This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft File: sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft (raw, json) Hash identifier: iOnPUMoQXzSQodT8FNpKsJF0NceCSXldNhtTsGcabOA= Subject key identifier: 0E:3A:B1:3F:B7:18:03:DD:4C:4B:F0:19:65:42:89:5B:6D:A8:C8:99 Authority key identifier: B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E Certificate issuer: /CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e Certificate serial: 019AF2E44740B69078EA546C9086619B9D61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 09:00:37 +0000 Manifest this update: Sat 06 Dec 2025 09:00:37 +0000 Manifest next update: Sun 07 Dec 2025 09:00:37 +0000 Files and hashes: 1: NubO0sPxr_cuDCWGfPaZps4XHmU.roa (hash: IosGPlSdz8qVsL7WE6s1aTvXI6+f2Lb8gYJwebh24vo=) 2: XNv5R4Pm86vxr_d7wZIi0Xi614M.roa (hash: gIqD/66IF2g/0ovWyFttP7JqaZx+pP8FQh+Ln/imEBY=) 3: ay-9TuQv4NBBhfLPirWdhwTU6aU.roa (hash: /TV01OKxsZryh7q9+Tt7pDnXawnXcjSi58aGMMVoj6c=) 4: sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl (hash: hbgcB11pCqwep9gxyTmi7daPlKppeNedWIiRAaDwEsk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:47:40:b6:90:78:ea:54:6c:90:86:61:9b:9d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e Validity Not Before: Dec 6 09:00:37 2025 GMT Not After : Dec 7 09:00:37 2025 GMT Subject: CN=0e3ab13fb71803dd4c4bf0196542895b6da8c899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2a:49:09:44:11:ca:b0:24:a3:43:e2:41:db: 15:42:4b:c6:7a:4c:9a:ee:94:29:dd:9d:90:49:cb: 50:de:f8:59:bc:5b:e0:5f:cd:ab:aa:4f:ed:b6:f2: 16:59:b8:02:66:8b:c7:be:7e:da:e1:7d:4e:f5:2e: 4a:d7:d4:46:ec:67:35:80:90:3f:d8:04:44:bf:76: d4:6b:a2:9b:dd:cf:26:53:c5:ce:e7:cb:a5:ca:5b: df:1d:9e:83:7a:ee:bd:54:75:aa:f3:4a:a6:2f:f5: a5:6f:79:89:8d:bd:6c:91:73:f5:75:a8:fe:11:14: 0e:b3:84:f9:19:1a:da:6e:4d:07:e8:83:7e:6c:84: 44:e1:fc:5c:17:91:6e:31:1a:7f:c3:16:03:a3:ee: cf:dc:09:be:22:9b:a3:87:ba:61:ae:ab:8a:6c:70: f0:05:2f:2d:cd:e7:7d:b1:53:06:34:8f:24:8a:cc: db:ad:d7:02:74:f9:6d:de:43:3c:d5:b6:7c:bf:b5: 7b:ba:61:31:e3:2b:28:57:5f:5e:0a:76:bb:65:03: 85:31:3a:98:ec:da:38:76:ef:de:0a:b9:a3:27:06: 71:0c:99:60:8a:99:7c:e1:65:fa:0f:00:c1:fe:29: 4c:59:05:4c:1d:a0:50:52:43:8a:c9:74:64:6b:4d: 79:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3A:B1:3F:B7:18:03:DD:4C:4B:F0:19:65:42:89:5B:6D:A8:C8:99 X509v3 Authority Key Identifier: keyid:B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:23:64:99:92:bc:bc:37:02:60:c2:d8:4b:b0:c8:18:d4:8d: 