This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft File: Sb1NKMUsLxLkah774RMkG-AMpY8.mft (raw, json) Hash identifier: iDR3Nze5+n5YZUedQZLWNLaEGDK5P21sTWmtLkyBBjY= Subject key identifier: 0A:DB:49:6E:17:FA:37:63:47:2B:8D:DA:3C:AB:1C:68:36:58:47:69 Authority key identifier: 49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F Certificate issuer: /CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f Certificate serial: 019B40FF7FC9DAE4E91CEF35337ECB7F04D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft Manifest number: 16E3 Signing time: Sun 21 Dec 2025 13:00:44 +0000 Manifest this update: Sun 21 Dec 2025 13:00:44 +0000 Manifest next update: Mon 22 Dec 2025 13:00:44 +0000 Files and hashes: 1: 6y1fUuUD8qUGYjAEz1eFaXKhOQU.roa (hash: k0HLKZQvuysSS9QC5rHoiO/zSTIxOZBp1dxMMgIJx6Y=) 2: Sb1NKMUsLxLkah774RMkG-AMpY8.crl (hash: 3wXQBLUuT7WT+JB4EvioHZqMzzZWpwrwPcantADw6Ng=) 3: VNSLVaEs2JND7MBVU_hMkMCe4VI.roa (hash: 4Gvp8QZhAi16/ZBLIXqdlQkt02B6CjfvrGyg5V1EIUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:7f:c9:da:e4:e9:1c:ef:35:33:7e:cb:7f:04:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f Validity Not Before: Dec 21 13:00:44 2025 GMT Not After : Dec 22 13:00:44 2025 GMT Subject: CN=0adb496e17fa3763472b8dda3cab1c6836584769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:89:5c:3a:4e:16:4c:ef:4a:38:94:88:31:cb: 95:cc:57:60:c5:59:ff:cf:d9:2b:69:97:33:20:bf: 1f:31:eb:23:20:b5:ee:13:50:49:22:63:5e:06:99: e7:60:f6:a3:ec:a4:21:ea:83:9c:57:c4:bd:5a:c9: 6b:2d:af:6f:0d:d7:6f:0b:11:e7:89:a4:ed:48:60: 5a:0f:6c:76:d3:a4:00:0a:24:61:1c:4d:30:da:91: d6:80:70:24:cf:8f:9a:95:3a:c7:08:bb:2f:cd:2b: 8f:a5:ba:78:75:51:1f:cc:0c:f7:79:c8:74:31:d7: 5b:84:f6:ea:8c:a5:f6:22:9c:e7:7a:29:b4:f4:fe: d0:eb:c7:d7:e4:a4:ef:96:67:34:51:3f:63:b6:f6: d3:ef:7a:7a:59:c9:ed:bf:1f:d4:23:90:93:ab:ba: 5f:5b:7b:ab:0d:9f:fc:72:ed:57:32:c0:3b:25:4b: 3b:d4:9a:23:83:5c:21:ea:e6:3e:3a:ae:6d:7e:f8: 9d:2b:9a:22:8d:3b:c8:56:7f:76:c1:02:73:a7:ca: 24:1a:86:f2:cf:af:a3:3d:1b:2e:e3:d7:09:c3:0f: b4:61:15:41:08:c5:87:cf:a7:3f:d6:9e:08:51:63: 12:ad:c1:90:da:f3:70:b4:42:f0:86:86:40:e7:3e: 06:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DB:49:6E:17:FA:37:63:47:2B:8D:DA:3C:AB:1C:68:36:58:47:69 X509v3 Authority Key Identifier: