This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft File: sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft (raw, json) Hash identifier: emVyisRjI3MeVg2ksjvfowibLbH1sQ+JICNtmipvbB4= Subject key identifier: BD:50:0B:F9:AB:1E:06:A9:00:59:39:58:0C:BB:47:7A:A4:49:52:15 Authority key identifier: B1:B5:AB:26:2F:F2:81:55:67:43:31:8F:78:CE:AE:B4:9F:8B:D1:BE Certificate issuer: /CN=b1b5ab262ff281556743318f78ceaeb49f8bd1be Certificate serial: 019B432506652E75957DA960575515A9D1CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 23:00:58 +0000 Manifest this update: Sun 21 Dec 2025 23:00:58 +0000 Manifest next update: Mon 22 Dec 2025 23:00:58 +0000 Files and hashes: 1: Cl-s_kzYlAqMj9xfZRjzzsyjoOI.roa (hash: zKH1LTs9+Z8Dai2nZia/AYU5dJurOcYDxOkVkYs9o3M=) 2: sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl (hash: t7Onftr2HK/lyRfqAxznuI4RdxCMcWLp1Yf9urWHLRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:06:65:2e:75:95:7d:a9:60:57:55:15:a9:d1:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1b5ab262ff281556743318f78ceaeb49f8bd1be Validity Not Before: Dec 21 23:00:58 2025 GMT Not After : Dec 22 23:00:58 2025 GMT Subject: CN=bd500bf9ab1e06a9005939580cbb477aa4495215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:aa:fc:53:5e:77:ab:3e:b4:68:58:0c:8f:df: f2:f7:5a:a9:b7:3a:07:40:ac:7a:b8:2a:85:f8:d5: 7d:9c:fa:48:74:2f:f4:61:bd:9a:12:9d:8e:a4:2b: 02:2a:d4:6f:0a:f7:3d:86:3a:08:7c:cb:5b:cb:5c: a1:21:ee:a4:e9:0f:a7:35:91:01:df:8d:be:2e:76: 6f:6d:8c:9e:c9:eb:dc:ae:4c:32:f6:b6:b3:05:0f: 76:b1:de:64:8d:45:2a:69:ec:29:b4:03:cb:e0:cd: d0:07:c6:26:74:af:92:00:d2:41:c0:ff:bf:4a:78: d2:6e:3b:25:da:9c:17:7e:80:ee:01:07:d1:6b:41: 12:60:e0:14:23:e6:7a:20:fd:f5:6b:aa:62:fd:3c: 0d:1c:7a:ea:da:9a:43:39:3a:5c:bf:cf:3b:eb:ab: 6f:bb:e8:f6:89:6e:34:af:f9:ae:89:44:97:07:1c: b0:d3:18:59:0a:2c:ca:fe:c3:f7:fb:82:9e:a7:1b: 91:a1:65:85:48:05:fb:82:5d:48:ad:bc:55:44:94: b9:9b:11:92:8e:40:a4:da:b0:ac:50:4a:21:33:fc: c7:b4:79:37:d1:5e:59:0e:a7:45:1c:0c:25:a7:3c: df:ed:e8:e6:0a:9f:f5:1a:46:cb:6a:66:85:21:31: 9d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:50:0B:F9:AB:1E:06:A9:00:59:39:58:0C:BB:47:7A:A4:49:52:15 X509v3 Authority Key Identifier: keyid:B1:B5:AB:26:2F:F2:81:55:67:43:31:8F:78:CE:AE:B4:9F:8B:D1:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:86:9c:e3:2a:15:e1:a8:db:be:e6:78:02:dc:b1:13:15:ef: 