This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft File: SfA190v2NQvDef8uJTiC0kaO9Yg.mft (raw, json) Hash identifier: GTmz3CfxPW8uL7tBd4gD5OoYULjq8Q5qpdFFJdlcnpM= Subject key identifier: 8B:BC:6D:D3:01:73:9B:61:2E:AE:04:F7:0D:44:E6:2D:30:35:8F:28 Authority key identifier: 49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88 Certificate issuer: /CN=49f035f74bf6350bc379ff2e253882d2468ef588 Certificate serial: 019B228788D9A5CFA4A0D8DA015CD5E179EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft Manifest number: 0490 Signing time: Mon 15 Dec 2025 15:01:06 +0000 Manifest this update: Mon 15 Dec 2025 15:01:06 +0000 Manifest next update: Tue 16 Dec 2025 15:01:06 +0000 Files and hashes: 1: SfA190v2NQvDef8uJTiC0kaO9Yg.crl (hash: e+QkjfHjfuBNtnbAZJbTRguAr1fZnGZJQIxd0VPmwx4=) 2: wbmZO-HC2oZGGdDiSLm7Xy-yCzU.roa (hash: G5A8w6EKnJ7KNviXJvfO4lYZfTcipjXbs1g3Za2z4wg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:88:d9:a5:cf:a4:a0:d8:da:01:5c:d5:e1:79:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f035f74bf6350bc379ff2e253882d2468ef588 Validity Not Before: Dec 15 15:01:06 2025 GMT Not After : Dec 16 15:01:06 2025 GMT Subject: CN=8bbc6dd301739b612eae04f70d44e62d30358f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:46:e0:6b:08:f8:65:48:26:60:b1:fb:a5:a9: 52:5c:f6:e3:45:19:30:75:46:af:08:9f:ed:3e:0a: d6:3b:5d:e7:64:04:42:07:89:5d:b3:40:69:82:39: fa:c1:26:0c:86:eb:ca:7d:2d:8c:43:18:01:eb:9e: 9b:1f:ea:81:65:fc:31:6b:1d:92:36:bb:67:f5:61: ab:29:73:39:7e:a1:21:1f:64:3a:30:95:b0:1d:e5: e1:db:58:09:a0:cd:49:b2:08:50:38:37:76:d0:2d: 85:c7:fd:8d:3a:65:ff:4f:68:21:a3:a6:77:8e:c2: 9e:f0:f8:52:66:7e:ec:5b:8d:7d:7d:db:17:f3:b1: 0f:f8:b1:2c:93:93:d5:40:d9:0e:bf:68:f6:f6:64: 44:3d:fa:ac:70:2d:24:db:7a:c1:6f:bb:e1:c7:43: 20:bb:09:e5:42:50:43:c5:8e:0f:88:48:90:a9:a2: f5:3d:2c:3e:6e:7d:88:79:bd:b1:9b:98:77:b9:d7: 49:1d:92:c6:f5:b4:be:d7:60:33:da:13:97:45:18: ce:91:b2:ad:a3:e1:8f:25:d2:ed:12:a5:df:2b:fb: d3:39:44:9c:5b:e0:80:e4:92:95:7d:d7:3e:6c:fc: 7d:e0:7a:6e:35:a9:d1:b1:70:cc:39:c3:7b:ab:31: 55:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:BC:6D:D3:01:73:9B:61:2E:AE:04:F7:0D:44:E6:2D:30:35:8F:28 X509v3 Authority Key Identifier: keyid:49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:5c:e5:cb:bd:dd:c0:c5:7f:d4:65:0f:9f:e1:8d:88:11:8c: 09:2a:89:b9:67:39:a2:06:28:82:05:d8:bd:6a:8a:48:1f:34: 