This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft File: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft (raw, json) Hash identifier: Uwrb/5B/AsqiysBRiPlCJhq7Hu1D5nwPhNdqveQmwuY= Subject key identifier: 22:81:5B:FA:DA:D9:DC:68:44:08:38:B6:A9:90:9F:EB:C3:95:25:EA Authority key identifier: 48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD Certificate issuer: /CN=48113c916a59da4d43b8efa7739ad1167ace59fd Certificate serial: 019B38A2FC6DCE964BAF4533307EDACDFF75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft Manifest number: 1348 Signing time: Fri 19 Dec 2025 22:02:43 +0000 Manifest this update: Fri 19 Dec 2025 22:02:43 +0000 Manifest next update: Sat 20 Dec 2025 22:02:43 +0000 Files and hashes: 1: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl (hash: Y8LBqo/RGrls2jB+2nFjxk9iAQcf+uBhWtBEVxjN+fE=) 2: gblVtIBn8mlQxz2yiWejH0FdMyM.roa (hash: s042MfHWtsi+LtfhO/ecUQnxypSSkEI5Z5QOz7/NUTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:fc:6d:ce:96:4b:af:45:33:30:7e:da:cd:ff:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48113c916a59da4d43b8efa7739ad1167ace59fd Validity Not Before: Dec 19 22:02:43 2025 GMT Not After : Dec 20 22:02:43 2025 GMT Subject: CN=22815bfadad9dc68440838b6a9909febc39525ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:df:b4:ae:89:5b:27:e7:13:af:bd:00:1a:dd: a8:65:5f:c8:52:0d:4a:43:92:95:5d:06:8c:fd:4f: ac:e8:3b:0a:47:68:98:6c:e1:8e:31:4c:bb:cc:98: ba:cd:f7:42:43:f7:f0:33:37:a9:06:2c:17:a1:dd: 2d:79:cd:7a:73:d3:12:72:4a:ea:0c:dd:35:ea:df: 2c:97:f6:3b:04:ff:21:e1:c3:79:9f:45:a3:d4:b6: 6a:a8:8f:66:f1:f6:ad:5e:ed:f1:1c:c4:01:c9:20: 58:60:e7:c0:ae:3a:c9:7e:42:20:cf:16:c9:c5:0e: 5c:0e:22:8d:ef:4d:2e:e8:cc:3b:76:26:f9:31:ce: 2c:51:90:3b:47:ed:8f:1b:c2:58:ea:92:2e:7f:6b: 19:50:a7:24:9a:3d:4b:0d:a3:54:69:a9:4b:90:10: df:6d:30:a0:49:47:63:22:05:1b:e6:48:d6:de:dd: 07:8c:c8:4e:56:e1:a3:93:fc:b4:8b:ba:27:1c:58: d9:2e:0e:4d:05:08:2d:05:46:b2:1d:41:9a:0f:52: fd:93:df:30:9c:1b:18:54:7a:31:9e:dd:b4:0c:54: 2b:b6:70:52:8b:26:cf:24:47:f1:93:f6:6e:5d:53: 25:f6:00:5c:55:76:0e:79:f3:c9:f5:00:8c:50:03: d7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:81:5B:FA:DA:D9:DC:68:44:08:38:B6:A9:90:9F:EB:C3:95:25:EA X509v3 Authority Key Identifier: keyid:48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:2b:da:71:26:99:8f:15:fe:e8:3a:5b:30:90:e5:5b:4b:e3: 