This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft File: Sb1NKMUsLxLkah774RMkG-AMpY8.mft (raw, json) Hash identifier: N38TkoyzOsgSnpBrjpCwL3QKzhHvJP/HhtwwXBidDF0= Subject key identifier: 5C:63:04:A6:16:9A:91:E7:85:A9:36:03:1E:EE:47:22:C4:85:6F:E8 Authority key identifier: 49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F Certificate issuer: /CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f Certificate serial: 019B0EC94468CD5FDD74617A57C63D7E6A7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft Manifest number: 16C9 Signing time: Thu 11 Dec 2025 19:00:29 +0000 Manifest this update: Thu 11 Dec 2025 19:00:29 +0000 Manifest next update: Fri 12 Dec 2025 19:00:29 +0000 Files and hashes: 1: 6y1fUuUD8qUGYjAEz1eFaXKhOQU.roa (hash: k0HLKZQvuysSS9QC5rHoiO/zSTIxOZBp1dxMMgIJx6Y=) 2: Sb1NKMUsLxLkah774RMkG-AMpY8.crl (hash: FXkD9n/qJka990IrzdfeZI8GIV8rR63mR+xfEdPPZN4=) 3: VNSLVaEs2JND7MBVU_hMkMCe4VI.roa (hash: 4Gvp8QZhAi16/ZBLIXqdlQkt02B6CjfvrGyg5V1EIUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:44:68:cd:5f:dd:74:61:7a:57:c6:3d:7e:6a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f Validity Not Before: Dec 11 19:00:29 2025 GMT Not After : Dec 12 19:00:29 2025 GMT Subject: CN=5c6304a6169a91e785a936031eee4722c4856fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4e:4e:ab:50:56:b0:1d:d7:8f:e2:2f:e9:ab: 40:8e:ea:e5:af:1c:0a:11:10:70:ee:bd:1d:73:60: b5:c4:a5:2d:21:b5:34:3c:6b:6e:97:3d:14:c7:7c: 00:b8:84:99:0a:84:cf:5f:24:13:e5:e4:19:17:df: 8c:67:0b:33:e0:51:12:53:e5:83:ee:3f:a8:46:05: 94:cf:f0:da:a4:e1:4b:a8:5d:b1:47:ca:83:c4:48: 27:a1:53:d3:58:d2:65:14:66:38:67:ce:90:25:46: 52:c6:93:f6:e4:15:70:98:71:cd:cd:0a:82:7f:30: 93:a2:d6:be:5c:ed:c6:8f:ee:10:90:83:6f:a9:56: 8c:58:63:c4:5c:c4:8b:09:19:1a:9f:8d:b3:8a:bb: ae:90:cc:b1:1d:e9:d6:b5:70:bd:d0:77:06:27:e0: dd:d1:8d:22:19:42:72:e1:05:10:2d:9c:f8:35:da: 24:00:41:e9:56:76:a9:98:bb:91:64:2d:c6:f5:9b: b4:1d:43:94:61:53:44:f1:b8:b1:c9:f4:8a:64:62: c9:d6:90:e4:6e:86:6b:1a:1a:aa:5e:10:a4:84:df: 65:3f:c0:da:5a:26:3e:97:ac:6b:37:38:f9:04:ba: 41:4b:d2:4d:3d:62:e2:5e:f3:d3:94:1e:f1:9b:c3: ce:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:63:04:A6:16:9A:91:E7:85:A9:36:03:1E:EE:47:22:C4:85:6F:E8 X509v3 Authority Key Identifier: