This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft File: Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft (raw, json) Hash identifier: /AczdFmIkwKgAgX0l7QXm0ei4Y4G7HLD+4gorYO55PM= Subject key identifier: 0A:B7:95:CE:92:45:8A:BE:DE:32:5F:BA:C3:3F:EA:55:8C:FB:25:B7 Authority key identifier: 49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B Certificate issuer: /CN=49bf32abf77f412c210f409822d1398ec3beda9b Certificate serial: 019AF2AD7E4D3D0E6735569EA9A243B66562 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 08:00:47 +0000 Manifest this update: Sat 06 Dec 2025 08:00:47 +0000 Manifest next update: Sun 07 Dec 2025 08:00:47 +0000 Files and hashes: 1: 5syV7PgPBQbiBbuoFj10-aiKKG0.roa (hash: lK1gem+kZrAq5cKIs+CpHdM5BUtwnIwQ62pWDxE9JKs=) 2: Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl (hash: kj6DgWWKnNMSpAPTJW6fTyIn7vRWzgyeYncV8PZPIGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:7e:4d:3d:0e:67:35:56:9e:a9:a2:43:b6:65:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bf32abf77f412c210f409822d1398ec3beda9b Validity Not Before: Dec 6 08:00:47 2025 GMT Not After : Dec 7 08:00:47 2025 GMT Subject: CN=0ab795ce92458abede325fbac33fea558cfb25b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5a:21:8e:4b:e5:d5:2f:c4:67:d9:9a:03:ce: da:66:90:d6:14:0a:b9:5f:26:5c:33:8e:6b:3e:5a: 94:3c:fb:51:41:3b:5d:a3:5e:95:b4:5c:16:2c:e8: ae:71:06:e8:98:7d:75:0d:d0:46:99:bb:7b:da:32: 6a:10:45:9f:d5:28:cb:5c:8e:4a:bd:d8:3b:ad:22: cc:0f:d4:34:e2:59:78:a3:fb:95:1b:34:cc:33:d3: db:ce:f9:c7:67:45:f2:32:c2:e9:51:11:fb:ce:31: 54:dd:97:b9:70:15:0f:7a:7d:76:f7:27:d5:e0:49: 52:5a:ec:8c:0e:69:68:6d:71:ca:64:0d:8e:ed:9e: 76:7d:07:51:12:9c:0a:d9:f5:c0:da:7d:3b:89:75: 8a:53:d9:72:1a:4c:a1:3c:e5:37:5d:d3:ab:b5:f9: b3:78:72:5f:9a:ac:ff:f5:72:81:8b:4f:a8:e8:aa: a8:75:5a:43:43:76:54:56:eb:f6:ad:20:41:e8:1d: 17:4e:9d:14:21:6e:e4:ab:9e:e1:12:a1:41:32:c0: da:a7:b1:8b:46:50:46:28:6b:ac:df:cb:8b:5d:1f: d7:fa:04:38:82:ca:c9:1f:a2:1d:df:e6:8a:fe:72: 76:37:b5:82:20:af:c1:34:9f:30:d8:7d:3d:6f:b1: 34:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B7:95:CE:92:45:8A:BE:DE:32:5F:BA:C3:3F:EA:55:8C:FB:25:B7 X509v3 Authority Key Identifier: keyid:49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:aa:53:42:94:03:5e:f9:86:04:39:ea:cb:64:ec:ce:7f:f8: 64:55:07:33:ba:87:30:6b:5c:ba:38:c7:44:41:ca:47:c6:fd: 