This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft File: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft (raw, json) Hash identifier: G4jfZsMRDHe/LpHLF/Jw5kwIrQEuadUTRDe2kaJuu3M= Subject key identifier: 79:AD:26:2C:46:06:E7:14:E5:14:04:59:62:8D:E0:15:17:F7:4B:71 Authority key identifier: 48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD Certificate issuer: /CN=48113c916a59da4d43b8efa7739ad1167ace59fd Certificate serial: 019B3C7E2276DD9FA6AD2F5F7B9AB17E1EE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft Manifest number: 134A Signing time: Sat 20 Dec 2025 16:00:57 +0000 Manifest this update: Sat 20 Dec 2025 16:00:57 +0000 Manifest next update: Sun 21 Dec 2025 16:00:57 +0000 Files and hashes: 1: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl (hash: O2i2kVCKC0mM2WyEAJBcHbNE20wv8VP/I9Luqu5hGWc=) 2: gblVtIBn8mlQxz2yiWejH0FdMyM.roa (hash: s042MfHWtsi+LtfhO/ecUQnxypSSkEI5Z5QOz7/NUTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:22:76:dd:9f:a6:ad:2f:5f:7b:9a:b1:7e:1e:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48113c916a59da4d43b8efa7739ad1167ace59fd Validity Not Before: Dec 20 16:00:57 2025 GMT Not After : Dec 21 16:00:57 2025 GMT Subject: CN=79ad262c4606e714e5140459628de01517f74b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:31:46:b8:68:69:17:c4:2a:9a:9a:76:9d:d0: 9d:18:cc:59:aa:10:ab:10:46:08:0f:ca:29:c6:8a: cf:83:cd:f6:5a:5e:d7:86:f3:35:13:d5:b0:ec:4e: af:56:98:2c:8b:fd:8a:c1:be:b5:ef:dd:0e:bb:95: 68:ed:e3:08:a0:bb:df:bf:b1:e0:3f:a7:4f:e4:44: 4c:5b:56:00:0c:47:b8:54:33:b5:6b:ff:7b:83:f9: 7e:14:b6:6c:9a:bb:d8:da:3f:18:5d:b6:6e:c7:1a: 73:b9:5d:40:94:1f:73:c3:89:bf:84:33:49:2d:d6: af:9a:38:d0:36:4f:59:13:c9:f5:85:aa:ec:56:97: 3f:67:db:bf:9a:b1:e6:ba:04:ef:ae:db:a4:2c:58: 53:27:f1:87:4c:40:fa:3b:d5:fa:e6:11:6f:b1:9d: 62:9d:16:3c:27:f5:d6:47:6a:ba:8b:28:e5:ac:27: 9d:6c:09:5d:0c:a2:95:84:9c:4a:3b:33:06:b0:43: a0:10:c2:18:4c:a1:1d:36:c3:08:3d:52:ab:16:c0: 04:c3:03:82:8a:f4:70:ce:e7:55:f0:2f:a3:f7:fb: 98:c1:6c:77:30:69:33:d7:94:70:68:15:d6:96:9d: 9c:da:fc:da:21:0b:e4:95:73:88:87:3e:c0:36:db: 5d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AD:26:2C:46:06:E7:14:E5:14:04:59:62:8D:E0:15:17:F7:4B:71 X509v3 Authority Key Identifier: keyid:48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:20:c0:c7:11:5e:c8:1b:c6:02:07:79:46:3d:53:8d:34:af: 