This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft File: SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft (raw, json) Hash identifier: 1BFsgja7IUKUrm5QnhaiMOA8rXNDTTIvbJZWvBQq1hI= Subject key identifier: E4:59:96:B8:C5:69:A5:93:23:C8:41:CA:40:49:97:61:7F:89:C8:01 Authority key identifier: 48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C Certificate issuer: /CN=485375191d1c2e50982108fdd407bbcf73e9795c Certificate serial: 019B522AE76CDD0175C7735BA7B1668F8886 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft Manifest number: 115F Signing time: Wed 24 Dec 2025 21:01:42 +0000 Manifest this update: Wed 24 Dec 2025 21:01:42 +0000 Manifest next update: Thu 25 Dec 2025 21:01:42 +0000 Files and hashes: 1: JUMv7Yi2cpE5n4jH_daU8-Wkj_s.roa (hash: 8Ur2YBrwEIHwiqas+AFAXGNfkZXPANsLJAnLoARlVGk=) 2: SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl (hash: 2qa0ODptAJn+zRQV5ZAdwnPnNnme3XkMdZO0Ywdp/CA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:e7:6c:dd:01:75:c7:73:5b:a7:b1:66:8f:88:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485375191d1c2e50982108fdd407bbcf73e9795c Validity Not Before: Dec 24 21:01:42 2025 GMT Not After : Dec 25 21:01:42 2025 GMT Subject: CN=e45996b8c569a59323c841ca404997617f89c801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c5:99:df:b7:30:03:67:1f:c0:f0:eb:ad:cf: ea:2d:15:85:bd:f6:84:05:f4:4d:61:1a:43:c6:f0: d3:b0:1e:be:06:0c:71:9c:73:82:60:35:00:20:42: 08:3f:a8:95:08:bb:dd:59:b9:49:77:c1:9b:de:27: 85:69:06:27:94:ef:5f:40:18:86:64:f4:2b:0a:ef: d4:50:30:63:ad:dd:af:98:69:1b:d1:a7:95:9d:d6: 02:9f:73:6d:a5:41:3e:b1:6e:54:6c:8b:2a:79:91: c6:45:5d:8f:f8:8e:1d:61:83:f2:0f:c8:55:c9:01: 13:5b:f4:60:93:ab:fd:eb:6a:da:c1:50:e3:d8:3f: af:13:77:45:26:72:61:f3:02:9c:60:e3:2f:6f:66: 40:5f:6c:07:a3:17:85:3f:38:51:5a:ba:2f:e6:f0: be:dc:a9:9e:95:f9:08:0d:2c:48:96:de:c9:71:72: 82:de:d1:76:81:dd:ee:9d:4e:b9:11:1e:6a:ec:12: 4b:c3:ac:e2:66:dd:5f:a9:b5:7c:a3:fc:da:36:c8: ad:32:ce:45:0e:d8:bc:9a:a1:7c:dd:a8:36:c9:53: f7:55:cc:cc:0d:e8:05:45:a5:d9:e1:f6:27:57:a6: e9:42:0a:fe:03:3c:1e:47:fb:c2:b7:70:11:56:28: 5a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:59:96:B8:C5:69:A5:93:23:C8:41:CA:40:49:97:61:7F:89:C8:01 X509v3 Authority Key Identifier: keyid:48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:06:11:58:52:e5:81:1d:c4:b8:12:99:9d:9f:2a:a3:49:f9: 