This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft File: SBVxyrg7M5yGCR7HR8ITX85PZYc.mft (raw, json) Hash identifier: IERorVlvzQ1McKlnJ+oRMpfhY78FlWdLn/HtzUIhQQg= Subject key identifier: 03:C3:D5:D8:BB:11:1C:00:71:BF:CC:E1:D1:84:BE:38:08:12:1D:A7 Authority key identifier: 48:15:71:CA:B8:3B:33:9C:86:09:1E:C7:47:C2:13:5F:CE:4F:65:87 Certificate issuer: /CN=481571cab83b339c86091ec747c2135fce4f6587 Certificate serial: 019AF1D20959F9E6BD84CB958C86918F158F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBVxyrg7M5yGCR7HR8ITX85PZYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft Manifest number: 1605 Signing time: Sat 06 Dec 2025 04:01:05 +0000 Manifest this update: Sat 06 Dec 2025 04:01:05 +0000 Manifest next update: Sun 07 Dec 2025 04:01:05 +0000 Files and hashes: 1: SBVxyrg7M5yGCR7HR8ITX85PZYc.crl (hash: 1VPbhdcvmU1pDssfqxjF9whQgM2kOM+DdTIIbrTup9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft rsync://rpki.ripe.net/repository/DEFAULT/SBVxyrg7M5yGCR7HR8ITX85PZYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:09:59:f9:e6:bd:84:cb:95:8c:86:91:8f:15:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=481571cab83b339c86091ec747c2135fce4f6587 Validity Not Before: Dec 6 04:01:05 2025 GMT Not After : Dec 7 04:01:05 2025 GMT Subject: CN=03c3d5d8bb111c0071bfcce1d184be3808121da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4b:e4:ff:a4:f6:06:cf:22:76:0a:67:87:bc: bd:0c:20:52:b1:d3:0a:39:a5:5e:1a:0f:7f:e4:ab: 64:c0:62:9e:56:5f:92:bc:41:94:3c:5c:9d:17:9b: 50:b6:72:f3:15:66:9a:48:a0:b1:f0:88:8b:76:74: 64:c8:75:81:09:6c:41:57:c2:c6:56:7f:60:78:29: 5c:94:19:c7:3a:4c:c8:cc:b6:20:07:d6:9e:81:09: a1:39:81:7a:92:81:8b:cf:f8:59:99:64:8f:f7:d9: 75:7a:f5:ae:7e:e1:1b:af:44:c4:1c:2e:a7:5d:59: 1c:5e:24:4d:ed:40:05:45:61:98:76:ae:92:17:99: 2c:8a:90:53:b7:77:42:37:d7:a2:d7:d6:a3:7c:f6: d5:bd:56:bb:e1:cb:40:6d:cd:38:fd:15:13:12:4e: af:76:cd:18:72:2c:73:4a:de:c1:6e:40:bc:6d:17: c0:38:41:78:39:7d:4d:67:15:95:18:79:4b:7d:d2: 5f:15:36:b4:6b:b4:94:ab:9c:9d:0a:b8:8a:31:34: 55:da:d4:cf:84:ed:1a:6c:4c:4c:63:6d:04:cc:84: 2f:e8:92:28:2a:6c:75:59:3d:0b:24:69:89:c1:dc: 9b:e8:df:fa:ba:30:fb:39:42:e0:c0:77:c2:47:89: 29:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C3:D5:D8:BB:11:1C:00:71:BF:CC:E1:D1:84:BE:38:08:12:1D:A7 X509v3 Authority Key Identifier: keyid:48:15:71:CA:B8:3B:33:9C:86:09:1E:C7:47:C2:13:5F:CE:4F:65:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBVxyrg7M5yGCR7HR8ITX85PZYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:1b:6f:ae:c5:e6:3d:c0:4d:2d:09:29:39:17:29:25:e7:41: 