This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft File: Sb1NKMUsLxLkah774RMkG-AMpY8.mft (raw, json) Hash identifier: cZfJ8hvTSJVGwTOOnnh8+isLskHJyVz/w5uEa1nH/r8= Subject key identifier: 5C:F6:BE:18:0C:9A:17:59:D7:A4:3E:46:E5:66:BF:A5:0E:F6:58:FC Authority key identifier: 49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F Certificate issuer: /CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f Certificate serial: 019B3D22EC31EDC89D09511C7F73322C3339 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft Manifest number: 16E1 Signing time: Sat 20 Dec 2025 19:00:57 +0000 Manifest this update: Sat 20 Dec 2025 19:00:57 +0000 Manifest next update: Sun 21 Dec 2025 19:00:57 +0000 Files and hashes: 1: 6y1fUuUD8qUGYjAEz1eFaXKhOQU.roa (hash: k0HLKZQvuysSS9QC5rHoiO/zSTIxOZBp1dxMMgIJx6Y=) 2: Sb1NKMUsLxLkah774RMkG-AMpY8.crl (hash: iMg3GUgeZXr1xghGV/VtsZohWyG0OTU1kz+jFvJlC4k=) 3: VNSLVaEs2JND7MBVU_hMkMCe4VI.roa (hash: 4Gvp8QZhAi16/ZBLIXqdlQkt02B6CjfvrGyg5V1EIUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:ec:31:ed:c8:9d:09:51:1c:7f:73:32:2c:33:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f Validity Not Before: Dec 20 19:00:57 2025 GMT Not After : Dec 21 19:00:57 2025 GMT Subject: CN=5cf6be180c9a1759d7a43e46e566bfa50ef658fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:98:25:46:90:2c:87:8b:49:1a:35:e2:ff:4b: 71:61:cb:df:b4:64:5b:47:76:58:37:3f:c9:80:a2: 4c:2c:77:4a:6d:59:75:8d:05:bb:76:e3:c4:6d:e1: d2:09:70:45:dc:cd:42:32:b0:53:a1:fa:b1:90:67: 21:e4:b8:82:d0:18:dd:3a:01:4c:15:5f:e1:d9:f0: 20:a8:a4:d7:ee:9b:99:09:20:8c:87:64:90:68:f3: c6:77:11:37:8b:df:b8:bf:6c:c8:d2:fc:67:ad:6d: 47:79:96:be:ec:ff:c3:38:73:5b:5e:9a:87:be:fc: ca:ef:a3:d0:b4:e2:47:0d:21:7b:59:c6:aa:df:6c: c4:eb:ed:84:ff:f3:73:82:5e:5e:ce:b4:ea:12:f5: 42:57:c7:39:f2:34:7f:d3:49:c2:f8:d7:69:93:59: 71:6a:8a:96:c0:e0:ef:c1:e0:e5:27:df:c0:6e:5f: f8:17:50:fd:63:4d:19:e1:f5:1d:fa:b2:54:64:ce: 73:34:68:37:7b:84:cb:57:f1:e0:bc:3f:b0:10:63: 80:88:dc:64:ef:9e:af:d7:a4:fa:99:70:57:4a:a3: 84:eb:39:04:35:ba:d4:d7:db:e9:28:65:d7:79:ea: 7b:cd:0f:d0:59:03:4e:87:5c:82:50:d7:23:5e:8b: c3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F6:BE:18:0C:9A:17:59:D7:A4:3E:46:E5:66:BF:A5:0E:F6:58:FC X509v3 Authority Key Identifier: keyid:49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:8a:5c:26:73:c4:a9:12:1f:8f:1d:a5:70:48:1d:de:b6:1e: 46:3f:ce:aa:66:3e:69:22:b2:96:f7:dd:99:ef:fd:2b:96:23: 35:da:1b:c1:b3:fb:24:db:2a:ff:a0:2b:34:79:d0:fb:8a:30: 1a:c9:79:e8:cc:93:71:c7:da:d8:6b:c0:bf:38:6e:e4:42:8d: 17:03:ec:f1:8f:ab:2f:40:c7:28:19:bb:17:b4:6a:24:ce:35: 58:6c:e1:51:ee:5b:b3:ef:cf:7d:e9:2e:fe:72:c4:7b:a7:f2: 15:7c:4e:ab:15:50:7f:85:fc:f2:30:57:4e:d7:45:fa:c8:ec: c0:68:d5:98:0f:fd:5b:ef:d7:7e:29:31:e1:7b:95:a7:3f:06: 20:63:a7:98:38:a1:f0:8d:15:a1:06:be:09:63:81:90:f0:7d: 2e:a9:c0:fc:19:cc:c6:47:79:38:f5:1a:75:dc:3a:fe:31:7b: 32:3c:69:a4:05:fd:03:d9:6c:88:65:3a:2f:8e:38:cc:ba:d7: ce:f9:17:dc:1c:ac:9a:cf:90:6e:a6:fd:f2:fc:37:46:64:cf: 23:80:f0:ee:3a:b6:38:4d:27:36:c9:d0:cb:68:32:b3:65:29: c3:a2:07:dd:b7:31:b9:b2:16:f2:0c:64:97:2e:59:f7:6b:60: da:a3:ff:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Iuwx7cidCVEcf3MyLDM5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YmQ0ZDI4YzUyYzJmMTJlNDZhMWVmYmUxMTMyNDFiZTAw Y2E1OGYwHhcNMjUxMjIwMTkwMDU3WhcNMjUxMjIxMTkwMDU3WjAzMTEwLwYDVQQD Eyg1Y2Y2YmUxODBjOWExNzU5ZDdhNDNlNDZlNTY2YmZhNTBlZjY1OGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JglRpAsh4tJGjXi/0txYcvftGRb R3ZYNz/JgKJMLHdKbVl1jQW7duPEbeHSCXBF3M1CMrBTofqxkGch5LiC0BjdOgFM FV/h2fAgqKTX7puZCSCMh2SQaPPGdxE3i9+4v2zI0vxnrW1HeZa+7P/DOHNbXpqH vvzK76PQtOJHDSF7Wcaq32zE6+2E//Nzgl5ezrTqEvVCV8c58jR/00nC+Ndpk1lx aoqWwODvweDlJ9/Abl/4F1D9Y00Z4fUd+rJUZM5zNGg3e4TLV/HgvD+wEGOAiNxk 756v16T6mXBXSqOE6zkENbrU19vpKGXXeep7zQ/QWQNOh1yCUNcjXovD4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFz2vhgMmhdZ16Q+RuVmv6UO9lj8MB8GA1UdIwQY MBaAFEm9TSjFLC8S5Goe++ETJBvgDKWPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNWFmNDctOTQ1Mi00YzU1LWJjMmYt NTc0NjAwN2NiMmEzLzEvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iNWFmNDctOTQ1Mi00YzU1LWJjMmYtNTc0NjAwN2NiMmEz LzEvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIpcJnPE qRIfjx2lcEgd3rYeRj/OqmY+aSKylvfdme/9K5YjNdobwbP7JNsq/6ArNHnQ+4ow Gsl56MyTccfa2GvAvzhu5EKNFwPs8Y+rL0DHKBm7F7RqJM41WGzhUe5bs+/Pfeku /nLEe6fyFXxOqxVQf4X88jBXTtdF+sjswGjVmA/9W+/Xfikx4XuVpz8GIGOnmDih 8I0VoQa+CWOBkPB9LqnA/BnMxkd5OPUaddw6/jF7MjxppAX9A9lsiGU6L444zLrX zvkX3Bysms+Qbqb98vw3RmTPI4Dw7jq2OE0nNsnQy2gys2Upw6IH3bcxubIW8gxk ly5Z92tg2qP/EQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:25:04 2025 by rpki-client