This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft File: sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft (raw, json) Hash identifier: zPS1DkAp9pfFWbLDUtCXagLmrkM8+bI5dXwvaMKPxHA= Subject key identifier: 5E:03:3E:E9:B8:6B:D9:F4:B7:57:D9:53:F8:33:9A:05:C8:36:22:BD Authority key identifier: B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E Certificate issuer: /CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e Certificate serial: 019B6A9FD59D1B11B9964D0DEEADF2A836AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft Manifest number: 17A0 Signing time: Mon 29 Dec 2025 15:00:18 +0000 Manifest this update: Mon 29 Dec 2025 15:00:18 +0000 Manifest next update: Tue 30 Dec 2025 15:00:18 +0000 Files and hashes: 1: NubO0sPxr_cuDCWGfPaZps4XHmU.roa (hash: IosGPlSdz8qVsL7WE6s1aTvXI6+f2Lb8gYJwebh24vo=) 2: XNv5R4Pm86vxr_d7wZIi0Xi614M.roa (hash: gIqD/66IF2g/0ovWyFttP7JqaZx+pP8FQh+Ln/imEBY=) 3: ay-9TuQv4NBBhfLPirWdhwTU6aU.roa (hash: /TV01OKxsZryh7q9+Tt7pDnXawnXcjSi58aGMMVoj6c=) 4: sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl (hash: TDgWeCPMW+jOsnoVb8MlozNA8eRjHReytfcf1oMnYOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:9f:d5:9d:1b:11:b9:96:4d:0d:ee:ad:f2:a8:36:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e Validity Not Before: Dec 29 15:00:18 2025 GMT Not After : Dec 30 15:00:18 2025 GMT Subject: CN=5e033ee9b86bd9f4b757d953f8339a05c83622bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cb:0d:7a:c0:86:81:80:5f:2f:85:22:61:79: e6:a6:cd:af:6a:9d:50:c8:02:89:4f:36:60:90:07: 3e:19:6a:00:ab:f5:6e:ba:f1:0c:fd:f6:62:7f:d8: 8d:24:cf:04:e3:d4:62:c9:66:69:a6:a1:2d:d6:f9: e1:7f:c8:ba:b0:53:14:2a:cf:a9:e8:31:38:9a:9f: 12:22:f0:f0:a2:26:b6:71:af:e6:7a:ae:75:97:bb: 34:37:3b:b7:82:1b:69:16:64:c8:04:cf:a6:a0:e2: a0:29:c5:19:b2:25:c7:28:7c:a4:54:16:27:4d:d3: 28:31:52:60:d3:9e:64:67:1f:78:7d:8e:f1:11:ed: 1e:83:3c:da:87:90:0f:e3:90:7e:ab:55:98:3f:e5: dc:42:7e:02:1c:d1:53:b5:a0:63:6f:64:67:3c:89: 25:08:c1:00:ac:22:cf:9d:f3:b9:33:0b:6a:33:7d: 4d:4a:b7:73:d0:05:f4:40:30:9f:c1:ea:70:17:a9: 95:23:72:0f:0a:34:83:47:d6:1c:6a:27:5b:a8:bc: 36:84:8e:c6:5e:56:44:0a:27:30:da:73:1c:0c:8c: e1:e3:f1:c9:b8:1b:7a:24:46:71:58:2a:4a:e6:92: 15:37:ff:fa:b2:6c:87:94:c2:fd:12:1c:64:34:7a: 8b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:03:3E:E9:B8:6B:D9:F4:B7:57:D9:53:F8:33:9A:05:C8:36:22:BD X509v3 Authority Key Identifier: keyid:B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:5d:e5:11:6f:19:23:80:c3:41:3e:53:59:a4:2e:81:11:4b: 