57:99:79:8c:f6:c6:92:c1:84:69:17:13:b7:9c:54:d0:e9:6b: 9a:e6:fa:7e:88:39:d8:8a:99:cf:6c:e0:e0:6c:76:bd:50:d8: ca:ae:2d:1a:ae:55:a6:ea:d3:58:d8:be:bc:ae:39:32:39:b1: 1d:10:87:a9:88:c0:0b:71:9e:4a:56:22:f0:48:65:6e:c7:65: 41:ab:5d:e6:99:6f:b3:e5:82:06:21:52:21:fe:31:64:d0:00: ba:fb:5b:91:37:d4:6c:d3:6d:10:17:48:3d:5b:98:16:9b:dd: 43:12:4a:b6:58:2d:c6:dd:3f:38:f1:50:2d:dd:98:f0:e0:f1: 93:bd:51:25:98:dc:e4:fc:98:5a:db:57:47:00:10:18:1b:98: 4e:22:65:d0:93:e0:de:29:db:5b:1f:56:b1:64:2a:97:08:8c: d4:01:62:50:7f:94:ac:ed:2e:8d:81:25:4f:ba:50:72:be:45: 1c:e1:df:43:e5:ed:96:73:bb:9e:1f:b3:22:f4:d9:f0:dc:9e: cd:d5:7a:cd:20:21:eb:98:b4:77:91:f4:49:1e:ae:70:6e:3b: e7:05:81:92:05:e2:ac:cc:72:d2:e1:5e:8d:04:be:6b:af:f9: 5a:0a:85:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5EdAtpB46lRskIZhm51hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYmM4NTBkMTdjYTZkM2M3YjRkMDBlNTAxZTJkMzU2ZjA4 YTU4NWUwHhcNMjUxMjA2MDkwMDM3WhcNMjUxMjA3MDkwMDM3WjAzMTEwLwYDVQQD EygwZTNhYjEzZmI3MTgwM2RkNGM0YmYwMTk2NTQyODk1YjZkYThjODk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSpJCUQRyrAko0PiQdsVQkvGekya 7pQp3Z2QSctQ3vhZvFvgX82rqk/ttvIWWbgCZovHvn7a4X1O9S5K19RG7Gc1gJA/ 2AREv3bUa6Kb3c8mU8XO58ulylvfHZ6Deu69VHWq80qmL/Wlb3mJjb1skXP1daj+ ERQOs4T5GRrabk0H6IN+bIRE4fxcF5FuMRp/wxYDo+7P3Am+Ipujh7phrquKbHDw BS8tzed9sVMGNI8kiszbrdcCdPlt3kM81bZ8v7V7umEx4ysoV19eCna7ZQOFMTqY 7No4du/eCrmjJwZxDJlgipl84WX6DwDB/ilMWQVMHaBQUkOKyXRka015vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA46sT+3GAPdTEvwGWVCiVttqMiZMB8GA1UdIwQY MBaAFLG8hQ0Xym08e00A5QHi01bwilheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2J5RkRSZktiVHg3VFFEbEFlTFRWdkNLV0Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84YWEwMmQtOTRjOC00Njc4LTkyYWMt MTdmYjRmZmI5ZmFkLzEvc2J5RkRSZktiVHg3VFFEbEFlTFRWdkNLV0Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC84YWEwMmQtOTRjOC00Njc4LTkyYWMtMTdmYjRmZmI5ZmFk LzEvc2J5RkRSZktiVHg3VFFEbEFlTFRWdkNLV0Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICNkmZK8 vDcCYMLYS7DIGNSNV5l5jPbGksGEaRcTt5xU0Olrmub6fog52IqZz2zg4Gx2vVDY yq4tGq5VpurTWNi+vK45MjmxHRCHqYjAC3GeSlYi8EhlbsdlQatd5plvs+WCBiFS If4xZNAAuvtbkTfUbNNtEBdIPVuYFpvdQxJKtlgtxt0/OPFQLd2Y8ODxk71RJZjc 5PyYWttXRwAQGBuYTiJl0JPg3inbWx9WsWQqlwiM1AFiUH+UrO0ujYElT7pQcr5F HOHfQ+XtlnO7nh+zIvTZ8NyezdV6zSAh65i0d5H0SR6ucG475wWBkgXirMxy0uFe jQS+a6/5WgqF5w== -----END CERTIFICATE-----Generated at Sat Dec 6 13:43:36 2025 by rpki-client