This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft File: SbJERkTEM0jXxQ9OUOdDVumJbb8.mft (raw, json) Hash identifier: he+OuxTMsOIm9sJWItHuSBVLnY6P0Be58cqVEZkNUAY= Subject key identifier: 3C:2E:A3:48:2C:F0:47:4E:39:59:0F:E9:18:53:26:75:7B:C8:34:99 Authority key identifier: 49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF Certificate issuer: /CN=49b2444644c43348d7c50f4e50e74356e9896dbf Certificate serial: 019B077E42F1E41FF9563B49D2809E234EEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft Manifest number: 14C3 Signing time: Wed 10 Dec 2025 09:01:13 +0000 Manifest this update: Wed 10 Dec 2025 09:01:13 +0000 Manifest next update: Thu 11 Dec 2025 09:01:13 +0000 Files and hashes: 1: 1wuoe06EqKtSedO7NGLRmPTmhGc.roa (hash: /sDFB0I8q5IJW+UJc1pW+YTD5nABqiUh65XbbCjiXPo=) 2: MErMEgT0Mlg4NzXbifAxY_vYJ18.roa (hash: kZo3foZgB/DZe3VgEb3C47cfvC/YSEn388ZX35kgFPI=) 3: RUJrM9R2Q01CiiseZx6BuCkPhi8.roa (hash: ud9fyI+JnGNFQZazgaWgNO5UTDdn2ppqyRqse6KTBD4=) 4: SbJERkTEM0jXxQ9OUOdDVumJbb8.crl (hash: UTrhhBX5+AUUcLBaOzVomHlNSgXyJt8evRy320f3qaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 09:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:7e:42:f1:e4:1f:f9:56:3b:49:d2:80:9e:23:4e:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49b2444644c43348d7c50f4e50e74356e9896dbf Validity Not Before: Dec 10 09:01:13 2025 GMT Not After : Dec 11 09:01:13 2025 GMT Subject: CN=3c2ea3482cf0474e39590fe9185326757bc83499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:18:cb:dc:e1:73:b9:72:e1:fd:97:2b:54:7c: 4f:5d:c5:b8:a4:0b:e1:9d:c4:8f:91:40:41:98:f0: 5f:34:93:d1:d2:cb:05:10:bc:62:62:52:46:30:95: 4d:c5:5f:b3:3a:75:b9:2b:6f:20:18:a8:f8:0b:ce: 10:15:7c:56:29:07:fe:c3:61:53:72:df:63:87:d3: 2a:5f:5d:dc:61:85:f1:e1:bc:46:db:a6:cb:af:a5: f8:07:6e:66:c2:5a:e6:26:61:ef:70:96:36:2b:7d: f3:86:d6:5d:a0:12:d4:e4:29:46:1f:8c:92:01:a3: 14:35:ea:12:08:95:98:bd:bb:dc:2d:b3:9d:81:2e: 0a:a8:24:46:ee:19:26:ad:65:c0:6a:1e:f3:4e:57: 2b:0f:c1:38:1e:6b:b0:23:ba:61:90:d6:92:7d:cc: 6a:8e:f8:e1:4d:db:1a:5b:4e:3b:0e:fd:0e:aa:55: cd:7e:eb:75:63:56:62:57:48:6a:ee:48:4c:3e:f0: 5d:f4:8c:c1:31:19:e8:e9:1f:13:73:08:88:8d:d6: d4:f0:ca:e9:04:cf:97:c0:a9:d7:73:64:7e:44:12: 76:c4:dc:b1:eb:f5:90:ed:b2:06:2b:54:bf:e8:a7: a6:46:33:08:d8:17:3d:4b:62:52:fa:aa:2d:35:06: 15:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2E:A3:48:2C:F0:47:4E:39:59:0F:E9:18:53:26:75:7B:C8:34:99 