This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft File: SbJERkTEM0jXxQ9OUOdDVumJbb8.mft (raw, json) Hash identifier: pcMtsMnHWYA4WEBNjvWkX3nod228H8OYhf4e4hklEq8= Subject key identifier: 19:3C:8C:2A:27:C1:E4:0C:63:BC:4C:E5:76:28:7F:CB:F2:66:FC:CC Authority key identifier: 49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF Certificate issuer: /CN=49b2444644c43348d7c50f4e50e74356e9896dbf Certificate serial: 019AF42E6121D7584BA38495CF105A0D0924 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft Manifest number: 14B9 Signing time: Sat 06 Dec 2025 15:01:11 +0000 Manifest this update: Sat 06 Dec 2025 15:01:11 +0000 Manifest next update: Sun 07 Dec 2025 15:01:11 +0000 Files and hashes: 1: 1wuoe06EqKtSedO7NGLRmPTmhGc.roa (hash: /sDFB0I8q5IJW+UJc1pW+YTD5nABqiUh65XbbCjiXPo=) 2: MErMEgT0Mlg4NzXbifAxY_vYJ18.roa (hash: kZo3foZgB/DZe3VgEb3C47cfvC/YSEn388ZX35kgFPI=) 3: RUJrM9R2Q01CiiseZx6BuCkPhi8.roa (hash: ud9fyI+JnGNFQZazgaWgNO5UTDdn2ppqyRqse6KTBD4=) 4: SbJERkTEM0jXxQ9OUOdDVumJbb8.crl (hash: bGyHVlL/dQytehM9zMBg1Z/JVajstAYnKDxRiExbra8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:61:21:d7:58:4b:a3:84:95:cf:10:5a:0d:09:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49b2444644c43348d7c50f4e50e74356e9896dbf Validity Not Before: Dec 6 15:01:11 2025 GMT Not After : Dec 7 15:01:11 2025 GMT Subject: CN=193c8c2a27c1e40c63bc4ce576287fcbf266fccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:10:6f:42:55:98:4b:4e:dc:fe:b1:d2:5e:06: c3:90:69:d9:11:0d:c5:99:7f:18:74:92:1f:7f:e6: d2:a5:e4:b3:93:3a:b7:0a:20:70:4f:04:5f:36:1f: db:1a:17:d3:66:f3:d0:9d:1b:1d:a7:b0:3b:a3:31: 14:19:0f:bb:28:35:56:b8:be:11:21:b7:ef:a8:25: 5e:24:c1:dc:ca:9c:d0:02:22:ca:2e:e8:c2:8f:90: 6b:d5:6f:f5:e4:86:c2:b5:c8:72:db:ba:a0:ad:6a: a0:78:85:54:82:fc:5c:54:64:ff:dd:3a:77:a9:14: 67:ed:13:8b:7e:f7:d5:c0:c9:ee:56:de:19:06:69: d2:a6:c5:1e:37:17:bb:f3:41:7d:8c:53:04:18:0f: 4d:75:2d:6e:2c:ae:73:33:ba:ff:aa:b1:67:97:ad: 26:c7:c1:fc:2d:5d:be:00:c8:93:1f:34:5e:24:73: 88:8c:3f:71:49:9a:68:5c:1c:10:06:31:e9:11:c1: 61:00:a6:21:3d:8d:e7:17:ea:c4:6c:03:7c:2a:d4: 7a:9e:7f:a2:52:fc:e1:83:bc:c3:0f:2a:0e:6c:40: 67:c6:7e:ec:66:4c:14:96:d6:37:35:b7:8c:3a:e9: ff:2e:d7:a3:d1:e8:ed:52:b2:a8:4d:ab:90:26:34: 7d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3C:8C:2A:27:C1:E4:0C:63:BC:4C:E5:76:28:7F:CB:F2:66:FC:CC X509v3 Authority Key