This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft File: sbNOAGdlsVTze200hFiBiVEfsgA.mft (raw, json) Hash identifier: eGCs82b3tyIRI8ue2KPOGJZxctIsa8qGwGbjiyDcLFU= Subject key identifier: 66:07:21:6D:8A:5F:18:04:25:E4:89:58:04:76:FB:2F:7E:44:90:94 Authority key identifier: B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00 Certificate issuer: /CN=b1b34e006765b154f37b6d3484588189511fb200 Certificate serial: 019AF088267B6CEAF5D4E2F7BD1BB255E21F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft Manifest number: 0B20 Signing time: Fri 05 Dec 2025 22:00:45 +0000 Manifest this update: Fri 05 Dec 2025 22:00:45 +0000 Manifest next update: Sat 06 Dec 2025 22:00:45 +0000 Files and hashes: 1: aVq4cLrPwFzzhZqO1-advKfUZmA.roa (hash: /eEXPn/0u7ownwImimo5XirraLhO6aVXTWk+e0HToH4=) 2: sbNOAGdlsVTze200hFiBiVEfsgA.crl (hash: K4xN9/IMDAbe96aucVhXHM7whx4YArRnFWycSblNX7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:26:7b:6c:ea:f5:d4:e2:f7:bd:1b:b2:55:e2:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1b34e006765b154f37b6d3484588189511fb200 Validity Not Before: Dec 5 22:00:45 2025 GMT Not After : Dec 6 22:00:45 2025 GMT Subject: CN=6607216d8a5f180425e489580476fb2f7e449094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:eb:06:af:f2:2b:c3:e3:3d:d2:fd:df:0c:10: fb:8f:8b:c5:2f:a6:b2:92:43:d4:96:9c:fb:75:74: f2:82:89:59:a2:27:5c:db:4a:5f:90:e7:5a:8f:ad: 8f:a9:d0:fe:8c:41:0d:d8:5f:4d:8a:59:eb:a2:a8: 02:02:d5:75:3a:bb:0e:bd:53:5c:3f:b9:60:29:9e: 77:45:14:15:67:1f:c9:f1:96:57:fa:24:55:dc:6f: e6:9d:3e:67:cb:54:43:42:a6:25:1a:28:65:d3:50: df:5e:bf:2a:cc:1b:da:04:b7:aa:27:73:65:8e:ed: e0:7d:15:9a:f0:f3:a8:1b:8a:29:ea:ad:e6:96:c8: 46:77:b6:42:47:76:db:bf:2a:e0:41:22:2c:15:67: 8a:2d:19:f9:db:03:08:22:11:eb:e7:d5:9a:74:5c: 0f:cb:d7:2d:91:a9:e3:1b:78:f7:d1:cc:71:62:8b: fb:a3:cd:c0:0f:bb:ae:b4:07:30:13:21:25:90:16: 19:32:65:b1:84:b5:01:c6:0a:19:9e:ac:4e:b8:1a: 57:83:f6:59:98:a4:ff:4a:d1:fc:88:9a:91:36:34: 5e:3b:02:06:a6:1f:f7:62:1a:6b:09:a2:4c:f6:b0: 7b:6f:73:b4:8d:4c:25:bc:f7:e4:95:13:5c:b0:11: 8c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:07:21:6D:8A:5F:18:04:25:E4:89:58:04:76:FB:2F:7E:44:90:94 X509v3 Authority Key Identifier: keyid:B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e4:e7:46:e1:32:e1:88:b4:56:82:73:36:2a:66:8a:a1:c1: a3:e0:03:2d:17:33:94:8f:1a:de:87:70:ce:00:aa:62:59:f9: