This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft File: sbNOAGdlsVTze200hFiBiVEfsgA.mft (raw, json) Hash identifier: +wWVFMWQa6mMsbBNgoIt+XoHV8G3NpIpqn2j6wU940g= Subject key identifier: 3B:60:9D:3E:34:0C:1B:0E:60:85:4E:99:34:EA:14:B9:4E:46:EE:6B Authority key identifier: B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00 Certificate issuer: /CN=b1b34e006765b154f37b6d3484588189511fb200 Certificate serial: 019B3231F79CFB0EA4D40BB10DD5985B3752 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft Manifest number: 0B42 Signing time: Thu 18 Dec 2025 16:01:33 +0000 Manifest this update: Thu 18 Dec 2025 16:01:33 +0000 Manifest next update: Fri 19 Dec 2025 16:01:33 +0000 Files and hashes: 1: aVq4cLrPwFzzhZqO1-advKfUZmA.roa (hash: /eEXPn/0u7ownwImimo5XirraLhO6aVXTWk+e0HToH4=) 2: sbNOAGdlsVTze200hFiBiVEfsgA.crl (hash: rqlZd8DjyGgjgou205EVKo2Fqv2cm0Ac7Li84GsPYEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:f7:9c:fb:0e:a4:d4:0b:b1:0d:d5:98:5b:37:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1b34e006765b154f37b6d3484588189511fb200 Validity Not Before: Dec 18 16:01:33 2025 GMT Not After : Dec 19 16:01:33 2025 GMT Subject: CN=3b609d3e340c1b0e60854e9934ea14b94e46ee6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0f:bc:10:69:10:18:45:0f:37:e3:42:6e:2b: ea:2a:ef:e7:99:70:0d:8d:5a:85:f8:7b:24:78:e7: 99:41:ae:10:7a:13:0f:9e:3e:de:08:75:66:81:84: 80:d3:bc:e7:cc:44:3d:cb:03:bc:57:aa:5d:a4:8b: c7:87:2d:c3:d2:e3:82:b3:f4:17:5c:05:da:8f:3a: 20:3f:0d:1f:e9:86:41:11:02:03:a6:b3:90:d4:1d: 5e:8c:49:3b:1a:b4:d8:5f:32:89:21:0f:8d:7a:c2: ce:61:33:53:8b:2f:19:f0:5b:5b:01:b7:f6:02:5d: fa:21:39:94:64:a7:1c:ac:bb:bf:d8:32:d8:d2:45: 1c:33:86:78:82:89:43:cf:88:c0:7b:9a:7b:69:36: 11:59:15:cc:07:86:b6:ec:d4:ba:4c:3f:08:f2:f2: fb:43:9b:ba:64:54:75:4d:3d:ce:36:da:c2:22:68: 3e:36:53:29:85:fe:8a:d7:14:c1:c9:ad:c3:0d:ed: 23:3a:9d:cb:1e:12:04:80:d8:ce:b5:2e:d4:24:02: e8:76:3f:68:de:1d:a5:d1:12:40:a9:c2:01:47:7a: 0a:9a:dd:41:04:f6:1a:05:ee:69:bc:88:bd:78:48: 14:20:40:c7:6b:77:f7:a4:07:cf:93:6a:51:4f:85: be:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:60:9D:3E:34:0C:1B:0E:60:85:4E:99:34:EA:14:B9:4E:46:EE:6B X509v3 Authority Key Identifier: keyid:B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:0c:a0:55:de:87:d8:16:d8:bf:9d:de:f9:1b:3f:0d:db:3a: 30:71:e5:2c:7e:51:8d:1b:5c:38:39:21:76:6e:0f:3b:6f:f2: 