This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft File: SBL_SF_9eUppSAeK_k4Hav5hdjU.mft (raw, json) Hash identifier: rgC4iq4UZIXo/BpwTbXMhVbj++b1tG+jMrMLDnWJB6Y= Subject key identifier: 57:A6:9B:CB:DF:FB:1B:2A:A5:0A:CA:FA:04:74:42:6D:C1:4A:6F:24 Authority key identifier: 48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35 Certificate issuer: /CN=4812ff485ffd794a6948078afe4e076afe617635 Certificate serial: 019B3EDAA88C2B2C364A485FFB32C75762E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft Manifest number: 0F2B Signing time: Sun 21 Dec 2025 03:01:15 +0000 Manifest this update: Sun 21 Dec 2025 03:01:15 +0000 Manifest next update: Mon 22 Dec 2025 03:01:15 +0000 Files and hashes: 1: QUetVN6X86rvvQoO6G_tbqbRIGw.roa (hash: RyB2mund6fN4oswJYJTqjpu2U30ovkwRYiiHktnKMJw=) 2: SBL_SF_9eUppSAeK_k4Hav5hdjU.crl (hash: KTakSTePdceQbQHuGNyZjMIDf8M3dv57HBmGT3IpOv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:a8:8c:2b:2c:36:4a:48:5f:fb:32:c7:57:62:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4812ff485ffd794a6948078afe4e076afe617635 Validity Not Before: Dec 21 03:01:15 2025 GMT Not After : Dec 22 03:01:15 2025 GMT Subject: CN=57a69bcbdffb1b2aa50acafa0474426dc14a6f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5e:cc:f6:7e:61:dc:3b:91:86:b3:99:f7:3a: 40:6c:de:df:67:ba:12:61:de:fb:0a:ff:b6:74:d1: 53:7e:01:77:e2:0e:78:c7:11:b6:5f:a5:97:8b:42: bf:ee:a2:9d:52:e5:15:6a:34:4d:0a:ad:68:66:c0: e5:1b:46:a1:46:15:9d:25:87:d4:0e:0f:1e:ba:cc: b7:be:dc:68:f5:2f:47:e4:f5:71:2c:82:c2:8c:eb: 87:ed:63:72:a0:93:b1:89:b0:9d:6a:d1:7b:ce:77: 0c:f2:5f:f2:17:b6:98:dc:d0:e4:25:bd:3d:7a:3d: b2:4d:b3:87:70:19:57:fc:1a:59:09:d7:de:4b:6a: f9:35:8d:87:90:c5:58:6d:6b:53:0f:17:e0:86:40: 26:c4:cd:21:d2:9c:a6:dc:73:fc:d3:53:d9:22:73: 7c:cd:09:7f:fc:a7:86:81:73:0b:24:64:28:d3:4f: 97:05:e4:6c:48:f2:09:40:88:92:7a:7d:48:54:fb: 91:2a:0b:c9:27:96:56:48:78:d7:3b:08:55:63:6a: 21:7a:f0:ba:91:05:af:97:af:79:58:40:df:14:c5: 64:31:43:07:90:5f:4d:b3:aa:f2:58:3c:bf:de:a4: b9:a9:b9:88:69:9c:b5:5e:fe:8e:62:6a:98:ac:4b: c1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A6:9B:CB:DF:FB:1B:2A:A5:0A:CA:FA:04:74:42:6D:C1:4A:6F:24 X509v3 Authority Key Identifier: keyid:48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:66:60:0a:84:ce:ff:ce:89:15:b0:de:98:d6:a7:27:77:1a: 07:b2:d1:cd:bd:68:ea:2b:64:3a:75:83:17:6b:5a:47:8c:78: 