2d:45:2b:16:91:7c:40:36:11:7b:63:c9:2a:68:72:13:0a:49: 92:be:36:7f:3d:58:d7:ac:0b:4c:f8:31:49:d8:61:3f:11:56: 90:6a:6f:8d:d9:56:8f:74:e9:dc:8d:40:55:c0:9a:52:04:b5: e5:ae:e6:17:56:bf:d6:3a:68:94:d3:5a:b4:13:b3:64:f1:d6: b9:12:8f:99:e3:72:ba:a8:2f:5f:6f:42:26:d5:52:8e:05:3e: 2a:3f:ea:2e:75:75:43:e1:03:b4:c7:ae:a2:fc:fd:9e:31:e0: c7:e9:b8:05:02:4e:42:63:13:8d:d7:a0:e8:95:4b:2f:e3:4d: fc:80:e1:a5:41:37:47:41:39:7b:16:79:40:10:64:66:5c:ce: 67:c2:0e:bc:9c:99:a7:6d:be:e1:51:f7:04:53:d8:ce:60:38: e1:92:68:e6:9a:2f:6f:04:28:42:7d:a8:eb:c6:91:8c:a1:8f: 93:74:29:46:92:2d:75:84:84:62:1f:90:70:3d:18:c6:2b:0a: e6:f9:1d:b6:76:8d:4c:41:73:3e:05:23:0d:9f:33:3d:fe:d3: bc:0a:21:ba:5e:12:29:61:cf:8d:fd:31:73:c0:68:29:a2:bb: ea:e4:c3:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fiJ23Z+mrS9fe5qxfh7pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MTEzYzkxNmE1OWRhNGQ0M2I4ZWZhNzczOWFkMTE2N2Fj ZTU5ZmQwHhcNMjUxMjIwMTYwMDU3WhcNMjUxMjIxMTYwMDU3WjAzMTEwLwYDVQQD Eyg3OWFkMjYyYzQ2MDZlNzE0ZTUxNDA0NTk2MjhkZTAxNTE3Zjc0YjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTFGuGhpF8Qqmpp2ndCdGMxZqhCr EEYID8opxorPg832Wl7XhvM1E9Ww7E6vVpgsi/2Kwb61790Ou5Vo7eMIoLvfv7Hg P6dP5ERMW1YADEe4VDO1a/97g/l+FLZsmrvY2j8YXbZuxxpzuV1AlB9zw4m/hDNJ LdavmjjQNk9ZE8n1harsVpc/Z9u/mrHmugTvrtukLFhTJ/GHTED6O9X65hFvsZ1i nRY8J/XWR2q6iyjlrCedbAldDKKVhJxKOzMGsEOgEMIYTKEdNsMIPVKrFsAEwwOC ivRwzudV8C+j9/uYwWx3MGkz15RwaBXWlp2c2vzaIQvklXOIhz7ANttdrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmtJixGBucU5RQEWWKN4BUX90txMB8GA1UdIwQY MBaAFEgRPJFqWdpNQ7jvp3Oa0RZ6zln9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JFOGtXcFoyazFEdU8tbmM1clJGbnJPV2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84ZmZhNzktNzUyOC00ZmNhLTljZGYt NjliYjI4MmNmNWFlLzEvU0JFOGtXcFoyazFEdU8tbmM1clJGbnJPV2YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi84ZmZhNzktNzUyOC00ZmNhLTljZGYtNjliYjI4MmNmNWFl LzEvU0JFOGtXcFoyazFEdU8tbmM1clJGbnJPV2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZSDAxxFe yBvGAgd5Rj1TjTSvLUUrFpF8QDYRe2PJKmhyEwpJkr42fz1Y16wLTPgxSdhhPxFW kGpvjdlWj3Tp3I1AVcCaUgS15a7mF1a/1jpolNNatBOzZPHWuRKPmeNyuqgvX29C JtVSjgU+Kj/qLnV1Q+EDtMeuovz9njHgx+m4BQJOQmMTjdeg6JVLL+NN/IDhpUE3 R0E5exZ5QBBkZlzOZ8IOvJyZp22+4VH3BFPYzmA44ZJo5povbwQoQn2o68aRjKGP k3QpRpItdYSEYh+QcD0YxisK5vkdtnaNTEFzPgUjDZ8zPf7TvAohul4SKWHPjf0x c8BoKaK76uTDyw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:56:44 2025 by rpki-client