This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft File: SFGWc90KnPV4lVIK83wqgYPc4Wg.mft (raw, json) Hash identifier: zsKNi0PhbHhyDdjqHhtvTatlAtM7UhtG4Hsmf7fCnXo= Subject key identifier: A1:0B:A8:36:FC:9F:2F:91:C0:9D:8C:33:8C:6D:1C:44:8B:23:33:6D Authority key identifier: 48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68 Certificate issuer: /CN=48519673dd0a9cf57895520af37c2a8183dce168 Certificate serial: 019B3E6C6914B191ACE0BD315B3DB2CF36CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft Manifest number: 127E Signing time: Sun 21 Dec 2025 01:00:50 +0000 Manifest this update: Sun 21 Dec 2025 01:00:50 +0000 Manifest next update: Mon 22 Dec 2025 01:00:50 +0000 Files and hashes: 1: N_mB8DyGTMyRNtWdzOHezqUOwxA.roa (hash: 0iM1AEZNlQrcAYLQC9NYhgIr9GaQK1NMxQpbyZpHQKI=) 2: SFGWc90KnPV4lVIK83wqgYPc4Wg.crl (hash: 5d9F9olCj6NicI5+l9GuCN3xT6DJqJoKSbDq02FVW2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:69:14:b1:91:ac:e0:bd:31:5b:3d:b2:cf:36:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48519673dd0a9cf57895520af37c2a8183dce168 Validity Not Before: Dec 21 01:00:50 2025 GMT Not After : Dec 22 01:00:50 2025 GMT Subject: CN=a10ba836fc9f2f91c09d8c338c6d1c448b23336d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:55:d8:e4:c9:1e:13:bb:29:cc:7a:67:78:ff: 60:76:5b:fe:95:a4:4e:a0:6f:dc:20:5e:f1:b1:19: ae:0b:4f:29:c6:3d:96:b7:2f:c3:b8:e7:51:11:78: 37:a3:7f:83:1e:c0:0c:78:e7:46:ca:72:dd:9f:1b: fc:3a:68:9d:e9:58:b5:ab:3e:c8:e8:0b:e2:b5:a5: e5:0f:9a:2f:f4:6c:b8:d2:12:f2:78:81:4e:cf:89: 72:2c:e0:4b:6e:65:5a:51:80:0f:be:80:b2:6b:92: df:2b:3f:dc:e2:9b:99:16:58:3a:5d:c3:22:27:40: 70:6a:22:e1:24:64:e1:7a:35:b5:77:79:cd:d1:75: 66:f7:43:6d:62:f9:cc:00:dd:b2:c8:07:09:60:3c: 91:28:15:99:a1:e8:bc:7d:38:d6:1f:a8:d2:62:83: bd:fc:43:76:ac:b2:12:c2:71:55:4e:5d:8f:39:00: ae:67:e6:6a:9a:57:2b:29:a0:a0:20:df:b2:d2:09: 15:90:4f:b2:19:ae:cb:c4:77:12:77:d5:4c:2b:56: e7:5f:cf:68:93:71:16:01:a7:b0:52:1f:ac:d0:40: 75:d7:07:92:40:e1:4c:0b:8c:a8:b3:0e:0a:79:f9: 76:0a:51:a9:2e:60:f4:c9:45:34:65:2c:05:ce:a4: 53:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0B:A8:36:FC:9F:2F:91:C0:9D:8C:33:8C:6D:1C:44:8B:23:33:6D X509v3 Authority Key Identifier: keyid:48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:48:77:35:6b:e1:20:72:f5:a1:64:4d:18:ca:92:72:9e:49: 