33:f5:79:81:53:22:dc:12:f3:a4:88:4f:e0:63:12:41:e2:54: 37:8a:fa:4a:e4:88:0d:0f:d9:aa:67:af:ae:77:b9:0b:4c:40: 78:50:21:ab:b9:c1:90:cc:ae:d2:e2:51:ee:2d:1e:ff:92:b0: 4d:38:26:59:c9:6b:7f:ec:a0:e3:90:f0:60:21:ee:6c:19:19: 55:7f:f0:b1:5e:c1:b9:40:ef:8a:bd:ae:51:0c:f5:28:b1:3e: 6f:7d:2c:fd:9e:36:9a:cb:be:99:14:05:89:35:d2:88:30:81: bb:67:74:63:67:d3:c5:09:93:f8:a5:30:78:97:8a:6c:78:73: 02:ac:9c:50:bd:0a:04:dd:ee:b9:93:7f:a3:17:94:66:7b:7b: 02:c8:ec:b7:ae:0b:b9:fe:27:2e:ce:89:df:13:2c:6b:58:ba: ce:82:2c:e9:1b:12:3e:4b:b3:bd:10:2a:cd:a6:53:d6:9b:d3: 06:41:1e:c0:e8:70:1f:6e:a3:b2:ec:fa:c5:63:49:6d:72:7b: 0c:3b:6f:1b:ae:07:40:52:45:bb:7a:09:6c:5f:70:8f:be:01: 0d:52:65:45:96:04:21:be:1e:36:b1:05:bc:bb:6a:35:d4:2a: c9:bb:11:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqn9WdGxG5lk0N7q3yqDarMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYmM4NTBkMTdjYTZkM2M3YjRkMDBlNTAxZTJkMzU2ZjA4 YTU4NWUwHhcNMjUxMjI5MTUwMDE4WhcNMjUxMjMwMTUwMDE4WjAzMTEwLwYDVQQD Eyg1ZTAzM2VlOWI4NmJkOWY0Yjc1N2Q5NTNmODMzOWEwNWM4MzYyMmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMsNesCGgYBfL4UiYXnmps2vap1Q yAKJTzZgkAc+GWoAq/VuuvEM/fZif9iNJM8E49RiyWZppqEt1vnhf8i6sFMUKs+p 6DE4mp8SIvDwoia2ca/meq51l7s0Nzu3ghtpFmTIBM+moOKgKcUZsiXHKHykVBYn TdMoMVJg055kZx94fY7xEe0egzzah5AP45B+q1WYP+XcQn4CHNFTtaBjb2RnPIkl CMEArCLPnfO5MwtqM31NSrdz0AX0QDCfwepwF6mVI3IPCjSDR9YcaidbqLw2hI7G XlZECicw2nMcDIzh4/HJuBt6JEZxWCpK5pIVN//6smyHlML9EhxkNHqLKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4DPum4a9n0t1fZU/gzmgXINiK9MB8GA1UdIwQY MBaAFLG8hQ0Xym08e00A5QHi01bwilheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2J5RkRSZktiVHg3VFFEbEFlTFRWdkNLV0Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84YWEwMmQtOTRjOC00Njc4LTkyYWMt MTdmYjRmZmI5ZmFkLzEvc2J5RkRSZktiVHg3VFFEbEFlTFRWdkNLV0Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC84YWEwMmQtOTRjOC00Njc4LTkyYWMtMTdmYjRmZmI5ZmFk LzEvc2J5RkRSZktiVHg3VFFEbEFlTFRWdkNLV0Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMl3lEW8Z I4DDQT5TWaQugRFLM/V5gVMi3BLzpIhP4GMSQeJUN4r6SuSIDQ/Zqmevrne5C0xA eFAhq7nBkMyu0uJR7i0e/5KwTTgmWclrf+yg45DwYCHubBkZVX/wsV7BuUDvir2u UQz1KLE+b30s/Z42msu+mRQFiTXSiDCBu2d0Y2fTxQmT+KUweJeKbHhzAqycUL0K BN3uuZN/oxeUZnt7Asjst64Luf4nLs6J3xMsa1i6zoIs6RsSPkuzvRAqzaZT1pvT BkEewOhwH26jsuz6xWNJbXJ7DDtvG64HQFJFu3oJbF9wj74BDVJlRZYEIb4eNrEF vLtqNdQqybsRiA== -----END CERTIFICATE-----Generated at Tue Dec 30 00:20:05 2025 by rpki-client