f2:3c:1c:69:f5:9c:b8:0b:98:79:1e:0e:c6:11:86:97:6e:b9: 18:da:4c:52:39:c3:33:27:e0:76:1b:1a:4c:60:a7:41:d4:d3: 23:90:16:6a:22:35:09:4b:2c:19:ea:dc:14:5a:03:59:4f:f6: c8:7d:04:62:7b:10:f2:4c:cd:21:e2:dc:f4:49:ac:59:67:77: fb:67:e1:b2:00:93:a2:77:dc:a8:fb:13:f8:85:c1:86:ce:7e: c3:8c:75:f4:8a:ad:7e:35:ad:57:00:dc:f3:6c:d3:de:23:6c: 87:16:dd:ee:b9:87:a5:d4:30:ef:c6:05:35:0a:ce:07:14:23: 21:e7:e4:59:c5:06:2d:41:1f:09:fe:5a:5a:44:c1:3c:53:ce: 98:dd:89:f0:a5:ec:50:a4:dc:1e:de:1a:e5:dc:af:a4:42:a8: 61:5a:06:45:f1:38:11:9c:2c:62:1b:c8:04:2e:04:16:89:6a: 73:ad:92:9e:ba:68:4d:72:99:a5:12:6f:50:be:19:d6:57:a7: 38:5e:cb:97:97:92:e9:a0:9c:a6:00:2c:02:0f:a7:28:49:cc: 52:2d:41:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiCZ7bOr11OL3vRuyVeIfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYjM0ZTAwNjc2NWIxNTRmMzdiNmQzNDg0NTg4MTg5NTEx ZmIyMDAwHhcNMjUxMjA1MjIwMDQ1WhcNMjUxMjA2MjIwMDQ1WjAzMTEwLwYDVQQD Eyg2NjA3MjE2ZDhhNWYxODA0MjVlNDg5NTgwNDc2ZmIyZjdlNDQ5MDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2esGr/Irw+M90v3fDBD7j4vFL6ay kkPUlpz7dXTygolZoidc20pfkOdaj62PqdD+jEEN2F9NilnroqgCAtV1OrsOvVNc P7lgKZ53RRQVZx/J8ZZX+iRV3G/mnT5ny1RDQqYlGihl01DfXr8qzBvaBLeqJ3Nl ju3gfRWa8POoG4op6q3mlshGd7ZCR3bbvyrgQSIsFWeKLRn52wMIIhHr59WadFwP y9ctkanjG3j30cxxYov7o83AD7uutAcwEyElkBYZMmWxhLUBxgoZnqxOuBpXg/ZZ mKT/StH8iJqRNjReOwIGph/3YhprCaJM9rB7b3O0jUwlvPfklRNcsBGMjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYHIW2KXxgEJeSJWAR2+y9+RJCUMB8GA1UdIwQY MBaAFLGzTgBnZbFU83ttNIRYgYlRH7IAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2JOT0FHZGxzVlR6ZTIwMGhGaUJpVkVmc2dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy85OTljZjUtODEyZi00ZTBhLThlYTEt NjE4MjM4YjdiOTQyLzEvc2JOT0FHZGxzVlR6ZTIwMGhGaUJpVkVmc2dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy85OTljZjUtODEyZi00ZTBhLThlYTEtNjE4MjM4YjdiOTQy LzEvc2JOT0FHZGxzVlR6ZTIwMGhGaUJpVkVmc2dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+TnRuEy 4Yi0VoJzNipmiqHBo+ADLRczlI8a3odwzgCqYln58jwcafWcuAuYeR4OxhGGl265 GNpMUjnDMyfgdhsaTGCnQdTTI5AWaiI1CUssGercFFoDWU/2yH0EYnsQ8kzNIeLc 9EmsWWd3+2fhsgCTonfcqPsT+IXBhs5+w4x19IqtfjWtVwDc82zT3iNshxbd7rmH pdQw78YFNQrOBxQjIefkWcUGLUEfCf5aWkTBPFPOmN2J8KXsUKTcHt4a5dyvpEKo YVoGRfE4EZwsYhvIBC4EFolqc62SnrpoTXKZpRJvUL4Z1lenOF7Ll5eS6aCcpgAs Ag+nKEnMUi1Baw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:41 2025 by rpki-client