This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft File: SBaZwQuP-LkauQlAMU7pOyev3NY.mft (raw, json) Hash identifier: tHm2pOQXKzF3z5bZziq/IP3UEIZYRf8L0EuFgeZW1KA= Subject key identifier: FF:C9:2E:78:8D:56:BD:62:A0:CE:E3:A9:C1:85:A5:75:2D:C6:A2:B2 Authority key identifier: 48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6 Certificate issuer: /CN=481699c10b8ff8b91ab90940314ee93b27afdcd6 Certificate serial: 019AF23FA81B57B0FDF82C12FCB6B49C0A17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft Manifest number: 0DA5 Signing time: Sat 06 Dec 2025 06:00:49 +0000 Manifest this update: Sat 06 Dec 2025 06:00:49 +0000 Manifest next update: Sun 07 Dec 2025 06:00:49 +0000 Files and hashes: 1: SBaZwQuP-LkauQlAMU7pOyev3NY.crl (hash: Ed9kO6R/H17OmUSrbplvvo1zWP+hB/9rxPWd2oM2jvc=) 2: gREff1tF-BFgfiQMOqwC-JywERY.roa (hash: s5MFDeOQrL+EZevqGRhg/WJb2VH0jOYXkHrjmynZzxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.crl rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a8:1b:57:b0:fd:f8:2c:12:fc:b6:b4:9c:0a:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=481699c10b8ff8b91ab90940314ee93b27afdcd6 Validity Not Before: Dec 6 06:00:49 2025 GMT Not After : Dec 7 06:00:49 2025 GMT Subject: CN=ffc92e788d56bd62a0cee3a9c185a5752dc6a2b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:77:af:1f:f0:df:d1:94:ac:24:15:60:2b:ed: d9:0d:cc:e8:10:6f:d4:b6:e3:c4:0b:0e:20:1d:53: bb:f4:b1:63:eb:d3:bb:c4:23:4b:4d:52:8b:f5:27: 5d:a3:c8:53:df:bc:ac:7a:8e:37:73:99:0a:d0:1d: c2:f9:cd:da:31:08:0a:61:13:1c:ca:99:db:b9:f6: 69:c9:c3:fe:2c:e4:d9:1c:9a:d3:c6:d2:be:73:85: 6a:8e:9a:84:93:1d:c3:58:ff:39:4b:58:1e:fa:cd: 68:b2:57:33:3e:75:1c:27:4f:c6:1e:1c:52:98:59: f7:26:b9:4d:f3:28:9b:e3:ea:f3:5d:f7:69:78:8b: b8:14:b6:d8:9a:6f:35:ea:02:29:dc:2e:d2:6e:79: 34:bd:84:85:d5:9e:04:52:6d:28:7d:a5:97:13:4e: 2a:c3:17:21:d0:1a:45:09:f0:a3:e8:10:de:14:0b: 65:d6:9b:92:3f:53:43:e1:aa:7a:4a:07:de:15:52: 69:f5:87:a2:2c:64:20:ae:5e:ae:29:6a:ba:8b:3a: 24:da:31:6e:db:14:ff:a8:33:ca:a8:6a:8b:5b:16: 05:ec:7c:89:e6:18:4a:e2:1a:0c:59:41:5a:12:45: 81:e0:89:55:27:b9:f5:91:10:dc:1e:ea:d6:15:7e: 24:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C9:2E:78:8D:56:BD:62:A0:CE:E3:A9:C1:85:A5:75:2D:C6:A2:B2 X509v3 Authority Key Identifier: keyid:48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:6f:5b:d5:b7:13:81:de:97:09:75:85:0d:13:1a:61:f5:5f: 