This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft File: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft (raw, json) Hash identifier: /T2roxfIF+fNEng8f0rX/rHgEC9akIZtZLAToaqJnc4= Subject key identifier: A1:1C:72:FA:5F:E9:DF:3A:53:21:66:65:F3:27:83:3D:AB:12:61:46 Authority key identifier: 48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD Certificate issuer: /CN=48113c916a59da4d43b8efa7739ad1167ace59fd Certificate serial: 019ABD08B11E230B3BCC162DA566FD44CF1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft Manifest number: 1308 Signing time: Tue 25 Nov 2025 22:00:54 +0000 Manifest this update: Tue 25 Nov 2025 22:00:54 +0000 Manifest next update: Wed 26 Nov 2025 22:00:54 +0000 Files and hashes: 1: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl (hash: 3E4tRIpiwkkDZbQd0+2joRH2aTR/UsspNVysSd5G6CQ=) 2: gblVtIBn8mlQxz2yiWejH0FdMyM.roa (hash: s042MfHWtsi+LtfhO/ecUQnxypSSkEI5Z5QOz7/NUTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 22:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bd:08:b1:1e:23:0b:3b:cc:16:2d:a5:66:fd:44:cf:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48113c916a59da4d43b8efa7739ad1167ace59fd Validity Not Before: Nov 25 22:00:54 2025 GMT Not After : Nov 26 22:00:54 2025 GMT Subject: CN=a11c72fa5fe9df3a53216665f327833dab126146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0a:20:db:58:89:d2:2c:a8:d5:39:1a:49:8f: ed:83:ef:3f:41:6e:ed:04:49:ef:91:fb:86:fc:7a: 60:42:35:eb:5d:dc:2a:44:0e:72:77:7e:c6:9d:42: 9d:9c:53:c5:6f:0b:d6:0f:dd:4d:eb:9a:99:00:71: 6c:42:dd:d9:12:8c:b9:92:b1:f8:73:cf:83:d8:3c: 7b:77:eb:7c:1e:4e:cb:9a:2a:a7:91:9e:09:cf:f3: f0:73:d2:32:9a:7e:be:1d:1b:9b:cf:46:0f:f1:51: cc:fd:bd:45:83:2c:5d:8a:36:60:21:f5:0c:8e:c3: 81:1b:b9:a2:d2:ec:41:a8:56:7b:34:6d:ab:92:93: 3b:e4:5a:90:76:6f:ff:5e:fd:69:44:0c:09:7e:9e: 72:48:a5:c8:b8:31:5c:8f:15:20:4b:1d:4c:0e:d0: 46:2a:d3:36:8b:60:9b:c5:3a:78:f3:b1:1c:e2:bc: 02:87:78:72:eb:ef:1c:0a:cc:9b:6d:c8:2a:7d:b3: 9a:d6:0a:81:3d:1f:86:a5:ce:c9:11:a0:ee:6e:17: b6:72:9d:56:f7:14:9f:29:4f:94:e2:6a:dc:da:10: 10:b0:ef:99:0c:fa:1c:b6:ea:1a:f1:5c:56:45:2e: 31:79:d2:ac:15:88:cb:59:57:f6:60:c0:43:09:bb: 29:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1C:72:FA:5F:E9:DF:3A:53:21:66:65:F3:27:83:3D:AB:12:61:46 X509v3 Authority Key Identifier: keyid:48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:3d:f8:ac:fd:dc:9e:d4:99:4f:e5:3b:36:91:59:80:f6:53: 