This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.mft File: SboHm38CFqb2ZzyXHCr63VrpQuo.mft (raw, json) Hash identifier: zlIYLWHriyVE7NTFsKIx5+SmX65rySsy3JXFapT7Cw0= Subject key identifier: 03:DD:52:E8:39:F2:E8:4B:49:15:91:D9:F5:84:34:6F:5E:F0:2A:96 Authority key identifier: 49:BA:07:9B:7F:02:16:A6:F6:67:3C:97:1C:2A:FA:DD:5A:E9:42:EA Certificate issuer: /CN=49ba079b7f0216a6f6673c971c2afadd5ae942ea Certificate serial: 019B32D697D70B3DE1DD98D12EB8D5B8835C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SboHm38CFqb2ZzyXHCr63VrpQuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.mft Manifest number: 0959 Signing time: Thu 18 Dec 2025 19:01:22 +0000 Manifest this update: Thu 18 Dec 2025 19:01:22 +0000 Manifest next update: Fri 19 Dec 2025 19:01:22 +0000 Files and hashes: 1: 1LC0dyD00kv8E_n1OjhAkJTE9Mg.roa (hash: 3MFjBxWOk0fq4hLcLajIgBilcjWSlDvQAatSzU2ufc0=) 2: SboHm38CFqb2ZzyXHCr63VrpQuo.crl (hash: 01EczA/481sh/kEcrxGmqMaMe7sAeU+fsy20BOKNQ4Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.mft rsync://rpki.ripe.net/repository/DEFAULT/SboHm38CFqb2ZzyXHCr63VrpQuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:97:d7:0b:3d:e1:dd:98:d1:2e:b8:d5:b8:83:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49ba079b7f0216a6f6673c971c2afadd5ae942ea Validity Not Before: Dec 18 19:01:22 2025 GMT Not After : Dec 19 19:01:22 2025 GMT Subject: CN=03dd52e839f2e84b491591d9f584346f5ef02a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:02:b4:b1:55:6c:ce:66:d6:9a:89:da:94:d0: c1:d5:7d:15:15:f3:62:21:c1:44:08:3f:16:a0:99: 02:a2:40:3e:b1:a5:91:f4:a6:dc:a8:ea:00:9f:8b: 67:07:b8:3f:9a:3f:ea:33:d4:5a:5c:db:43:2f:f7: ca:d1:26:ed:41:89:c6:2d:46:97:a9:cb:89:d3:38: b0:94:aa:a1:60:ad:7e:cb:4a:26:10:9d:bf:95:7a: d9:66:e1:a2:2b:5a:3c:69:ea:18:f5:53:b1:61:6d: ec:33:51:71:f3:bd:5c:9e:17:f6:83:c6:b7:8f:91: 17:f6:d7:5d:4b:96:c1:fe:f6:9d:4a:8e:5e:0a:be: 66:6f:e7:64:c9:03:10:09:bf:c0:81:d0:f0:3d:99: 6f:49:1f:57:c1:3a:3c:4c:75:12:6b:18:db:76:fd: 04:96:c7:c3:ff:ef:e5:57:b0:aa:c3:4d:6e:cc:51: 47:24:e9:e1:58:3a:4b:3d:d8:01:59:ba:63:a7:b7: f2:bf:c4:2b:fa:d0:b8:81:c4:13:e7:29:5e:7b:ad: 80:9e:01:80:e3:90:1b:ea:7f:74:07:5e:d0:e7:18: d6:90:58:42:43:1d:e1:8e:5f:b1:70:ca:5f:df:07: 99:22:1b:94:56:0d:ae:d6:1a:12:1b:60:5d:dd:2f: ff:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DD:52:E8:39:F2:E8:4B:49:15:91:D9:F5:84:34:6F:5E:F0:2A:96 X509v3 Authority Key Identifier: keyid:49:BA:07:9B:7F:02:16:A6:F6:67:3C:97:1C:2A:FA:DD:5A:E9:42:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SboHm38CFqb2ZzyXHCr63VrpQuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb5f21-b9df-40db-b566-3e3cd95a5c2e/1/SboHm38CFqb2ZzyXHCr63VrpQuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:53:ec:ab:2c:80:4a:58:e8:8a:74:20:e7:ce:30:a1:d1:fa: 8e:7d:ac:48:6e:5c:05:49:80:ba:44:7f:b6:8e:91:50:bd:eb: db:79:0b:b0:f0:a2:f0:5b:18:30:14:f6:1f:5a:62:dd:49:e9: 3e:0a:d5:f4:ff:0f:41:1c:7b:79:74:b1:ae:dd:72:d1:ba:86: 60:d1:2d:38:58:a4:0c:25:22:65:79:b1:a5:0b:1e:23:35:1d: 8d:6f:f1:09:f2:59:1c:59:34:5b:ec:11:f6:7a:53:4e:0c:ae: 77:a1:e6:dd:21:d2:0f:57:61:d9:4b:a3:4c:c0:0e:1d:40:86: 5f:07:ae:ba:d9:7d:ce:1a:9f:be:3f:53:79:0c:70:3f:f7:16: d4:07:ce:87:88:62:ea:9e:23:cf:3b:18:fd:b0:ca:a5:c7:7f: 2d:8c:b8:3b:9b:c2:e9:c1:92:1b:28:f2:ed:df:84:42:6a:2b: 61:21:0d:eb:5c:d7:30:04:f8:94:00:14:4c:eb:36:0e:d3:0c: bc:f7:bf:45:8c:c0:49:bb:a9:47:42:bd:87:8a:e2:5b:77:08: 2c:c3:b3:79:13:ae:66:f2:2b:7a:01:7b:b4:ab:10:c0:99:2c: 66:1a:03:2e:d4:8a:36:e8:cb:60:fa:61:90:1d:49:a9:b4:d8: 4c:a7:73:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1pfXCz3h3ZjRLrjVuINcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YmEwNzliN2YwMjE2YTZmNjY3M2M5NzFjMmFmYWRkNWFl OTQyZWEwHhcNMjUxMjE4MTkwMTIyWhcNMjUxMjE5MTkwMTIyWjAzMTEwLwYDVQQD EygwM2RkNTJlODM5ZjJlODRiNDkxNTkxZDlmNTg0MzQ2ZjVlZjAyYTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwK0sVVszmbWmonalNDB1X0VFfNi IcFECD8WoJkCokA+saWR9KbcqOoAn4tnB7g/mj/qM9RaXNtDL/fK0SbtQYnGLUaX qcuJ0ziwlKqhYK1+y0omEJ2/lXrZZuGiK1o8aeoY9VOxYW3sM1Fx871cnhf2g8a3 j5EX9tddS5bB/vadSo5eCr5mb+dkyQMQCb/AgdDwPZlvSR9XwTo8THUSaxjbdv0E lsfD/+/lV7Cqw01uzFFHJOnhWDpLPdgBWbpjp7fyv8Qr+tC4gcQT5ylee62AngGA 45Ab6n90B17Q5xjWkFhCQx3hjl+xcMpf3weZIhuUVg2u1hoSG2Bd3S//fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPdUug58uhLSRWR2fWENG9e8CqWMB8GA1UdIwQY MBaAFEm6B5t/Aham9mc8lxwq+t1a6ULqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2JvSG0zOENGcWIyWnp5WEhDcjYzVnJwUXVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jYjVmMjEtYjlkZi00MGRiLWI1NjYt M2UzY2Q5NWE1YzJlLzEvU2JvSG0zOENGcWIyWnp5WEhDcjYzVnJwUXVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9jYjVmMjEtYjlkZi00MGRiLWI1NjYtM2UzY2Q5NWE1YzJl LzEvU2JvSG0zOENGcWIyWnp5WEhDcjYzVnJwUXVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1PsqyyA SljoinQg584wodH6jn2sSG5cBUmAukR/to6RUL3r23kLsPCi8FsYMBT2H1pi3Unp PgrV9P8PQRx7eXSxrt1y0bqGYNEtOFikDCUiZXmxpQseIzUdjW/xCfJZHFk0W+wR 9npTTgyud6Hm3SHSD1dh2UujTMAOHUCGXweuutl9zhqfvj9TeQxwP/cW1AfOh4hi 6p4jzzsY/bDKpcd/LYy4O5vC6cGSGyjy7d+EQmorYSEN61zXMAT4lAAUTOs2DtMM vPe/RYzASbupR0K9h4riW3cILMOzeROuZvIregF7tKsQwJksZhoDLtSKNujLYPph kB1JqbTYTKdzTA== -----END CERTIFICATE-----Generated at Fri Dec 19 04:02:15 2025 by rpki-client