39:d5:bf:35:e9:e9:15:d6:64:a2:80:4e:a0:ca:4a:a3:61:3f: 20:cb:84:69:7e:ab:61:2d:71:47:3f:2f:92:b3:4c:0b:06:90: a4:50:78:41:f6:19:2c:d0:67:35:50:50:7a:ec:d4:39:6c:1a: a8:24:5f:ba:78:b4:23:52:08:78:a8:33:c4:89:1a:c4:09:29: 84:0b:00:d2:6b:1b:e0:13:1d:36:93:92:bb:0b:88:43:da:34: 82:06:4f:bd:e2:3e:ab:ee:39:ea:a7:c7:c1:3f:12:f8:cd:e0: 7f:64:74:b0:7c:19:84:67:d4:7e:95:a9:2b:13:c7:f1:ca:8d: 08:bc:33:20:db:8a:66:3b:f3:98:d0:14:35:b8:04:a2:44:04: 72:20:f2:47:09:5a:30:78:7b:b1:f2:92:73:60:5b:56:38:79: b8:86:d7:ca:cd:6f:2b:56:70:d9:1b:3a:a5:37:60:9b:73:d5: 5e:20:25:d9:87:61:84:92:17:c9:d6:7e:d1:ea:fc:3b:a7:4d: 37:e4:a3:b9:61:70:a2:2e:29:84:70:d1:bd:bc:ac:93:ab:3f: 2b:7c:1a:c0:e9:95:85:6b:0a:00:42:7a:62:f9:3a:d6:85:ca: 32:40:24:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKuds3QF1x3Nbp7Fmj4iGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NTM3NTE5MWQxYzJlNTA5ODIxMDhmZGQ0MDdiYmNmNzNl OTc5NWMwHhcNMjUxMjI0MjEwMTQyWhcNMjUxMjI1MjEwMTQyWjAzMTEwLwYDVQQD EyhlNDU5OTZiOGM1NjlhNTkzMjNjODQxY2E0MDQ5OTc2MTdmODljODAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMWZ37cwA2cfwPDrrc/qLRWFvfaE BfRNYRpDxvDTsB6+BgxxnHOCYDUAIEIIP6iVCLvdWblJd8Gb3ieFaQYnlO9fQBiG ZPQrCu/UUDBjrd2vmGkb0aeVndYCn3NtpUE+sW5UbIsqeZHGRV2P+I4dYYPyD8hV yQETW/Rgk6v962rawVDj2D+vE3dFJnJh8wKcYOMvb2ZAX2wHoxeFPzhRWrov5vC+ 3KmelfkIDSxIlt7JcXKC3tF2gd3unU65ER5q7BJLw6ziZt1fqbV8o/zaNsitMs5F Dti8mqF83ag2yVP3VczMDegFRaXZ4fYnV6bpQgr+AzweR/vCt3ARViha8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORZlrjFaaWTI8hBykBJl2F/icgBMB8GA1UdIwQY MBaAFEhTdRkdHC5QmCEI/dQHu89z6XlcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0ZOMUdSMGNMbENZSVFqOTFBZTd6M1BwZVZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iMjYwOWItYWUzOS00MjlmLWE1MDUt NmViZmY2NGJjYTFjLzEvU0ZOMUdSMGNMbENZSVFqOTFBZTd6M1BwZVZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iMjYwOWItYWUzOS00MjlmLWE1MDUtNmViZmY2NGJjYTFj LzEvU0ZOMUdSMGNMbENZSVFqOTFBZTd6M1BwZVZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwYRWFLl gR3EuBKZnZ8qo0n5OdW/NenpFdZkooBOoMpKo2E/IMuEaX6rYS1xRz8vkrNMCwaQ pFB4QfYZLNBnNVBQeuzUOWwaqCRfuni0I1IIeKgzxIkaxAkphAsA0msb4BMdNpOS uwuIQ9o0ggZPveI+q+456qfHwT8S+M3gf2R0sHwZhGfUfpWpKxPH8cqNCLwzINuK ZjvzmNAUNbgEokQEciDyRwlaMHh7sfKSc2BbVjh5uIbXys1vK1Zw2Rs6pTdgm3PV XiAl2YdhhJIXydZ+0er8O6dNN+SjuWFwoi4phHDRvbysk6s/K3wawOmVhWsKAEJ6 Yvk61oXKMkAkNQ== -----END CERTIFICATE-----Generated at Thu Dec 25 03:30:37 2025 by rpki-client