68:d8:f5:c5:1d:df:af:66:62:79:3d:6a:e2:df:a4:aa:85:e9: 26:b6:c9:01:6a:d4:4f:b1:f3:ff:c7:5d:9e:9c:64:cb:e6:12: ca:7c:27:6e:a9:80:c4:5f:f0:97:28:70:70:46:6b:38:6e:7d: a0:55:a7:51:cd:eb:af:15:f8:4c:66:c4:d9:dc:44:0c:da:c2: b1:7f:b8:16:a2:51:e7:dc:e9:e0:70:0c:76:96:01:94:f1:cc: 3b:43:cb:a2:1d:1d:ca:e4:8f:94:52:0e:f4:d1:eb:08:84:29: f0:54:c2:b3:82:63:7f:ce:a3:55:8c:25:39:b8:ba:c0:cc:e4: 0f:8d:dd:2c:cd:de:93:b7:b3:87:4a:c5:ad:80:24:d7:19:33: d5:3e:1c:e3:17:e9:ef:92:33:1a:7a:f3:ec:c5:a6:95:fb:33: c7:ac:cc:cb:b0:e2:6f:9c:26:2e:dd:8e:d3:d8:de:d1:37:9b: 76:1e:c6:86:83:fe:2b:dd:be:76:bb:80:c0:37:50:27:b0:0a: 8a:6a:10:a4:9d:b5:19:59:60:ab:d3:db:34:0d:e4:5b:6d:8d: d1:a0:2e:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrX5NPQ5nNVaeqaJDtmViMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YmYzMmFiZjc3ZjQxMmMyMTBmNDA5ODIyZDEzOThlYzNi ZWRhOWIwHhcNMjUxMjA2MDgwMDQ3WhcNMjUxMjA3MDgwMDQ3WjAzMTEwLwYDVQQD EygwYWI3OTVjZTkyNDU4YWJlZGUzMjVmYmFjMzNmZWE1NThjZmIyNWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1ohjkvl1S/EZ9maA87aZpDWFAq5 XyZcM45rPlqUPPtRQTtdo16VtFwWLOiucQbomH11DdBGmbt72jJqEEWf1SjLXI5K vdg7rSLMD9Q04ll4o/uVGzTMM9PbzvnHZ0XyMsLpURH7zjFU3Ze5cBUPen129yfV 4ElSWuyMDmlobXHKZA2O7Z52fQdREpwK2fXA2n07iXWKU9lyGkyhPOU3XdOrtfmz eHJfmqz/9XKBi0+o6KqodVpDQ3ZUVuv2rSBB6B0XTp0UIW7kq57hEqFBMsDap7GL RlBGKGus38uLXR/X+gQ4gsrJH6Id3+aK/nJ2N7WCIK/BNJ8w2H09b7E0iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAq3lc6SRYq+3jJfusM/6lWM+yW3MB8GA1UdIwQY MBaAFEm/Mqv3f0EsIQ9AmCLROY7DvtqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2I4eXFfZF9RU3doRDBDWUl0RTVqc08tMnBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi83M2NkZDAtMDY0OS00ZmU5LTk5NzEt MGJlNjMzN2JmNmI2LzEvU2I4eXFfZF9RU3doRDBDWUl0RTVqc08tMnBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi83M2NkZDAtMDY0OS00ZmU5LTk5NzEtMGJlNjMzN2JmNmI2 LzEvU2I4eXFfZF9RU3doRDBDWUl0RTVqc08tMnBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGapTQpQD XvmGBDnqy2Tszn/4ZFUHM7qHMGtcujjHREHKR8b9aNj1xR3fr2ZieT1q4t+kqoXp JrbJAWrUT7Hz/8ddnpxky+YSynwnbqmAxF/wlyhwcEZrOG59oFWnUc3rrxX4TGbE 2dxEDNrCsX+4FqJR59zp4HAMdpYBlPHMO0PLoh0dyuSPlFIO9NHrCIQp8FTCs4Jj f86jVYwlObi6wMzkD43dLM3ek7ezh0rFrYAk1xkz1T4c4xfp75IzGnrz7MWmlfsz x6zMy7Dib5wmLt2O09je0Tebdh7GhoP+K92+druAwDdQJ7AKimoQpJ21GVlgq9Pb NA3kW22N0aAu6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 18:14:52 2025 by rpki-client