9c:70:5f:b7:b1:6f:9d:f7:c1:23:51:fb:26:2b:d4:3b:e8:9f: 1c:09:f7:70:59:6e:9c:c2:b3:65:6c:4a:c0:0f:5f:af:65:2b: 68:61:eb:52:bd:59:df:56:4d:d3:e1:49:a1:f0:e6:30:36:1d: 21:80:50:29:33:6e:51:38:ba:cd:bd:18:98:fb:c5:40:09:fa: 0b:74:8a:c3:97:5a:08:85:8c:24:86:8b:23:47:66:37:ef:40: 37:cb:45:5b:d9:4f:79:58:51:32:42:da:22:a6:cd:a5:7d:74: fa:8b:b6:a5:b2:cc:ec:83:7c:b7:2f:50:d9:f8:49:c0:f6:6a: bb:83:87:96:f5:19:2d:e2:d5:dd:73:0d:a4:2f:f1:f9:44:15: b8:03:09:9d:ae:3d:87:a3:8e:dc:ff:06:31:cc:2e:e7:40:16: 27:df:4d:b8:1f:87:6c:c0:49:e2:02:f0:08:75:3c:db:cd:cd: 99:80:46:9a:79:4b:e4:9d:63:fb:c9:77:61:6f:bc:c2:71:3e: 2a:ba:d7:2d:24:f6:ce:c2:0a:9e:30:af:f9:f8:aa:e3:0c:9e: 6b:e9:94:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMfec+w6k1AuxDdWYWzdSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYjM0ZTAwNjc2NWIxNTRmMzdiNmQzNDg0NTg4MTg5NTEx ZmIyMDAwHhcNMjUxMjE4MTYwMTMzWhcNMjUxMjE5MTYwMTMzWjAzMTEwLwYDVQQD EygzYjYwOWQzZTM0MGMxYjBlNjA4NTRlOTkzNGVhMTRiOTRlNDZlZTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw+8EGkQGEUPN+NCbivqKu/nmXAN jVqF+HskeOeZQa4QehMPnj7eCHVmgYSA07znzEQ9ywO8V6pdpIvHhy3D0uOCs/QX XAXajzogPw0f6YZBEQIDprOQ1B1ejEk7GrTYXzKJIQ+NesLOYTNTiy8Z8FtbAbf2 Al36ITmUZKccrLu/2DLY0kUcM4Z4golDz4jAe5p7aTYRWRXMB4a27NS6TD8I8vL7 Q5u6ZFR1TT3ONtrCImg+NlMphf6K1xTBya3DDe0jOp3LHhIEgNjOtS7UJALodj9o 3h2l0RJAqcIBR3oKmt1BBPYaBe5pvIi9eEgUIEDHa3f3pAfPk2pRT4W+MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtgnT40DBsOYIVOmTTqFLlORu5rMB8GA1UdIwQY MBaAFLGzTgBnZbFU83ttNIRYgYlRH7IAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2JOT0FHZGxzVlR6ZTIwMGhGaUJpVkVmc2dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy85OTljZjUtODEyZi00ZTBhLThlYTEt NjE4MjM4YjdiOTQyLzEvc2JOT0FHZGxzVlR6ZTIwMGhGaUJpVkVmc2dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy85OTljZjUtODEyZi00ZTBhLThlYTEtNjE4MjM4YjdiOTQy LzEvc2JOT0FHZGxzVlR6ZTIwMGhGaUJpVkVmc2dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkgygVd6H 2BbYv53e+Rs/Dds6MHHlLH5RjRtcODkhdm4PO2/ynHBft7FvnffBI1H7JivUO+if HAn3cFlunMKzZWxKwA9fr2UraGHrUr1Z31ZN0+FJofDmMDYdIYBQKTNuUTi6zb0Y mPvFQAn6C3SKw5daCIWMJIaLI0dmN+9AN8tFW9lPeVhRMkLaIqbNpX10+ou2pbLM 7IN8ty9Q2fhJwPZqu4OHlvUZLeLV3XMNpC/x+UQVuAMJna49h6OO3P8GMcwu50AW J99NuB+HbMBJ4gLwCHU8283NmYBGmnlL5J1j+8l3YW+8wnE+KrrXLST2zsIKnjCv +fiq4wyea+mUgw== -----END CERTIFICATE-----Generated at Thu Dec 18 21:53:20 2025 by rpki-client