97:d4:3b:e1:70:5c:e6:1c:b8:36:8d:ae:06:28:da:e9:5b:e4: 12:13:1d:93:1d:fc:38:00:ee:98:52:da:de:0e:6d:8a:c8:1d: a8:99:b6:8b:c4:d4:b4:a0:e6:cf:c0:34:a2:e5:f7:80:5f:f4: 44:e9:26:8a:a0:7f:11:81:57:b4:28:1e:a8:13:b9:e0:35:f4: 4a:82:dc:b1:98:ef:c9:1b:38:c8:ae:97:da:11:3f:14:6c:6b: 92:05:9a:13:cc:15:c1:6f:c2:23:d7:d2:68:48:35:f5:6b:3c: eb:6b:0c:a2:f9:01:1a:fb:81:57:1a:dd:a1:22:a9:1b:1f:dd: 67:f2:ed:04:b6:51:8f:b3:b6:88:8c:53:ce:0b:2c:00:5c:cb: c4:4d:b5:a8:77:6e:58:dd:fc:04:2e:85:41:6f:43:ab:33:5a: 35:26:ba:d6:18:7d:cd:1d:23:3b:37:c7:ae:dd:f4:a4:26:7d: 74:e1:9e:86:be:06:ef:e0:55:b8:e5:24:74:c5:0c:13:93:b7: 93:26:4d:a9:85:c5:05:c7:50:a4:37:e2:92:04:b6:ff:b2:9a: 26:21:46:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih4jZpc+koNjaAVzV4XnsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjAzNWY3NGJmNjM1MGJjMzc5ZmYyZTI1Mzg4MmQyNDY4 ZWY1ODgwHhcNMjUxMjE1MTUwMTA2WhcNMjUxMjE2MTUwMTA2WjAzMTEwLwYDVQQD Eyg4YmJjNmRkMzAxNzM5YjYxMmVhZTA0ZjcwZDQ0ZTYyZDMwMzU4ZjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEbgawj4ZUgmYLH7palSXPbjRRkw dUavCJ/tPgrWO13nZARCB4lds0Bpgjn6wSYMhuvKfS2MQxgB656bH+qBZfwxax2S Nrtn9WGrKXM5fqEhH2Q6MJWwHeXh21gJoM1JsghQODd20C2Fx/2NOmX/T2gho6Z3 jsKe8PhSZn7sW419fdsX87EP+LEsk5PVQNkOv2j29mREPfqscC0k23rBb7vhx0Mg uwnlQlBDxY4PiEiQqaL1PSw+bn2Ieb2xm5h3uddJHZLG9bS+12Az2hOXRRjOkbKt o+GPJdLtEqXfK/vTOUScW+CA5JKVfdc+bPx94HpuNanRsXDMOcN7qzFVCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIu8bdMBc5thLq4E9w1E5i0wNY8oMB8GA1UdIwQY MBaAFEnwNfdL9jULw3n/LiU4gtJGjvWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZBMTkwdjJOUXZEZWY4dUpUaUMwa2FPOVlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMmZkOGUtMmQzOC00YWIxLTg0YjUt OWVmMTI5ZWFkZTc4LzEvU2ZBMTkwdjJOUXZEZWY4dUpUaUMwa2FPOVlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wMmZkOGUtMmQzOC00YWIxLTg0YjUtOWVmMTI5ZWFkZTc4 LzEvU2ZBMTkwdjJOUXZEZWY4dUpUaUMwa2FPOVlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1zly73d wMV/1GUPn+GNiBGMCSqJuWc5ogYoggXYvWqKSB80l9Q74XBc5hy4No2uBija6Vvk EhMdkx38OADumFLa3g5tisgdqJm2i8TUtKDmz8A0ouX3gF/0ROkmiqB/EYFXtCge qBO54DX0SoLcsZjvyRs4yK6X2hE/FGxrkgWaE8wVwW/CI9fSaEg19Ws862sMovkB GvuBVxrdoSKpGx/dZ/LtBLZRj7O2iIxTzgssAFzLxE21qHduWN38BC6FQW9DqzNa NSa61hh9zR0jOzfHrt30pCZ9dOGehr4G7+BVuOUkdMUME5O3kyZNqYXFBcdQpDfi kgS2/7KaJiFGtw== -----END CERTIFICATE-----Generated at Mon Dec 15 19:54:05 2025 by rpki-client