This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft File: SFMhasnZIXM78_SEOTo0SVwOKmc.mft (raw, json) Hash identifier: N3ZtCi/gJHD0mbpJISSLkYbmvXu1Y5avvizcyZBctwU= Subject key identifier: 99:D5:31:BC:EE:66:AB:B3:5D:FF:A8:D3:91:89:03:31:73:92:48:9F Authority key identifier: 48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67 Certificate issuer: /CN=4853216ac9d921733bf3f484393a34495c0e2a67 Certificate serial: 019B64679CD5106E27BA80BFD971244BC6B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft Manifest number: 0AFA Signing time: Sun 28 Dec 2025 10:01:10 +0000 Manifest this update: Sun 28 Dec 2025 10:01:10 +0000 Manifest next update: Mon 29 Dec 2025 10:01:10 +0000 Files and hashes: 1: SFMhasnZIXM78_SEOTo0SVwOKmc.crl (hash: hmK7sZWv8RjP6U8sT4WqEDLdTn/CQ9z7S6A2yjgfPuo=) 2: hajbKl16Cy4Tdq_wgIk77VxT_6Q.roa (hash: +x4Da87nsosWbKf7z+mFyLUyvFKLPH55B5hxOSqBXYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:64:67:9c:d5:10:6e:27:ba:80:bf:d9:71:24:4b:c6:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4853216ac9d921733bf3f484393a34495c0e2a67 Validity Not Before: Dec 28 10:01:10 2025 GMT Not After : Dec 29 10:01:10 2025 GMT Subject: CN=99d531bcee66abb35dffa8d3918903317392489f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:94:1a:e1:03:42:78:6c:a0:6b:b5:46:f6:b9: 92:37:cb:aa:1e:4d:09:4b:6d:94:f1:bc:af:77:f5: 25:50:0e:13:1a:32:00:48:7c:0b:5b:a1:5a:59:01: cb:d8:91:bb:9b:ef:a1:9f:ab:f9:9b:33:da:6d:3b: 51:aa:6f:19:ac:f2:46:06:24:6d:ef:8b:0a:6b:9b: 68:49:4a:32:f2:83:5c:98:73:91:ae:1d:54:ad:8f: 5f:9e:0d:ca:4b:71:9f:89:cf:38:b1:66:96:cd:88: 18:cc:b0:df:7b:92:5c:b2:49:c1:f3:29:8b:54:b9: 12:44:80:6e:9a:1b:16:d5:04:e2:99:2d:5b:c1:85: 68:45:e2:bb:30:34:31:74:b5:34:50:2e:07:36:cf: 19:c0:a4:27:3f:1e:82:a2:2d:c1:96:ba:24:00:fe: 4d:89:69:12:20:f6:a6:66:42:92:27:05:d1:62:bf: 71:c0:8e:83:c9:44:28:e4:61:9a:41:0f:65:90:6f: 84:07:88:8b:2d:a8:b3:10:6c:d6:16:3e:3d:53:66: ce:31:dc:c1:81:f8:85:41:ea:ac:46:bd:64:c8:3e: f9:c0:0c:66:60:e3:dc:66:f4:7e:ed:01:97:1b:7d: c3:4b:3b:81:e5:d6:c6:9c:85:76:75:7a:72:9e:f0: 9e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D5:31:BC:EE:66:AB:B3:5D:FF:A8:D3:91:89:03:31:73:92:48:9F X509v3 Authority Key Identifier: keyid:48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:c3:18:89:fa:1d:1e:b8:43:f8:e9:c7:e7:59:d1:fb:19:a4: 