This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft File: SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft (raw, json) Hash identifier: jZMvukpcnnt47K9xEhef6/591j6wAupNL/idTQHxBqw= Subject key identifier: 09:80:89:11:48:73:CB:FC:71:B8:7D:F5:FF:A3:50:AD:6C:07:CE:0E Authority key identifier: 48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D Certificate issuer: /CN=4813b9c5fe8315807d7856cd230003aa16741c0d Certificate serial: 019AF3897C1F819249FBD9069B0499A642C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft Manifest number: 0D2A Signing time: Sat 06 Dec 2025 12:01:04 +0000 Manifest this update: Sat 06 Dec 2025 12:01:04 +0000 Manifest next update: Sun 07 Dec 2025 12:01:04 +0000 Files and hashes: 1: SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl (hash: A481eNRuFhmqXuqzRYG1MazS+SfYADnm+LxZ4rXEDb8=) 2: Y-7q9kMx7K8cMciXy89it_JnTm4.roa (hash: wJcOhSoBOyFBrlWVrA3BCNeS+YWlGnk/CzTU7ZurV5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:7c:1f:81:92:49:fb:d9:06:9b:04:99:a6:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4813b9c5fe8315807d7856cd230003aa16741c0d Validity Not Before: Dec 6 12:01:04 2025 GMT Not After : Dec 7 12:01:04 2025 GMT Subject: CN=098089114873cbfc71b87df5ffa350ad6c07ce0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:51:6a:6f:c6:52:d1:44:68:f4:6b:99:0d:cd: 39:9e:3f:e0:8b:41:fc:df:3e:13:d3:34:fa:db:ba: 56:71:78:cc:49:72:6d:c8:b0:4c:96:53:0c:e7:31: fb:60:3c:2e:8b:0f:82:91:08:f3:1a:88:1c:0f:c9: 08:2c:9a:25:93:ae:33:23:ee:a2:5d:53:78:28:ab: 89:fd:32:78:b1:c5:9b:cd:d7:f1:c6:55:28:44:d0: a6:67:c8:c3:6c:29:c8:a9:16:a5:59:32:55:a8:d9: ab:07:0f:22:2a:a9:c8:1b:d2:8e:e2:fa:09:bf:82: d0:20:da:0c:04:17:7f:74:8d:45:5d:a9:be:52:0c: 9c:e6:09:10:79:e7:2b:05:42:24:b3:33:7e:8f:c7: d6:69:21:e6:3f:ad:b6:24:3d:b5:91:38:b7:8a:43: 11:3c:68:d7:52:bf:78:96:ef:bc:52:8e:81:27:b0: fd:4f:7a:c2:84:d6:0c:f7:3b:4f:f0:47:0c:92:d4: 53:87:ab:31:7b:bd:7a:58:dd:86:57:9f:86:26:e4: b6:72:e1:ea:b0:a2:44:24:82:ee:a0:a1:6d:94:1a: 98:2d:41:e2:0d:3b:82:23:b5:9f:6e:6b:2d:42:9e: e3:49:70:ed:1f:2e:5b:b3:38:71:be:12:b9:c3:1c: 4e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:80:89:11:48:73:CB:FC:71:B8:7D:F5:FF:A3:50:AD:6C:07:CE:0E X509v3 Authority Key Identifier: keyid:48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:42:3d:c6:6d:65:4d:68:6f:5e:3b:8a:d3:96:49:ff:91:25: 