This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft File: SB_i792qAKxeR9HC1UsEuWEHqUU.mft (raw, json) Hash identifier: gqoOURVi2wSIzrH077rqCXpJYO9G2VYOp7YjNZJXm8g= Subject key identifier: 22:A6:30:52:7C:23:B8:9B:55:BF:0B:91:0D:F1:E7:46:92:45:30:F6 Authority key identifier: 48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45 Certificate issuer: /CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945 Certificate serial: 019B3532843BF162FD9A37F6FA7E8B795B0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft Manifest number: 0605 Signing time: Fri 19 Dec 2025 06:01:01 +0000 Manifest this update: Fri 19 Dec 2025 06:01:01 +0000 Manifest next update: Sat 20 Dec 2025 06:01:01 +0000 Files and hashes: 1: EzssP_udqCfWQ6VA2hmooPr9R8Q.roa (hash: 7hD4+XAbJWne9LmiwxOyp2EPaz4XFOHQUQwlnknUzS4=) 2: SB_i792qAKxeR9HC1UsEuWEHqUU.crl (hash: olTQ7C2ugm8HU8CxGolvxmvSnpDHIlPWHzgLhAOlp+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:84:3b:f1:62:fd:9a:37:f6:fa:7e:8b:79:5b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945 Validity Not Before: Dec 19 06:01:01 2025 GMT Not After : Dec 20 06:01:01 2025 GMT Subject: CN=22a630527c23b89b55bf0b910df1e746924530f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f5:6b:ba:95:5c:22:9d:ce:b5:96:cb:eb:24: 61:e7:48:3b:bb:b5:df:74:6d:7c:42:dd:cb:4a:fa: f1:ec:a9:2b:ae:2b:15:8a:b3:60:6c:81:55:9c:2d: 31:4f:f8:f5:3e:c6:9b:a6:6d:3c:84:e0:0f:c5:57: 12:22:e3:c3:3d:40:62:b6:b0:26:9e:80:d3:21:18: 9e:74:4a:48:76:f3:da:5d:10:60:9f:f8:1e:85:b4: ce:ca:fe:65:6c:52:50:b4:ab:3c:c1:d9:6c:8a:db: 69:8f:79:f0:e0:66:81:bf:02:d7:e2:ce:c1:7e:44: a9:6f:58:76:44:28:62:e2:86:4a:f5:6c:28:5d:6b: 3f:69:a3:06:72:d7:1e:2a:ac:18:f5:62:d4:38:7b: 5d:13:8c:79:2f:38:87:1f:42:50:7e:44:cf:b3:45: 5a:f2:15:30:75:13:11:54:0b:a0:01:0d:8b:c4:5c: 92:16:a6:eb:93:0b:44:ba:f0:42:3a:52:07:2a:a9: 32:d3:6a:0c:64:27:08:f2:a1:b2:16:c7:3a:cb:ee: 4a:c6:80:d0:30:96:40:9c:71:79:8a:e6:b4:1d:0b: 64:95:1f:ad:8a:b9:b6:bd:67:3e:38:cb:e5:d0:58: 4d:ab:08:f9:d2:7c:af:7c:e9:11:17:5e:24:aa:75: b6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A6:30:52:7C:23:B8:9B:55:BF:0B:91:0D:F1:E7:46:92:45:30:F6 X509v3 Authority Key Identifier: keyid:48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:b9:9d:b8:4a:3a:88:c8:df:c5:43:6c:51:2e:bb:4c:15:19: c8:56:5d:07:26:0a:31:79:d2:d1:b1:24:34:a5:32:1a:81:3a: 