X509v3 Authority Key Identifier: keyid:49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:19:69:54:c3:9c:c9:a9:3a:9b:5d:45:8b:26:c5:cf:8a:99: ec:82:33:c4:3c:20:de:fe:2c:db:e0:3f:17:40:90:26:78:e6: 67:72:0b:1f:fb:25:b5:03:2b:66:9c:53:0c:3b:c8:d5:6e:47: bc:f0:f3:cf:c4:31:f3:9b:40:54:6f:d6:33:0b:51:88:30:94: 47:50:b3:c5:0c:b3:0f:02:00:5d:62:ac:79:a1:1c:33:a6:ab: 51:0f:78:4a:1c:69:17:72:03:e3:3f:89:93:6b:10:a9:88:d4: eb:bb:7e:ae:8a:d6:b8:51:44:47:00:20:90:42:fa:85:be:e1: b8:1d:dd:22:02:83:2a:a3:2a:c1:3e:8a:47:5c:b2:80:f3:12: f4:26:58:a8:e9:0b:ea:fd:1f:22:2a:10:c7:a2:17:e7:3c:f6: 40:8f:2d:60:08:17:25:c8:4d:f5:b0:d0:b1:c0:16:52:93:0b: 4c:d8:28:ec:3c:3d:43:47:19:ec:d7:24:2c:ec:aa:eb:c3:06: 33:1c:c9:3c:87:d1:b3:b2:5b:0a:86:8d:14:15:00:af:2e:c9: 3d:b9:cf:58:1c:43:ac:c9:f5:eb:a3:be:f1:5b:9e:fe:fc:0b: d2:18:d8:98:34:d5:80:10:11:d4:4e:3c:74:b7:9f:2d:5c:3a: 4b:ef:57:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHfkLx5B/5VjtJ0oCeI07sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YjI0NDQ2NDRjNDMzNDhkN2M1MGY0ZTUwZTc0MzU2ZTk4 OTZkYmYwHhcNMjUxMjEwMDkwMTEzWhcNMjUxMjExMDkwMTEzWjAzMTEwLwYDVQQD EygzYzJlYTM0ODJjZjA0NzRlMzk1OTBmZTkxODUzMjY3NTdiYzgzNDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhjL3OFzuXLh/ZcrVHxPXcW4pAvh ncSPkUBBmPBfNJPR0ssFELxiYlJGMJVNxV+zOnW5K28gGKj4C84QFXxWKQf+w2FT ct9jh9MqX13cYYXx4bxG26bLr6X4B25mwlrmJmHvcJY2K33zhtZdoBLU5ClGH4yS AaMUNeoSCJWYvbvcLbOdgS4KqCRG7hkmrWXAah7zTlcrD8E4HmuwI7phkNaSfcxq jvjhTdsaW047Dv0OqlXNfut1Y1ZiV0hq7khMPvBd9IzBMRno6R8TcwiIjdbU8Mrp BM+XwKnXc2R+RBJ2xNyx6/WQ7bIGK1S/6KemRjMI2Bc9S2JS+qotNQYV4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwuo0gs8EdOOVkP6RhTJnV7yDSZMB8GA1UdIwQY MBaAFEmyREZExDNI18UPTlDnQ1bpiW2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi82NGNkYmQtYzg1MS00YjM1LWJiNzkt NzUzZDk2OWEwNzAyLzEvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi82NGNkYmQtYzg1MS00YjM1LWJiNzktNzUzZDk2OWEwNzAy LzEvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBlpVMOc yak6m11FiybFz4qZ7IIzxDwg3v4s2+A/F0CQJnjmZ3ILH/sltQMrZpxTDDvI1W5H vPDzz8Qx85tAVG/WMwtRiDCUR1CzxQyzDwIAXWKseaEcM6arUQ94ShxpF3ID4z+J k2sQqYjU67t+rorWuFFERwAgkEL6hb7huB3dIgKDKqMqwT6KR1yygPMS9CZYqOkL 6v0fIioQx6IX5zz2QI8tYAgXJchN9bDQscAWUpMLTNgo7Dw9Q0cZ7NckLOyq68MG MxzJPIfRs7JbCoaNFBUAry7JPbnPWBxDrMn166O+8Vue/vwL0hjYmDTVgBAR1E48 dLefLVw6S+9X1g== -----END CERTIFICATE-----Generated at Wed Dec 10 18:24:42 2025 by rpki-client