This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft File: Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft (raw, json) Hash identifier: yqBvF8VBkJ3KMDRV7Cl0mVI+jJMA9auBIWX0MmAgZIk= Subject key identifier: 90:6C:1A:F3:34:59:8F:43:02:28:CC:F7:3A:25:70:8C:60:65:4E:5D Authority key identifier: 49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E Certificate issuer: /CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e Certificate serial: 019B22BE82665AC2F6C13D9573CE0B38CA7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft Manifest number: 1210 Signing time: Mon 15 Dec 2025 16:01:08 +0000 Manifest this update: Mon 15 Dec 2025 16:01:08 +0000 Manifest next update: Tue 16 Dec 2025 16:01:08 +0000 Files and hashes: 1: Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl (hash: NX/6CRv8/HUZ+tgxDVkEIzcRZ1HG1dp+uPm3AKqcwpk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:be:82:66:5a:c2:f6:c1:3d:95:73:ce:0b:38:ca:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e Validity Not Before: Dec 15 16:01:08 2025 GMT Not After : Dec 16 16:01:08 2025 GMT Subject: CN=906c1af334598f430228ccf73a25708c60654e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:76:4d:a7:9b:a9:0c:4d:31:29:ae:a0:9d:f6: ef:eb:f5:fa:e9:02:ba:74:cf:d4:ba:ae:51:c2:08: 31:f2:36:49:e2:07:a9:3f:5b:52:3d:1d:b2:1f:a2: 70:ae:11:75:97:e9:e8:87:14:a2:8d:5b:35:78:69: 83:bf:88:49:80:e2:eb:89:36:47:c7:21:02:fa:a8: 1f:55:63:5b:3f:af:02:b3:a0:eb:a7:5d:15:ff:7b: d1:28:59:1a:eb:2b:0a:14:2e:e4:18:cc:6b:6f:94: 73:76:8a:a5:f4:05:ea:e3:e4:79:7c:88:0c:01:d7: 81:c1:7f:3d:a0:d4:8b:1b:18:75:c1:80:ad:74:12: 37:e7:e4:1a:8f:6b:b2:c8:27:f4:7a:bf:fb:c2:de: a5:e4:d4:ff:e7:eb:4e:65:e0:37:03:2e:8a:21:45: a3:7b:c7:0b:bb:1b:31:e3:98:e7:37:4c:44:20:e6: 83:88:57:46:a4:0d:72:31:15:b2:9a:83:b2:d3:99: 0c:8a:1b:72:d6:6c:b2:a5:38:47:75:b7:3a:c0:81: fb:ea:06:b3:8d:be:59:4e:db:84:21:ad:22:dd:40: 2f:13:72:e7:c7:1b:2c:65:83:d8:da:03:0f:7c:67: 3d:46:89:4e:95:54:d0:9a:1f:5f:c2:11:0a:a0:ad: b8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:6C:1A:F3:34:59:8F:43:02:28:CC:F7:3A:25:70:8C:60:65:4E:5D X509v3 Authority Key Identifier: keyid:49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:90:8d:32:d4:73:45:21:ab:b2:bc:ca:69:da:16:9d:8e:ec: 49:fd:dc:77:47:e1:63:b9:f1:41:50:2c:7f:a6:6f:65:7f:ab: cd:5c:55:11:cf:b5:ee:ab:29:7b:92:46:0f:1b:53:f8:6d:cf: e5:5e:fd:92:c9:b8:64:34:da:14:48:50:af:1b:d3:71:d8:18: 46:15:92:a3:ba:c4:02:bc:e6:57:3d:d2:01:69:66:c0:12:ec: a0:4a:63:a5:18:e5:cb:61:29:a2:af:2c:3a:f8:97:46:58:b4: 02:28:3a:ef:83:41:cb:fb:fd:a8:c1:bd:3a:9e:e9:06:04:98: 02:c4:a9:12:3f:5f:0a:ed:ff:31:b6:25:d9:7b:a9:f6:6a:e5: 7b:fa:6f:bc:2b:50:37:bd:08:37:a8:45:55:a3:df:e4:09:3f: 05:54:6a:81:f3:ec:cb:4f:17:8c:72:74:aa:6a:c4:e7:3b:4e: 88:fc:13:41:1a:20:8f:e6:d7:86:d5:47:3d:71:33:56:fb:b7: 82:ad:25:a6:37:a3:a1:91:24:c4:57:b7:c7:d0:b3:70:79:66: e0:86:93:ed:b8:31:f2:bb:d7:f8:0f:fb:57:90:8b:e1:ae:a4: 33:bd:46:d9:86:28:e7:e5:13:84:32:4f:02:0a:1b:62:4a:f6: e4:ad:7c:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsivoJmWsL2wT2Vc84LOMp8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YmE3NGM4Y2JlMWUyN2ZhY2E1YzY3ZTg5ZDNmNjIzYzFm MDlhNWUwHhcNMjUxMjE1MTYwMTA4WhcNMjUxMjE2MTYwMTA4WjAzMTEwLwYDVQQD Eyg5MDZjMWFmMzM0NTk4ZjQzMDIyOGNjZjczYTI1NzA4YzYwNjU0ZTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnZNp5upDE0xKa6gnfbv6/X66QK6 dM/Uuq5Rwggx8jZJ4gepP1tSPR2yH6JwrhF1l+nohxSijVs1eGmDv4hJgOLriTZH xyEC+qgfVWNbP68Cs6Drp10V/3vRKFka6ysKFC7kGMxrb5Rzdoql9AXq4+R5fIgM AdeBwX89oNSLGxh1wYCtdBI35+Qaj2uyyCf0er/7wt6l5NT/5+tOZeA3Ay6KIUWj e8cLuxsx45jnN0xEIOaDiFdGpA1yMRWymoOy05kMihty1myypThHdbc6wIH76gaz jb5ZTtuEIa0i3UAvE3LnxxssZYPY2gMPfGc9RolOlVTQmh9fwhEKoK24iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBsGvM0WY9DAijM9zolcIxgZU5dMB8GA1UdIwQY MBaAFEm6dMjL4eJ/rKXGfonT9iPB8JpeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2JwMHlNdmg0bi1zcGNaLWlkUDJJOEh3bWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9lNzM2ZmEtODFjOC00NzVmLWE3M2Ut MmJiMGUxYzBlM2VmLzEvU2JwMHlNdmg0bi1zcGNaLWlkUDJJOEh3bWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9lNzM2ZmEtODFjOC00NzVmLWE3M2UtMmJiMGUxYzBlM2Vm LzEvU2JwMHlNdmg0bi1zcGNaLWlkUDJJOEh3bWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJCNMtRz RSGrsrzKadoWnY7sSf3cd0fhY7nxQVAsf6ZvZX+rzVxVEc+17qspe5JGDxtT+G3P 5V79ksm4ZDTaFEhQrxvTcdgYRhWSo7rEArzmVz3SAWlmwBLsoEpjpRjly2Epoq8s OviXRli0Aig674NBy/v9qMG9Op7pBgSYAsSpEj9fCu3/MbYl2Xup9mrle/pvvCtQ N70IN6hFVaPf5Ak/BVRqgfPsy08XjHJ0qmrE5ztOiPwTQRogj+bXhtVHPXEzVvu3 gq0lpjejoZEkxFe3x9CzcHlm4IaT7bgx8rvX+A/7V5CL4a6kM71G2YYo5+UThDJP AgobYkr25K18Bw== -----END CERTIFICATE-----Generated at Tue Dec 16 00:31:37 2025 by rpki-client