This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft File: sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft (raw, json) Hash identifier: D++IBFua2xhkSR3YwYoa+aeqHir4hs/vsPVHlwpkJyM= Subject key identifier: BB:4C:65:78:83:02:8E:CA:25:22:57:E4:C3:6E:A5:8D:C5:24:B8:45 Authority key identifier: B1:B5:AB:26:2F:F2:81:55:67:43:31:8F:78:CE:AE:B4:9F:8B:D1:BE Certificate issuer: /CN=b1b5ab262ff281556743318f78ceaeb49f8bd1be Certificate serial: 019AF2091DE51C0E8E2FC8D156D2742EF4CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:01:14 +0000 Manifest this update: Sat 06 Dec 2025 05:01:14 +0000 Manifest next update: Sun 07 Dec 2025 05:01:14 +0000 Files and hashes: 1: Cl-s_kzYlAqMj9xfZRjzzsyjoOI.roa (hash: zKH1LTs9+Z8Dai2nZia/AYU5dJurOcYDxOkVkYs9o3M=) 2: sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl (hash: ImV0PskIai7fDNZyMp/zjlbwnSNa42/L1KxAF+fOyz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:1d:e5:1c:0e:8e:2f:c8:d1:56:d2:74:2e:f4:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1b5ab262ff281556743318f78ceaeb49f8bd1be Validity Not Before: Dec 6 05:01:14 2025 GMT Not After : Dec 7 05:01:14 2025 GMT Subject: CN=bb4c657883028eca252257e4c36ea58dc524b845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:91:fa:bc:17:53:d9:07:db:d0:d1:ab:57:ee: b3:b4:c9:20:94:8b:45:a3:1d:1a:ec:67:01:6b:02: e6:80:83:7c:d3:f7:fb:7b:a7:d6:08:d7:9a:75:eb: 70:e7:8a:ac:4b:89:e1:c3:2c:a5:03:e0:bc:7d:4c: 9c:3c:f6:4f:7b:bd:64:dd:a7:d7:59:49:3f:9b:db: 35:00:46:30:bb:05:22:e1:b8:e0:f6:d8:1f:48:b1: 37:fc:ad:3f:a2:4a:a9:29:19:10:a1:a1:a4:bb:cd: dd:ac:12:6d:56:dc:4e:68:18:c7:03:b3:60:98:a2: 07:0c:4a:75:15:3b:8a:fa:72:0b:b1:9b:ef:db:49: a1:32:da:48:2f:a1:2e:51:dc:28:01:39:d9:52:3d: 08:95:d1:b9:e5:3d:a3:af:57:60:13:bc:a1:49:86: 12:a6:a2:3e:93:21:5d:0a:c4:81:e3:3f:05:ac:7b: 23:f7:fe:00:79:56:f9:52:85:a2:30:dd:f6:07:be: 4c:d3:f8:53:30:25:06:ce:80:d6:2d:87:ac:1c:e0: eb:88:86:70:01:e9:22:f2:95:8d:cf:50:79:18:e1: 93:31:c3:1b:89:fb:f9:4b:c2:46:b4:8e:6a:60:b7: 54:96:81:0a:87:9b:f3:76:49:ae:ce:1e:48:5d:03: 60:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4C:65:78:83:02:8E:CA:25:22:57:E4:C3:6E:A5:8D:C5:24:B8:45 X509v3 Authority Key Identifier: keyid:B1:B5:AB:26:2F:F2:81:55:67:43:31:8F:78:CE:AE:B4:9F:8B:D1:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:47:00:ec:c7:37:1c:f8:bd:be:c2:52:60:87:c6:d7:7b:d9: 