This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft File: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft (raw, json) Hash identifier: qkzLGh9SHHAqr8Jf4fqs9Y6Lx4zvWK5/QPNSu4D7Kjw= Subject key identifier: 5B:E5:BE:15:E7:46:42:B4:99:65:C3:B9:07:EE:73:B7:16:71:3B:2A Authority key identifier: 48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD Certificate issuer: /CN=48113c916a59da4d43b8efa7739ad1167ace59fd Certificate serial: 019AF50ABC9BB2AFCF5DF7CA9AAF22786745 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft Manifest number: 1325 Signing time: Sat 06 Dec 2025 19:01:52 +0000 Manifest this update: Sat 06 Dec 2025 19:01:52 +0000 Manifest next update: Sun 07 Dec 2025 19:01:52 +0000 Files and hashes: 1: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl (hash: Bslg0JVwNz+Y+HRNRU+kfIvZf0ZxoVJ7U/9GMhlTJ0U=) 2: gblVtIBn8mlQxz2yiWejH0FdMyM.roa (hash: s042MfHWtsi+LtfhO/ecUQnxypSSkEI5Z5QOz7/NUTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:bc:9b:b2:af:cf:5d:f7:ca:9a:af:22:78:67:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48113c916a59da4d43b8efa7739ad1167ace59fd Validity Not Before: Dec 6 19:01:52 2025 GMT Not After : Dec 7 19:01:52 2025 GMT Subject: CN=5be5be15e74642b49965c3b907ee73b716713b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:29:e3:60:c8:4d:f3:77:c4:cd:6c:b4:52:f4: df:30:ef:98:1d:58:08:4c:4c:62:6a:af:58:17:27: 9f:66:26:9c:09:0e:39:00:37:53:52:3f:8b:80:9a: 27:9d:26:3c:85:88:08:69:ad:c7:09:e5:5d:9a:fa: d1:7e:f5:ec:49:9d:dd:a7:2d:9d:fc:05:b9:5a:30: 2d:8d:d2:74:6b:fb:41:04:11:df:07:64:4c:76:35: 17:15:fb:d6:15:79:89:f6:7e:51:8c:22:9f:e5:b9: 34:17:ec:d0:f7:fd:22:82:8f:b2:f3:d7:26:8a:65: fd:b9:a1:17:17:bb:d6:b0:37:3b:c9:a3:44:5b:b5: 4b:67:fc:d5:05:bd:2f:0b:30:22:bc:64:8d:3d:11: 77:af:6e:74:e5:73:72:74:46:31:29:d3:4a:7b:de: d0:46:3b:6f:ae:b3:bd:96:b5:b9:c4:e3:07:31:2d: 95:9d:16:cd:79:37:b2:60:7a:77:ae:55:ed:b3:43: 06:8b:b6:7b:47:cb:74:c5:69:b3:70:cb:1d:d6:6a: 3e:7d:c8:0b:0f:31:a1:56:c8:de:a7:c9:2f:cc:dd: 39:31:e5:55:6d:27:d4:64:73:93:74:a6:cf:c1:c5: 82:b9:92:c1:9e:67:27:dd:a3:5d:de:0e:88:8d:31: 77:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E5:BE:15:E7:46:42:B4:99:65:C3:B9:07:EE:73:B7:16:71:3B:2A X509v3 Authority Key Identifier: keyid:48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b6:1a:50:3f:f8:f3:de:56:02:a6:98:70:a3:1f:d9:b1:73: 