This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft File: SBcWctU_34slN3ZPU342Wlknva8.mft (raw, json) Hash identifier: WaEV1xngyJ8O1XwHRAXtTdI12Iu5GCmU5O8j2OKiftg= Subject key identifier: FD:22:7C:84:6D:40:A8:C1:EA:42:F1:A1:C8:6A:87:10:7F:52:5C:DB Authority key identifier: 48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF Certificate issuer: /CN=48171672d53fdf8b2537764f537e365a5927bdaf Certificate serial: 019AF61CEB0484B715BBCF39FFCD01729C85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft Manifest number: 162F Signing time: Sun 07 Dec 2025 00:01:21 +0000 Manifest this update: Sun 07 Dec 2025 00:01:21 +0000 Manifest next update: Mon 08 Dec 2025 00:01:21 +0000 Files and hashes: 1: SBcWctU_34slN3ZPU342Wlknva8.crl (hash: NwhDait6kUc9xXJsO01Nzon/V8HCavWt47rfCvBKN/E=) 2: s2Lbl3UpxlmBcXTI8YXpsTqbGNc.roa (hash: WTVc9DfWoK4a3bzz5sw4kY8+A2sS9+yOsYCNmAmV+gs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:eb:04:84:b7:15:bb:cf:39:ff:cd:01:72:9c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48171672d53fdf8b2537764f537e365a5927bdaf Validity Not Before: Dec 7 00:01:21 2025 GMT Not After : Dec 8 00:01:21 2025 GMT Subject: CN=fd227c846d40a8c1ea42f1a1c86a87107f525cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e1:b4:6d:02:89:f4:69:6e:58:30:d3:e4:5c: 9c:de:35:11:fb:4b:c5:72:4a:88:f2:e2:44:11:de: 02:af:4d:1e:3e:96:ae:95:58:7d:d7:40:20:44:6e: 73:c0:4d:54:bb:9f:00:fe:62:cc:a5:e9:d8:6d:4d: 2b:15:c6:dd:e8:54:a0:55:65:18:8c:9b:f1:e3:05: 7c:7a:87:35:63:65:cd:58:16:0f:9b:6a:5d:ac:81: 72:f5:5f:3d:82:db:56:da:a4:73:28:e4:5b:ec:ed: 1c:11:25:08:90:c8:6f:24:68:2e:fb:35:11:3b:41: f4:07:0f:b4:88:69:5b:8b:2a:de:d6:a5:78:e1:92: 73:1a:89:9e:ac:5a:bd:00:70:d2:fe:01:ab:11:7f: 31:37:a7:04:d2:9e:c7:76:ef:17:be:66:5b:04:14: ce:b5:02:ec:34:2c:f6:88:7f:9d:07:85:cf:44:71: 71:64:46:89:46:c3:e1:3c:1e:a8:ce:49:08:38:9e: aa:72:7c:67:95:8a:59:b8:7a:27:70:fc:0b:5e:8b: 46:ef:80:51:db:52:4a:ab:d1:23:45:b7:00:d6:be: 6b:32:2c:87:87:01:98:34:cc:35:2e:2f:88:18:e8: 93:d0:4d:c7:3c:66:da:d3:6d:d7:92:45:e2:91:52: cf:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:22:7C:84:6D:40:A8:C1:EA:42:F1:A1:C8:6A:87:10:7F:52:5C:DB X509v3 Authority Key Identifier: keyid:48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:98:51:5a:df:4c:c0:c5:cd:12:ac:be:c4:a6:b0:98:3b:29: cd:e5:b8:31:7e:8f:59:94:8e:81:5a:49:45:0d:c5:e2:34:20: ae:8c:3d:dc:b1:a7:a2:fc:dd:16:a8:cb:c9:53:6f:55:7c:f8: 5f:64:fe:a7:c0:8f:fd:c1:76:55:a0:9b:38:7c:ea:25:b8:7a: 4c:90:03:c7:51:56:b5:e9:96:f9:de:e4:04:9e:af:dc:f0:99: 7b:12:54:af:03:a4:4d:c1:fe:c9:1b:8e:a6:da:14:86:eb:d7: d6:b8:21:68:ef:92:40:a7:f7:27:78:96:01:09:24:85:77:c5: 30:1d:c7:2a:1a:fa:cb:d0:c6:3d:e0:22:1a:44:35:bf:0a:cb: a7:a2:4e:e6:6b:c9:e0:8e:c9:a2:a6:34:51:2c:62:87:a2:c8: 5a:7f:90:df:5b:3a:7d:34:47:aa:91:4a:27:3e:51:15:a7:25: 70:11:ca:05:1c:7e:47:d0:16:86:9a:28:b6:4a:3d:7b:38:f3: f1:84:84:d0:88:10:ff:64:62:d4:2c:51:5b:0c:5b:ab:d0:0b: d7:8f:4d:9e:5d:7a:50:c2:01:67:fa:13:37:e1:b6:84:01:de: 23:3c:48:e5:d9:c1:ac:58:81:a8:6e:19:f8:e2:64:e0:55:b5: 01:24:cf:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HOsEhLcVu885/80BcpyFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MTcxNjcyZDUzZmRmOGIyNTM3NzY0ZjUzN2UzNjVhNTky N2JkYWYwHhcNMjUxMjA3MDAwMTIxWhcNMjUxMjA4MDAwMTIxWjAzMTEwLwYDVQQD EyhmZDIyN2M4NDZkNDBhOGMxZWE0MmYxYTFjODZhODcxMDdmNTI1Y2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OG0bQKJ9GluWDDT5Fyc3jUR+0vF ckqI8uJEEd4Cr00ePpaulVh910AgRG5zwE1Uu58A/mLMpenYbU0rFcbd6FSgVWUY jJvx4wV8eoc1Y2XNWBYPm2pdrIFy9V89gttW2qRzKORb7O0cESUIkMhvJGgu+zUR O0H0Bw+0iGlbiyre1qV44ZJzGomerFq9AHDS/gGrEX8xN6cE0p7Hdu8XvmZbBBTO tQLsNCz2iH+dB4XPRHFxZEaJRsPhPB6ozkkIOJ6qcnxnlYpZuHoncPwLXotG74BR 21JKq9EjRbcA1r5rMiyHhwGYNMw1Li+IGOiT0E3HPGba023XkkXikVLPEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0ifIRtQKjB6kLxochqhxB/UlzbMB8GA1UdIwQY MBaAFEgXFnLVP9+LJTd2T1N+NlpZJ72vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JjV2N0VV8zNHNsTjNaUFUzNDJXbGtudmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81NWUxMzgtNTZkYS00NDkyLWExZjIt ZGIwNGYyMTM5MGEwLzEvU0JjV2N0VV8zNHNsTjNaUFUzNDJXbGtudmE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS81NWUxMzgtNTZkYS00NDkyLWExZjItZGIwNGYyMTM5MGEw LzEvU0JjV2N0VV8zNHNsTjNaUFUzNDJXbGtudmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5hRWt9M wMXNEqy+xKawmDspzeW4MX6PWZSOgVpJRQ3F4jQgrow93LGnovzdFqjLyVNvVXz4 X2T+p8CP/cF2VaCbOHzqJbh6TJADx1FWtemW+d7kBJ6v3PCZexJUrwOkTcH+yRuO ptoUhuvX1rghaO+SQKf3J3iWAQkkhXfFMB3HKhr6y9DGPeAiGkQ1vwrLp6JO5mvJ 4I7JoqY0USxih6LIWn+Q31s6fTRHqpFKJz5RFaclcBHKBRx+R9AWhpootko9ezjz 8YSE0IgQ/2Ri1CxRWwxbq9AL149Nnl16UMIBZ/oTN+G2hAHeIzxI5dnBrFiBqG4Z +OJk4FW1ASTPZQ== -----END CERTIFICATE-----Generated at Sun Dec 7 06:58:28 2025 by rpki-client