This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft File: SBL_SF_9eUppSAeK_k4Hav5hdjU.mft (raw, json) Hash identifier: zgdb4QmOXlGkkOpXZeGQ6P2HWyUw/EFFNi+Ud1b040w= Subject key identifier: A7:28:EE:41:0A:0F:DD:00:98:0A:00:BD:5E:34:C4:D1:DD:A9:AD:BC Authority key identifier: 48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35 Certificate issuer: /CN=4812ff485ffd794a6948078afe4e076afe617635 Certificate serial: 019B6B455A8182D1CD00F097C59E8FBAA8E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft Manifest number: 0F42 Signing time: Mon 29 Dec 2025 18:01:05 +0000 Manifest this update: Mon 29 Dec 2025 18:01:05 +0000 Manifest next update: Tue 30 Dec 2025 18:01:05 +0000 Files and hashes: 1: QUetVN6X86rvvQoO6G_tbqbRIGw.roa (hash: RyB2mund6fN4oswJYJTqjpu2U30ovkwRYiiHktnKMJw=) 2: SBL_SF_9eUppSAeK_k4Hav5hdjU.crl (hash: 69qhxKBwANjXHHf+u/DB00ElLKVbENcWRsKZQcC++3w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:45:5a:81:82:d1:cd:00:f0:97:c5:9e:8f:ba:a8:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4812ff485ffd794a6948078afe4e076afe617635 Validity Not Before: Dec 29 18:01:05 2025 GMT Not After : Dec 30 18:01:05 2025 GMT Subject: CN=a728ee410a0fdd00980a00bd5e34c4d1dda9adbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8d:b9:95:e5:c7:d1:9f:b0:f4:e8:16:2a:a7: 46:6e:7d:88:5e:9f:4d:8e:c6:f2:c2:4d:5e:7b:4f: 0a:51:32:26:66:a6:aa:17:3d:d4:93:df:30:eb:04: 3d:74:9f:f9:c6:45:1e:52:ce:6a:d9:57:89:d4:06: 24:6f:7e:9f:ce:38:b1:39:cf:97:e3:72:6f:9a:81: 57:2d:67:62:5b:7b:56:32:8f:32:49:27:ff:75:d8: 5b:9a:60:f6:cb:1d:0d:b1:f5:7b:35:2c:d6:71:fb: 69:f7:28:86:c6:1e:e3:9b:13:d6:64:f0:df:4a:04: 86:90:af:2a:6a:ab:e0:b1:a4:1c:5e:db:42:38:5b: ff:1a:5f:b7:26:c1:a1:c1:3c:04:c4:cf:be:8d:a1: b7:2c:5d:65:6d:a8:2b:a3:02:50:6e:df:e2:7f:ce: 84:47:3f:a4:5f:01:b6:46:6f:5b:69:23:6b:1f:5f: 0d:83:a0:7f:97:79:f5:90:8a:05:d8:76:1a:17:5c: a8:bc:2b:d3:14:98:a3:e1:3e:4d:b8:28:27:ee:3e: 9b:d7:42:7a:4d:42:4a:b5:49:e9:9b:cb:a0:3d:a4: e3:63:c5:57:37:53:96:b4:e4:67:eb:50:7e:90:e6: ce:ae:34:4b:56:b2:f8:d0:96:f6:36:c6:af:d1:a3: 6d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:28:EE:41:0A:0F:DD:00:98:0A:00:BD:5E:34:C4:D1:DD:A9:AD:BC X509v3 Authority Key Identifier: keyid:48:12:FF:48:5F:FD:79:4A:69:48:07:8A:FE:4E:07:6A:FE:61:76:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBL_SF_9eUppSAeK_k4Hav5hdjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9c1362-46fd-489a-bb95-669a8feb7147/1/SBL_SF_9eUppSAeK_k4Hav5hdjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:c0:b1:ea:9c:47:73:c5:b3:e4:3c:40:cc:e1:ce:32:e0:27: 