This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft File: SBcWctU_34slN3ZPU342Wlknva8.mft (raw, json) Hash identifier: MTwQUkQ0DzgpYUSasNZMfKmJZDfZlc0k1cXyL8AG2B8= Subject key identifier: 9A:37:B9:B3:0D:E3:45:86:73:09:2C:65:84:C9:82:7E:3D:C1:4C:75 Authority key identifier: 48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF Certificate issuer: /CN=48171672d53fdf8b2537764f537e365a5927bdaf Certificate serial: 019B37C5D2073B6D029B5B4BB71315DA935F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft Manifest number: 1651 Signing time: Fri 19 Dec 2025 18:01:09 +0000 Manifest this update: Fri 19 Dec 2025 18:01:09 +0000 Manifest next update: Sat 20 Dec 2025 18:01:09 +0000 Files and hashes: 1: SBcWctU_34slN3ZPU342Wlknva8.crl (hash: q90Fle67M3mezXoWQonpCb5zncKGq69/RUyPM4PVX7s=) 2: s2Lbl3UpxlmBcXTI8YXpsTqbGNc.roa (hash: WTVc9DfWoK4a3bzz5sw4kY8+A2sS9+yOsYCNmAmV+gs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:d2:07:3b:6d:02:9b:5b:4b:b7:13:15:da:93:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48171672d53fdf8b2537764f537e365a5927bdaf Validity Not Before: Dec 19 18:01:09 2025 GMT Not After : Dec 20 18:01:09 2025 GMT Subject: CN=9a37b9b30de3458673092c6584c9827e3dc14c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:95:a0:e6:89:3d:c5:08:66:59:6f:3f:40:c0: 59:c2:cc:53:4f:b0:b9:fd:f7:5b:c3:32:44:ab:fd: 76:8c:e0:a7:e7:8b:fc:b5:de:f4:b4:57:87:bd:6f: 12:52:61:5c:d3:72:d0:b9:3f:c1:fb:21:92:53:ab: ea:56:f2:16:b4:57:0e:46:09:9e:b6:b0:05:35:9f: 21:bf:5c:c9:dc:7b:c0:d1:27:f7:65:a8:74:32:52: 72:cc:fc:47:0c:46:fc:d7:a3:d1:1f:22:41:64:e9: e9:fe:af:b3:56:99:6a:9e:56:c5:15:43:fe:4a:f5: c7:27:80:a3:89:b7:4c:e7:a7:8c:36:80:30:cc:b8: 32:22:3a:b9:f7:a7:a2:d4:0f:a4:d6:d1:d9:93:c1: f4:34:52:33:65:da:5c:eb:0e:eb:92:d0:b5:d6:13: dd:57:0c:c1:3c:9e:8a:84:de:87:16:6d:a6:37:24: 4a:94:23:7b:59:68:3f:d1:c2:5d:f0:84:d6:cf:ce: af:a4:4b:d8:8a:64:d2:6b:28:9e:4c:d7:66:07:4e: 29:13:4a:eb:39:0c:8f:67:ee:5c:ae:a6:0f:40:f7: 46:41:c9:3b:b2:ff:50:dc:fd:d8:0c:8e:87:c7:eb: 8b:0c:e5:dd:fc:b2:15:52:21:b3:45:2c:2b:ee:e1: 9e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:37:B9:B3:0D:E3:45:86:73:09:2C:65:84:C9:82:7E:3D:C1:4C:75 X509v3 Authority Key Identifier: keyid:48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:7b:00:29:87:67:6a:0b:17:fd:5f:b0:90:92:bf:ee:4b:c6: 43:83:c7:1b:53:a5:51:41:9f:7c:33:8c:70:c6:d5:bb:91:db: 