hashes: 1: SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl (hash: CKzezqpUmmtr0m0N+NL/r+A4Kw0TEcsJxy+OrVBwLY8=) 2: WxZz3Xq4Dubhk-2v4KkyD3DjymY.roa (hash: TcPVaB9byF2mn4BjYUtIE/4fQoQybO53Dwd3vhK7Z5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d4:cd:c9:61:22:99:da:97:d0:cd:a1:67:ae:43:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49d01f70cf5f4deed93a8c15e494029e93abed55 Validity Not Before: Dec 18 05:00:33 2025 GMT Not After : Dec 19 05:00:33 2025 GMT Subject: CN=4ef03f5029f30dd5a351bae6c6a5fc6502aa9246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2c:c4:4f:e3:d1:39:81:a9:c2:7c:02:c4:01: fa:c0:ab:84:93:54:cf:cf:15:80:b6:c8:76:24:74: 47:48:e5:92:38:f9:99:4d:a8:db:86:93:6a:19:75: 74:00:05:0e:04:df:e2:93:a7:4f:de:44:dc:f7:ca: 46:35:17:ad:6e:0a:7d:65:99:75:ec:02:9a:e7:30: fc:94:4d:95:6e:e2:44:e1:42:03:d1:d2:6c:34:30: db:4d:bf:f5:88:e3:17:7b:77:25:fa:f3:62:33:d9: 60:b5:cb:de:52:3a:62:52:e0:c9:3f:05:64:75:d0: ae:e1:db:ba:c2:e0:6f:32:19:31:e7:34:dc:da:92: 13:fa:f7:dc:3a:68:a4:de:13:f3:2f:6e:dd:3c:37: c7:fa:ef:1a:8d:98:a9:4b:a8:af:b6:c7:03:31:68: 80:e8:7a:f8:67:21:38:a4:e9:5a:28:e6:4f:3f:ac: 85:7a:9a:e9:91:78:6d:f0:f2:9a:de:03:16:88:80: 71:51:89:1e:b8:dc:ff:54:e3:64:dc:8c:00:4a:cf: ec:c9:cd:bf:40:60:6c:a7:cb:b5:d1:53:a7:2f:68: c7:98:6d:73:c7:c2:9d:76:18:99:fb:a5:38:2f:0e: b7:3a:c8:6e:09:ab:07:c2:24:36:ea:f6:b6:77:e0: bd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F0:3F:50:29:F3:0D:D5:A3:51:BA:E6:C6:A5:FC:65:02:AA:92:46 X509v3 Authority Key Identifier: keyid:49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:27:b1:cf:50:d4:35:e2:11:97:f8:ba:2a:6a:e5:f9:88:c8: 8c:99:0b:ec:35:22:54:3a:6b:b4:c5:69:c7:fb:d5:44:b3:f2: fa:81:9d:d6:35:cf:c3:d6:41:35:70:e2:5c:d9:19:62:7b:0f: d7:5a:ba:3d:90:86:8d:eb:f0:a3:a5:30:40:cd:ba:5c:86:5a: 44:7e:14:a4:56:8f:a9:e2:d6:7a:58:aa:31:2d:95:ce:96:e5: a2:27:a9:d7:64:78:59:8f:b3:fc:07:b1:ff:a4:0e:ee:c8:3d: 01:c4:08:7c:2a:f4:de:51:2b:a3:0d:c6:32:88:bf:af:ea:76: c0:a7:fe:b6:28:23:d8:95:f5:d6:b0:77:6d:39:f8:10:23:b1: 27:ba:0e:a8:34:e6:0e:16:0e:ed:58:85:0a:c7:7f:7e:3f:6c: e2:85:9a:9d:07:fb:96:36:d7:fc:35:26:9d:f0:3f:91:78:8d: 2f:0e:55:b4:65:fb:bf:30:3a:71:00:eb:99:16:01:9b:68:b5: 43:48:f2:c4:9b:ea:79:69:13:c0:f2:18:21:82:f4:03:f6:41: f3:2a:a7:1d:44:c5:fb:0c:44:c7:f3:1a:4e:85:60:a1:0b:3f: 79:59:a6:1d:f5:f3:1c:c7:9b:80:dc:d9:01:4f:5f:f3:98:f7: 4a:ac:e1:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1M3JYSKZ2pfQzaFnrkPaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZDAxZjcwY2Y1ZjRkZWVkOTNhOGMxNWU0OTQwMjllOTNh YmVkNTUwHhcNMjUxMjE4MDUwMDMzWhcNMjUxMjE5MDUwMDMzWjAzMTEwLwYDVQQD Eyg0ZWYwM2Y1MDI5ZjMwZGQ1YTM1MWJhZTZjNmE1ZmM2NTAyYWE5MjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnizET+PROYGpwnwCxAH6wKuEk1TP zxWAtsh2JHRHSOWSOPmZTajbhpNqGXV0AAUOBN/ik6dP3kTc98pGNRetbgp9ZZl1 7AKa5zD8lE2VbuJE4UID0dJsNDDbTb/1iOMXe3cl+vNiM9lgtcveUjpiUuDJPwVk ddCu4du6wuBvMhkx5zTc2pIT+vfcOmik3hPzL27dPDfH+u8ajZipS6ivtscDMWiA 6Hr4ZyE4pOlaKOZPP6yFeprpkXht8PKa3gMWiIBxUYkeuNz/VONk3IwASs/syc2/ QGBsp8u10VOnL2jHmG1zx8KddhiZ+6U4Lw63OshuCasHwiQ26va2d+C9LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7wP1Ap8w3Vo1G65sal/GUCqpJGMB8GA1UdIwQY MBaAFEnQH3DPX03u2TqMFeSUAp6Tq+1VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2RBZmNNOWZUZTdaT293VjVKUUNucE9yN1ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84MjE1NzItMzQ0NS00OTEwLWExNWMt ZjRjMTY2YzgzZjg4LzEvU2RBZmNNOWZUZTdaT293VjVKUUNucE9yN1ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC84MjE1NzItMzQ0NS00OTEwLWExNWMtZjRjMTY2YzgzZjg4 LzEvU2RBZmNNOWZUZTdaT293VjVKUUNucE9yN1ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyexz1DU NeIRl/i6Kmrl+YjIjJkL7DUiVDprtMVpx/vVRLPy+oGd1jXPw9ZBNXDiXNkZYnsP 11q6PZCGjevwo6UwQM26XIZaRH4UpFaPqeLWeliqMS2Vzpbloiep12R4WY+z/Aex /6QO7sg9AcQIfCr03lErow3GMoi/r+p2wKf+tigj2JX11rB3bTn4ECOxJ7oOqDTm DhYO7ViFCsd/fj9s4oWanQf7ljbX/DUmnfA/kXiNLw5VtGX7vzA6cQDrmRYBm2i1 Q0jyxJvqeWkTwPIYIYL0A/ZB8yqnHUTF+wxEx/MaToVgoQs/eVmmHfXzHMebgNzZ AU9f85j3SqzhxQ== -----END CERTIFICATE-----Generated at Thu Dec 18 06:51:09 2025 by rpki-client