This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft File: SfJiM_W7QibCp6e5ADAI0Z40eFs.mft (raw, json) Hash identifier: ArLkPH5wzP9do5E11tHdPe3H1Rlhi3jZfkccGVVzU84= Subject key identifier: AB:FC:8F:98:AE:42:AA:F1:0F:17:A3:33:90:88:77:E8:F0:D9:4E:06 Authority key identifier: 49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B Certificate issuer: /CN=49f26233f5bb4226c2a7a7b9003008d19e34785b Certificate serial: 019B35A0AB206940E6C38C7FE9F063C2E037 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft Manifest number: 1313 Signing time: Fri 19 Dec 2025 08:01:20 +0000 Manifest this update: Fri 19 Dec 2025 08:01:20 +0000 Manifest next update: Sat 20 Dec 2025 08:01:20 +0000 Files and hashes: 1: SfJiM_W7QibCp6e5ADAI0Z40eFs.crl (hash: 7H3fF3D0oLWEaupW/OqIWTYhmBYlRDpLTqpNpAxvUSo=) 2: TmwIzb5OMEe4RHPaC68IjB6na0k.roa (hash: dW1pEtOcDuseosGnHRvKaebls+Ju6AZ6FoBVPM8QbJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 08:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:ab:20:69:40:e6:c3:8c:7f:e9:f0:63:c2:e0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f26233f5bb4226c2a7a7b9003008d19e34785b Validity Not Before: Dec 19 08:01:20 2025 GMT Not After : Dec 20 08:01:20 2025 GMT Subject: CN=abfc8f98ae42aaf10f17a333908877e8f0d94e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:40:ed:cf:ef:bb:9e:84:28:1b:9a:f9:65:9a: d5:e7:e1:49:1f:6d:04:a9:bf:7c:3c:4a:57:be:49: d1:84:fa:60:72:cc:fa:69:d0:96:1a:6d:7f:3c:22: ff:0e:03:2a:c6:05:40:8c:22:77:5a:42:4d:1e:c4: d5:e2:ae:9e:b0:51:88:f0:d3:01:a0:c9:29:f2:74: 8e:f2:5c:d2:3a:aa:63:de:d6:10:35:ab:64:2f:17: bf:f8:42:a6:36:1d:d0:7d:88:0b:7a:06:78:c4:c6: c3:f8:95:4a:79:5c:fa:e9:5d:9e:01:df:50:c1:5d: 59:2c:3d:6e:bc:a8:90:49:99:74:6a:ea:0e:79:1d: e4:23:9a:91:dd:32:43:37:f6:bc:4d:4a:2d:82:f8: 1e:41:4f:d7:3a:56:30:39:2a:0c:10:c4:2e:d8:81: 75:6c:41:07:ab:3b:e1:0d:9d:66:73:a5:5e:c2:27: 7b:29:f9:33:df:e2:e5:d2:f9:ec:89:ab:26:d3:4f: 01:11:d3:79:e1:20:89:e8:bb:2e:e5:18:00:ec:5b: aa:d8:6c:4d:fe:5f:24:28:df:f3:b0:4e:e2:61:63: 9b:fe:35:1d:63:59:c2:75:37:4c:9f:0f:8e:8f:8c: 96:77:8f:32:ae:a5:fb:27:20:bc:68:c2:d6:fc:83: 0d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FC:8F:98:AE:42:AA:F1:0F:17:A3:33:90:88:77:E8:F0:D9:4E:06 X509v3 Authority Key Identifier: keyid:49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:70:39:76:bc:e7:0d:83:79:bb:c0:de:24:73:27:83:c0:82: ac:e2:aa:17:52:42:af:b8:ae:eb:e8:61:7a:46:27:74:2b:14: 3d:34:d2:41:03:ce:a8:78:30:12:7b:6f:0c:1a:0f:f1:1a:c2: a7:fa:fe:7b:19:b7:5d:83:0f:eb:91:64:72:09:de:c1:96:80: 49:98:ae:b3:df:9d:86:86:08:3a:7e:c4:0c:81:b2:b3:63:db: 0a:a0:56:8a:66:48:0a:6b:2c:bb:5e:c0:23:6a:2e:79:37:1d: ba:0d:76:13:7e:8d:2a:d7:75:d0:c9:1a:ad:ff:a8:6c:25:55: 12:8e:b8:3a:d1:3f:29:36:bb:b2:60:31:48:91:77:50:2e:47: 4d:d0:ec:3f:67:9b:b1:7e:2a:40:8f:e5:3e:03:58:73:80:69: 99:de:c4:09:e5:d4:ce:19:b5:06:95:a2:1a:25:f4:99:d8:43: 6b:53:13:e8:cb:01:36:5a:39:aa:41:70:46:7c:b7:2c:f3:9f: 2e:e2:2c:2f:be:38:58:af:d3:44:81:ce:67:c9:38:eb:d9:a1: 90:4b:62:d4:1b:c0:18:69:75:b7:0c:71:af:2c:6e:62:f8:5a: ef:ec:d2:a6:cb:50:7c:2f:4e:25:67:28:d4:48:50:07:85:98: d8:02:73:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oKsgaUDmw4x/6fBjwuA3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjI2MjMzZjViYjQyMjZjMmE3YTdiOTAwMzAwOGQxOWUz NDc4NWIwHhcNMjUxMjE5MDgwMTIwWhcNMjUxMjIwMDgwMTIwWjAzMTEwLwYDVQQD EyhhYmZjOGY5OGFlNDJhYWYxMGYxN2EzMzM5MDg4NzdlOGYwZDk0ZTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkDtz++7noQoG5r5ZZrV5+FJH20E qb98PEpXvknRhPpgcsz6adCWGm1/PCL/DgMqxgVAjCJ3WkJNHsTV4q6esFGI8NMB oMkp8nSO8lzSOqpj3tYQNatkLxe/+EKmNh3QfYgLegZ4xMbD+JVKeVz66V2eAd9Q wV1ZLD1uvKiQSZl0auoOeR3kI5qR3TJDN/a8TUotgvgeQU/XOlYwOSoMEMQu2IF1 bEEHqzvhDZ1mc6Vewid7Kfkz3+Ll0vnsiasm008BEdN54SCJ6Lsu5RgA7Fuq2GxN /l8kKN/zsE7iYWOb/jUdY1nCdTdMnw+Oj4yWd48yrqX7JyC8aMLW/IMNbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKv8j5iuQqrxDxejM5CId+jw2U4GMB8GA1UdIwQY MBaAFEnyYjP1u0ImwqenuQAwCNGeNHhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZKaU1fVzdRaWJDcDZlNUFEQUkwWjQwZUZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZmRmNmQtY2JhNi00NDk0LTkwMjgt NTc3ZTk5MzViZDc1LzEvU2ZKaU1fVzdRaWJDcDZlNUFEQUkwWjQwZUZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84ZmRmNmQtY2JhNi00NDk0LTkwMjgtNTc3ZTk5MzViZDc1 LzEvU2ZKaU1fVzdRaWJDcDZlNUFEQUkwWjQwZUZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3A5drzn DYN5u8DeJHMng8CCrOKqF1JCr7iu6+hhekYndCsUPTTSQQPOqHgwEntvDBoP8RrC p/r+exm3XYMP65FkcgnewZaASZius9+dhoYIOn7EDIGys2PbCqBWimZICmssu17A I2oueTcdug12E36NKtd10Mkarf+obCVVEo64OtE/KTa7smAxSJF3UC5HTdDsP2eb sX4qQI/lPgNYc4Bpmd7ECeXUzhm1BpWiGiX0mdhDa1MT6MsBNlo5qkFwRny3LPOf LuIsL744WK/TRIHOZ8k469mhkEti1BvAGGl1twxxryxuYvha7+zSpstQfC9OJWco 1EhQB4WY2AJzkg== -----END CERTIFICATE-----Generated at Fri Dec 19 17:21:50 2025 by rpki-client