This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft File: sBECIYfjOVoVJPoadUHqeTKFr8I.mft (raw, json) Hash identifier: HqYDUaVoOuyRZdmyWHlL6vWGQuiVDHQ5E+19DYqX+XU= Subject key identifier: 3A:B3:21:9C:B9:D9:04:87:80:26:30:02:2F:80:4A:FA:98:55:FF:32 Authority key identifier: B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2 Certificate issuer: /CN=b011022187e3395a1524fa1a7541ea793285afc2 Certificate serial: 019AF31C666B8AD79C0BA4EC1840BA50DE9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 10:01:55 +0000 Manifest this update: Sat 06 Dec 2025 10:01:55 +0000 Manifest next update: Sun 07 Dec 2025 10:01:55 +0000 Files and hashes: 1: pgTDkA03VW0zDxlnTBVHz55HqJY.roa (hash: rBFxYtlNHOxBeylPNnZjz2J7DVtg6cM4mYoztB0MlM0=) 2: sBECIYfjOVoVJPoadUHqeTKFr8I.crl (hash: WWS0+Q1YDJLmqUz7gNH+bFI0axg63gJIM0rkspz3/X8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:66:6b:8a:d7:9c:0b:a4:ec:18:40:ba:50:de:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b011022187e3395a1524fa1a7541ea793285afc2 Validity Not Before: Dec 6 10:01:55 2025 GMT Not After : Dec 7 10:01:55 2025 GMT Subject: CN=3ab3219cb9d90487802630022f804afa9855ff32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ee:52:9b:dc:42:92:7f:c3:ad:fc:99:9d:43: 85:d5:e7:28:2a:0a:af:b7:c1:35:0d:cc:9d:90:6b: 02:2c:7b:e0:4c:5c:da:9c:78:4e:63:bb:d1:d2:69: e4:64:ad:af:89:42:79:3f:90:1c:f2:49:0c:37:9e: 1a:82:eb:a7:39:18:3f:e3:fc:00:9d:a4:78:f6:c4: 6e:6d:2c:8a:c9:f0:d3:2d:9e:42:c3:a0:25:75:eb: a3:19:46:e2:f6:8c:48:d9:bb:b4:25:1a:91:4a:be: a7:c8:6a:4f:4c:ce:a0:2f:3f:42:eb:f4:d8:c4:d3: f7:99:bd:a1:69:6c:24:81:52:70:6c:56:a8:14:86: f6:0c:63:49:4e:56:6c:04:4d:31:35:bb:3c:91:1b: 5b:df:3a:e7:42:b1:c5:4f:20:1f:a4:56:36:02:24: 7d:e6:c0:ab:df:30:d6:94:57:cb:24:9c:5d:1d:2e: 32:b6:84:bb:f2:c9:f3:d8:3f:ae:16:73:28:d7:7f: bd:95:b1:5f:67:40:a5:23:6d:83:8b:0f:65:56:b6: b9:60:ba:c4:da:fa:ce:9f:ed:db:f7:7e:dc:b4:dd: 33:94:7b:94:df:e1:55:2b:ca:c8:1c:14:72:b6:26: 40:70:19:a2:b7:5e:71:86:cf:74:57:33:04:c4:41: 16:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B3:21:9C:B9:D9:04:87:80:26:30:02:2F:80:4A:FA:98:55:FF:32 X509v3 Authority Key Identifier: keyid:B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:b4:02:ec:c1:3f:f3:d3:48:27:c2:94:e5:1a:99:56:3c:6f: e2:57:6d:4c:e3:8d:ca:b3:80:8b:95:44:62:f2:e5:15:86:2c: 