07:41:c7:57:7a:6b:50:de:a6:20:d5:e9:f5:18:a2:da:b9:69: 1c:ff:9c:9a:5b:4b:73:c4:93:5c:7c:0c:25:3e:ac:a4:a2:fd: 40:1d:69:a7:e7:a0:c8:d1:c9:c8:d6:41:c9:80:60:80:cb:3e: 71:4d:04:cd:59:2d:c9:66:27:7f:da:3a:29:07:be:a1:88:3b: b5:4e:8a:0c:b2:a7:17:39:5c:ad:43:6b:2c:b6:65:8b:5a:e9: 14:ec:17:ef:63:e9:32:94:c3:ff:94:7d:2f:fb:55:24:26:42: d0:e3:69:ac:31:ac:b1:5c:ed:f6:7a:c5:e4:ae:7b:41:5b:33: 3b:33:37:14:2c:cb:7f:03:cf:76:21:8e:80:f9:a3:01:44:4a: 7f:e2:1d:80:b0:dc:df:0c:2c:57:fd:8c:c0:d7:7a:b4:eb:9a: 84:91:a3:b5:e7:c7:3a:fc:d1:4a:81:bd:fc:b6:f1:79:75:82: f3:30:cc:25:c2:58:86:d1:98:b1:09:74:03:20:e8:f2:23:08: 6a:8a:d5:78:b6:9d:a3:04:58:9e:d3:4c:20:2d:4d:69:c3:41: 91:29:11:ca:d4:88:dc:36:02:df:b5:d1:8e:e8:74:50:d8:93: 48:95:b9:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bGkUsZGs4L0xWz2yzzbMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NTE5NjczZGQwYTljZjU3ODk1NTIwYWYzN2MyYTgxODNk Y2UxNjgwHhcNMjUxMjIxMDEwMDUwWhcNMjUxMjIyMDEwMDUwWjAzMTEwLwYDVQQD EyhhMTBiYTgzNmZjOWYyZjkxYzA5ZDhjMzM4YzZkMWM0NDhiMjMzMzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFXY5MkeE7spzHpneP9gdlv+laRO oG/cIF7xsRmuC08pxj2Wty/DuOdREXg3o3+DHsAMeOdGynLdnxv8Omid6Vi1qz7I 6AvitaXlD5ov9Gy40hLyeIFOz4lyLOBLbmVaUYAPvoCya5LfKz/c4puZFlg6XcMi J0BwaiLhJGThejW1d3nN0XVm90NtYvnMAN2yyAcJYDyRKBWZoei8fTjWH6jSYoO9 /EN2rLISwnFVTl2POQCuZ+ZqmlcrKaCgIN+y0gkVkE+yGa7LxHcSd9VMK1bnX89o k3EWAaewUh+s0EB11weSQOFMC4yosw4Kefl2ClGpLmD0yUU0ZSwFzqRTEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKELqDb8ny+RwJ2MM4xtHESLIzNtMB8GA1UdIwQY MBaAFEhRlnPdCpz1eJVSCvN8KoGD3OFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8zYmQ1OWEtMmQwYy00MDkzLTkxM2Et ZmUzNmNlZGE2MzE2LzEvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8zYmQ1OWEtMmQwYy00MDkzLTkxM2EtZmUzNmNlZGE2MzE2 LzEvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjEh3NWvh IHL1oWRNGMqScp5JB0HHV3prUN6mINXp9Rii2rlpHP+cmltLc8STXHwMJT6spKL9 QB1pp+egyNHJyNZByYBggMs+cU0EzVktyWYnf9o6KQe+oYg7tU6KDLKnFzlcrUNr LLZli1rpFOwX72PpMpTD/5R9L/tVJCZC0ONprDGssVzt9nrF5K57QVszOzM3FCzL fwPPdiGOgPmjAURKf+IdgLDc3wwsV/2MwNd6tOuahJGjtefHOvzRSoG9/LbxeXWC 8zDMJcJYhtGYsQl0AyDo8iMIaorVeLadowRYntNMIC1NacNBkSkRytSI3DYC37XR juh0UNiTSJW5Vg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:58:17 2025 by rpki-client