4d:4e:1c:36:a6:31:3c:da:31:d2:44:44:8c:33:0c:c7:e9:7d: 16:26:73:41:fa:43:5c:9f:a6:cf:ec:68:ac:71:50:35:cf:5f: 51:60:a6:c6:8e:f3:61:a2:55:b3:20:07:b1:1e:9b:d5:8a:26: 76:24:38:ba:d0:d8:0c:45:b2:a8:21:97:8a:d4:a7:e2:10:b6: 61:80:a4:a6:46:c6:43:d4:4e:c9:35:69:ff:4c:d2:ff:c4:2b: 7c:26:e3:89:a8:68:0f:a5:54:4c:60:56:44:49:04:59:3c:18: a8:43:f6:fc:73:6a:fd:ab:0c:55:41:8e:72:f5:05:50:ee:08: c3:92:89:dd:ba:43:88:fb:f5:69:ef:3e:47:2f:b8:47:84:ae: b7:3d:7c:6a:b9:ae:ff:48:9a:5c:2d:3b:ea:0f:b5:3c:90:b2: 79:fb:c8:f2:7b:c7:3c:05:c4:68:37:12:b1:70:fe:5f:37:c8: a7:d6:85:59:86:65:24:80:1e:b1:4f:66:14:bc:f6:e0:e1:ca: 1d:72:4e:1d:29:80:e0:3d:44:d5:38:4d:8a:bd:2a:6e:3e:cd: da:cf:b6:61:f3:87:e7:04:3a:11:d6:e6:96:14:7f:e3:62:d1: 94:49:bb:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq9CLEeIws7zBYtpWb9RM8dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MTEzYzkxNmE1OWRhNGQ0M2I4ZWZhNzczOWFkMTE2N2Fj ZTU5ZmQwHhcNMjUxMTI1MjIwMDU0WhcNMjUxMTI2MjIwMDU0WjAzMTEwLwYDVQQD EyhhMTFjNzJmYTVmZTlkZjNhNTMyMTY2NjVmMzI3ODMzZGFiMTI2MTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wog21iJ0iyo1TkaSY/tg+8/QW7t BEnvkfuG/HpgQjXrXdwqRA5yd37GnUKdnFPFbwvWD91N65qZAHFsQt3ZEoy5krH4 c8+D2Dx7d+t8Hk7LmiqnkZ4Jz/Pwc9Iymn6+HRubz0YP8VHM/b1FgyxdijZgIfUM jsOBG7mi0uxBqFZ7NG2rkpM75FqQdm//Xv1pRAwJfp5ySKXIuDFcjxUgSx1MDtBG KtM2i2CbxTp487Ec4rwCh3hy6+8cCsybbcgqfbOa1gqBPR+Gpc7JEaDubhe2cp1W 9xSfKU+U4mrc2hAQsO+ZDPoctuoa8VxWRS4xedKsFYjLWVf2YMBDCbspuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEccvpf6d86UyFmZfMngz2rEmFGMB8GA1UdIwQY MBaAFEgRPJFqWdpNQ7jvp3Oa0RZ6zln9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JFOGtXcFoyazFEdU8tbmM1clJGbnJPV2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84ZmZhNzktNzUyOC00ZmNhLTljZGYt NjliYjI4MmNmNWFlLzEvU0JFOGtXcFoyazFEdU8tbmM1clJGbnJPV2YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi84ZmZhNzktNzUyOC00ZmNhLTljZGYtNjliYjI4MmNmNWFl LzEvU0JFOGtXcFoyazFEdU8tbmM1clJGbnJPV2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVD34rP3c ntSZT+U7NpFZgPZTTU4cNqYxPNox0kREjDMMx+l9FiZzQfpDXJ+mz+xorHFQNc9f UWCmxo7zYaJVsyAHsR6b1YomdiQ4utDYDEWyqCGXitSn4hC2YYCkpkbGQ9ROyTVp /0zS/8QrfCbjiahoD6VUTGBWREkEWTwYqEP2/HNq/asMVUGOcvUFUO4Iw5KJ3bpD iPv1ae8+Ry+4R4Sutz18armu/0iaXC076g+1PJCyefvI8nvHPAXEaDcSsXD+XzfI p9aFWYZlJIAesU9mFLz24OHKHXJOHSmA4D1E1ThNir0qbj7N2s+2YfOH5wQ6Edbm lhR/42LRlEm7yg== -----END CERTIFICATE-----Generated at Wed Nov 26 03:48:57 2025 by rpki-client