43:24:9e:d9:8c:c4:b4:40:16:d6:8e:9f:03:ef:1b:c0:db:f8: 40:3f:50:67:8b:86:c6:43:bc:c4:af:c6:f7:9b:b4:f9:d0:c3: 35:8c:25:64:64:0e:d6:41:c5:4c:71:cf:81:b2:1c:65:52:92: de:de:cf:2a:b6:60:21:61:2c:19:a5:d7:49:71:79:8a:2c:a7: 95:28:70:15:36:56:64:01:cd:1b:1f:f8:88:21:74:c2:8d:1a: 7f:e8:13:dd:f9:b2:d6:76:2f:f6:fa:89:6c:13:2e:10:7f:b6: 7d:38:08:fb:05:95:ff:9f:b2:f9:bb:cb:83:eb:60:e6:19:32: da:80:43:9a:6b:63:3c:f4:05:dc:c5:b1:82:84:67:d5:5e:46: bc:ba:e6:69:20:89:bf:9d:43:f8:52:9e:94:67:40:1e:6f:4b: e8:9b:86:85:3f:95:e0:57:a6:14:91:42:02:9f:4e:84:c7:55: 30:b5:59:73:01:e7:ba:f1:80:8b:5e:a5:72:ea:70:3b:2d:b6: c0:06:39:e8:4c:1f:ab:d0:f1:4e:1a:33:4e:94:e1:cb:8d:11: 29:d2:9b:b0:22:03:72:85:50:fb:a3:e0:b6:40:b9:c8:f1:ff: 73:3e:61:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0glZ+ea9hMuVjIaRjxWPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MTU3MWNhYjgzYjMzOWM4NjA5MWVjNzQ3YzIxMzVmY2U0 ZjY1ODcwHhcNMjUxMjA2MDQwMTA1WhcNMjUxMjA3MDQwMTA1WjAzMTEwLwYDVQQD EygwM2MzZDVkOGJiMTExYzAwNzFiZmNjZTFkMTg0YmUzODA4MTIxZGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0vk/6T2Bs8idgpnh7y9DCBSsdMK OaVeGg9/5KtkwGKeVl+SvEGUPFydF5tQtnLzFWaaSKCx8IiLdnRkyHWBCWxBV8LG Vn9geClclBnHOkzIzLYgB9aegQmhOYF6koGLz/hZmWSP99l1evWufuEbr0TEHC6n XVkcXiRN7UAFRWGYdq6SF5ksipBTt3dCN9ei19ajfPbVvVa74ctAbc04/RUTEk6v ds0YcixzSt7BbkC8bRfAOEF4OX1NZxWVGHlLfdJfFTa0a7SUq5ydCriKMTRV2tTP hO0abExMY20EzIQv6JIoKmx1WT0LJGmJwdyb6N/6ujD7OULgwHfCR4kp/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPD1di7ERwAcb/M4dGEvjgIEh2nMB8GA1UdIwQY MBaAFEgVccq4OzOchgkex0fCE1/OT2WHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JWeHlyZzdNNXlHQ1I3SFI4SVRYODVQWlljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lMWMyOWEtYTkzNi00OTBiLTk2MDct NmYzOWNjNjcyMmMyLzEvU0JWeHlyZzdNNXlHQ1I3SFI4SVRYODVQWlljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9lMWMyOWEtYTkzNi00OTBiLTk2MDctNmYzOWNjNjcyMmMy LzEvU0JWeHlyZzdNNXlHQ1I3SFI4SVRYODVQWlljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxtvrsXm PcBNLQkpORcpJedBQySe2YzEtEAW1o6fA+8bwNv4QD9QZ4uGxkO8xK/G95u0+dDD NYwlZGQO1kHFTHHPgbIcZVKS3t7PKrZgIWEsGaXXSXF5iiynlShwFTZWZAHNGx/4 iCF0wo0af+gT3fmy1nYv9vqJbBMuEH+2fTgI+wWV/5+y+bvLg+tg5hky2oBDmmtj PPQF3MWxgoRn1V5GvLrmaSCJv51D+FKelGdAHm9L6JuGhT+V4FemFJFCAp9OhMdV MLVZcwHnuvGAi16lcupwOy22wAY56Ewfq9DxThozTpThy40RKdKbsCIDcoVQ+6Pg tkC5yPH/cz5hQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:41 2025 by rpki-client