This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft File: sBECIYfjOVoVJPoadUHqeTKFr8I.mft (raw, json) Hash identifier: QhaBM1/wDzqIz/hWbQN1bElAbNwJsp4eFBg5QS6JpVE= Subject key identifier: B8:F2:E4:A9:0A:C6:00:6E:74:0D:DF:84:0E:3C:5B:3A:E7:59:23:AB Authority key identifier: B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2 Certificate issuer: /CN=b011022187e3395a1524fa1a7541ea793285afc2 Certificate serial: 019B2EFA33668442D9BA7870CC01937AEF31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft Manifest number: 1787 Signing time: Thu 18 Dec 2025 01:01:47 +0000 Manifest this update: Thu 18 Dec 2025 01:01:47 +0000 Manifest next update: Fri 19 Dec 2025 01:01:47 +0000 Files and hashes: 1: pgTDkA03VW0zDxlnTBVHz55HqJY.roa (hash: rBFxYtlNHOxBeylPNnZjz2J7DVtg6cM4mYoztB0MlM0=) 2: sBECIYfjOVoVJPoadUHqeTKFr8I.crl (hash: ImXIqumtAbCR+zArDD41hEjHkp6rYc+RENOv6EW9Gi8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:33:66:84:42:d9:ba:78:70:cc:01:93:7a:ef:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b011022187e3395a1524fa1a7541ea793285afc2 Validity Not Before: Dec 18 01:01:47 2025 GMT Not After : Dec 19 01:01:47 2025 GMT Subject: CN=b8f2e4a90ac6006e740ddf840e3c5b3ae75923ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5a:4b:36:34:a7:71:14:98:9c:28:6f:96:a6: a6:e1:f7:0d:69:c0:f2:73:b1:a4:c3:81:2c:e2:67: e1:0f:51:f6:3e:ef:cd:82:c6:ea:47:47:69:8c:c3: 79:09:c5:f3:f5:fc:79:34:ca:5b:f1:88:dc:1a:d2: 24:9e:1c:5b:ed:7b:13:71:12:93:7e:a9:89:57:c7: 6f:5e:0d:18:69:8a:c7:f2:c8:21:24:0f:7d:e3:27: 38:69:17:a6:4d:81:83:85:2b:87:fa:c3:aa:e0:9a: d0:9d:35:ca:b6:45:87:e1:4b:1b:ed:9a:d8:6e:9a: 23:27:79:ca:d5:f8:41:1c:60:ec:76:cc:f6:bc:e3: 43:91:e7:dc:7f:d9:cf:d6:c1:2a:41:a3:d1:4d:77: dc:c4:c5:16:d0:49:d9:93:eb:d0:77:0f:20:b1:43: 6a:f9:49:47:6e:c1:94:cb:2e:80:71:b0:60:1d:80: 61:9f:60:e2:92:78:cc:46:6a:e8:78:00:db:44:86: 61:9c:b4:c9:0a:39:08:1f:2d:af:3c:82:50:1b:b0: 1c:ec:d7:c1:71:ff:0f:46:f2:7d:38:a9:5d:58:bd: b7:9f:f1:ba:ac:63:d3:35:0f:15:e9:51:b1:c5:57: f3:00:b6:33:a3:3f:7f:2e:27:99:9f:c8:0e:4b:99: 14:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F2:E4:A9:0A:C6:00:6E:74:0D:DF:84:0E:3C:5B:3A:E7:59:23:AB X509v3 Authority Key Identifier: keyid:B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c7:d4:e1:6f:d1:10:64:ff:6c:1b:df:14:73:3d:f2:d2:ec: 81:93:b2:dd:ef:51:25:69:a3:cd:50:8a:a0:92:52:30:67:f5: af:28:95:b3:69:a0:22:26:36:f3:c8:9e:89:ae:83:9c:ee:7d: 56:47:cf:8c:20:77:a2:34:c7:50:95:b3:eb:2f:e2:88:64:ab: 39:6e:6d:d2:4e:c3:20:5e:0f:94:e9:c2:68:1b:2f:65:55:93: d7:af:cd:0d:80:5b:20:78:06:50:a1:15:07:fe:1e:ff:92:f0: e2:56:e3:7f:60:aa:19:ed:93:d1:85:a4:e1:b6:77:da:e3:28: 9d:de:14:b9:69:f6:e6:f1:ff:1b:d3:17:fe:62:e9:d7:79:7f: a2:4e:ab:6b:3b:cf:0d:a0:19:e6:d0:24:90:2f:e2:50:0f:55: 81:81:4a:05:be:41:f6:61:8b:3a:09:ac:e7:fa:1d:3e:18:26: 6f:5c:f9:6b:93:e2:6f:20:22:b9:75:10:c9:47:22:36:3a:9c: 80:cc:e3:69:b5:37:8b:e6:4d:23:3b:93:63:c9:e4:0d:a2:22: c4:3f:6e:df:83:3d:59:44:68:43:00:da:34:e4:f7:2d:f9:3b: 18:93:1d:2a:9d:ee:10:12:29:77:20:72:64:14:3f:4b:52:bc: cb:e9:10:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+jNmhELZunhwzAGTeu8xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMTEwMjIxODdlMzM5NWExNTI0ZmExYTc1NDFlYTc5MzI4 NWFmYzIwHhcNMjUxMjE4MDEwMTQ3WhcNMjUxMjE5MDEwMTQ3WjAzMTEwLwYDVQQD EyhiOGYyZTRhOTBhYzYwMDZlNzQwZGRmODQwZTNjNWIzYWU3NTkyM2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVpLNjSncRSYnChvlqam4fcNacDy c7Gkw4Es4mfhD1H2Pu/NgsbqR0dpjMN5CcXz9fx5NMpb8YjcGtIknhxb7XsTcRKT fqmJV8dvXg0YaYrH8sghJA994yc4aRemTYGDhSuH+sOq4JrQnTXKtkWH4Usb7ZrY bpojJ3nK1fhBHGDsdsz2vONDkefcf9nP1sEqQaPRTXfcxMUW0EnZk+vQdw8gsUNq +UlHbsGUyy6AcbBgHYBhn2DiknjMRmroeADbRIZhnLTJCjkIHy2vPIJQG7Ac7NfB cf8PRvJ9OKldWL23n/G6rGPTNQ8V6VGxxVfzALYzoz9/LieZn8gOS5kUdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjy5KkKxgBudA3fhA48WzrnWSOrMB8GA1UdIwQY MBaAFLARAiGH4zlaFST6GnVB6nkyha/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0JFQ0lZZmpPVm9WSlBvYWRVSHFlVEtGcjhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lOGJiZDItMTM2MS00MWEzLTkwZjAt NTMzNGU2YjhjNWZlLzEvc0JFQ0lZZmpPVm9WSlBvYWRVSHFlVEtGcjhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9lOGJiZDItMTM2MS00MWEzLTkwZjAtNTMzNGU2YjhjNWZl LzEvc0JFQ0lZZmpPVm9WSlBvYWRVSHFlVEtGcjhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8fU4W/R EGT/bBvfFHM98tLsgZOy3e9RJWmjzVCKoJJSMGf1ryiVs2mgIiY288ieia6DnO59 VkfPjCB3ojTHUJWz6y/iiGSrOW5t0k7DIF4PlOnCaBsvZVWT16/NDYBbIHgGUKEV B/4e/5Lw4lbjf2CqGe2T0YWk4bZ32uMond4UuWn25vH/G9MX/mLp13l/ok6razvP DaAZ5tAkkC/iUA9VgYFKBb5B9mGLOgms5/odPhgmb1z5a5PibyAiuXUQyUciNjqc gMzjabU3i+ZNIzuTY8nkDaIixD9u34M9WURoQwDaNOT3Lfk7GJMdKp3uEBIpdyBy ZBQ/S1K8y+kQaQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:09:43 2025 by rpki-client