This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft File: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft (raw, json) Hash identifier: Bsowv2farn2BJxilsxKMFx1jq0nEzi07f9ZSulvN1fI= Subject key identifier: A0:B7:7F:50:68:6F:E1:C1:53:61:2B:43:5A:CD:C0:5E:9D:1E:01:92 Authority key identifier: 48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D Certificate issuer: /CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d Certificate serial: 019B3569FBA9B0B31E344B9CCDA9BB271725 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft Manifest number: 166F Signing time: Fri 19 Dec 2025 07:01:36 +0000 Manifest this update: Fri 19 Dec 2025 07:01:36 +0000 Manifest next update: Sat 20 Dec 2025 07:01:36 +0000 Files and hashes: 1: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl (hash: SCeFhI04bj715O5K6/sLkXx7muccB3O1EGCU5c3u4UY=) 2: fDIcgxuviPH1xRvEDyo8UqwcwI4.roa (hash: rJoyrLL7oo1+w5siaXJh6iXQyoUFBWgTdCtgNT3fEho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:fb:a9:b0:b3:1e:34:4b:9c:cd:a9:bb:27:17:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d Validity Not Before: Dec 19 07:01:36 2025 GMT Not After : Dec 20 07:01:36 2025 GMT Subject: CN=a0b77f50686fe1c153612b435acdc05e9d1e0192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a4:d9:b8:72:40:f1:c3:7a:7d:5c:ea:3d:b8: c4:60:37:62:87:d5:06:20:5a:08:8e:f0:47:f6:9d: 8b:96:2e:a3:f5:e3:e1:7e:a4:74:61:cf:7b:67:c8: e7:18:e8:35:48:73:75:9a:c8:06:9a:e5:29:2d:5f: 0a:23:9d:6a:43:16:41:ae:6d:46:e1:af:12:6e:fd: fd:52:95:08:6b:3f:93:21:89:f5:fb:87:80:e3:bf: 9a:cc:4e:33:31:c0:78:4d:eb:49:1b:55:5e:50:bf: 09:f1:ee:26:f8:67:51:25:d4:2a:8c:21:18:b4:88: d4:2e:17:ac:ed:13:eb:4f:d3:64:f2:7a:1b:6e:20: 3c:f7:82:d2:70:e5:ce:68:3e:c4:77:87:80:dc:48: 54:db:f7:03:e0:b7:95:5a:20:83:92:a8:e0:48:8b: 5b:83:38:38:e1:7a:62:6d:9b:f5:c3:53:f3:6f:de: c9:4d:28:c0:08:5e:0b:34:31:64:49:35:23:88:2e: e2:e1:18:b9:e5:40:8b:3f:2b:2c:89:62:ce:4b:a8: 97:fb:40:af:95:3a:dd:1a:4f:fa:f9:c8:7f:bb:cd: b2:5d:df:74:77:e4:fd:c9:cb:3e:af:61:da:f8:dd: f1:97:13:e3:cd:fd:a2:87:2a:c7:24:64:ab:68:c2: 3b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B7:7F:50:68:6F:E1:C1:53:61:2B:43:5A:CD:C0:5E:9D:1E:01:92 X509v3 Authority Key Identifier: keyid:48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:a4:f2:41:d8:b5:78:88:a7:ba:87:49:9b:87:77:40:82:c8: 6d:42:7a:0b:10:ce:13:3b:be:23:24:a1:59:ae:bb:64:b9:2a: 2f:2e:d8:7e:b6:a0:91:13:b5:24:58:c6:87:36:01:6c:12:e8: fa:db:c0:de:bb:85:0e:88:16:fd:ac:4a:7c:e0:e7:66:c2:02: 66:37:5d:08:aa:3c:15:75:36:12:6c:c5:61:40:a1:b7:22:ca: 25:86:a8:d5:c4:b1:54:b0:88:b9:cc:cc:26:fa:5b:5d:83:02: 8b:db:a0:21:a5:27:f1:8b:b2:42:43:43:b0:f3:26:b1:5f:2a: da:4a:1d:c3:d3:ed:e7:0d:13:4e:70:ff:c9:1f:0d:86:6e:b0: 76:92:1e:9b:28:38:83:47:d5:fd:90:bc:12:01:82:f1:4c:4d: 33:88:d9:69:05:b3:ce:9a:34:96:5c:fe:c6:c6:b6:62:7b:bd: 07:c7:48:77:01:40:8d:ee:32:f3:b2:17:86:52:ec:ea:ed:35: 1d:67:b1:0d:71:5f:ea:05:e9:2b:57:c0:b2:d2:dc:f2:48:39: 82:1e:e9:d5:a5:9e:84:6d:33:71:1c:c2:2e:a7:50:27:32:05: cc:89:8b:79:3e:e8:f4:28:83:87:06:78:02:41:6f:ac:93:28: 60:67:17:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1afupsLMeNEuczam7JxclMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MTY3ZGMxZGQyYmY5OTFkNzBjZjZlZTg3ZjQzNjFlNzVj ZWYyMGQwHhcNMjUxMjE5MDcwMTM2WhcNMjUxMjIwMDcwMTM2WjAzMTEwLwYDVQQD EyhhMGI3N2Y1MDY4NmZlMWMxNTM2MTJiNDM1YWNkYzA1ZTlkMWUwMTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKTZuHJA8cN6fVzqPbjEYDdih9UG IFoIjvBH9p2Lli6j9ePhfqR0Yc97Z8jnGOg1SHN1msgGmuUpLV8KI51qQxZBrm1G 4a8Sbv39UpUIaz+TIYn1+4eA47+azE4zMcB4TetJG1VeUL8J8e4m+GdRJdQqjCEY tIjULhes7RPrT9Nk8nobbiA894LScOXOaD7Ed4eA3EhU2/cD4LeVWiCDkqjgSItb gzg44XpibZv1w1Pzb97JTSjACF4LNDFkSTUjiC7i4Ri55UCLPyssiWLOS6iX+0Cv lTrdGk/6+ch/u82yXd90d+T9ycs+r2Ha+N3xlxPjzf2ihyrHJGSraMI78wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKC3f1Bob+HBU2ErQ1rNwF6dHgGSMB8GA1UdIwQY MBaAFEgWfcHdK/mR1wz27of0Nh51zvINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82MTZjMDAtZmJlYi00YjMwLTllMjUt OWU5MWZjYTc4ZjQ3LzEvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi82MTZjMDAtZmJlYi00YjMwLTllMjUtOWU5MWZjYTc4ZjQ3 LzEvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmKTyQdi1 eIinuodJm4d3QILIbUJ6CxDOEzu+IyShWa67ZLkqLy7YfragkRO1JFjGhzYBbBLo +tvA3ruFDogW/axKfODnZsICZjddCKo8FXU2EmzFYUChtyLKJYao1cSxVLCIuczM JvpbXYMCi9ugIaUn8YuyQkNDsPMmsV8q2kodw9Pt5w0TTnD/yR8Nhm6wdpIemyg4 g0fV/ZC8EgGC8UxNM4jZaQWzzpo0llz+xsa2Ynu9B8dIdwFAje4y87IXhlLs6u01 HWexDXFf6gXpK1fAstLc8kg5gh7p1aWehG0zcRzCLqdQJzIFzImLeT7o9CiDhwZ4 AkFvrJMoYGcXPA== -----END CERTIFICATE-----Generated at Fri Dec 19 12:54:32 2025 by rpki-client