12:7d:b5:d1:ae:49:3e:9a:c7:1d:bb:af:63:72:2f:32:51:73: 96:57:90:43:ae:ba:44:18:b0:5d:60:44:f1:4d:16:3d:fa:e0: c4:7c:6e:a2:c3:1c:1a:51:6e:a9:a7:03:cf:5d:fe:ad:69:18: 0f:fb:d8:6b:02:53:b5:a5:1b:ab:88:a4:e6:84:86:e9:2e:be: be:5e:11:5e:7f:bf:f8:94:f9:e8:ab:c5:8a:d9:8b:35:7c:e4: 03:9b:43:e3:c8:b2:42:e5:01:bb:f1:4e:8f:2d:62:c8:54:63: 6c:a6:39:25:ca:bf:e6:0a:aa:13:5f:5d:dc:37:d6:24:38:45: 81:07:0a:72:56:f4:07:bd:10:73:32:17:b4:bc:a1:d1:39:64: 52:a4:98:9f:01:a8:d2:81:72:dd:80:3a:20:e4:ba:3e:ca:31: a2:36:ec:54:d3:c3:7e:a4:92:fe:8d:7d:8c:5b:5b:a4:42:ef: 35:2c:b1:19:5b:3a:10:e6:d6:49:66:68:ca:ff:28:9e:5c:4f: 0f:6e:ec:57:c8:29:a7:14:c9:bf:70:b4:ba:de:3a:a4:d9:43: 94:eb:1e:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xdIHO20Cm1tLtxMV2pNfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MTcxNjcyZDUzZmRmOGIyNTM3NzY0ZjUzN2UzNjVhNTky N2JkYWYwHhcNMjUxMjE5MTgwMTA5WhcNMjUxMjIwMTgwMTA5WjAzMTEwLwYDVQQD Eyg5YTM3YjliMzBkZTM0NTg2NzMwOTJjNjU4NGM5ODI3ZTNkYzE0Yzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpWg5ok9xQhmWW8/QMBZwsxTT7C5 /fdbwzJEq/12jOCn54v8td70tFeHvW8SUmFc03LQuT/B+yGSU6vqVvIWtFcORgme trAFNZ8hv1zJ3HvA0Sf3Zah0MlJyzPxHDEb816PRHyJBZOnp/q+zVplqnlbFFUP+ SvXHJ4CjibdM56eMNoAwzLgyIjq596ei1A+k1tHZk8H0NFIzZdpc6w7rktC11hPd VwzBPJ6KhN6HFm2mNyRKlCN7WWg/0cJd8ITWz86vpEvYimTSayieTNdmB04pE0rr OQyPZ+5crqYPQPdGQck7sv9Q3P3YDI6Hx+uLDOXd/LIVUiGzRSwr7uGepwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJo3ubMN40WGcwksZYTJgn49wUx1MB8GA1UdIwQY MBaAFEgXFnLVP9+LJTd2T1N+NlpZJ72vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JjV2N0VV8zNHNsTjNaUFUzNDJXbGtudmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81NWUxMzgtNTZkYS00NDkyLWExZjIt ZGIwNGYyMTM5MGEwLzEvU0JjV2N0VV8zNHNsTjNaUFUzNDJXbGtudmE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS81NWUxMzgtNTZkYS00NDkyLWExZjItZGIwNGYyMTM5MGEw LzEvU0JjV2N0VV8zNHNsTjNaUFUzNDJXbGtudmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp3sAKYdn agsX/V+wkJK/7kvGQ4PHG1OlUUGffDOMcMbVu5HbEn210a5JPprHHbuvY3IvMlFz lleQQ666RBiwXWBE8U0WPfrgxHxuosMcGlFuqacDz13+rWkYD/vYawJTtaUbq4ik 5oSG6S6+vl4RXn+/+JT56KvFitmLNXzkA5tD48iyQuUBu/FOjy1iyFRjbKY5Jcq/ 5gqqE19d3DfWJDhFgQcKclb0B70QczIXtLyh0TlkUqSYnwGo0oFy3YA6IOS6Psox ojbsVNPDfqSS/o19jFtbpELvNSyxGVs6EObWSWZoyv8onlxPD27sV8gppxTJv3C0 ut46pNlDlOsexQ== -----END CERTIFICATE-----Generated at Fri Dec 19 22:39:31 2025 by rpki-client