This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft File: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft (raw, json) Hash identifier: gffSb3bNKWzT09RBkodTxMsHiHLRsdjXQ0iDSzFZp90= Subject key identifier: C7:93:0B:7C:6F:E6:1D:49:4B:91:7C:E2:62:62:CB:F2:A6:93:4F:6F Authority key identifier: 48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D Certificate issuer: /CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d Certificate serial: 019B3757AF7A0016FFCC0081D4982EF46437 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft Manifest number: 1670 Signing time: Fri 19 Dec 2025 16:00:51 +0000 Manifest this update: Fri 19 Dec 2025 16:00:51 +0000 Manifest next update: Sat 20 Dec 2025 16:00:51 +0000 Files and hashes: 1: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl (hash: XP7T47vI4rRJ/U+JMQwDjQpDA/ke1JFbBqlwUy/qm/c=) 2: fDIcgxuviPH1xRvEDyo8UqwcwI4.roa (hash: rJoyrLL7oo1+w5siaXJh6iXQyoUFBWgTdCtgNT3fEho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:af:7a:00:16:ff:cc:00:81:d4:98:2e:f4:64:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d Validity Not Before: Dec 19 16:00:51 2025 GMT Not After : Dec 20 16:00:51 2025 GMT Subject: CN=c7930b7c6fe61d494b917ce26262cbf2a6934f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:92:f8:2b:aa:3a:31:2d:19:44:6d:5f:e6:a5: 23:84:59:03:05:e3:25:21:fc:9e:f5:2c:b3:6b:10: 64:2b:82:f4:fd:dc:df:7a:79:dc:2b:4e:a6:9f:3f: 52:95:14:0a:d5:db:0b:36:11:02:a5:3c:00:8d:cd: f5:44:5f:62:8d:45:c4:c6:c4:11:26:75:45:f3:51: 83:c7:cd:0f:ab:ef:72:0b:a5:de:90:32:f6:2f:81: 18:84:16:43:6d:3a:5a:be:fe:c5:59:b3:d6:b7:17: 54:e6:af:d1:73:66:ae:12:ca:76:fb:e5:09:16:73: e7:e3:af:73:fb:c9:e1:b7:7c:82:32:3d:34:81:36: a1:58:7f:49:e0:fb:b8:08:d7:fd:b2:06:49:27:b4: 80:4b:28:c6:08:e7:e5:77:8a:f1:b1:ad:8d:81:7b: a8:48:38:d7:a8:99:bc:3c:46:fb:02:10:93:9f:8a: 87:74:9b:b9:4e:95:6f:59:49:7f:02:43:52:b3:f2: ee:ef:e8:ca:9b:d8:67:72:d8:eb:5e:dd:0b:07:29: a7:a9:0b:76:03:2a:2a:5d:23:48:34:27:82:3f:83: 19:4f:22:f3:73:7d:e2:8a:62:35:bf:63:7c:23:f4: 15:b5:f9:23:3e:95:34:f5:89:db:4d:7c:4a:f1:ef: c6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:93:0B:7C:6F:E6:1D:49:4B:91:7C:E2:62:62:CB:F2:A6:93:4F:6F X509v3 Authority Key Identifier: keyid:48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:d6:52:0a:0d:42:d7:6c:e4:62:dd:9e:5c:dd:51:10:5b:30: 85:7e:7f:ef:ca:07:e1:25:27:2c:02:af:0d:fb:4f:8b:a5:c0: 11:e1:c1:f6:f2:ac:59:d8:11:26:b9:a0:32:96:dc:a0:c0:c9: e3:d2:9c:62:f6:1c:3d:be:ab:81:66:28:37:84:57:f1:89:9e: 4c:5b:64:3b:d1:79:f3:ed:b0:20:5e:e6:52:03:4a:4f:bd:a8: 33:bb:a8:c7:75:52:45:ad:5a:a5:81:93:9e:00:58:f8:e5:ba: a6:56:02:d1:ab:05:ac:3f:17:f0:1c:60:f9:48:7e:9e:b0:f0: a3:61:cf:f3:b5:a5:18:a2:5f:f2:95:66:b3:0a:8b:d9:ad:94: 1b:d9:eb:46:2f:80:e7:bb:d5:e8:d3:f8:a9:9a:f2:20:f4:52: 12:47:af:1e:0a:30:95:7a:89:9b:9e:9c:81:d9:2d:b6:93:61: a4:ea:bd:4d:5d:f8:b4:a9:76:8b:26:fb:38:4a:a0:a4:3c:57: a7:19:f4:7a:f1:b6:25:8a:44:6f:a7:a9:73:93:97:58:3f:b3: d5:e9:44:00:8a:63:43:88:ec:3f:44:3d:dc:f6:6d:fd:5e:a0: 42:48:ca:ef:9d:1b:f8:4e:e7:7d:fa:4d:53:af:45:d3:83:01: 6d:e8:ea:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V696ABb/zACB1Jgu9GQ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MTY3ZGMxZGQyYmY5OTFkNzBjZjZlZTg3ZjQzNjFlNzVj ZWYyMGQwHhcNMjUxMjE5MTYwMDUxWhcNMjUxMjIwMTYwMDUxWjAzMTEwLwYDVQQD EyhjNzkzMGI3YzZmZTYxZDQ5NGI5MTdjZTI2MjYyY2JmMmE2OTM0ZjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5L4K6o6MS0ZRG1f5qUjhFkDBeMl Ifye9SyzaxBkK4L0/dzfenncK06mnz9SlRQK1dsLNhECpTwAjc31RF9ijUXExsQR JnVF81GDx80Pq+9yC6XekDL2L4EYhBZDbTpavv7FWbPWtxdU5q/Rc2auEsp2++UJ FnPn469z+8nht3yCMj00gTahWH9J4Pu4CNf9sgZJJ7SASyjGCOfld4rxsa2NgXuo SDjXqJm8PEb7AhCTn4qHdJu5TpVvWUl/AkNSs/Lu7+jKm9hnctjrXt0LBymnqQt2 AyoqXSNINCeCP4MZTyLzc33iimI1v2N8I/QVtfkjPpU09YnbTXxK8e/GwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeTC3xv5h1JS5F84mJiy/Kmk09vMB8GA1UdIwQY MBaAFEgWfcHdK/mR1wz27of0Nh51zvINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82MTZjMDAtZmJlYi00YjMwLTllMjUt OWU5MWZjYTc4ZjQ3LzEvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi82MTZjMDAtZmJlYi00YjMwLTllMjUtOWU5MWZjYTc4ZjQ3 LzEvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqNZSCg1C 12zkYt2eXN1REFswhX5/78oH4SUnLAKvDftPi6XAEeHB9vKsWdgRJrmgMpbcoMDJ 49KcYvYcPb6rgWYoN4RX8YmeTFtkO9F58+2wIF7mUgNKT72oM7uox3VSRa1apYGT ngBY+OW6plYC0asFrD8X8Bxg+Uh+nrDwo2HP87WlGKJf8pVmswqL2a2UG9nrRi+A 57vV6NP4qZryIPRSEkevHgowlXqJm56cgdkttpNhpOq9TV34tKl2iyb7OEqgpDxX pxn0evG2JYpEb6epc5OXWD+z1elEAIpjQ4jsP0Q93PZt/V6gQkjK750b+E7nffpN U69F04MBbejq/w== -----END CERTIFICATE-----Generated at Fri Dec 19 23:06:29 2025 by rpki-client