82:59:76:15:2f:55:d7:94:ec:b4:d7:38:8f:75:bb:25:5d:24: 34:b8:a0:69:d0:8f:6c:73:8b:a3:20:37:91:0b:39:2f:d7:20: fd:a2:33:9e:73:bf:04:74:44:da:41:94:99:9c:18:fb:8c:72: 09:68:b1:a6:0c:58:d0:15:21:e6:81:ae:1f:38:0f:78:c7:ab: b7:6c:da:32:c1:f3:ac:17:99:bb:2f:05:f9:3c:c4:fd:5f:c5: 6b:68:94:48:50:bd:db:ac:10:7f:1c:2d:55:d8:a9:1f:8a:16: 67:e3:4d:58:97:ec:a7:d7:3c:1a:3c:ea:1e:fa:65:92:b4:c3: 84:7f:f5:96:64:2b:72:9b:ab:8a:83:e9:2d:46:e5:bd:cc:c1: 8e:2e:69:21:60:5a:03:a7:25:b0:e6:e5:ab:4a:b7:f5:27:b5: f7:50:10:b5:83:e5:48:b0:3d:6d:7e:d0:21:db:5b:bb:1f:a4: 66:de:f5:68:9c:35:de:de:3d:72:ca:95:46:0c:da:cf:b3:33: b0:1e:d7:71:c2:7f:82:7c:43:3b:f9:84:66:6f:d6:a0:8e:60: 8b:81:0a:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MoQ78WL9mjf2+n6LeVsKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MWZlMmVmZGRhYTAwYWM1ZTQ3ZDFjMmQ1NGIwNGI5NjEw N2E5NDUwHhcNMjUxMjE5MDYwMTAxWhcNMjUxMjIwMDYwMTAxWjAzMTEwLwYDVQQD EygyMmE2MzA1MjdjMjNiODliNTViZjBiOTEwZGYxZTc0NjkyNDUzMGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvVrupVcIp3OtZbL6yRh50g7u7Xf dG18Qt3LSvrx7KkrrisVirNgbIFVnC0xT/j1Psabpm08hOAPxVcSIuPDPUBitrAm noDTIRiedEpIdvPaXRBgn/gehbTOyv5lbFJQtKs8wdlsittpj3nw4GaBvwLX4s7B fkSpb1h2RChi4oZK9WwoXWs/aaMGctceKqwY9WLUOHtdE4x5LziHH0JQfkTPs0Va 8hUwdRMRVAugAQ2LxFySFqbrkwtEuvBCOlIHKqky02oMZCcI8qGyFsc6y+5KxoDQ MJZAnHF5iua0HQtklR+tirm2vWc+OMvl0FhNqwj50nyvfOkRF14kqnW2/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKmMFJ8I7ibVb8LkQ3x50aSRTD2MB8GA1UdIwQY MBaAFEgf4u/dqgCsXkfRwtVLBLlhB6lFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JfaTc5MnFBS3hlUjlIQzFVc0V1V0VIcVVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lNzhiYzEtYmQ2NC00NDUzLTk3Yzkt YWMwOTIxNDA5NjdlLzEvU0JfaTc5MnFBS3hlUjlIQzFVc0V1V0VIcVVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9lNzhiYzEtYmQ2NC00NDUzLTk3YzktYWMwOTIxNDA5Njdl LzEvU0JfaTc5MnFBS3hlUjlIQzFVc0V1V0VIcVVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7mduEo6 iMjfxUNsUS67TBUZyFZdByYKMXnS0bEkNKUyGoE6gll2FS9V15TstNc4j3W7JV0k NLigadCPbHOLoyA3kQs5L9cg/aIznnO/BHRE2kGUmZwY+4xyCWixpgxY0BUh5oGu HzgPeMert2zaMsHzrBeZuy8F+TzE/V/Fa2iUSFC926wQfxwtVdipH4oWZ+NNWJfs p9c8GjzqHvplkrTDhH/1lmQrcpurioPpLUblvczBji5pIWBaA6clsOblq0q39Se1 91AQtYPlSLA9bX7QIdtbux+kZt71aJw13t49csqVRgzaz7MzsB7XccJ/gnxDO/mE Zm/WoI5gi4EKoA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:40:23 2025 by rpki-client