This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft File: 1-SB1W_Z7p9e009ABAnYE6imyPtE.mft (raw, json) Hash identifier: 8LbbtqQt/hcTE8L2rfLqak1C8QpdAG8SbXAW+G8iKsw= Subject key identifier: F6:2A:F8:48:E4:AC:6C:F3:B4:B9:04:07:41:98:54:D3:5E:3F:24:36 Authority key identifier: F9:20:75:5B:F6:7B:A7:D7:B4:D3:D0:01:02:76:04:EA:29:B2:3E:D1 Certificate issuer: /CN=f920755bf67ba7d7b4d3d001027604ea29b23ed1 Certificate serial: 019AF209900BD63CD73DD224CEFFC50DC265 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft Manifest number: 03B7 Signing time: Sat 06 Dec 2025 05:01:44 +0000 Manifest this update: Sat 06 Dec 2025 05:01:44 +0000 Manifest next update: Sun 07 Dec 2025 05:01:44 +0000 Files and hashes: 1: 1-SB1W_Z7p9e009ABAnYE6imyPtE.crl (hash: xDtPFfI0/WmRjmSpQfPZQ514I+VABvdvc6/Dw1R5i5s=) 2: 8nQwwbTKR2QHt6Bol-B0GBvbksM.roa (hash: SHforER0sbIvAI5iADwv0gU7LdmKAhXUjkcLwpFZRTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:90:0b:d6:3c:d7:3d:d2:24:ce:ff:c5:0d:c2:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f920755bf67ba7d7b4d3d001027604ea29b23ed1 Validity Not Before: Dec 6 05:01:44 2025 GMT Not After : Dec 7 05:01:44 2025 GMT Subject: CN=f62af848e4ac6cf3b4b90407419854d35e3f2436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ee:05:98:3d:77:c7:92:18:88:73:1f:d8:87: 1c:23:20:a0:ed:27:51:e8:06:25:7c:0f:74:d6:ad: 4f:62:ac:e2:a9:8d:96:29:3a:1c:9e:ad:41:af:75: 69:b9:e4:6f:b9:50:0c:ed:42:a3:88:89:57:14:d1: da:f0:1d:be:a4:7f:d9:29:30:d2:1e:bb:8d:1e:d6: 68:4b:af:2a:c5:e9:38:98:41:63:dc:df:17:e7:94: 0f:d4:40:2c:9f:3c:97:92:50:c2:78:dc:1c:b1:49: 31:7b:16:a6:cc:a8:84:d5:1a:cf:7c:d5:a0:03:33: b5:13:f5:ca:6e:88:23:b5:b8:06:b5:cc:20:c0:2f: 55:bf:cd:34:ea:4e:e8:44:91:7c:14:f0:91:7f:ec: fe:9b:82:47:f9:dc:da:5b:b5:e1:ee:57:ef:64:3d: e4:9d:ac:f9:77:2a:01:5d:da:71:a2:ee:48:f5:2d: 03:f7:38:a2:2a:bb:32:7a:7f:9f:27:22:48:a9:43: da:bf:ae:64:88:07:7b:db:2f:4b:ba:18:24:d2:6f: 9d:cf:cf:e9:3a:fb:d6:7f:c6:f9:75:f0:0b:1d:57: 57:cd:ea:03:5f:27:de:cb:dc:cf:d5:c9:a1:63:4c: 48:cb:41:93:b8:22:74:be:51:f3:c2:39:39:4a:db: 11:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2A:F8:48:E4:AC:6C:F3:B4:B9:04:07:41:98:54:D3:5E:3F:24:36 X509v3 Authority Key Identifier: keyid:F9:20:75:5B:F6:7B:A7:D7:B4:D3:D0:01:02:76:04:EA:29:B2:3E:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:b0:25:7b:36:c8:9a:cf:17:69:7c:a5:07:61:8d:5f:66:84: cd:c2:a9:65:87:ab:b8:d5:28:42:bb:af:5e:0a:af:b2:7e:0d: e0:c9:5a:b0:14:57:a5:89:a6:8a:01:d9:24:a2:c5:8a:f7:f1: 4a:3c:59:78:dd:85:e9:5d:fe:f9:1c:af:d5:59:10:68:61:3b: 1a:7c:22:41:ea:dd:07:19:c1:75:a5:2f:ee:e3:0c:45:b1:51: 81:4d:c1:79:c1:8f:77:48:eb:59:b4:1f:71:f6:c5:36:e9:70: 4f:fd:13:f8:11:b3:3d:f9:61:09:5e:be:48:43:da:51:7d:00: 93:12:41:4c:bf:29:11:b6:5e:93:ba:27:fa:7c:28:2b:39:d8: cd:a8:d8:a1:b4:d8:e1:93:dc:f7:d9:71:e3:5b:fd:da:25:39: 5a:75:5e:02:a8:2d:11:d8:f0:a2:69:7a:e2:95:6e:fe:90:ef: 55:ae:cf:05:59:23:6c:86:5d:fd:f8:7e:e2:66:90:89:04:cf: 33:37:2e:0b:1a:60:81:7f:41:d2:6d:45:f5:38:b3:ce:ea:e1: cf:28:c4:86:f2:89:61:40:14:ae:dd:80:64:b9:38:18:e7:8b: 1b:17:ca:aa:22:c7:a7:16:ef:1d:b7:1d:03:4b:5f:9a:1b:9f: fb:4f:bb:d4 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryCZAL1jzXPdIkzv/FDcJlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MjA3NTViZjY3YmE3ZDdiNGQzZDAwMTAyNzYwNGVhMjli MjNlZDEwHhcNMjUxMjA2MDUwMTQ0WhcNMjUxMjA3MDUwMTQ0WjAzMTEwLwYDVQQD EyhmNjJhZjg0OGU0YWM2Y2YzYjRiOTA0MDc0MTk4NTRkMzVlM2YyNDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+4FmD13x5IYiHMf2IccIyCg7SdR 6AYlfA901q1PYqziqY2WKTocnq1Br3VpueRvuVAM7UKjiIlXFNHa8B2+pH/ZKTDS HruNHtZoS68qxek4mEFj3N8X55QP1EAsnzyXklDCeNwcsUkxexamzKiE1RrPfNWg AzO1E/XKbogjtbgGtcwgwC9Vv8006k7oRJF8FPCRf+z+m4JH+dzaW7Xh7lfvZD3k naz5dyoBXdpxou5I9S0D9ziiKrsyen+fJyJIqUPav65kiAd72y9Luhgk0m+dz8/p OvvWf8b5dfALHVdXzeoDXyfey9zP1cmhY0xIy0GTuCJ0vlHzwjk5StsRIwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPYq+EjkrGzztLkEB0GYVNNePyQ2MB8GA1UdIwQY MBaAFPkgdVv2e6fXtNPQAQJ2BOopsj7RMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1TQjFXX1o3cDllMDA5QUJBbllFNmlteVB0RS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvNmI3YzNkLTg0Y2MtNGM3MC1iYzZm LTllNTQ0ZDI0NmZkNy8xLzEtU0IxV19aN3A5ZTAwOUFCQW5ZRTZpbXlQdEUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Y0LzZiN2MzZC04NGNjLTRjNzAtYmM2Zi05ZTU0NGQyNDZm ZDcvMS8xLVNCMVdfWjdwOWUwMDlBQkFuWUU2aW15UHRFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmbAl ezbIms8XaXylB2GNX2aEzcKpZYeruNUoQruvXgqvsn4N4MlasBRXpYmmigHZJKLF ivfxSjxZeN2F6V3++Ryv1VkQaGE7GnwiQerdBxnBdaUv7uMMRbFRgU3BecGPd0jr WbQfcfbFNulwT/0T+BGzPflhCV6+SEPaUX0AkxJBTL8pEbZek7on+nwoKznYzajY obTY4ZPc99lx41v92iU5WnVeAqgtEdjwoml64pVu/pDvVa7PBVkjbIZd/fh+4maQ iQTPMzcuCxpggX9B0m1F9TizzurhzyjEhvKJYUAUrt2AZLk4GOeLGxfKqiLHpxbv HbcdA0tfmhuf+0+71A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:06 2025 by rpki-client