88:49:13:e5:4a:72:ef:b7:d7:30:59:f5:e3:1d:78:13:71:e8: db:c7:eb:e2:56:53:ad:fd:78:4d:4f:ae:87:b2:20:0c:b8:0c: c3:14:87:61:a8:a5:63:03:58:dc:2d:33:f4:cf:d3:d9:9b:1a: 86:c7:5a:f2:af:81:6b:b5:a1:b5:5b:9a:05:30:90:76:26:66: 24:17:33:5c:90:eb:9b:66:0c:9a:2a:b4:2d:ed:a5:8a:38:f3: b7:64:4c:c6:24:d8:bf:89:ba:23:f9:8b:44:c2:9f:a5:ab:fa: f0:b9:f3:c2:b3:aa:d2:62:71:ab:ce:a6:8f:f7:ba:4e:a9:df: f0:48:c8:0e:c1:1f:83:ac:16:0e:4b:53:d3:30:72:39:11:16: bf:ce:91:08:5d:69:92:01:98:28:64:5d:76:4c:30:0c:d7:d4: de:d2:c1:10:48:27:c0:81:1f:4a:9c:2a:4f:ce:c7:23:f4:ff: c2:be:f6:4f:92:18:cd:2c:a6:32:28:1b:0a:ca:6b:8c:c5:f4: 44:72:a6:6b:3c:05:c3:d9:ac:dd:cf:d3:40:86:6d:b8:0d:95: 12:83:79:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHGZritecC6TsGEC6UN6aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMTEwMjIxODdlMzM5NWExNTI0ZmExYTc1NDFlYTc5MzI4 NWFmYzIwHhcNMjUxMjA2MTAwMTU1WhcNMjUxMjA3MTAwMTU1WjAzMTEwLwYDVQQD EygzYWIzMjE5Y2I5ZDkwNDg3ODAyNjMwMDIyZjgwNGFmYTk4NTVmZjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve5Sm9xCkn/DrfyZnUOF1ecoKgqv t8E1DcydkGsCLHvgTFzanHhOY7vR0mnkZK2viUJ5P5Ac8kkMN54aguunORg/4/wA naR49sRubSyKyfDTLZ5Cw6AldeujGUbi9oxI2bu0JRqRSr6nyGpPTM6gLz9C6/TY xNP3mb2haWwkgVJwbFaoFIb2DGNJTlZsBE0xNbs8kRtb3zrnQrHFTyAfpFY2AiR9 5sCr3zDWlFfLJJxdHS4ytoS78snz2D+uFnMo13+9lbFfZ0ClI22Diw9lVra5YLrE 2vrOn+3b937ctN0zlHuU3+FVK8rIHBRytiZAcBmit15xhs90VzMExEEWNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqzIZy52QSHgCYwAi+ASvqYVf8yMB8GA1UdIwQY MBaAFLARAiGH4zlaFST6GnVB6nkyha/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0JFQ0lZZmpPVm9WSlBvYWRVSHFlVEtGcjhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lOGJiZDItMTM2MS00MWEzLTkwZjAt NTMzNGU2YjhjNWZlLzEvc0JFQ0lZZmpPVm9WSlBvYWRVSHFlVEtGcjhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9lOGJiZDItMTM2MS00MWEzLTkwZjAtNTMzNGU2YjhjNWZl LzEvc0JFQ0lZZmpPVm9WSlBvYWRVSHFlVEtGcjhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAobQC7ME/ 89NIJ8KU5RqZVjxv4ldtTOONyrOAi5VEYvLlFYYsiEkT5Upy77fXMFn14x14E3Ho 28fr4lZTrf14TU+uh7IgDLgMwxSHYailYwNY3C0z9M/T2Zsahsda8q+Ba7WhtVua BTCQdiZmJBczXJDrm2YMmiq0Le2lijjzt2RMxiTYv4m6I/mLRMKfpav68LnzwrOq 0mJxq86mj/e6Tqnf8EjIDsEfg6wWDktT0zByOREWv86RCF1pkgGYKGRddkwwDNfU 3tLBEEgnwIEfSpwqT87HI/T/wr72T5IYzSymMigbCsprjMX0RHKmazwFw9ms3c/T QIZtuA2VEoN5PQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:00 2025 by rpki-client