This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft File: SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft (raw, json) Hash identifier: yVKo2H5TvbvqFhgKBUI/ahlOnypJT/rRRZFAm7EGGCY= Subject key identifier: 96:2F:A8:65:BC:69:F8:97:A2:65:56:F9:CA:CE:0A:1B:D8:52:E1:EB Authority key identifier: 49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61 Certificate issuer: /CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61 Certificate serial: 019B405BB1841BFB0954AFDB6A03C358F5BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft Manifest number: 171B Signing time: Sun 21 Dec 2025 10:01:49 +0000 Manifest this update: Sun 21 Dec 2025 10:01:49 +0000 Manifest next update: Mon 22 Dec 2025 10:01:49 +0000 Files and hashes: 1: 8J4KQUM3SG2tOx7Qy412tzcCyVE.roa (hash: WDRfkd7NWCeGm5AnO0id+VmgIMVtNw9JsJNLGC4miyg=) 2: F3xqvw__Ry6FbR1QISJmpPzSw80.roa (hash: lZUN0lo02iToEWBcU9heTh5ikClvs/fsdLuL0ZtWzgs=) 3: SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl (hash: Zfx+cJ3lwcgqgxKiVbHF7PhOD5pJenimWz/3lF9TOgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:b1:84:1b:fb:09:54:af:db:6a:03:c3:58:f5:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61 Validity Not Before: Dec 21 10:01:49 2025 GMT Not After : Dec 22 10:01:49 2025 GMT Subject: CN=962fa865bc69f897a26556f9cace0a1bd852e1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cb:c0:5a:ac:4a:9e:f4:43:22:1d:63:10:59: 9e:89:ad:c1:fc:ba:65:8b:9f:07:c3:04:5c:8d:97: ee:36:67:85:1b:db:d7:f9:b5:92:d9:9f:b4:87:f3: 63:e7:f5:72:8c:4e:9a:62:7c:6a:8f:5a:81:86:08: 8b:07:0a:2d:22:27:f2:3b:71:3f:5e:e5:5f:a3:b3: bd:62:1c:51:d4:79:1a:d4:81:2b:c2:50:7d:27:24: 1a:a5:42:e6:fd:5b:6f:56:90:e9:98:10:cc:f9:f2: d3:32:7b:ef:fb:cc:1a:d4:f4:64:ec:31:aa:d6:97: 04:f3:99:3e:18:ee:83:7a:61:b5:56:a7:17:4d:09: 30:c4:a9:6d:1a:fe:eb:83:49:30:13:48:2c:71:01: 8e:26:69:bb:b9:16:cc:e0:c1:31:2f:b8:c0:9c:19: 24:23:04:9e:05:31:53:81:53:c8:13:c2:ac:83:61: 82:84:8b:dd:c7:35:19:55:58:23:60:af:1b:1e:82: ec:45:ad:b9:31:7c:8b:44:9b:87:e3:73:71:96:6a: 67:dc:60:17:fd:5b:08:34:8a:15:56:a6:b8:da:c0: aa:8a:51:e5:97:46:e1:3e:3f:b8:47:9e:ee:02:41: f5:8c:ca:da:7b:76:00:5a:bf:e3:ce:fd:95:15:93: f3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2F:A8:65:BC:69:F8:97:A2:65:56:F9:CA:CE:0A:1B:D8:52:E1:EB X509v3 Authority Key Identifier: keyid:49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a3:a1:c2:44:64:9a:c4:05:46:4d:f9:1a:df:02:d1:2d:9b: 