This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft File: SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json) Hash identifier: PGMwsxLnWMpGu+DKwURVzsyey3HTVgCt0OhW31FKvfY= Subject key identifier: D8:D6:3E:8F:AF:37:CF:C0:D9:A3:FA:60:20:54:EA:E9:38:B7:97:2F Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a Certificate serial: 019B3EDA193324F819C60D27F7930765762B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft Manifest number: 0768 Signing time: Sun 21 Dec 2025 03:00:39 +0000 Manifest this update: Sun 21 Dec 2025 03:00:39 +0000 Manifest next update: Mon 22 Dec 2025 03:00:39 +0000 Files and hashes: 1: 3klZTNM9YhJqZUNp3PJkFRczFX8.roa (hash: OyXgZ5l4rO5Wt2TcoTvX9gJZ0hgPAdu2wTU0n6/gZoU=) 2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: wc6jC44WKa0oeOzUI+uIJfKYBCHtHrpVjkEYQ2kcSE8=) 3: W0AAJRLr6gi2r74kS95DxTYGfTw.roa (hash: MH+HQqYFMBeGJJqR0jYHA1u1MAdvWa+AHHutk6W2MvA=) 4: r0aCHKZqLV95OV5gwTfYdhHbA6Q.roa (hash: xjRrpFDO8g9sZNIp8GQ1hogAG1em04ZcPXgm2d8N7a8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:19:33:24:f8:19:c6:0d:27:f7:93:07:65:76:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a Validity Not Before: Dec 21 03:00:39 2025 GMT Not After : Dec 22 03:00:39 2025 GMT Subject: CN=d8d63e8faf37cfc0d9a3fa602054eae938b7972f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8e:0e:a7:4d:ae:f1:70:87:0a:50:af:71:8a: dc:6a:7c:40:98:59:88:9c:83:3a:cd:ac:e4:61:82: dc:07:06:0e:5c:7b:d0:57:0b:c8:90:58:97:e4:5e: 3f:70:a1:8d:fe:71:f7:db:ce:43:e5:da:70:cf:e2: 3b:39:e6:18:fb:86:67:4b:ae:21:ac:36:4f:6b:8e: 8e:f0:b0:8d:63:f6:a1:41:59:9f:81:18:dc:87:41: 9c:62:3f:41:b7:82:0f:b3:44:52:09:ff:bb:3b:11: 92:2c:ef:4d:4e:4b:fb:cc:14:0f:8e:3c:91:43:4e: 5f:2a:40:af:ea:2b:77:33:f8:9f:fe:22:57:17:2a: a9:8b:bc:ad:75:02:d0:19:17:97:45:96:26:6d:30: cf:92:ea:ed:f7:61:7f:53:94:61:30:de:56:c1:30: e9:37:58:1d:f5:35:86:01:7e:74:9f:4a:67:65:a7: 95:fb:a8:e4:60:5e:80:9e:23:c2:6c:8f:a8:1c:7c: 4d:7e:8b:46:03:33:a7:19:f2:a0:e0:df:cc:1f:6f: 47:48:08:3b:1f:38:e0:a0:a2:82:37:28:38:b2:18: ca:6c:c5:24:79:84:5d:5d:2d:97:92:5d:61:a6:9b: 2c:dd:3c:7f:1e:eb:0a:e7:83:71:41:4f:68:6b:a2: 02:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D6:3E:8F:AF:37:CF:C0:D9:A3:FA:60:20:54:EA:E9:38:B7:97:2F X509v3 Authority Key Identifier: keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:19:9b:a4:82:57:ed:b3:c8:ed:76:c2:2e:f6:b9:79:ab:d3: f5:fc:56:96:af:81:30:0e:83:24:5c:05:ae:37:a5:f3:71:3b: d7:89:29:ed:d6:64:06:ec:96:11:b3:d3:f8:e0:aa:ec:1a:71: 74:29:2d:4c:06:5f:e8:5c:c9:01:4d:27:b5:6f:4c:ab:2f:d7: f4:63:90:00:c3:5e:a6:66:31:6a:ef:38:6d:be:7b:9e:90:4e: 42:dc:5f:31:17:62:d9:6d:7b:27:e6:92:b4:7b:94:2d:5a:bb: 06:c9:3b:17:87:2d:a8:b6:45:6c:a3:c7:c1:b9:db:b8:c0:41: a3:e2:c2:09:d2:d7:2c:b4:91:f6:f7:9f:9b:af:0c:00:90:1c: 07:bc:c7:01:ec:c3:2e:46:a4:53:e7:87:11:5d:4b:0f:07:b3: 4e:ab:c0:50:5a:82:33:0a:c8:54:0a:35:c2:2a:96:8f:bb:59: fa:af:81:bb:ea:a5:b7:92:21:96:c2:38:eb:44:a5:3d:64:bf: 92:1c:7c:77:95:0b:83:72:4e:5e:3e:14:ab:36:65:0b:3c:a1: 95:ae:d8:5b:48:8c:ad:f7:e6:ab:96:0a:42:b8:fa:62:01:96: c3:84:34:a3:65:5e:16:3b:a2:7b:2c:75:d6:1b:10:2a:6d:89: bf:68:63:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2hkzJPgZxg0n95MHZXYrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NWRkYjY3OGM0YzBkMGM0ODhlZmQzYjgzNjcxNDIxODlm MzM1OGEwHhcNMjUxMjIxMDMwMDM5WhcNMjUxMjIyMDMwMDM5WjAzMTEwLwYDVQQD EyhkOGQ2M2U4ZmFmMzdjZmMwZDlhM2ZhNjAyMDU0ZWFlOTM4Yjc5NzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA544Op02u8XCHClCvcYrcanxAmFmI nIM6zazkYYLcBwYOXHvQVwvIkFiX5F4/cKGN/nH3285D5dpwz+I7OeYY+4ZnS64h rDZPa46O8LCNY/ahQVmfgRjch0GcYj9Bt4IPs0RSCf+7OxGSLO9NTkv7zBQPjjyR Q05fKkCv6it3M/if/iJXFyqpi7ytdQLQGReXRZYmbTDPkurt92F/U5RhMN5WwTDp N1gd9TWGAX50n0pnZaeV+6jkYF6AniPCbI+oHHxNfotGAzOnGfKg4N/MH29HSAg7 HzjgoKKCNyg4shjKbMUkeYRdXS2Xkl1hppss3Tx/HusK54NxQU9oa6ICswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjWPo+vN8/A2aP6YCBU6uk4t5cvMB8GA1UdIwQY MBaAFEhd22eMTA0MSI79O4NnFCGJ8zWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUt ZGViZmNkOWViMjBlLzEvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUtZGViZmNkOWViMjBl LzEvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRmbpIJX 7bPI7XbCLva5eavT9fxWlq+BMA6DJFwFrjel83E714kp7dZkBuyWEbPT+OCq7Bpx dCktTAZf6FzJAU0ntW9Mqy/X9GOQAMNepmYxau84bb57npBOQtxfMRdi2W17J+aS tHuULVq7Bsk7F4ctqLZFbKPHwbnbuMBBo+LCCdLXLLSR9vefm68MAJAcB7zHAezD LkakU+eHEV1LDwezTqvAUFqCMwrIVAo1wiqWj7tZ+q+Bu+qlt5IhlsI460SlPWS/ khx8d5ULg3JOXj4UqzZlCzyhla7YW0iMrffmq5YKQrj6YgGWw4Q0o2VeFjuieyx1 1hsQKm2Jv2hjcA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:48:19 2025 by rpki-client