21:b8:2b:01:c1:f9:04:a5:2f:b1:38:8e:a4:bf:82:d6:e8:b8: de:6d:4a:bf:97:15:82:8c:52:c9:02:f4:c2:ee:e6:2f:e6:c4: f0:63:de:10:09:89:a5:22:28:02:42:72:29:7c:ac:97:3c:7d: 07:07:cb:2c:59:3b:e2:2c:e0:65:0d:65:12:91:60:80:1e:a5: 4e:3d:f7:36:0d:9f:fb:b1:6a:f2:9c:ba:4a:ff:f8:d2:5c:92: da:7b:c6:ef:31:93:0e:57:27:22:d7:68:4f:6e:42:57:f1:cb: 99:c3:27:ee:15:29:8d:9f:50:27:b9:6a:03:9b:1b:63:ec:15: 3e:a6:23:a2:40:67:4f:20:60:d0:50:e2:0a:72:70:02:79:3c: 7e:c7:ee:0a:82:2b:65:83:3b:de:ac:49:6f:82:a2:45:7f:d8: ee:8d:96:a4:e6:37:ba:14:84:18:2b:c7:f6:30:46:dd:27:2f: 9e:29:17:92:fa:e0:e9:f8:77:74:0e:f8:81:55:69:5f:db:cf: 08:62:78:5e:9f:a2:28:eb:fa:1d:37:5b:81:68:3f:82:e3:db: 3d:fb:81:7f:95:1f:da:38:a9:aa:eb:43:d4:9a:18:e9:53:f1: e5:b0:6e:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziXwfgZJJ+9kGmwSZpkLAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MTNiOWM1ZmU4MzE1ODA3ZDc4NTZjZDIzMDAwM2FhMTY3 NDFjMGQwHhcNMjUxMjA2MTIwMTA0WhcNMjUxMjA3MTIwMTA0WjAzMTEwLwYDVQQD EygwOTgwODkxMTQ4NzNjYmZjNzFiODdkZjVmZmEzNTBhZDZjMDdjZTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1Fqb8ZS0URo9GuZDc05nj/gi0H8 3z4T0zT627pWcXjMSXJtyLBMllMM5zH7YDwuiw+CkQjzGogcD8kILJolk64zI+6i XVN4KKuJ/TJ4scWbzdfxxlUoRNCmZ8jDbCnIqRalWTJVqNmrBw8iKqnIG9KO4voJ v4LQINoMBBd/dI1FXam+Ugyc5gkQeecrBUIkszN+j8fWaSHmP622JD21kTi3ikMR PGjXUr94lu+8Uo6BJ7D9T3rChNYM9ztP8EcMktRTh6sxe716WN2GV5+GJuS2cuHq sKJEJILuoKFtlBqYLUHiDTuCI7WfbmstQp7jSXDtHy5bszhxvhK5wxxOCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmAiRFIc8v8cbh99f+jUK1sB84OMB8GA1UdIwQY MBaAFEgTucX+gxWAfXhWzSMAA6oWdBwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JPNXhmNkRGWUI5ZUZiTkl3QURxaFowSEEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS84ZjQxYTQtZTE0MC00ZjY1LTgwZTYt MjgxNzBhYzAyYjMyLzEvU0JPNXhmNkRGWUI5ZUZiTkl3QURxaFowSEEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS84ZjQxYTQtZTE0MC00ZjY1LTgwZTYtMjgxNzBhYzAyYjMy LzEvU0JPNXhmNkRGWUI5ZUZiTkl3QURxaFowSEEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEI9xm1l TWhvXjuK05ZJ/5ElIbgrAcH5BKUvsTiOpL+C1ui43m1Kv5cVgoxSyQL0wu7mL+bE 8GPeEAmJpSIoAkJyKXyslzx9BwfLLFk74izgZQ1lEpFggB6lTj33Ng2f+7Fq8py6 Sv/40lyS2nvG7zGTDlcnItdoT25CV/HLmcMn7hUpjZ9QJ7lqA5sbY+wVPqYjokBn TyBg0FDiCnJwAnk8fsfuCoIrZYM73qxJb4KiRX/Y7o2WpOY3uhSEGCvH9jBG3Scv nikXkvrg6fh3dA74gVVpX9vPCGJ4Xp+iKOv6HTdbgWg/guPbPfuBf5Uf2jipqutD 1JoY6VPx5bBuPA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:24 2025 by rpki-client