54:d0:8c:bd:f5:8b:8b:4e:c3:bd:ff:cf:0b:c3:69:e2:51:71: fb:e9:46:97:fd:b5:ed:84:dc:7f:c6:fa:ae:0c:73:be:44:eb: 2d:4d:95:f2:e4:16:35:5b:f0:72:6a:66:26:25:6d:76:20:bd: 0a:c1:51:3f:a3:f5:c1:65:09:0b:8e:81:51:85:aa:48:02:a1: 09:22:5e:10:1d:0f:3b:df:f1:c2:79:f8:c5:b1:80:a9:7e:4c: 7f:78:ee:a7:03:e1:e9:45:3e:46:c7:ce:be:6b:fd:bd:01:b6: 98:5f:d6:4c:ba:e1:bb:03:d2:0a:8c:ce:18:1b:bc:fe:94:38: d9:77:5e:6a:4f:c4:8b:3d:f0:0a:cf:39:86:d1:a6:37:94:87: 7a:98:87:41:87:b7:f3:4e:e2:e5:79:99:af:e5:a9:40:9c:56: be:98:02:bb:de:4a:ff:e8:90:4f:17:4d:4a:f1:9c:58:55:3f: 9a:4b:79:d1:5e:d4:ff:d5:5f:c2:66:05:30:ad:56:4f:1a:a0: fb:79:ff:5b:02:a3:78:42:4c:1d:b6:a2:40:66:0e:7c:3e:6a: 43:fe:00:45:e9:cd:0d:ac:c8:de:f2:30:e2:d1:a5:57:91:ee: 0a:8a:5f:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW7GEG/sJVK/bagPDWPW9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjM5ZDZjOGIyM2ZjZGMyMGU1MzE3NGU5MmZiM2Y1NmNh YThiNjEwHhcNMjUxMjIxMTAwMTQ5WhcNMjUxMjIyMTAwMTQ5WjAzMTEwLwYDVQQD Eyg5NjJmYTg2NWJjNjlmODk3YTI2NTU2ZjljYWNlMGExYmQ4NTJlMWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcvAWqxKnvRDIh1jEFmeia3B/Lpl i58HwwRcjZfuNmeFG9vX+bWS2Z+0h/Nj5/VyjE6aYnxqj1qBhgiLBwotIifyO3E/ XuVfo7O9YhxR1Hka1IErwlB9JyQapULm/VtvVpDpmBDM+fLTMnvv+8wa1PRk7DGq 1pcE85k+GO6DemG1VqcXTQkwxKltGv7rg0kwE0gscQGOJmm7uRbM4MExL7jAnBkk IwSeBTFTgVPIE8Ksg2GChIvdxzUZVVgjYK8bHoLsRa25MXyLRJuH43Nxlmpn3GAX /VsINIoVVqa42sCqilHll0bhPj+4R57uAkH1jMrae3YAWr/jzv2VFZPzgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYvqGW8afiXomVW+crOChvYUuHrMB8GA1UdIwQY MBaAFEnznWyLI/zcIOUxdOkvs/VsqothMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZPZGJJc2pfTndnNVRGMDZTLXo5V3lxaTJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xNjQ2MGYtZTQ5OC00ZjdiLTliOTAt N2E1MDQzYzkxOGY5LzEvU2ZPZGJJc2pfTndnNVRGMDZTLXo5V3lxaTJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8xNjQ2MGYtZTQ5OC00ZjdiLTliOTAtN2E1MDQzYzkxOGY5 LzEvU2ZPZGJJc2pfTndnNVRGMDZTLXo5V3lxaTJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFaOhwkRk msQFRk35Gt8C0S2bVNCMvfWLi07Dvf/PC8Np4lFx++lGl/217YTcf8b6rgxzvkTr LU2V8uQWNVvwcmpmJiVtdiC9CsFRP6P1wWUJC46BUYWqSAKhCSJeEB0PO9/xwnn4 xbGAqX5Mf3jupwPh6UU+RsfOvmv9vQG2mF/WTLrhuwPSCozOGBu8/pQ42Xdeak/E iz3wCs85htGmN5SHepiHQYe3807i5XmZr+WpQJxWvpgCu95K/+iQTxdNSvGcWFU/ mkt50V7U/9VfwmYFMK1WTxqg+3n/WwKjeEJMHbaiQGYOfD5qQ/4ARenNDazI3vIw 4tGlV5HuCopfcg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:59:32 2025 by rpki-client