49:55:2e:dc:b7:c1:c3:09:f8:29:50:f4:ed:0c:3f:5f:0e:75: 3f:1d:01:e8:45:18:d2:91:20:23:cd:4b:1b:f3:e4:1f:bf:ac: 66:60:57:cc:5d:0b:88:f6:9c:a2:10:5b:b1:96:83:29:7d:54: ae:18:5a:92:0b:24:da:d1:a7:af:7c:5b:a4:7f:15:f4:2e:6a: ca:54:e8:87:37:99:da:4b:47:b0:f0:48:13:ef:c3:a6:c9:05: ab:7d:d4:50:63:c8:b6:87:e5:2c:da:87:eb:39:67:ca:ff:03: ef:3b:2d:bf:de:26:ea:29:0e:73:08:c9:78:f6:43:15:15:1c: 2a:e2:56:9c:e9:0b:2a:e4:a4:47:2d:3d:07:9f:63:1d:9e:48: 1f:ed:27:46:fb:4e:a7:d6:8b:13:1d:f2:2b:b2:60:6d:db:5d: 76:9e:b7:4d:51:30:b1:a6:ea:2d:e9:a6:03:77:d9:1d:d7:9a: ca:62:a0:de:10:55:19:6b:ee:c2:b0:7e:92:f0:b8:9c:3a:78: eb:81:2f:fc:73:08:01:2e:68:b6:b8:27:ea:c6:40:14:89:52: 93:61:60:ef:0e:eb:bd:ed:c5:16:6b:21:79:2a:7d:9c:5d:20: 06:8d:33:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrRVqBgtHNAPCXxZ6PuqjmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MTJmZjQ4NWZmZDc5NGE2OTQ4MDc4YWZlNGUwNzZhZmU2 MTc2MzUwHhcNMjUxMjI5MTgwMTA1WhcNMjUxMjMwMTgwMTA1WjAzMTEwLwYDVQQD EyhhNzI4ZWU0MTBhMGZkZDAwOTgwYTAwYmQ1ZTM0YzRkMWRkYTlhZGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY25leXH0Z+w9OgWKqdGbn2IXp9N jsbywk1ee08KUTImZqaqFz3Uk98w6wQ9dJ/5xkUeUs5q2VeJ1AYkb36fzjixOc+X 43JvmoFXLWdiW3tWMo8ySSf/ddhbmmD2yx0NsfV7NSzWcftp9yiGxh7jmxPWZPDf SgSGkK8qaqvgsaQcXttCOFv/Gl+3JsGhwTwExM++jaG3LF1lbagrowJQbt/if86E Rz+kXwG2Rm9baSNrH18Ng6B/l3n1kIoF2HYaF1yovCvTFJij4T5NuCgn7j6b10J6 TUJKtUnpm8ugPaTjY8VXN1OWtORn61B+kObOrjRLVrL40Jb2Nsav0aNtWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKco7kEKD90AmAoAvV40xNHdqa28MB8GA1UdIwQY MBaAFEgS/0hf/XlKaUgHiv5OB2r+YXY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JMX1NGXzllVXBwU0FlS19rNEhhdjVoZGpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85YzEzNjItNDZmZC00ODlhLWJiOTUt NjY5YThmZWI3MTQ3LzEvU0JMX1NGXzllVXBwU0FlS19rNEhhdjVoZGpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS85YzEzNjItNDZmZC00ODlhLWJiOTUtNjY5YThmZWI3MTQ3 LzEvU0JMX1NGXzllVXBwU0FlS19rNEhhdjVoZGpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8Cx6pxH c8Wz5DxAzOHOMuAnSVUu3LfBwwn4KVD07Qw/Xw51Px0B6EUY0pEgI81LG/PkH7+s ZmBXzF0LiPacohBbsZaDKX1Urhhakgsk2tGnr3xbpH8V9C5qylTohzeZ2ktHsPBI E+/DpskFq33UUGPItoflLNqH6zlnyv8D7zstv94m6ikOcwjJePZDFRUcKuJWnOkL KuSkRy09B59jHZ5IH+0nRvtOp9aLEx3yK7Jgbdtddp63TVEwsabqLemmA3fZHdea ymKg3hBVGWvuwrB+kvC4nDp464Ev/HMIAS5otrgn6sZAFIlSk2Fg7w7rve3FFmsh eSp9nF0gBo0zUw== -----END CERTIFICATE-----Generated at Mon Dec 29 23:44:58 2025 by rpki-client