keyid:49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:59:86:5d:c6:be:17:a0:88:86:b4:40:a3:24:90:91:e1:10: 76:3e:5b:39:da:22:a4:b2:89:63:42:14:09:da:b7:50:2e:fd: f8:a5:3a:44:65:c5:c6:59:a7:9f:62:ba:85:b0:7d:76:78:a8: 23:3b:76:68:fa:80:53:c9:6c:94:bb:48:81:62:75:c4:56:63: 8b:fd:0f:07:4b:35:43:59:92:66:f8:3b:89:3e:79:ac:48:88: 2c:cf:01:b4:50:9f:cb:ab:5d:0d:69:e6:5a:8c:3d:ba:81:f3: d5:cb:8f:74:e2:6e:d3:6f:06:cc:2e:63:c0:af:d6:9e:e5:05: 34:94:0b:c2:1e:a0:be:25:ef:47:5c:e1:8f:f0:0e:07:f7:ce: 4a:54:7b:c4:75:40:64:c8:85:aa:93:14:85:2a:20:4d:e7:c8: a9:99:48:d0:0b:57:aa:cb:14:a4:5f:53:bc:cf:c6:38:4e:10: 5e:46:ec:45:cb:de:f6:6e:74:b2:db:68:dc:37:91:24:be:0d: 57:f8:9c:a3:99:33:72:fe:97:84:8d:00:0d:b1:c1:95:82:26: 28:3b:27:2d:aa:57:48:f9:98:ab:44:a3:b0:53:42:53:cc:8d: b7:ca:0d:81:b0:95:75:96:8e:45:62:09:fa:b6:b4:23:d7:09: 5b:20:c4:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyURozV/ddGF6V8Y9fmp8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YmQ0ZDI4YzUyYzJmMTJlNDZhMWVmYmUxMTMyNDFiZTAw Y2E1OGYwHhcNMjUxMjExMTkwMDI5WhcNMjUxMjEyMTkwMDI5WjAzMTEwLwYDVQQD Eyg1YzYzMDRhNjE2OWE5MWU3ODVhOTM2MDMxZWVlNDcyMmM0ODU2ZmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE5Oq1BWsB3Xj+Iv6atAjurlrxwK ERBw7r0dc2C1xKUtIbU0PGtulz0Ux3wAuISZCoTPXyQT5eQZF9+MZwsz4FESU+WD 7j+oRgWUz/DapOFLqF2xR8qDxEgnoVPTWNJlFGY4Z86QJUZSxpP25BVwmHHNzQqC fzCTota+XO3Gj+4QkINvqVaMWGPEXMSLCRkan42ziruukMyxHenWtXC90HcGJ+Dd 0Y0iGUJy4QUQLZz4NdokAEHpVnapmLuRZC3G9Zu0HUOUYVNE8bixyfSKZGLJ1pDk boZrGhqqXhCkhN9lP8DaWiY+l6xrNzj5BLpBS9JNPWLiXvPTlB7xm8POSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxjBKYWmpHnhak2Ax7uRyLEhW/oMB8GA1UdIwQY MBaAFEm9TSjFLC8S5Goe++ETJBvgDKWPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNWFmNDctOTQ1Mi00YzU1LWJjMmYt NTc0NjAwN2NiMmEzLzEvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iNWFmNDctOTQ1Mi00YzU1LWJjMmYtNTc0NjAwN2NiMmEz LzEvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFmGXca+ F6CIhrRAoySQkeEQdj5bOdoipLKJY0IUCdq3UC79+KU6RGXFxlmnn2K6hbB9dnio Izt2aPqAU8lslLtIgWJ1xFZji/0PB0s1Q1mSZvg7iT55rEiILM8BtFCfy6tdDWnm Wow9uoHz1cuPdOJu028GzC5jwK/WnuUFNJQLwh6gviXvR1zhj/AOB/fOSlR7xHVA ZMiFqpMUhSogTefIqZlI0AtXqssUpF9TvM/GOE4QXkbsRcve9m50stto3DeRJL4N V/ico5kzcv6XhI0ADbHBlYImKDsnLapXSPmYq0SjsFNCU8yNt8oNgbCVdZaORWIJ +ra0I9cJWyDE4g== -----END CERTIFICATE-----Generated at Fri Dec 12 00:00:15 2025 by rpki-client