58:ba:be:d4:ed:0b:54:f5:7c:52:aa:4e:74:c6:c0:75:26:39: 99:7c:b0:03:a9:d5:1d:74:c7:38:c2:5e:b4:e3:3a:80:d9:8b: 3a:2e:e1:6d:c0:b4:1e:69:53:a9:22:1c:75:4c:94:59:6b:45: b9:3b:09:31:b3:82:7b:45:aa:c9:b3:27:82:ff:74:bd:4c:fd: 68:8b:81:9d:dc:1f:9a:a4:62:b9:95:f9:49:27:64:6b:b9:5d: 0a:a3:13:58:a3:5b:b2:b0:57:1d:ab:10:1d:ff:ec:bb:e7:00: 5c:3f:8a:46:4f:33:a8:49:e8:29:0e:bc:8b:6f:d7:6a:4b:ea: 81:77:31:28:e1:e7:bd:3e:9c:2f:df:4d:33:39:30:48:58:73: 5b:cc:48:c0:7f:a6:14:f1:ee:19:3b:c8:3c:a8:ec:7b:a5:f3: a8:d5:be:b9:64:24:d0:21:22:c6:33:f3:15:7a:dd:c0:81:4f: 2c:6b:20:6b:23:0e:7f:e8:53:b6:92:47:39:87:97:b0:6a:b5: 35:8c:0f:94:d5:b3:39:d5:dd:c7:6a:a2:46:0b:3f:86:fd:e4: fb:44:ea:22:7f:47:b5:57:12:bd:c8:c5:6a:1e:1f:5e:4d:89: a7:07:ba:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ovxtzpZLr0UzMH7azf91MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MTEzYzkxNmE1OWRhNGQ0M2I4ZWZhNzczOWFkMTE2N2Fj ZTU5ZmQwHhcNMjUxMjE5MjIwMjQzWhcNMjUxMjIwMjIwMjQzWjAzMTEwLwYDVQQD EygyMjgxNWJmYWRhZDlkYzY4NDQwODM4YjZhOTkwOWZlYmMzOTUyNWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9+0rolbJ+cTr70AGt2oZV/IUg1K Q5KVXQaM/U+s6DsKR2iYbOGOMUy7zJi6zfdCQ/fwMzepBiwXod0tec16c9MSckrq DN016t8sl/Y7BP8h4cN5n0Wj1LZqqI9m8fatXu3xHMQBySBYYOfArjrJfkIgzxbJ xQ5cDiKN700u6Mw7dib5Mc4sUZA7R+2PG8JY6pIuf2sZUKckmj1LDaNUaalLkBDf bTCgSUdjIgUb5kjW3t0HjMhOVuGjk/y0i7onHFjZLg5NBQgtBUayHUGaD1L9k98w nBsYVHoxnt20DFQrtnBSiybPJEfxk/ZuXVMl9gBcVXYOefPJ9QCMUAPX8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKBW/ra2dxoRAg4tqmQn+vDlSXqMB8GA1UdIwQY MBaAFEgRPJFqWdpNQ7jvp3Oa0RZ6zln9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JFOGtXcFoyazFEdU8tbmM1clJGbnJPV2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84ZmZhNzktNzUyOC00ZmNhLTljZGYt NjliYjI4MmNmNWFlLzEvU0JFOGtXcFoyazFEdU8tbmM1clJGbnJPV2YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi84ZmZhNzktNzUyOC00ZmNhLTljZGYtNjliYjI4MmNmNWFl LzEvU0JFOGtXcFoyazFEdU8tbmM1clJGbnJPV2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyvacSaZ jxX+6DpbMJDlW0vjWLq+1O0LVPV8UqpOdMbAdSY5mXywA6nVHXTHOMJetOM6gNmL Oi7hbcC0HmlTqSIcdUyUWWtFuTsJMbOCe0WqybMngv90vUz9aIuBndwfmqRiuZX5 SSdka7ldCqMTWKNbsrBXHasQHf/su+cAXD+KRk8zqEnoKQ68i2/XakvqgXcxKOHn vT6cL99NMzkwSFhzW8xIwH+mFPHuGTvIPKjse6XzqNW+uWQk0CEixjPzFXrdwIFP LGsgayMOf+hTtpJHOYeXsGq1NYwPlNWzOdXdx2qiRgs/hv3k+0TqIn9HtVcSvcjF ah4fXk2Jpwe6yg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:33:06 2025 by rpki-client