6e:65:94:87:a8:3f:f3:f2:bb:21:18:a4:f9:ea:8e:09:fd:6a: c6:f6:f6:8d:c0:8f:85:5d:45:19:30:90:37:80:c2:ea:90:df: 38:01:1c:76:d3:ef:05:2c:22:56:7c:b0:1c:a0:8b:15:fe:04: f7:88:b0:f8:34:2a:9a:df:9a:8b:30:4f:b0:65:00:d8:27:86: 4c:e0:8d:c1:d8:67:d3:99:cd:a5:c2:54:39:04:22:c7:c3:a5: be:1b:97:8e:ff:bb:02:06:9e:28:88:6f:38:d2:a5:7d:f6:ae: 60:1a:31:e5:c1:7b:27:a7:16:7b:c6:33:16:73:d9:39:84:4f: 06:d9:fd:57:22:9b:40:80:16:9d:7f:43:96:1b:c3:ad:dd:79: 07:7c:d1:18:85:94:47:c9:20:25:a9:c4:c0:a0:56:1e:21:c5: d7:e8:9b:ac:5d:61:76:f1:3b:88:8c:d3:02:b2:cb:d9:2a:0b: 77:ad:13:51:6c:78:d7:a1:30:82:8b:0b:cf:d4:5b:94:6b:72: 0f:1b:41:f4:6d:60:9e:db:ab:19:fe:24:3e:cf:0b:e8:27:ac: 63:73:4c:fe:42:d7:97:9c:81:50:8c:56:8b:dd:7e:9d:86:85: 86:a7:66:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJQZlLnWVfalgV1UVqdHOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYjVhYjI2MmZmMjgxNTU2NzQzMzE4Zjc4Y2VhZWI0OWY4 YmQxYmUwHhcNMjUxMjIxMjMwMDU4WhcNMjUxMjIyMjMwMDU4WjAzMTEwLwYDVQQD EyhiZDUwMGJmOWFiMWUwNmE5MDA1OTM5NTgwY2JiNDc3YWE0NDk1MjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoar8U153qz60aFgMj9/y91qptzoH QKx6uCqF+NV9nPpIdC/0Yb2aEp2OpCsCKtRvCvc9hjoIfMtby1yhIe6k6Q+nNZEB 342+LnZvbYyeyevcrkwy9razBQ92sd5kjUUqaewptAPL4M3QB8YmdK+SANJBwP+/ SnjSbjsl2pwXfoDuAQfRa0ESYOAUI+Z6IP31a6pi/TwNHHrq2ppDOTpcv88766tv u+j2iW40r/muiUSXBxyw0xhZCizK/sP3+4KepxuRoWWFSAX7gl1IrbxVRJS5mxGS jkCk2rCsUEohM/zHtHk30V5ZDqdFHAwlpzzf7ejmCp/1GkbLamaFITGdJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1QC/mrHgapAFk5WAy7R3qkSVIVMB8GA1UdIwQY MBaAFLG1qyYv8oFVZ0Mxj3jOrrSfi9G+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2JXckppX3lnVlZuUXpHUGVNNnV0Si1MMGI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zZjRlNTgtZDU4ZC00N2RlLTkyZjct ZTg5ZmZmOTc3NjJjLzEvc2JXckppX3lnVlZuUXpHUGVNNnV0Si1MMGI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8zZjRlNTgtZDU4ZC00N2RlLTkyZjctZTg5ZmZmOTc3NjJj LzEvc2JXckppX3lnVlZuUXpHUGVNNnV0Si1MMGI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYac4yoV 4ajbvuZ4AtyxExXvbmWUh6g/8/K7IRik+eqOCf1qxvb2jcCPhV1FGTCQN4DC6pDf OAEcdtPvBSwiVnywHKCLFf4E94iw+DQqmt+aizBPsGUA2CeGTOCNwdhn05nNpcJU OQQix8OlvhuXjv+7AgaeKIhvONKlffauYBox5cF7J6cWe8YzFnPZOYRPBtn9VyKb QIAWnX9DlhvDrd15B3zRGIWUR8kgJanEwKBWHiHF1+ibrF1hdvE7iIzTArLL2SoL d60TUWx416EwgosLz9RblGtyDxtB9G1gnturGf4kPs8L6CesY3NM/kLXl5yBUIxW i91+nYaFhqdmcw== -----END CERTIFICATE-----Generated at Mon Dec 22 00:28:35 2025 by rpki-client