This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft File: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft (raw, json) Hash identifier: CR4xkVH9w7Fw2D5oImxg3g6bahpZ9qW72AnJcpus7qc= Subject key identifier: EF:50:72:4F:1C:DD:9F:E0:83:83:C2:2B:81:B9:05:62:B9:86:4E:53 Authority key identifier: 48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D Certificate issuer: /CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d Certificate serial: 019AF1D1C9C09FF33BEEF9D22846E82747DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft Manifest number: 164C Signing time: Sat 06 Dec 2025 04:00:48 +0000 Manifest this update: Sat 06 Dec 2025 04:00:48 +0000 Manifest next update: Sun 07 Dec 2025 04:00:48 +0000 Files and hashes: 1: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl (hash: 87akKuOFvXc0YW/4dFmU6wTor6QenRGkXxyCWuwmL9U=) 2: fDIcgxuviPH1xRvEDyo8UqwcwI4.roa (hash: rJoyrLL7oo1+w5siaXJh6iXQyoUFBWgTdCtgNT3fEho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c9:c0:9f:f3:3b:ee:f9:d2:28:46:e8:27:47:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d Validity Not Before: Dec 6 04:00:48 2025 GMT Not After : Dec 7 04:00:48 2025 GMT Subject: CN=ef50724f1cdd9fe08383c22b81b90562b9864e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6f:30:ce:e3:bc:d1:e8:6e:66:a4:10:06:67: b9:fb:a7:ab:73:15:be:61:4a:1c:42:1b:e7:c6:f7: 9d:98:e2:90:54:e9:5d:23:c9:41:d9:91:e2:75:72: 14:35:14:12:04:a2:0b:00:90:98:50:47:88:5a:b9: 26:59:48:80:fc:ae:7c:cf:38:e2:42:12:d5:b3:fc: 9d:50:26:36:c6:40:6e:99:0c:5c:56:5a:9f:3f:89: 99:c6:a9:21:7f:a7:bf:b7:96:ee:8a:8b:d4:c1:34: a8:a1:55:b2:ab:b9:4a:fb:d1:e3:c5:13:a1:11:13: 39:3c:84:33:46:0e:ff:9b:38:1b:c1:d6:1e:05:3b: b5:85:0d:7b:12:f3:3c:bb:76:d5:e2:77:a1:18:a2: b9:1e:91:cc:1d:98:02:f4:de:cb:ec:0f:8b:8c:63: 02:de:d7:20:11:0c:2e:90:ba:a8:b7:b3:92:69:26: 11:44:b6:0b:0b:47:8f:05:e7:d9:0e:a4:ff:99:cb: 58:46:8f:bc:a1:15:c2:91:ae:d3:02:27:31:8f:da: f3:27:24:2a:1a:d1:2b:c1:ba:28:24:d3:db:06:cd: be:e3:8f:65:ef:98:5e:3d:5b:d8:88:09:ca:b5:88: a1:80:28:72:a9:43:d6:23:2c:c7:96:97:a1:ec:97: 30:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:50:72:4F:1C:DD:9F:E0:83:83:C2:2B:81:B9:05:62:B9:86:4E:53 X509v3 Authority Key Identifier: keyid:48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:a9:5e:45:6b:96:06:9c:8e:6b:00:a8:91:14:59:af:4f:99: 94:56:68:9e:e3:c5:6f:8d:d9:18:4e:37:99:4d:7f:7b:e2:cd: 0f:f7:44:db:6e:b1:57:1a:ed:7f:ed:f4:74:e8:bb:a6:a1:1c: 52:04:fe:25:3e:32:e0:8c:22:30:94:44:2b:1d:72:ae:d3:06: 51:36:5d:4b:4b:ab:fb:76:7e:7a:11:20:ef:10:63:15:5b:17: cf:83:77:81:c7:7f:55:71:00:f3:5e:c2:d4:9e:05:06:2b:4c: e7:da:05:c6:f0:5a:b7:20:12:68:7f:a8:01:1d:25:ed:54:40: d4:a3:cc:a1:45:88:e5:2c:d7:5b:8a:80:d2:49:79:3d:53:aa: 8b:cb:aa:c6:01:b0:4c:f9:62:2a:f9:c8:5f:0d:9d:46:f7:28: ed:b4:be:a5:d7:c3:8d:65:92:fa:d1:dc:bf:2a:c6:b3:15:25: df:78:63:c7:38:26:17:5e:cd:63:63:37:e2:f8:64:fa:a4:c7: d8:16:80:47:10:d7:28:5a:0d:70:3d:a0:2a:2a:1c:04:9e:fb: e6:21:91:14:96:f1:99:2a:cb:6e:27:03:f7:a2:76:1b:80:b3: 1f:d7:5d:be:77:15:c3:69:57:b0:50:33:63:92:fe:39:77:47: 9a:aa:ae:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cnAn/M77vnSKEboJ0ffMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MTY3ZGMxZGQyYmY5OTFkNzBjZjZlZTg3ZjQzNjFlNzVj ZWYyMGQwHhcNMjUxMjA2MDQwMDQ4WhcNMjUxMjA3MDQwMDQ4WjAzMTEwLwYDVQQD EyhlZjUwNzI0ZjFjZGQ5ZmUwODM4M2MyMmI4MWI5MDU2MmI5ODY0ZTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm8wzuO80ehuZqQQBme5+6ercxW+ YUocQhvnxvedmOKQVOldI8lB2ZHidXIUNRQSBKILAJCYUEeIWrkmWUiA/K58zzji QhLVs/ydUCY2xkBumQxcVlqfP4mZxqkhf6e/t5buiovUwTSooVWyq7lK+9HjxROh ERM5PIQzRg7/mzgbwdYeBTu1hQ17EvM8u3bV4nehGKK5HpHMHZgC9N7L7A+LjGMC 3tcgEQwukLqot7OSaSYRRLYLC0ePBefZDqT/mctYRo+8oRXCka7TAicxj9rzJyQq GtErwbooJNPbBs2+449l75hePVvYiAnKtYihgChyqUPWIyzHlpeh7JcwYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9Qck8c3Z/gg4PCK4G5BWK5hk5TMB8GA1UdIwQY MBaAFEgWfcHdK/mR1wz27of0Nh51zvINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82MTZjMDAtZmJlYi00YjMwLTllMjUt OWU5MWZjYTc4ZjQ3LzEvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi82MTZjMDAtZmJlYi00YjMwLTllMjUtOWU5MWZjYTc4ZjQ3 LzEvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACKleRWuW BpyOawCokRRZr0+ZlFZonuPFb43ZGE43mU1/e+LND/dE226xVxrtf+30dOi7pqEc UgT+JT4y4IwiMJREKx1yrtMGUTZdS0ur+3Z+ehEg7xBjFVsXz4N3gcd/VXEA817C 1J4FBitM59oFxvBatyASaH+oAR0l7VRA1KPMoUWI5SzXW4qA0kl5PVOqi8uqxgGw TPliKvnIXw2dRvco7bS+pdfDjWWS+tHcvyrGsxUl33hjxzgmF17NY2M34vhk+qTH 2BaARxDXKFoNcD2gKiocBJ775iGRFJbxmSrLbicD96J2G4CzH9ddvncVw2lXsFAz Y5L+OXdHmqqunw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:14:04 2025 by rpki-client