keyid:49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:71:3b:52:46:f7:57:60:61:bb:43:af:59:f9:82:2d:d5:be: 95:ae:ea:20:51:40:65:05:07:4c:f7:73:47:07:3d:a4:55:db: a8:2d:b8:d8:9a:dd:49:33:95:44:bf:a3:4e:37:21:70:aa:81: 4a:1f:b4:6a:c9:31:f0:79:83:04:cd:3e:f3:6d:04:bb:29:93: 80:c8:c5:ed:a4:22:61:87:02:17:93:ee:65:ac:df:2c:8a:ed: b8:eb:a6:57:2e:db:d6:33:61:cf:32:9f:13:a2:7c:8f:7f:d6: 46:1c:63:a2:7c:7b:02:d9:9e:8f:68:d3:7e:25:ef:1a:90:64: 1b:e9:3a:a4:6c:fb:9b:52:78:c7:82:fd:b5:d6:80:df:8c:77: 1a:8e:60:93:a5:e7:22:c8:1c:4c:b6:c4:d0:29:cb:a6:fb:df: fc:62:e3:a0:67:c7:79:ca:05:af:10:4f:4a:7a:0d:d3:c0:ac: 1c:ec:45:cc:8d:ec:19:3b:90:c1:ec:dc:d2:87:3f:64:4a:6e: c9:e1:d5:26:7a:3b:0a:1b:80:69:36:10:52:c6:2b:cc:a8:76: 87:4b:5f:bb:92:0c:c9:4a:a7:1e:cf:74:cd:c5:8e:08:4d:7a: c9:d4:71:2b:bb:98:5b:57:98:9f:09:2c:1c:ee:a3:06:29:47: 5e:e5:83:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/3/J2uTpHO81M37LfwTUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YmQ0ZDI4YzUyYzJmMTJlNDZhMWVmYmUxMTMyNDFiZTAw Y2E1OGYwHhcNMjUxMjIxMTMwMDQ0WhcNMjUxMjIyMTMwMDQ0WjAzMTEwLwYDVQQD EygwYWRiNDk2ZTE3ZmEzNzYzNDcyYjhkZGEzY2FiMWM2ODM2NTg0NzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YlcOk4WTO9KOJSIMcuVzFdgxVn/ z9kraZczIL8fMesjILXuE1BJImNeBpnnYPaj7KQh6oOcV8S9WslrLa9vDddvCxHn iaTtSGBaD2x206QACiRhHE0w2pHWgHAkz4+alTrHCLsvzSuPpbp4dVEfzAz3ech0 MddbhPbqjKX2Ipzneim09P7Q68fX5KTvlmc0UT9jtvbT73p6Wcntvx/UI5CTq7pf W3urDZ/8cu1XMsA7JUs71Jojg1wh6uY+Oq5tfvidK5oijTvIVn92wQJzp8okGoby z6+jPRsu49cJww+0YRVBCMWHz6c/1p4IUWMSrcGQ2vNwtELwhoZA5z4GgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArbSW4X+jdjRyuN2jyrHGg2WEdpMB8GA1UdIwQY MBaAFEm9TSjFLC8S5Goe++ETJBvgDKWPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNWFmNDctOTQ1Mi00YzU1LWJjMmYt NTc0NjAwN2NiMmEzLzEvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iNWFmNDctOTQ1Mi00YzU1LWJjMmYtNTc0NjAwN2NiMmEz LzEvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHE7Ukb3 V2Bhu0OvWfmCLdW+la7qIFFAZQUHTPdzRwc9pFXbqC242JrdSTOVRL+jTjchcKqB Sh+0askx8HmDBM0+820EuymTgMjF7aQiYYcCF5PuZazfLIrtuOumVy7b1jNhzzKf E6J8j3/WRhxjonx7Atmej2jTfiXvGpBkG+k6pGz7m1J4x4L9tdaA34x3Go5gk6Xn IsgcTLbE0CnLpvvf/GLjoGfHecoFrxBPSnoN08CsHOxFzI3sGTuQwezc0oc/ZEpu yeHVJno7ChuAaTYQUsYrzKh2h0tfu5IMyUqnHs90zcWOCE16ydRxK7uYW1eYnwks HO6jBilHXuWDeg== -----END CERTIFICATE-----Generated at Sun Dec 21 17:24:54 2025 by rpki-client