This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft File: SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft (raw, json) Hash identifier: 1jC1EEb1vlWIV3E8o7u6l7Fl/5l1qAX1p8ihWsDe1nk= Subject key identifier: AB:07:00:44:0A:36:5B:D3:11:93:AE:3B:CE:AD:FE:10:74:3F:E4:77 Authority key identifier: 48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA Certificate issuer: /CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca Certificate serial: 019B3C46EB6ABB530FD3A3A538ADA7B21F30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft Manifest number: 016D Signing time: Sat 20 Dec 2025 15:00:39 +0000 Manifest this update: Sat 20 Dec 2025 15:00:39 +0000 Manifest next update: Sun 21 Dec 2025 15:00:39 +0000 Files and hashes: 1: SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl (hash: J90LOKN1/D4mvPYyqrGdwaUsLrWE3ZNC5m3rNCXSNcU=) 2: zSp8Tcrfxe5_p3n3onsW-Ve9HcQ.roa (hash: hWOLO9tqL0286CUEjHeu7GROlem9sTgukzg2u3fOev0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:eb:6a:bb:53:0f:d3:a3:a5:38:ad:a7:b2:1f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca Validity Not Before: Dec 20 15:00:39 2025 GMT Not After : Dec 21 15:00:39 2025 GMT Subject: CN=ab0700440a365bd31193ae3bceadfe10743fe477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8c:1b:24:8e:e0:76:f6:22:4d:66:8d:31:e3: f1:ab:eb:d7:9f:c0:b9:30:83:34:96:1c:55:70:68: 48:80:f2:97:d5:2a:5a:ef:e4:ea:b3:6b:a3:40:b5: fe:e2:19:60:9f:5e:48:45:f6:40:bd:f4:c3:77:05: b4:f0:6c:76:8d:47:b5:ee:d2:68:f5:d8:57:9b:b1: 4f:a7:aa:29:5b:fb:9d:c7:25:7c:60:3f:f5:a2:18: f5:66:9c:95:52:cb:64:3e:7a:da:ae:6e:84:93:0d: c5:f0:c8:fa:32:50:ea:39:d7:38:78:77:e2:9a:0a: 1e:06:7d:fe:37:85:a8:17:63:d8:d7:a6:11:71:20: 56:11:22:e4:95:15:71:e4:27:48:11:3d:ec:69:e0: 54:36:c8:8e:dd:97:33:b4:3c:72:db:d5:45:5c:85: ed:ed:41:c0:5d:9d:42:ee:5a:f3:a8:93:8e:13:49: c9:45:cd:fc:bb:2f:24:6f:37:58:43:30:73:6a:b4: 72:8f:4e:80:5d:e0:a6:4d:91:c0:ed:56:66:56:86: 81:63:3d:95:a6:97:12:53:3c:99:c7:71:5c:4b:81: 0b:b8:d5:ed:c9:4d:a1:d4:39:aa:d3:19:a1:bb:ba: 5b:97:e3:45:b8:3f:2f:34:8b:e0:6f:84:aa:bd:4b: df:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:07:00:44:0A:36:5B:D3:11:93:AE:3B:CE:AD:FE:10:74:3F:E4:77 X509v3 Authority Key Identifier: keyid:48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:cf:dd:09:b7:5b:e1:0c:b7:9d:32:2e:d0:07:40:97:f1:74: 44:b3:d3:98:59:a7:91:ee:84:48:f3:dd:e5:70:9d:19:e0:58: b2:91:fa:8b:00:e2:04:8e:f7:5f:b3:15:15:6f:d2:e1:09:bf: e9:1a:43:a7:d1:8b:90:d3:80:54:fe:6c:33:49:60:bf:e4:22: b4:32:0f:8b:32:93:3b:51:55:5a:fc:96:7d:ef:57:7c:5b:71: 86:a7:fd:9b:fc:cf:f6:6d:a4:37:6d:d6:77:06:d1:46:52:a5: 1f:ef:33:6c:f1:50:37:a5:ba:45:b8:d4:e2:76:44:4b:bd:ac: 24:3f:29:67:59:7f:a5:10:a9:b3:f3:d6:da:08:ed:15:6a:88: f7:6d:6c:50:87:d0:71:b2:22:21:63:ed:0e:1e:02:fc:80:17: b9:1b:14:2f:7d:33:9d:d7:ad:04:c1:e4:26:b2:b6:00:0c:9b: a9:3b:1d:df:86:f0:79:9b:e8:b3:7f:3d:a2:f2:c4:e7:7d:a7: fb:ce:a1:5c:0c:a2:2e:12:89:b2:c5:47:82:fb:de:91:91:9b: b6:04:7d:b0:2f:21:96:93:eb:f9:f7:cb:64:2d:4c:0f:c0:44: 12:ef:f3:62:f4:4e:ea:35:b0:1d:4f:fb:d1:ea:9e:d4:97:81: bc:04:b9:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8Rutqu1MP06OlOK2nsh8wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NTAxOGI1YzJmZWYxMjQ4YWI2ZWMwZDA3ZTk3MWVjYmNm NzM5Y2EwHhcNMjUxMjIwMTUwMDM5WhcNMjUxMjIxMTUwMDM5WjAzMTEwLwYDVQQD EyhhYjA3MDA0NDBhMzY1YmQzMTE5M2FlM2JjZWFkZmUxMDc0M2ZlNDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4wbJI7gdvYiTWaNMePxq+vXn8C5 MIM0lhxVcGhIgPKX1Spa7+Tqs2ujQLX+4hlgn15IRfZAvfTDdwW08Gx2jUe17tJo 9dhXm7FPp6opW/udxyV8YD/1ohj1ZpyVUstkPnrarm6Ekw3F8Mj6MlDqOdc4eHfi mgoeBn3+N4WoF2PY16YRcSBWESLklRVx5CdIET3saeBUNsiO3ZcztDxy29VFXIXt 7UHAXZ1C7lrzqJOOE0nJRc38uy8kbzdYQzBzarRyj06AXeCmTZHA7VZmVoaBYz2V ppcSUzyZx3FcS4ELuNXtyU2h1Dmq0xmhu7pbl+NFuD8vNIvgb4SqvUvf2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsHAEQKNlvTEZOuO86t/hB0P+R3MB8GA1UdIwQY MBaAFEhQGLXC/vEkirbsDQfpcey89znKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0ZBWXRjTC04U1NLdHV3TkItbHg3THozT2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84NTNlOGYtZmNkNC00NTY2LWE2NDgt ZTM3NDk5Njc5ZDQ2LzEvU0ZBWXRjTC04U1NLdHV3TkItbHg3THozT2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84NTNlOGYtZmNkNC00NTY2LWE2NDgtZTM3NDk5Njc5ZDQ2 LzEvU0ZBWXRjTC04U1NLdHV3TkItbHg3THozT2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGs/dCbdb 4Qy3nTIu0AdAl/F0RLPTmFmnke6ESPPd5XCdGeBYspH6iwDiBI73X7MVFW/S4Qm/ 6RpDp9GLkNOAVP5sM0lgv+QitDIPizKTO1FVWvyWfe9XfFtxhqf9m/zP9m2kN23W dwbRRlKlH+8zbPFQN6W6RbjU4nZES72sJD8pZ1l/pRCps/PW2gjtFWqI921sUIfQ cbIiIWPtDh4C/IAXuRsUL30zndetBMHkJrK2AAybqTsd34bweZvos389ovLE532n +86hXAyiLhKJssVHgvvekZGbtgR9sC8hlpPr+ffLZC1MD8BEEu/zYvRO6jWwHU/7 0eqe1JeBvAS5qA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:42:30 2025 by rpki-client