This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft File: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft (raw, json) Hash identifier: BKz6jpgF9bQ+PJUbwi1TGWTg7UkpfaTgmqIkSsYLHPk= Subject key identifier: B2:83:35:09:FA:AC:75:43:37:26:5F:A1:06:4B:B2:86:E3:40:56:80 Authority key identifier: 48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D Certificate issuer: /CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d Certificate serial: 019B0EC952CCA2523FA3E04E2719F795E318 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft Manifest number: 165B Signing time: Thu 11 Dec 2025 19:00:33 +0000 Manifest this update: Thu 11 Dec 2025 19:00:33 +0000 Manifest next update: Fri 12 Dec 2025 19:00:33 +0000 Files and hashes: 1: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl (hash: lBky2qq/CBnqDjxzbUDPe4b1HvRCnx5JKTuDtrhl0+8=) 2: fDIcgxuviPH1xRvEDyo8UqwcwI4.roa (hash: rJoyrLL7oo1+w5siaXJh6iXQyoUFBWgTdCtgNT3fEho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:52:cc:a2:52:3f:a3:e0:4e:27:19:f7:95:e3:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d Validity Not Before: Dec 11 19:00:33 2025 GMT Not After : Dec 12 19:00:33 2025 GMT Subject: CN=b2833509faac754337265fa1064bb286e3405680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3e:57:9a:d5:c0:48:0e:59:0a:8c:4b:70:58: 62:7b:ae:13:69:1f:72:6b:c0:84:5a:41:9f:e1:04: 89:04:f3:18:22:bc:89:de:9c:ff:61:c4:74:67:02: f3:68:d0:dd:d8:b7:f5:d6:d4:f3:2b:7a:93:84:78: df:1c:2f:b5:86:90:63:78:f9:f5:66:b0:87:b4:35: 35:ea:13:2a:ba:55:65:7b:7b:f1:f9:20:65:8f:34: 18:36:82:49:e1:0c:12:90:1f:b8:73:b6:d3:27:d4: 80:2f:80:22:58:89:29:89:c4:6a:ca:70:40:91:13: 0c:9f:a4:60:d2:99:f4:e9:b0:30:12:b5:48:fb:13: 32:00:b0:bf:b4:2a:a3:eb:28:09:65:43:6c:6a:95: cb:f5:46:33:fe:47:c3:b8:90:da:85:00:a6:90:0d: 5f:3d:e8:86:2f:14:9d:08:55:a1:8f:12:87:1a:d8: 11:bb:ec:38:a7:fd:01:3d:d8:0d:c5:ff:32:bf:44: 4e:34:f4:c0:d0:9d:e4:c1:86:71:fd:cd:20:94:30: f7:81:fe:8d:ba:2f:8a:70:fd:8d:56:c3:ff:36:29: 8e:23:9e:6e:ce:f3:4f:36:7a:32:f9:21:22:a0:5d: f4:16:af:ac:3a:08:58:f5:2e:e6:0d:f6:a3:2b:fd: c8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:83:35:09:FA:AC:75:43:37:26:5F:A1:06:4B:B2:86:E3:40:56:80 X509v3 Authority Key Identifier: keyid:48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:c5:ce:d5:6b:59:fb:16:b0:cf:c6:d8:a8:41:9f:86:9b:6e: f8:e0:95:77:71:46:21:95:6e:a1:d8:07:77:82:98:2f:1f:76: 77:e9:04:5c:14:73:1d:66:d3:ab:59:17:24:86:58:7d:a9:ba: 4f:e8:41:c6:ae:dc:3e:5e:99:4e:cf:f8:e0:90:9f:56:a3:a9: 6d:99:c4:9d:f1:c2:c2:aa:38:6b:1e:f4:27:95:0d:83:96:ca: 72:a5:13:83:48:c5:a9:56:2e:1b:18:6c:92:13:d2:73:19:da: 20:26:81:a9:e4:b9:08:13:a2:82:40:24:d4:04:7c:e4:7c:49: 08:cb:c3:8b:00:74:60:1f:e8:3c:d4:e4:6b:dc:69:06:48:a5: 14:3f:19:02:d8:e8:5e:f7:9b:54:bd:f4:6e:92:77:14:94:d6: 3e:38:fa:36:47:5a:79:9f:68:e6:2f:09:70:2f:c6:52:c3:86: 6d:58:3e:51:d6:b2:cf:a9:b7:52:25:4f:17:89:0b:15:7c:ce: e7:57:18:65:38:44:79:c4:0e:34:da:37:02:16:3f:ab:84:92: 33:0d:31:0c:5d:aa:66:10:91:e1:5e:71:9d:29:1e:16:4e:65: 48:4e:5a:4f:ec:b6:cd:4c:c7:bf:9d:b7:da:b0:5f:6e:17:57: 98:92:6b:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyVLMolI/o+BOJxn3leMYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MTY3ZGMxZGQyYmY5OTFkNzBjZjZlZTg3ZjQzNjFlNzVj ZWYyMGQwHhcNMjUxMjExMTkwMDMzWhcNMjUxMjEyMTkwMDMzWjAzMTEwLwYDVQQD EyhiMjgzMzUwOWZhYWM3NTQzMzcyNjVmYTEwNjRiYjI4NmUzNDA1NjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz5XmtXASA5ZCoxLcFhie64TaR9y a8CEWkGf4QSJBPMYIryJ3pz/YcR0ZwLzaNDd2Lf11tTzK3qThHjfHC+1hpBjePn1 ZrCHtDU16hMqulVle3vx+SBljzQYNoJJ4QwSkB+4c7bTJ9SAL4AiWIkpicRqynBA kRMMn6Rg0pn06bAwErVI+xMyALC/tCqj6ygJZUNsapXL9UYz/kfDuJDahQCmkA1f PeiGLxSdCFWhjxKHGtgRu+w4p/0BPdgNxf8yv0RONPTA0J3kwYZx/c0glDD3gf6N ui+KcP2NVsP/NimOI55uzvNPNnoy+SEioF30Fq+sOghY9S7mDfajK/3IcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKDNQn6rHVDNyZfoQZLsobjQFaAMB8GA1UdIwQY MBaAFEgWfcHdK/mR1wz27of0Nh51zvINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82MTZjMDAtZmJlYi00YjMwLTllMjUt OWU5MWZjYTc4ZjQ3LzEvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi82MTZjMDAtZmJlYi00YjMwLTllMjUtOWU5MWZjYTc4ZjQ3 LzEvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsXO1WtZ +xawz8bYqEGfhptu+OCVd3FGIZVuodgHd4KYLx92d+kEXBRzHWbTq1kXJIZYfam6 T+hBxq7cPl6ZTs/44JCfVqOpbZnEnfHCwqo4ax70J5UNg5bKcqUTg0jFqVYuGxhs khPScxnaICaBqeS5CBOigkAk1AR85HxJCMvDiwB0YB/oPNTka9xpBkilFD8ZAtjo XvebVL30bpJ3FJTWPjj6NkdaeZ9o5i8JcC/GUsOGbVg+Udayz6m3UiVPF4kLFXzO 51cYZThEecQONNo3AhY/q4SSMw0xDF2qZhCR4V5xnSkeFk5lSE5aT+y2zUzHv523 2rBfbhdXmJJrXw== -----END CERTIFICATE-----Generated at Thu Dec 11 22:19:06 2025 by rpki-client