This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft File: SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json) Hash identifier: 4UtII4A4rPyxGo0U1vKz/CfmLy0a1s3lzNNnk/i8l0E= Subject key identifier: 41:54:E2:FD:81:49:BB:12:62:3F:7C:F9:0B:6C:75:14:72:C1:3D:49 Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a Certificate serial: 019B42B6EA201B0AE0B7E1CFB639C92C9C44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft Manifest number: 076A Signing time: Sun 21 Dec 2025 21:00:42 +0000 Manifest this update: Sun 21 Dec 2025 21:00:42 +0000 Manifest next update: Mon 22 Dec 2025 21:00:42 +0000 Files and hashes: 1: 3klZTNM9YhJqZUNp3PJkFRczFX8.roa (hash: OyXgZ5l4rO5Wt2TcoTvX9gJZ0hgPAdu2wTU0n6/gZoU=) 2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: eJ0eTsrcmZGJ8GVJdCqsWiklWPOb4uGXSkkOIyISzJI=) 3: W0AAJRLr6gi2r74kS95DxTYGfTw.roa (hash: MH+HQqYFMBeGJJqR0jYHA1u1MAdvWa+AHHutk6W2MvA=) 4: r0aCHKZqLV95OV5gwTfYdhHbA6Q.roa (hash: xjRrpFDO8g9sZNIp8GQ1hogAG1em04ZcPXgm2d8N7a8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b6:ea:20:1b:0a:e0:b7:e1:cf:b6:39:c9:2c:9c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a Validity Not Before: Dec 21 21:00:42 2025 GMT Not After : Dec 22 21:00:42 2025 GMT Subject: CN=4154e2fd8149bb12623f7cf90b6c751472c13d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fa:81:bd:40:19:1c:7d:57:7f:d0:14:d9:1c: 8b:61:77:ef:9e:cc:7c:e5:70:c9:b1:d3:7e:3a:c2: b4:0e:e6:53:e6:0b:51:fb:fd:aa:af:7c:c3:46:4e: a8:d8:09:d2:b5:36:e7:1c:f9:9e:9b:51:98:bf:d7: dd:84:b7:f7:04:fd:6b:79:38:30:37:8e:1a:ad:f6: 28:b6:3d:33:90:0b:96:fb:41:44:4c:16:61:3b:ec: a3:ae:36:69:27:93:fa:cc:4b:2b:f3:66:23:11:2d: 9a:08:c3:25:fb:45:cc:fa:e4:b6:fc:ad:40:4d:6f: a0:b3:5a:f1:d1:d3:30:f0:8f:a8:4f:15:62:d6:eb: 7b:32:5c:29:da:77:10:f6:af:6a:69:bd:85:e8:81: a3:c4:cc:76:5f:36:04:08:35:a3:d5:6d:39:b3:95: d8:ef:81:01:dd:ff:78:d7:4c:7f:19:5c:dc:15:bb: 1c:71:1c:52:87:e4:64:aa:8d:d5:cc:7e:2a:f7:dd: 18:66:41:85:e3:19:ed:88:ef:45:00:4f:fb:65:63: b5:49:d4:e8:a2:ce:21:61:2c:8f:a0:7b:77:a0:aa: 9f:3b:51:14:2e:41:48:bc:e2:37:cc:bb:11:2b:a1: 3c:e5:80:e0:00:5d:d5:4e:fa:5c:8a:ac:30:46:1e: 28:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:54:E2:FD:81:49:BB:12:62:3F:7C:F9:0B:6C:75:14:72:C1:3D:49 X509v3 Authority Key Identifier: keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:9a:92:44:8b:c4:ea:15:f1:8f:66:e0:12:68:e3:52:56:39: 55:95:c5:d9:54:7d:35:d6:80:ee:a9:ec:b9:a7:9f:c8:11:06: f9:bf:97:44:64:88:b4:55:57:3f:bf:73:21:84:94:26:2d:0b: d3:28:eb:0f:e9:04:39:5a:9d:8c:6b:43:6e:01:db:61:de:87: 48:52:04:1c:bb:3a:93:bb:51:6b:4c:91:b7:82:1e:3d:5e:f0: 23:e6:08:25:76:7d:70:58:14:b7:46:52:55:50:3c:7a:c6:b1: 83:9d:e1:5a:68:a9:6d:b7:a6:49:51:c0:74:5d:62:71:51:d4: e6:e5:1e:9f:6a:35:b7:40:0b:40:fe:cb:dc:14:ca:be:ec:c8: e0:bc:21:24:f4:3d:36:9a:8e:1e:76:e5:51:c4:2d:47:d3:7c: 5a:9c:a1:94:57:d0:6d:d4:c4:1d:64:1f:14:36:21:e4:d6:2b: ca:39:3d:37:3e:9f:4e:38:e6:45:44:e3:be:e9:70:78:3e:74: c3:9f:69:90:8a:60:3e:ac:3d:e9:b4:aa:5a:28:25:89:bd:bc: 4b:bb:7c:92:93:99:5b:85:51:42:22:8b:87:05:73:d0:ff:2e: 54:2e:ac:56:e7:f9:30:a5:24:16:79:cb:08:29:d7:b2:72:01: 1c:ca:92:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtuogGwrgt+HPtjnJLJxEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NWRkYjY3OGM0YzBkMGM0ODhlZmQzYjgzNjcxNDIxODlm MzM1OGEwHhcNMjUxMjIxMjEwMDQyWhcNMjUxMjIyMjEwMDQyWjAzMTEwLwYDVQQD Eyg0MTU0ZTJmZDgxNDliYjEyNjIzZjdjZjkwYjZjNzUxNDcyYzEzZDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/qBvUAZHH1Xf9AU2RyLYXfvnsx8 5XDJsdN+OsK0DuZT5gtR+/2qr3zDRk6o2AnStTbnHPmem1GYv9fdhLf3BP1reTgw N44arfYotj0zkAuW+0FETBZhO+yjrjZpJ5P6zEsr82YjES2aCMMl+0XM+uS2/K1A TW+gs1rx0dMw8I+oTxVi1ut7Mlwp2ncQ9q9qab2F6IGjxMx2XzYECDWj1W05s5XY 74EB3f9410x/GVzcFbsccRxSh+Rkqo3VzH4q990YZkGF4xntiO9FAE/7ZWO1SdTo os4hYSyPoHt3oKqfO1EULkFIvOI3zLsRK6E85YDgAF3VTvpciqwwRh4oDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFU4v2BSbsSYj98+QtsdRRywT1JMB8GA1UdIwQY MBaAFEhd22eMTA0MSI79O4NnFCGJ8zWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUt ZGViZmNkOWViMjBlLzEvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUtZGViZmNkOWViMjBl LzEvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5qSRIvE 6hXxj2bgEmjjUlY5VZXF2VR9NdaA7qnsuaefyBEG+b+XRGSItFVXP79zIYSUJi0L 0yjrD+kEOVqdjGtDbgHbYd6HSFIEHLs6k7tRa0yRt4IePV7wI+YIJXZ9cFgUt0ZS VVA8esaxg53hWmipbbemSVHAdF1icVHU5uUen2o1t0ALQP7L3BTKvuzI4LwhJPQ9 NpqOHnblUcQtR9N8WpyhlFfQbdTEHWQfFDYh5NYryjk9Nz6fTjjmRUTjvulweD50 w59pkIpgPqw96bSqWiglib28S7t8kpOZW4VRQiKLhwVz0P8uVC6sVuf5MKUkFnnL CCnXsnIBHMqSbA== -----END CERTIFICATE-----Generated at Mon Dec 22 00:01:44 2025 by rpki-client