Identifier: keyid:49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:56:75:4b:d6:79:d3:4e:bc:fc:f5:3b:a1:2b:35:06:1c:ff: c9:19:16:5a:74:e9:1a:95:f5:3c:3b:ab:72:fd:6f:9a:f0:86: 79:1f:cb:4d:13:86:fa:64:ef:af:b3:c4:78:85:1f:5e:e4:b9: 01:17:00:32:f7:28:03:67:2d:b1:e9:21:f1:bc:f0:33:58:a8: b6:ef:56:e2:83:57:c3:29:ae:65:b6:d4:ca:6d:1f:04:cd:29: ac:fb:88:28:b1:4c:5c:e5:67:88:9e:eb:16:cb:64:87:5f:b9: 27:ee:ec:19:19:80:16:34:c4:d4:90:dd:5e:1a:a6:20:22:8b: 9d:4e:c8:01:e1:52:b3:5f:80:ad:53:05:88:07:a3:07:3d:4b: 9b:a5:81:72:5c:ca:9a:96:1d:9f:51:47:8c:90:d5:33:fd:93: 9e:72:f1:38:86:86:80:99:6b:11:22:aa:0e:fe:4f:ab:35:7d: 18:a8:8b:29:50:c4:d7:2a:86:af:dd:20:01:62:79:c9:a5:fa: ae:b3:8b:87:f0:0b:07:c6:26:30:89:a1:90:f5:44:44:4d:b1: 3e:98:3a:34:66:84:36:e6:dc:6c:e2:e4:17:2b:f0:b2:79:ee: 4b:db:13:5f:2d:1c:95:f6:6d:90:ee:03:f0:1b:5c:9c:04:e5: 42:76:fd:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LmEh11hLo4SVzxBaDQkkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YjI0NDQ2NDRjNDMzNDhkN2M1MGY0ZTUwZTc0MzU2ZTk4 OTZkYmYwHhcNMjUxMjA2MTUwMTExWhcNMjUxMjA3MTUwMTExWjAzMTEwLwYDVQQD EygxOTNjOGMyYTI3YzFlNDBjNjNiYzRjZTU3NjI4N2ZjYmYyNjZmY2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhBvQlWYS07c/rHSXgbDkGnZEQ3F mX8YdJIff+bSpeSzkzq3CiBwTwRfNh/bGhfTZvPQnRsdp7A7ozEUGQ+7KDVWuL4R IbfvqCVeJMHcypzQAiLKLujCj5Br1W/15IbCtchy27qgrWqgeIVUgvxcVGT/3Tp3 qRRn7ROLfvfVwMnuVt4ZBmnSpsUeNxe780F9jFMEGA9NdS1uLK5zM7r/qrFnl60m x8H8LV2+AMiTHzReJHOIjD9xSZpoXBwQBjHpEcFhAKYhPY3nF+rEbAN8KtR6nn+i Uvzhg7zDDyoObEBnxn7sZkwUltY3NbeMOun/Ltej0ejtUrKoTauQJjR9AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBk8jConweQMY7xM5XYof8vyZvzMMB8GA1UdIwQY MBaAFEmyREZExDNI18UPTlDnQ1bpiW2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi82NGNkYmQtYzg1MS00YjM1LWJiNzkt NzUzZDk2OWEwNzAyLzEvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi82NGNkYmQtYzg1MS00YjM1LWJiNzktNzUzZDk2OWEwNzAy LzEvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVZ1S9Z5 0068/PU7oSs1Bhz/yRkWWnTpGpX1PDurcv1vmvCGeR/LTROG+mTvr7PEeIUfXuS5 ARcAMvcoA2ctsekh8bzwM1iotu9W4oNXwymuZbbUym0fBM0prPuIKLFMXOVniJ7r Fstkh1+5J+7sGRmAFjTE1JDdXhqmICKLnU7IAeFSs1+ArVMFiAejBz1Lm6WBclzK mpYdn1FHjJDVM/2TnnLxOIaGgJlrESKqDv5PqzV9GKiLKVDE1yqGr90gAWJ5yaX6 rrOLh/ALB8YmMImhkPVERE2xPpg6NGaENubcbOLkFyvwsnnuS9sTXy0clfZtkO4D 8BtcnATlQnb9Bg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:39 2025 by rpki-client