74:1e:28:1c:3e:a5:d6:9b:4c:a6:6f:92:39:30:fd:23:d8:80: e1:86:3e:1b:2c:1c:cd:3c:5e:63:46:60:25:4c:f9:b7:7b:aa: 9e:d9:ce:66:5f:39:08:53:03:c7:a2:b3:be:8d:cc:a0:3f:55: a3:7d:bc:cc:65:38:b8:83:e2:1e:99:13:b6:e2:a6:e7:ba:52: 60:26:46:0b:04:72:e9:9f:42:40:f8:f2:43:d7:3d:3e:3f:65: f5:97:3e:d7:1a:74:28:87:e4:e8:55:40:f2:21:7d:c6:1d:70: cb:e3:11:4d:f3:19:b2:e3:ae:d1:f6:aa:2e:e9:c6:23:d9:68: e0:9e:9c:02:1d:1d:a5:60:91:7d:05:87:00:1c:98:1f:a5:c3: 8f:d6:7c:4b:52:8d:30:8a:76:54:a5:50:8f:4f:71:40:9b:fc: 08:3a:cd:cf:e8:1a:41:ec:f8:e1:0f:4b:0b:89:95:2b:d6:82: 86:4a:f2:14:7c:7e:23:d3:0c:e1:51:3e:d1:0d:cf:67:66:eb: eb:67:8d:40:cc:1f:2d:17:cb:29:ca:ac:de:54:b9:5d:ab:05: 1a:10:11:24:2f:4f:0e:1f:06:4b:96:42:f7:2b:1f:b0:1b:36: f6:75:14:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6gbV7D9+CwS/La0nAoXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MTY5OWMxMGI4ZmY4YjkxYWI5MDk0MDMxNGVlOTNiMjdh ZmRjZDYwHhcNMjUxMjA2MDYwMDQ5WhcNMjUxMjA3MDYwMDQ5WjAzMTEwLwYDVQQD EyhmZmM5MmU3ODhkNTZiZDYyYTBjZWUzYTljMTg1YTU3NTJkYzZhMmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3evH/Df0ZSsJBVgK+3ZDczoEG/U tuPECw4gHVO79LFj69O7xCNLTVKL9Sddo8hT37yseo43c5kK0B3C+c3aMQgKYRMc ypnbufZpycP+LOTZHJrTxtK+c4VqjpqEkx3DWP85S1ge+s1oslczPnUcJ0/GHhxS mFn3JrlN8yib4+rzXfdpeIu4FLbYmm816gIp3C7Sbnk0vYSF1Z4EUm0ofaWXE04q wxch0BpFCfCj6BDeFAtl1puSP1ND4ap6SgfeFVJp9YeiLGQgrl6uKWq6izok2jFu 2xT/qDPKqGqLWxYF7HyJ5hhK4hoMWUFaEkWB4IlVJ7n1kRDcHurWFX4kCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/JLniNVr1ioM7jqcGFpXUtxqKyMB8GA1UdIwQY MBaAFEgWmcELj/i5GrkJQDFO6Tsnr9zWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JhWndRdVAtTGthdVFsQU1VN3BPeWV2M05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xNzIxODAtOGY0NC00MTYxLWFiN2Ut MDIwMzA3YWNiYmI5LzEvU0JhWndRdVAtTGthdVFsQU1VN3BPeWV2M05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8xNzIxODAtOGY0NC00MTYxLWFiN2UtMDIwMzA3YWNiYmI5 LzEvU0JhWndRdVAtTGthdVFsQU1VN3BPeWV2M05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS29b1bcT gd6XCXWFDRMaYfVfdB4oHD6l1ptMpm+SOTD9I9iA4YY+GywczTxeY0ZgJUz5t3uq ntnOZl85CFMDx6Kzvo3MoD9Vo328zGU4uIPiHpkTtuKm57pSYCZGCwRy6Z9CQPjy Q9c9Pj9l9Zc+1xp0KIfk6FVA8iF9xh1wy+MRTfMZsuOu0faqLunGI9lo4J6cAh0d pWCRfQWHAByYH6XDj9Z8S1KNMIp2VKVQj09xQJv8CDrNz+gaQez44Q9LC4mVK9aC hkryFHx+I9MM4VE+0Q3PZ2br62eNQMwfLRfLKcqs3lS5XasFGhARJC9PDh8GS5ZC 9ysfsBs29nUU1A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:02 2025 by rpki-client