44:f4:71:7e:09:58:ce:d5:f9:bd:20:be:66:55:7c:a9:1f:b0: 8e:b3:04:c6:f6:a6:f1:e5:f4:0d:d5:e0:ef:72:c9:51:ea:a7: a6:4c:aa:17:ff:b5:c0:f5:f0:5b:9c:bc:fe:07:9f:25:fa:16: 0f:54:1a:96:1d:0a:df:39:1d:b1:83:97:c0:06:cb:76:36:14: 3f:20:12:a4:98:08:0a:0f:fd:5c:b1:97:b1:4a:49:0d:f9:ca: 81:1a:7d:7b:ad:ab:00:05:dd:c7:51:40:52:28:e5:bc:3d:82: 78:44:d9:b9:32:21:d7:5b:07:b3:f3:2d:c5:78:e4:be:4c:70: 0e:c4:e0:af:00:69:9f:8a:f0:01:dd:4e:3d:be:56:f8:85:f4: 92:49:db:47:0b:1c:5a:d1:ae:05:6d:c5:ff:27:d2:f4:34:78: 1e:cd:b8:56:ab:9e:5a:24:6f:30:86:9c:fd:ae:f4:66:76:9d: 54:e5:6a:d2:71:cd:2d:4b:c6:ea:ae:9c:b9:4a:cb:0b:b0:31: 01:16:07:29:71:30:da:46:a3:5c:05:76:85:c5:33:a6:d0:d6: 4f:d0:3e:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2qiMKyw2Skhf+zLHV2LkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MTJmZjQ4NWZmZDc5NGE2OTQ4MDc4YWZlNGUwNzZhZmU2 MTc2MzUwHhcNMjUxMjIxMDMwMTE1WhcNMjUxMjIyMDMwMTE1WjAzMTEwLwYDVQQD Eyg1N2E2OWJjYmRmZmIxYjJhYTUwYWNhZmEwNDc0NDI2ZGMxNGE2ZjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV7M9n5h3DuRhrOZ9zpAbN7fZ7oS Yd77Cv+2dNFTfgF34g54xxG2X6WXi0K/7qKdUuUVajRNCq1oZsDlG0ahRhWdJYfU Dg8eusy3vtxo9S9H5PVxLILCjOuH7WNyoJOxibCdatF7zncM8l/yF7aY3NDkJb09 ej2yTbOHcBlX/BpZCdfeS2r5NY2HkMVYbWtTDxfghkAmxM0h0pym3HP801PZInN8 zQl//KeGgXMLJGQo00+XBeRsSPIJQIiSen1IVPuRKgvJJ5ZWSHjXOwhVY2ohevC6 kQWvl695WEDfFMVkMUMHkF9Ns6ryWDy/3qS5qbmIaZy1Xv6OYmqYrEvBLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFemm8vf+xsqpQrK+gR0Qm3BSm8kMB8GA1UdIwQY MBaAFEgS/0hf/XlKaUgHiv5OB2r+YXY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JMX1NGXzllVXBwU0FlS19rNEhhdjVoZGpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85YzEzNjItNDZmZC00ODlhLWJiOTUt NjY5YThmZWI3MTQ3LzEvU0JMX1NGXzllVXBwU0FlS19rNEhhdjVoZGpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS85YzEzNjItNDZmZC00ODlhLWJiOTUtNjY5YThmZWI3MTQ3 LzEvU0JMX1NGXzllVXBwU0FlS19rNEhhdjVoZGpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo2ZgCoTO /86JFbDemNanJ3caB7LRzb1o6itkOnWDF2taR4x4RPRxfglYztX5vSC+ZlV8qR+w jrMExvam8eX0DdXg73LJUeqnpkyqF/+1wPXwW5y8/gefJfoWD1Qalh0K3zkdsYOX wAbLdjYUPyASpJgICg/9XLGXsUpJDfnKgRp9e62rAAXdx1FAUijlvD2CeETZuTIh 11sHs/MtxXjkvkxwDsTgrwBpn4rwAd1OPb5W+IX0kknbRwscWtGuBW3F/yfS9DR4 Hs24VqueWiRvMIac/a70ZnadVOVq0nHNLUvG6q6cuUrLC7AxARYHKXEw2kajXAV2 hcUzptDWT9A+/w== -----END CERTIFICATE-----Generated at Sun Dec 21 06:45:57 2025 by rpki-client