This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft File: SFMhasnZIXM78_SEOTo0SVwOKmc.mft (raw, json) Hash identifier: ZtTJP+7xH0WWG69xZfM+Azx79IQF8ntfJLMGF0kk5SQ= Subject key identifier: 0E:55:82:C3:4B:56:BC:4D:8D:6D:22:D8:98:84:80:EC:A6:0C:88:98 Authority key identifier: 48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67 Certificate issuer: /CN=4853216ac9d921733bf3f484393a34495c0e2a67 Certificate serial: 019B3FB5FAAE148C893242009CAFFE7D5F45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft Manifest number: 0AE7 Signing time: Sun 21 Dec 2025 07:00:49 +0000 Manifest this update: Sun 21 Dec 2025 07:00:49 +0000 Manifest next update: Mon 22 Dec 2025 07:00:49 +0000 Files and hashes: 1: SFMhasnZIXM78_SEOTo0SVwOKmc.crl (hash: 0Wjs5nnVQVNWKFDLLFxziLE99OT9mae3Doxi9RQKS9o=) 2: hajbKl16Cy4Tdq_wgIk77VxT_6Q.roa (hash: +x4Da87nsosWbKf7z+mFyLUyvFKLPH55B5hxOSqBXYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:fa:ae:14:8c:89:32:42:00:9c:af:fe:7d:5f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4853216ac9d921733bf3f484393a34495c0e2a67 Validity Not Before: Dec 21 07:00:49 2025 GMT Not After : Dec 22 07:00:49 2025 GMT Subject: CN=0e5582c34b56bc4d8d6d22d8988480eca60c8898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:53:a1:1b:36:b0:07:cb:c3:0d:3c:5e:dd:cb: 3d:5f:a2:59:7f:9b:88:5f:f8:2c:e2:f3:62:7b:8d: 7c:80:0b:4b:76:ac:d1:33:a9:f5:56:f8:52:c7:44: c9:89:8a:63:ae:94:7d:17:a2:dd:13:a2:2f:6f:b9: 98:60:90:5a:d3:33:20:e5:91:f1:48:74:4c:88:d2: e1:85:fd:79:f4:8e:cb:85:5d:46:fb:64:e1:63:a9: 2b:c7:f8:5c:57:84:4a:82:f2:ce:28:36:00:0e:46: d4:ab:0f:0d:e2:86:cb:6d:b4:3d:87:6b:06:ce:d0: 41:06:b1:27:4c:dc:ec:3f:99:84:5a:9f:54:01:00: 2e:8b:fe:b3:0b:e3:d0:c2:f8:7d:e4:34:ea:df:2d: ef:9c:a6:96:41:bd:5c:75:37:46:39:b9:19:5c:08: 2d:22:7f:7d:e5:0d:bb:25:3a:c1:c7:ce:47:56:90: ec:67:e5:93:ac:4b:15:26:f1:ac:58:10:7c:c3:0e: 1d:06:2d:6b:25:14:0f:07:bc:75:7a:c9:61:19:ca: 2b:24:b1:5b:83:07:1f:a4:02:54:2a:fc:50:c0:4b: 91:6d:d3:df:0a:9e:b5:15:18:e0:28:2f:52:5a:bb: 58:24:eb:29:2d:98:9d:1c:76:77:3f:e1:23:b1:22: 8c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:55:82:C3:4B:56:BC:4D:8D:6D:22:D8:98:84:80:EC:A6:0C:88:98 X509v3 Authority Key Identifier: keyid:48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:a8:ed:22:66:a8:54:7f:2d:1c:c9:f2:45:7a:c5:85:5b:88: de:bc:26:40:0b:61:00:4c:7a:db:c6:11:be:2d:a7:c7:eb:39: dc:ef:08:01:22:6a:25:8e:ea:27:b5:e1:7a:70:4d:51:ba:0b: b7:02:fd:91:38:c2:bf:29:48:a8:b2:9d:e5:6a:40:7c:0e:79: f8:b9:b8:d3:1b:3d:5a:1c:2d:7d:f9:c9:b2:a8:71:00:6e:a5: a5:e8:d2:80:bf:87:c8:ca:6e:2e:d6:28:6e:23:ef:77:4d:5c: 27:e2:6d:0b:d8:b2:c8:da:1b:0f:f0:9d:e3:2c:d3:8f:54:f4: cb:20:57:6d:d4:96:3a:a7:52:d0:26:c5:1d:86:27:7a:c8:2f: 10:f8:da:a8:02:ea:b9:ef:b1:b6:49:69:ac:ec:7d:69:c1:fa: 72:89:dd:68:70:74:23:f6:01:e5:e7:aa:de:f5:15:09:52:d7: 78:4d:e8:30:c2:c4:18:33:be:e8:38:b8:36:b8:82:f5:c5:07: 19:63:b3:d6:f6:ed:79:67:c0:37:27:f0:21:cf:10:e7:04:84: 19:5d:bb:30:11:d0:41:63:be:cc:53:63:20:a3:c5:b3:70:d1: 1d:d7:87:33:1c:c3:79:6c:52:32:ab:23:99:47:25:aa:f0:ba: 66:b0:de:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tfquFIyJMkIAnK/+fV9FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NTMyMTZhYzlkOTIxNzMzYmYzZjQ4NDM5M2EzNDQ5NWMw ZTJhNjcwHhcNMjUxMjIxMDcwMDQ5WhcNMjUxMjIyMDcwMDQ5WjAzMTEwLwYDVQQD EygwZTU1ODJjMzRiNTZiYzRkOGQ2ZDIyZDg5ODg0ODBlY2E2MGM4ODk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+lOhGzawB8vDDTxe3cs9X6JZf5uI X/gs4vNie418gAtLdqzRM6n1VvhSx0TJiYpjrpR9F6LdE6Ivb7mYYJBa0zMg5ZHx SHRMiNLhhf159I7LhV1G+2ThY6krx/hcV4RKgvLOKDYADkbUqw8N4obLbbQ9h2sG ztBBBrEnTNzsP5mEWp9UAQAui/6zC+PQwvh95DTq3y3vnKaWQb1cdTdGObkZXAgt In995Q27JTrBx85HVpDsZ+WTrEsVJvGsWBB8ww4dBi1rJRQPB7x1eslhGcorJLFb gwcfpAJUKvxQwEuRbdPfCp61FRjgKC9SWrtYJOspLZidHHZ3P+EjsSKMVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5VgsNLVrxNjW0i2JiEgOymDIiYMB8GA1UdIwQY MBaAFEhTIWrJ2SFzO/P0hDk6NElcDipnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kZmFkZTktMzI5NC00ZmFiLWI2MDct MjgyOGM0OGUzNTk5LzEvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9kZmFkZTktMzI5NC00ZmFiLWI2MDctMjgyOGM0OGUzNTk5 LzEvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6jtImao VH8tHMnyRXrFhVuI3rwmQAthAEx628YRvi2nx+s53O8IASJqJY7qJ7XhenBNUboL twL9kTjCvylIqLKd5WpAfA55+Lm40xs9WhwtffnJsqhxAG6lpejSgL+HyMpuLtYo biPvd01cJ+JtC9iyyNobD/Cd4yzTj1T0yyBXbdSWOqdS0CbFHYYnesgvEPjaqALq ue+xtklprOx9acH6condaHB0I/YB5eeq3vUVCVLXeE3oMMLEGDO+6Di4NriC9cUH GWOz1vbteWfANyfwIc8Q5wSEGV27MBHQQWO+zFNjIKPFs3DRHdeHMxzDeWxSMqsj mUclqvC6ZrDeuQ== -----END CERTIFICATE-----Generated at Sun Dec 21 17:14:21 2025 by rpki-client