1e:ee:47:fb:e7:87:77:22:e5:73:9b:eb:d4:03:94:9f:da:d3: a8:03:d7:c1:74:c7:fb:57:dc:01:c9:72:68:f6:7a:8d:d5:89: ca:a2:d4:65:86:74:e3:82:87:8d:03:bc:bd:78:79:73:56:f5: 9d:32:1f:1f:80:68:80:37:51:42:0d:7a:fc:91:4a:93:09:ae: 6d:8f:15:4b:69:67:a8:e0:0e:08:1c:89:87:7c:6d:d3:df:46: 12:1f:06:05:c3:a1:0f:e7:e8:72:ce:eb:c1:32:55:4b:70:ea: 51:5e:62:98:bb:16:b2:d8:e7:b7:a0:f7:d2:f4:ff:08:85:10: bc:32:d1:ef:48:ee:dd:27:7c:74:61:10:cd:18:e3:12:a4:a7: e8:42:92:1c:9b:f2:77:1e:f4:fb:82:0c:c5:76:de:16:5c:19: 9e:6a:9b:b6:2b:c9:52:93:2a:82:45:e5:eb:c9:95:80:6b:68: f3:e5:96:bd:aa:d5:d1:7b:e0:a0:29:ad:03:8b:34:a2:c9:72: 87:32:06:2f:7a:e9:5e:fe:ee:8e:ed:57:db:d5:d8:03:6a:ca: 57:61:ed:05:91:cc:8d:f5:b4:b7:1a:a7:52:93:df:3d:cf:0e: 30:36:80:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtkZ5zVEG4nuoC/2XEkS8a4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NTMyMTZhYzlkOTIxNzMzYmYzZjQ4NDM5M2EzNDQ5NWMw ZTJhNjcwHhcNMjUxMjI4MTAwMTEwWhcNMjUxMjI5MTAwMTEwWjAzMTEwLwYDVQQD Eyg5OWQ1MzFiY2VlNjZhYmIzNWRmZmE4ZDM5MTg5MDMzMTczOTI0ODlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZQa4QNCeGyga7VG9rmSN8uqHk0J S22U8byvd/UlUA4TGjIASHwLW6FaWQHL2JG7m++hn6v5mzPabTtRqm8ZrPJGBiRt 74sKa5toSUoy8oNcmHORrh1UrY9fng3KS3Gfic84sWaWzYgYzLDfe5JcsknB8ymL VLkSRIBumhsW1QTimS1bwYVoReK7MDQxdLU0UC4HNs8ZwKQnPx6Coi3BlrokAP5N iWkSIPamZkKSJwXRYr9xwI6DyUQo5GGaQQ9lkG+EB4iLLaizEGzWFj49U2bOMdzB gfiFQeqsRr1kyD75wAxmYOPcZvR+7QGXG33DSzuB5dbGnIV2dXpynvCedwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnVMbzuZquzXf+o05GJAzFzkkifMB8GA1UdIwQY MBaAFEhTIWrJ2SFzO/P0hDk6NElcDipnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kZmFkZTktMzI5NC00ZmFiLWI2MDct MjgyOGM0OGUzNTk5LzEvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9kZmFkZTktMzI5NC00ZmFiLWI2MDctMjgyOGM0OGUzNTk5 LzEvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIMMYifod HrhD+OnH51nR+xmkHu5H++eHdyLlc5vr1AOUn9rTqAPXwXTH+1fcAclyaPZ6jdWJ yqLUZYZ044KHjQO8vXh5c1b1nTIfH4BogDdRQg16/JFKkwmubY8VS2lnqOAOCByJ h3xt099GEh8GBcOhD+focs7rwTJVS3DqUV5imLsWstjnt6D30vT/CIUQvDLR70ju 3Sd8dGEQzRjjEqSn6EKSHJvydx70+4IMxXbeFlwZnmqbtivJUpMqgkXl68mVgGto 8+WWvarV0XvgoCmtA4s0oslyhzIGL3rpXv7uju1X29XYA2rKV2HtBZHMjfW0txqn UpPfPc8OMDaAEA== -----END CERTIFICATE-----Generated at Sun Dec 28 18:58:43 2025 by rpki-client