This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft File: SB_i792qAKxeR9HC1UsEuWEHqUU.mft (raw, json) Hash identifier: 1cgbfu4yuw0vml/a2uVLEaaAs/fAUcnLaMQusMXDWiw= Subject key identifier: 46:1A:45:08:F3:D9:19:C5:7D:8E:85:C3:DE:8A:39:53:1B:D7:B4:46 Authority key identifier: 48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45 Certificate issuer: /CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945 Certificate serial: 019B638C48F2CE38FC86B71331851D32D03E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft Manifest number: 061D Signing time: Sun 28 Dec 2025 06:01:36 +0000 Manifest this update: Sun 28 Dec 2025 06:01:36 +0000 Manifest next update: Mon 29 Dec 2025 06:01:36 +0000 Files and hashes: 1: EzssP_udqCfWQ6VA2hmooPr9R8Q.roa (hash: 7hD4+XAbJWne9LmiwxOyp2EPaz4XFOHQUQwlnknUzS4=) 2: SB_i792qAKxeR9HC1UsEuWEHqUU.crl (hash: Z9qKdwLitjxe/hCrWadGtNDpXdaQbVfX/4Vg0tUGnLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:8c:48:f2:ce:38:fc:86:b7:13:31:85:1d:32:d0:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945 Validity Not Before: Dec 28 06:01:36 2025 GMT Not After : Dec 29 06:01:36 2025 GMT Subject: CN=461a4508f3d919c57d8e85c3de8a39531bd7b446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b0:cf:d4:62:0c:95:f3:ee:e1:ca:cf:00:6d: a0:e7:77:3d:05:bb:14:89:d1:af:6d:35:79:85:e8: 45:30:b8:83:91:88:87:af:24:25:b6:ee:ea:1b:91: e7:3e:c5:b0:6a:88:f0:ac:94:09:a7:09:39:df:2a: 62:a3:7d:33:87:11:66:97:9e:71:a2:fa:15:4d:b7: 89:12:a7:84:8e:fd:0e:9a:e6:f0:bd:0f:3e:fc:9c: 81:88:44:3b:41:b9:1c:e0:a7:01:44:8c:e6:53:c2: 77:c0:79:68:5f:a5:8a:81:5e:57:66:6f:0f:49:3b: 48:53:1e:54:c3:ad:39:8a:0d:9f:c7:a0:d6:51:70: 5a:f4:b9:91:df:9c:c6:86:de:10:04:db:54:9d:b3: db:17:48:9c:0d:6b:7f:b1:91:9d:e7:65:2f:5c:a6: 50:fb:e5:52:ce:8d:20:b7:72:92:1f:42:22:18:1f: 77:3e:b7:89:04:0a:d1:4b:a9:2f:b8:8c:50:c2:60: 90:2d:77:3f:62:ab:05:ee:8c:54:c2:52:56:bd:2e: 83:9e:34:67:0f:72:ad:5a:b9:f4:ee:17:ce:3c:d9: 67:4f:3f:10:ae:3d:1a:c5:b8:c3:ad:59:80:65:ee: 1f:e5:ea:bc:f2:81:5d:ae:f2:8d:6b:1d:aa:ef:fe: f4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:1A:45:08:F3:D9:19:C5:7D:8E:85:C3:DE:8A:39:53:1B:D7:B4:46 X509v3 Authority Key Identifier: keyid:48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:72:0e:07:4e:68:8d:ad:80:f4:26:0f:81:4e:29:a9:b1:d1: c7:e3:b0:7f:b2:33:12:fe:c0:63:55:5d:c0:f4:ab:35:c1:ab: c1:4d:8f:bc:6a:93:f1:89:66:aa:35:aa:04:56:40:be:16:26: d6:4c:0c:a8:7e:9f:02:c3:b8:bb:80:27:85:4c:e6:0d:be:1a: f3:b3:b8:59:d3:73:2a:11:48:4c:df:18:71:06:c3:da:13:ba: 7d:85:6f:b8:cd:db:48:b0:ce:8e:c9:62:a8:55:8d:a3:29:a3: 1b:5a:42:dd:9e:e2:e0:83:1c:28:47:48:e6:ce:c1:31:d0:f7: a7:bb:7b:b3:2f:2d:88:6f:e1:ba:28:a9:23:fb:8e:47:c4:3b: 7e:d4:46:01:5b:a1:1d:8e:73:05:82:26:3a:7a:5a:d8:9a:e3: 9b:1d:23:cc:a1:50:81:4d:71:9e:3b:0c:93:cd:45:bc:3a:23: a3:73:6a:48:f4:a9:66:a9:2b:5f:e7:0c:00:ff:51:49:f9:a0: 69:37:86:bc:f8:3f:00:8c:d5:e6:76:87:b6:2b:45:b6:0a:50: 27:7c:2f:7b:6c:65:84:1b:38:f4:69:9b:db:e5:7d:c9:46:8f: b3:85:e4:a1:3e:ff:80:40:3f:9a:31:a5:9d:05:13:d2:7f:0f: 61:a0:87:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjjEjyzjj8hrcTMYUdMtA+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MWZlMmVmZGRhYTAwYWM1ZTQ3ZDFjMmQ1NGIwNGI5NjEw N2E5NDUwHhcNMjUxMjI4MDYwMTM2WhcNMjUxMjI5MDYwMTM2WjAzMTEwLwYDVQQD Eyg0NjFhNDUwOGYzZDkxOWM1N2Q4ZTg1YzNkZThhMzk1MzFiZDdiNDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bDP1GIMlfPu4crPAG2g53c9BbsU idGvbTV5hehFMLiDkYiHryQltu7qG5HnPsWwaojwrJQJpwk53ypio30zhxFml55x ovoVTbeJEqeEjv0OmubwvQ8+/JyBiEQ7Qbkc4KcBRIzmU8J3wHloX6WKgV5XZm8P STtIUx5Uw605ig2fx6DWUXBa9LmR35zGht4QBNtUnbPbF0icDWt/sZGd52UvXKZQ ++VSzo0gt3KSH0IiGB93PreJBArRS6kvuIxQwmCQLXc/YqsF7oxUwlJWvS6DnjRn D3KtWrn07hfOPNlnTz8Qrj0axbjDrVmAZe4f5eq88oFdrvKNax2q7/702QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYaRQjz2RnFfY6Fw96KOVMb17RGMB8GA1UdIwQY MBaAFEgf4u/dqgCsXkfRwtVLBLlhB6lFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JfaTc5MnFBS3hlUjlIQzFVc0V1V0VIcVVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lNzhiYzEtYmQ2NC00NDUzLTk3Yzkt YWMwOTIxNDA5NjdlLzEvU0JfaTc5MnFBS3hlUjlIQzFVc0V1V0VIcVVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9lNzhiYzEtYmQ2NC00NDUzLTk3YzktYWMwOTIxNDA5Njdl LzEvU0JfaTc5MnFBS3hlUjlIQzFVc0V1V0VIcVVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXIOB05o ja2A9CYPgU4pqbHRx+Owf7IzEv7AY1VdwPSrNcGrwU2PvGqT8YlmqjWqBFZAvhYm 1kwMqH6fAsO4u4AnhUzmDb4a87O4WdNzKhFITN8YcQbD2hO6fYVvuM3bSLDOjsli qFWNoymjG1pC3Z7i4IMcKEdI5s7BMdD3p7t7sy8tiG/huiipI/uOR8Q7ftRGAVuh HY5zBYImOnpa2Jrjmx0jzKFQgU1xnjsMk81FvDojo3NqSPSpZqkrX+cMAP9RSfmg aTeGvPg/AIzV5naHtitFtgpQJ3wve2xlhBs49Gmb2+V9yUaPs4XkoT7/gEA/mjGl nQUT0n8PYaCHcQ== -----END CERTIFICATE-----Generated at Sun Dec 28 07:33:51 2025 by rpki-client