56:b5:1c:70:38:b3:32:0c:8b:ee:32:06:d4:8a:f6:23:58:eb: 9e:3a:ba:41:ea:6b:f9:33:00:ca:e2:81:74:11:bd:a9:4e:14: c4:a8:0c:4f:52:0a:3e:88:9a:11:ae:af:8e:56:7f:fd:8c:6f: 08:a8:0b:69:bd:ff:c7:04:be:54:ab:c0:7f:80:5f:9c:15:e9: 80:2f:ac:b9:3d:cb:2a:66:d1:35:00:11:c5:22:fc:67:9e:ea: 1a:e1:6c:19:4a:1a:7f:bf:52:93:c9:14:96:80:14:e4:44:40: 3d:f5:dc:50:0e:5a:e8:e1:6a:af:e1:24:82:98:31:31:2b:62: bc:63:4b:2f:ca:d0:5f:5e:9c:ea:2a:0b:6c:59:a1:1f:f0:60: 9c:3a:dc:99:d2:98:bd:d3:40:fc:ac:d2:57:5b:44:3c:1c:68: 2b:90:8f:b5:f9:c8:02:ba:fc:bb:e3:17:d8:75:f4:28:db:82: 83:0e:69:84:1e:73:e1:c2:f7:cc:3f:e2:64:3e:8b:b3:c2:6d: 10:28:25:b6:45:3e:7b:05:7b:05:18:9a:dc:98:dd:e6:24:cd: 4d:76:cd:48:ce:e1:81:54:de:18:d4:84:96:cd:43:41:46:21: 06:95:e6:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCR3lHA6OL8jRVtJ0LvTNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYjVhYjI2MmZmMjgxNTU2NzQzMzE4Zjc4Y2VhZWI0OWY4 YmQxYmUwHhcNMjUxMjA2MDUwMTE0WhcNMjUxMjA3MDUwMTE0WjAzMTEwLwYDVQQD EyhiYjRjNjU3ODgzMDI4ZWNhMjUyMjU3ZTRjMzZlYTU4ZGM1MjRiODQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZH6vBdT2Qfb0NGrV+6ztMkglItF ox0a7GcBawLmgIN80/f7e6fWCNeadetw54qsS4nhwyylA+C8fUycPPZPe71k3afX WUk/m9s1AEYwuwUi4bjg9tgfSLE3/K0/okqpKRkQoaGku83drBJtVtxOaBjHA7Ng mKIHDEp1FTuK+nILsZvv20mhMtpIL6EuUdwoATnZUj0IldG55T2jr1dgE7yhSYYS pqI+kyFdCsSB4z8FrHsj9/4AeVb5UoWiMN32B75M0/hTMCUGzoDWLYesHODriIZw Aeki8pWNz1B5GOGTMcMbifv5S8JGtI5qYLdUloEKh5vzdkmuzh5IXQNgQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtMZXiDAo7KJSJX5MNupY3FJLhFMB8GA1UdIwQY MBaAFLG1qyYv8oFVZ0Mxj3jOrrSfi9G+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2JXckppX3lnVlZuUXpHUGVNNnV0Si1MMGI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zZjRlNTgtZDU4ZC00N2RlLTkyZjct ZTg5ZmZmOTc3NjJjLzEvc2JXckppX3lnVlZuUXpHUGVNNnV0Si1MMGI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8zZjRlNTgtZDU4ZC00N2RlLTkyZjctZTg5ZmZmOTc3NjJj LzEvc2JXckppX3lnVlZuUXpHUGVNNnV0Si1MMGI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0cA7Mc3 HPi9vsJSYIfG13vZVrUccDizMgyL7jIG1Ir2I1jrnjq6Qepr+TMAyuKBdBG9qU4U xKgMT1IKPoiaEa6vjlZ//YxvCKgLab3/xwS+VKvAf4BfnBXpgC+suT3LKmbRNQAR xSL8Z57qGuFsGUoaf79Sk8kUloAU5ERAPfXcUA5a6OFqr+EkgpgxMStivGNLL8rQ X16c6ioLbFmhH/BgnDrcmdKYvdNA/KzSV1tEPBxoK5CPtfnIArr8u+MX2HX0KNuC gw5phB5z4cL3zD/iZD6Ls8JtECgltkU+ewV7BRia3Jjd5iTNTXbNSM7hgVTeGNSE ls1DQUYhBpXmYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:36 2025 by rpki-client