3d:27:fa:97:3c:43:b4:17:a2:46:86:90:f1:84:75:1c:c3:ac: f0:fb:a2:b3:87:2c:59:40:d4:a4:9c:57:e8:96:92:40:01:be: f0:5a:2a:78:8a:05:32:4b:4a:57:c8:9c:ed:7c:81:51:ea:6c: dd:a2:cf:6c:fb:c6:21:f9:82:ad:37:c0:cd:48:f9:ab:d5:61: 1b:03:b1:11:f3:f5:50:19:41:e2:90:9c:d8:e2:14:34:e8:3e: 7c:3d:cb:e1:e4:cd:d2:f6:42:33:7a:a7:73:ba:ee:d0:1d:8b: fd:f1:da:cb:0f:12:35:11:e5:ee:68:83:1a:0f:02:c5:72:a9: 14:1c:13:a5:17:a9:ee:20:c4:31:e5:ad:4e:b2:ed:50:8d:a5: eb:bc:1a:3e:9d:90:f5:26:7f:e4:46:f2:0e:b7:60:04:a2:07: 13:72:cc:3c:e0:b6:dd:b6:35:c1:df:ed:03:1d:99:df:5c:1c: e6:b3:3e:2f:bb:f8:81:9c:a2:b3:f2:7c:d5:d7:e6:95:45:63: 2c:51:51:fc:b5:1d:cf:cf:37:ba:f4:88:e9:d2:98:6c:1a:80: 65:df:4f:dc:ea:f5:da:41:7e:53:25:5f:de:c8:fa:68:10:73: c8:16:d7:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Crybsq/PXffKmq8ieGdFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MTEzYzkxNmE1OWRhNGQ0M2I4ZWZhNzczOWFkMTE2N2Fj ZTU5ZmQwHhcNMjUxMjA2MTkwMTUyWhcNMjUxMjA3MTkwMTUyWjAzMTEwLwYDVQQD Eyg1YmU1YmUxNWU3NDY0MmI0OTk2NWMzYjkwN2VlNzNiNzE2NzEzYjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsynjYMhN83fEzWy0UvTfMO+YHVgI TExiaq9YFyefZiacCQ45ADdTUj+LgJonnSY8hYgIaa3HCeVdmvrRfvXsSZ3dpy2d /AW5WjAtjdJ0a/tBBBHfB2RMdjUXFfvWFXmJ9n5RjCKf5bk0F+zQ9/0igo+y89cm imX9uaEXF7vWsDc7yaNEW7VLZ/zVBb0vCzAivGSNPRF3r2505XNydEYxKdNKe97Q RjtvrrO9lrW5xOMHMS2VnRbNeTeyYHp3rlXts0MGi7Z7R8t0xWmzcMsd1mo+fcgL DzGhVsjep8kvzN05MeVVbSfUZHOTdKbPwcWCuZLBnmcn3aNd3g6IjTF3TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvlvhXnRkK0mWXDuQfuc7cWcTsqMB8GA1UdIwQY MBaAFEgRPJFqWdpNQ7jvp3Oa0RZ6zln9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JFOGtXcFoyazFEdU8tbmM1clJGbnJPV2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84ZmZhNzktNzUyOC00ZmNhLTljZGYt NjliYjI4MmNmNWFlLzEvU0JFOGtXcFoyazFEdU8tbmM1clJGbnJPV2YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi84ZmZhNzktNzUyOC00ZmNhLTljZGYtNjliYjI4MmNmNWFl LzEvU0JFOGtXcFoyazFEdU8tbmM1clJGbnJPV2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7YaUD/4 895WAqaYcKMf2bFzPSf6lzxDtBeiRoaQ8YR1HMOs8Puis4csWUDUpJxX6JaSQAG+ 8FoqeIoFMktKV8ic7XyBUeps3aLPbPvGIfmCrTfAzUj5q9VhGwOxEfP1UBlB4pCc 2OIUNOg+fD3L4eTN0vZCM3qnc7ru0B2L/fHayw8SNRHl7miDGg8CxXKpFBwTpRep 7iDEMeWtTrLtUI2l67waPp2Q9SZ/5EbyDrdgBKIHE3LMPOC23bY1wd/tAx2Z31wc 5rM+L7v4gZyis/J81dfmlUVjLFFR/LUdz883uvSI6dKYbBqAZd9P3Or12kF+UyVf 3sj6aBBzyBbXWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:56:39 2025 by rpki-client