This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft File: sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft (raw, json) Hash identifier: g9LrQiyDILZnvRXhPwQ6ZNhkv+nihqcX2GkrjDnZckQ= Subject key identifier: E1:84:A2:35:A5:05:D0:D5:FC:94:6C:D7:67:47:BB:FB:BB:4F:65:B7 Authority key identifier: B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E Certificate issuer: /CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e Certificate serial: 019B51853E7D49E67E6163CCDDA46A9E8589 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 18:00:45 +0000 Manifest this update: Wed 24 Dec 2025 18:00:45 +0000 Manifest next update: Thu 25 Dec 2025 18:00:45 +0000 Files and hashes: 1: NubO0sPxr_cuDCWGfPaZps4XHmU.roa (hash: IosGPlSdz8qVsL7WE6s1aTvXI6+f2Lb8gYJwebh24vo=) 2: XNv5R4Pm86vxr_d7wZIi0Xi614M.roa (hash: gIqD/66IF2g/0ovWyFttP7JqaZx+pP8FQh+Ln/imEBY=) 3: ay-9TuQv4NBBhfLPirWdhwTU6aU.roa (hash: /TV01OKxsZryh7q9+Tt7pDnXawnXcjSi58aGMMVoj6c=) 4: sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl (hash: dS6RraN5uSLkCYX6Zn33Twbw0mzTMVUqbYXOUBepMq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:85:3e:7d:49:e6:7e:61:63:cc:dd:a4:6a:9e:85:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e Validity Not Before: Dec 24 18:00:45 2025 GMT Not After : Dec 25 18:00:45 2025 GMT Subject: CN=e184a235a505d0d5fc946cd76747bbfbbb4f65b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:73:a8:36:88:5c:06:ce:b5:f3:22:fb:12:ea: a1:33:21:0e:1f:d6:a7:4d:d9:68:31:f0:9a:84:61: 0c:15:a4:b8:80:fc:ff:2f:e3:40:52:e4:2e:39:59: 7e:73:33:29:b7:92:da:84:be:7d:02:80:70:9f:9c: 9c:b3:e4:28:df:77:46:57:72:83:5e:12:6f:3a:c7: b2:2c:66:49:7b:bc:be:b6:56:ae:40:ac:9d:7e:0b: 03:3c:b6:8d:ac:7d:ec:be:89:b1:60:10:3f:70:49: d5:4f:b5:69:87:0b:b2:0c:4a:a0:c3:5a:cb:e2:c5: a0:82:c0:a3:76:e3:1d:e4:e8:81:44:f0:11:99:2c: 15:b9:18:e5:c6:16:f6:3b:10:5f:6f:82:16:47:58: 76:06:9f:51:ba:5a:b5:68:97:db:a6:57:d2:d5:37: e9:d9:d1:b1:2b:5e:c0:34:f1:62:85:c7:60:72:2b: 3d:b3:48:1d:76:14:51:31:1c:2a:f2:ee:2a:40:94: 1e:fb:70:1b:1b:08:3e:71:d8:76:8b:34:01:9b:07: fb:11:a2:13:ef:8e:27:98:ce:60:08:a4:fa:c1:fa: 8a:06:60:79:fc:00:87:2f:b0:7d:6e:1f:74:bf:44: e7:f7:cd:d7:b9:00:37:cb:1a:96:ae:6a:62:b8:b6: a1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:84:A2:35:A5:05:D0:D5:FC:94:6C:D7:67:47:BB:FB:BB:4F:65:B7 X509v3 Authority Key Identifier: keyid:B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:a4:86:36:57:9d:26:98:8f:43:7d:b5:f7:c5:c3:ca:26:c9: f3:8f:5d:6e:52:34:26:f1:3c:5f:31:ab:4e:f2:89:5d:8b:da: e8:b2:9d:42:89:10:16:cf:7d:99:de:fc:c0:46:ef:d3:6b:e7: 8b:33:88:35:65:0b:ea:f2:52:af:b2:b6:a7:58:66:cd:f4:75: ad:9f:72:e4:4e:9b:bf:b4:c6:f8:04:ec:9b:c4:89:26:b7:de: 31:d3:bd:99:78:a9:48:f8:51:82:7a:f9:3d:62:b6:b9:23:b2: d2:2b:e4:2b:da:0a:05:18:64:5a:2d:ce:ee:3c:7f:fa:e7:87: ec:88:7b:dd:ca:97:8b:c4:81:88:76:eb:23:9f:ee:f2:8e:f0: cb:8e:4f:af:1d:6a:33:b7:12:7e:ef:b2:3a:68:43:8f:45:19: 74:b9:c8:2d:f4:17:3f:f2:c4:34:f0:da:b2:9a:7b:31:bc:5a: 8b:6d:7b:63:21:30:7d:5d:c5:83:02:56:e3:bb:13:08:81:6b: de:4c:8e:63:e9:ab:01:3a:14:1a:b5:d2:7d:ea:9d:20:00:82: be:46:72:da:04:0d:7e:15:71:ad:41:6d:e0:6e:88:3a:52:12: 96:77:10:df:c9:c3:3e:1d:34:88:62:79:50:dc:66:28:d2:b0: 7a:1d:41:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRhT59SeZ+YWPM3aRqnoWJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYmM4NTBkMTdjYTZkM2M3YjRkMDBlNTAxZTJkMzU2ZjA4 YTU4NWUwHhcNMjUxMjI0MTgwMDQ1WhcNMjUxMjI1MTgwMDQ1WjAzMTEwLwYDVQQD EyhlMTg0YTIzNWE1MDVkMGQ1ZmM5NDZjZDc2NzQ3YmJmYmJiNGY2NWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXOoNohcBs618yL7EuqhMyEOH9an TdloMfCahGEMFaS4gPz/L+NAUuQuOVl+czMpt5LahL59AoBwn5ycs+Qo33dGV3KD XhJvOseyLGZJe7y+tlauQKydfgsDPLaNrH3svomxYBA/cEnVT7VphwuyDEqgw1rL 4sWggsCjduMd5OiBRPARmSwVuRjlxhb2OxBfb4IWR1h2Bp9Rulq1aJfbplfS1Tfp 2dGxK17ANPFihcdgcis9s0gddhRRMRwq8u4qQJQe+3AbGwg+cdh2izQBmwf7EaIT 744nmM5gCKT6wfqKBmB5/ACHL7B9bh90v0Tn983XuQA3yxqWrmpiuLahrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGEojWlBdDV/JRs12dHu/u7T2W3MB8GA1UdIwQY MBaAFLG8hQ0Xym08e00A5QHi01bwilheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2J5RkRSZktiVHg3VFFEbEFlTFRWdkNLV0Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84YWEwMmQtOTRjOC00Njc4LTkyYWMt MTdmYjRmZmI5ZmFkLzEvc2J5RkRSZktiVHg3VFFEbEFlTFRWdkNLV0Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC84YWEwMmQtOTRjOC00Njc4LTkyYWMtMTdmYjRmZmI5ZmFk LzEvc2J5RkRSZktiVHg3VFFEbEFlTFRWdkNLV0Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKKSGNled JpiPQ32198XDyibJ849dblI0JvE8XzGrTvKJXYva6LKdQokQFs99md78wEbv02vn izOINWUL6vJSr7K2p1hmzfR1rZ9y5E6bv7TG+ATsm8SJJrfeMdO9mXipSPhRgnr5 PWK2uSOy0ivkK9oKBRhkWi3O7jx/+ueH7Ih73cqXi8SBiHbrI5/u8o7wy45Prx1q M7cSfu+yOmhDj0UZdLnILfQXP/LENPDaspp7Mbxai217YyEwfV3FgwJW47sTCIFr 3kyOY+mrAToUGrXSfeqdIACCvkZy2gQNfhVxrUFt4G6IOlISlncQ38nDPh00iGJ5 UNxmKNKweh1BFg== -----END CERTIFICATE-----Generated at Thu Dec 25 00:35:41 2025 by rpki-client