This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft File: SffBpGd-t4JtrmneAaaZtiAdYkQ.mft (raw, json) Hash identifier: Ka91EFjo8sxn2w7y7BMmuaEUqEBOjmVcCQbPKAYoUw4= Subject key identifier: 24:BF:23:21:54:15:3E:D9:7F:38:36:6C:53:89:7E:D6:7E:5C:30:4A Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44 Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244 Certificate serial: 019B341F9BA7EDCD24C08946000758C25876 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft Manifest number: 095B Signing time: Fri 19 Dec 2025 01:00:45 +0000 Manifest this update: Fri 19 Dec 2025 01:00:45 +0000 Manifest next update: Sat 20 Dec 2025 01:00:45 +0000 Files and hashes: 1: QOqyem5Z3yL2Ay6qXVGZl8mv2zk.roa (hash: mHRjozSXu9dRrgKtsLu6Unb/EKc9QC43nbhQ55iX4fs=) 2: SffBpGd-t4JtrmneAaaZtiAdYkQ.crl (hash: AW8Pr0QVnwoRwqfFVJgtErVruaB5Oj9CDKB5x5JDgcw=) 3: Ungcud01aQHgTMIDHqxKgOj76qo.roa (hash: vzFsWzaNMb5tmpdLeHM9BlzRIek6QkO8MJb/yx40U/I=) 4: jmmW5Ukk3xcsTrR8qxuWpwPdxq8.roa (hash: xSWjSOPp8ZSSKlPw1K4xujDBjWwAjKSPxFoPnQzmTaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:9b:a7:ed:cd:24:c0:89:46:00:07:58:c2:58:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244 Validity Not Before: Dec 19 01:00:45 2025 GMT Not After : Dec 20 01:00:45 2025 GMT Subject: CN=24bf232154153ed97f38366c53897ed67e5c304a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5b:9f:2b:de:d5:a4:95:4d:30:a4:42:42:50: dc:83:42:3a:55:36:10:3a:6c:56:f6:a2:25:58:4a: 9c:76:dd:d9:76:af:df:da:4f:c5:3b:f0:87:6a:44: 47:4f:a5:e7:e6:d6:02:eb:f7:45:d8:96:14:f0:2f: 95:bd:a3:f1:2c:4f:e1:86:1a:05:cf:20:a9:d9:2a: 87:2a:f3:ee:74:24:a1:8b:20:49:c6:56:84:36:43: c0:4b:3b:b6:5d:52:b3:0d:db:2d:4b:d9:d3:12:29: 0c:7b:0d:52:d4:98:47:56:2e:73:d0:f5:81:d7:e1: 64:e0:32:c4:b3:c6:e6:44:99:26:ed:72:a4:89:23: d8:bb:f3:47:10:4d:4d:e3:1a:7c:d8:ee:5a:30:0b: c6:94:2c:bd:55:53:94:c2:c2:b5:27:cb:13:1f:11: f5:c9:4b:f3:60:72:7a:ab:32:11:b1:b4:88:8e:66: c7:fa:75:0b:bf:27:61:63:95:72:ab:2d:7f:2b:5a: 4e:28:c2:da:2a:4a:c7:a1:c6:76:10:ef:42:5b:09: 3c:fe:87:df:19:6a:eb:90:61:b0:9a:38:b7:53:bf: f6:4e:5e:c2:15:96:06:fc:f7:e0:17:9e:f9:92:f8: a9:7e:5c:85:eb:64:4b:dd:97:64:3f:bd:89:bd:83: f2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BF:23:21:54:15:3E:D9:7F:38:36:6C:53:89:7E:D6:7E:5C:30:4A X509v3 Authority Key Identifier: keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:74:36:0a:f3:7b:5f:1c:0a:e1:a8:e0:28:15:46:9c:2e:d4: 29:42:13:c2:11:a3:d1:e5:5c:2a:1b:a2:bb:19:d2:7c:87:fd: 76:b1:c9:ec:52:c6:1b:ab:09:ba:f3:13:af:d4:36:1a:80:ce: d5:2b:db:99:76:8f:f8:34:3d:9e:98:94:d9:a2:28:50:c0:01: 05:d3:1d:7c:40:17:31:74:5f:91:97:36:98:09:af:fc:e9:0d: e9:8c:a3:a4:b2:38:6b:00:88:14:bf:63:22:c7:59:a8:4e:69: 2d:03:d1:df:28:12:55:e5:ce:d3:95:c6:6b:94:92:20:50:e9: fd:bd:a7:6d:75:f9:81:b9:77:ea:c6:06:15:e3:56:b1:09:83: 8f:8a:82:ba:9a:f3:75:6d:6a:88:0a:ec:d2:4b:62:7d:3d:0a: a6:9b:85:fb:cd:aa:4e:78:63:e3:5d:c3:be:38:5e:fa:a9:0b: 32:3e:76:ae:51:17:ae:57:a5:b2:5b:98:98:2d:5c:4b:8e:e2: 2c:24:b9:e3:2f:88:14:a0:31:58:5c:a2:62:17:d6:ce:56:63: e3:f4:c2:cd:3d:99:74:e4:1b:1c:90:b7:c0:3b:10:99:79:4f: 03:b4:6b:cc:d0:77:93:7f:a0:c2:0a:3d:cd:21:04:f1:85:3c: 15:b1:e8:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H5un7c0kwIlGAAdYwlh2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjdjMWE0Njc3ZWI3ODI2ZGFlNjlkZTAxYTY5OWI2MjAx ZDYyNDQwHhcNMjUxMjE5MDEwMDQ1WhcNMjUxMjIwMDEwMDQ1WjAzMTEwLwYDVQQD EygyNGJmMjMyMTU0MTUzZWQ5N2YzODM2NmM1Mzg5N2VkNjdlNWMzMDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklufK97VpJVNMKRCQlDcg0I6VTYQ OmxW9qIlWEqcdt3Zdq/f2k/FO/CHakRHT6Xn5tYC6/dF2JYU8C+VvaPxLE/hhhoF zyCp2SqHKvPudCShiyBJxlaENkPASzu2XVKzDdstS9nTEikMew1S1JhHVi5z0PWB 1+Fk4DLEs8bmRJkm7XKkiSPYu/NHEE1N4xp82O5aMAvGlCy9VVOUwsK1J8sTHxH1 yUvzYHJ6qzIRsbSIjmbH+nULvydhY5Vyqy1/K1pOKMLaKkrHocZ2EO9CWwk8/off GWrrkGGwmji3U7/2Tl7CFZYG/PfgF575kvipflyF62RL3ZdkP72JvYPyGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCS/IyFUFT7Zfzg2bFOJftZ+XDBKMB8GA1UdIwQY MBaAFEn3waRnfreCba5p3gGmmbYgHWJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS80ZGJkNjMtNzZiMS00YjAzLTlkZWEt NTBjMTZiZGQ1YzI0LzEvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS80ZGJkNjMtNzZiMS00YjAzLTlkZWEtNTBjMTZiZGQ1YzI0 LzEvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3Q2CvN7 XxwK4ajgKBVGnC7UKUITwhGj0eVcKhuiuxnSfIf9drHJ7FLGG6sJuvMTr9Q2GoDO 1SvbmXaP+DQ9npiU2aIoUMABBdMdfEAXMXRfkZc2mAmv/OkN6YyjpLI4awCIFL9j IsdZqE5pLQPR3ygSVeXO05XGa5SSIFDp/b2nbXX5gbl36sYGFeNWsQmDj4qCuprz dW1qiArs0ktifT0KppuF+82qTnhj413Dvjhe+qkLMj52rlEXrlelsluYmC1cS47i LCS54y+IFKAxWFyiYhfWzlZj4/TCzT2ZdOQbHJC3wDsQmXlPA7RrzNB3k3+gwgo9 zSEE8YU8FbHo0Q== -----END CERTIFICATE-----Generated at Fri Dec 19 08:56:54 2025 by rpki-client