This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft File: SbJERkTEM0jXxQ9OUOdDVumJbb8.mft (raw, json) Hash identifier: nySomBJ461FVBacVqugMff6fVtg10fhTdVshkB/S8oE= Subject key identifier: 02:73:3B:4F:4B:53:2F:9F:84:41:03:33:77:EC:0C:B9:7E:28:13:5A Authority key identifier: 49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF Certificate issuer: /CN=49b2444644c43348d7c50f4e50e74356e9896dbf Certificate serial: 019B3D90CBE0E8F97F5D876578B36E880454 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft Manifest number: 14DF Signing time: Sat 20 Dec 2025 21:00:58 +0000 Manifest this update: Sat 20 Dec 2025 21:00:58 +0000 Manifest next update: Sun 21 Dec 2025 21:00:58 +0000 Files and hashes: 1: 1wuoe06EqKtSedO7NGLRmPTmhGc.roa (hash: /sDFB0I8q5IJW+UJc1pW+YTD5nABqiUh65XbbCjiXPo=) 2: MErMEgT0Mlg4NzXbifAxY_vYJ18.roa (hash: kZo3foZgB/DZe3VgEb3C47cfvC/YSEn388ZX35kgFPI=) 3: RUJrM9R2Q01CiiseZx6BuCkPhi8.roa (hash: ud9fyI+JnGNFQZazgaWgNO5UTDdn2ppqyRqse6KTBD4=) 4: SbJERkTEM0jXxQ9OUOdDVumJbb8.crl (hash: xfLs+Zry0QYjQ6ggQzWj9t9+O9esmPA+4o8z+Y75+BY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:cb:e0:e8:f9:7f:5d:87:65:78:b3:6e:88:04:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49b2444644c43348d7c50f4e50e74356e9896dbf Validity Not Before: Dec 20 21:00:58 2025 GMT Not After : Dec 21 21:00:58 2025 GMT Subject: CN=02733b4f4b532f9f8441033377ec0cb97e28135a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:15:0c:4a:5b:ee:29:cf:6b:e8:e4:60:60:7b: 77:5b:6d:35:ca:2f:68:bf:c3:fe:f6:9f:c9:e2:22: 6b:4e:27:fc:b8:b5:8e:0c:ee:c1:33:44:4c:be:66: 6c:4f:5d:99:ee:6f:43:ed:d6:03:7a:15:ca:22:3f: d6:fe:a5:8a:d1:8c:cd:d7:c5:3f:2f:e8:08:d9:e8: 06:a7:17:f8:3a:77:f5:64:1c:b3:2b:25:f6:2f:d7: 0f:fc:93:7a:68:82:95:ef:0e:ad:29:ab:88:88:10: c8:e9:68:66:9c:64:b9:3b:b7:1f:f7:69:40:21:a4: 77:37:c3:c9:40:55:c0:82:95:97:43:01:fa:2b:1b: b9:55:64:a9:ed:a9:23:13:18:0d:30:ce:40:f7:6f: 33:20:e9:60:9f:77:4c:cc:9c:49:e7:21:af:cc:4b: 56:88:94:09:4a:01:e6:7f:3b:cc:21:ea:ed:0a:5f: 4d:7e:65:c5:dd:76:ae:53:9a:06:91:9a:5d:dc:63: 0d:90:26:06:d7:9b:9a:6b:5b:6c:c7:47:36:cd:fb: d8:8a:e8:8e:13:9f:dd:90:0a:42:3d:19:6b:35:9e: 80:b2:39:f5:1f:22:cc:b7:42:0b:de:91:5e:22:c3: bf:2f:b9:76:23:18:9a:77:eb:18:a7:be:6e:fa:e8: 29:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:73:3B:4F:4B:53:2F:9F:84:41:03:33:77:EC:0C:B9:7E:28:13:5A X509v3 Authority Key Identifier: keyid:49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:26:d1:bb:b8:64:b4:c3:38:45:90:d2:47:51:26:1b:b7:dd: e6:33:69:74:74:f1:16:c3:2b:e1:c9:3a:97:16:05:43:58:a8: 7c:5b:ef:7e:ed:43:d5:0f:83:66:0b:97:f6:2a:04:87:7a:a1: e5:2e:94:c3:d0:9d:a9:e1:a9:c2:1c:52:ec:00:33:31:a1:12: c5:a4:4a:c8:fa:11:65:bd:e1:38:fc:12:53:3a:fb:f3:89:06: 8f:fa:da:e5:08:3d:3e:c6:3a:3d:0a:05:cc:71:d3:d1:dd:6b: fb:53:42:05:0a:9b:30:63:30:dd:56:9b:68:92:77:c8:2c:34: 6a:35:e0:78:ae:77:38:96:5c:4b:87:14:01:84:75:9b:1f:ff: 97:8f:70:6a:2d:1d:f7:b2:02:93:3e:07:d4:4b:8d:54:35:d5: 61:7b:ac:f8:37:c0:d8:3f:4b:1e:b1:52:13:2b:f0:c5:26:2c: 11:66:c4:9c:21:99:80:2a:56:94:6e:24:5f:94:b8:46:07:e7: 13:e5:fe:9b:43:a8:a7:42:05:f6:89:09:85:cd:c9:c4:17:15: 20:0e:2b:44:f4:2a:51:00:e3:97:d2:6a:0c:23:95:11:78:4b: af:8f:48:84:5c:02:4e:c8:4c:8a:52:72:c8:c8:b0:e3:a6:44: 94:87:56:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kMvg6Pl/XYdleLNuiARUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YjI0NDQ2NDRjNDMzNDhkN2M1MGY0ZTUwZTc0MzU2ZTk4 OTZkYmYwHhcNMjUxMjIwMjEwMDU4WhcNMjUxMjIxMjEwMDU4WjAzMTEwLwYDVQQD EygwMjczM2I0ZjRiNTMyZjlmODQ0MTAzMzM3N2VjMGNiOTdlMjgxMzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhUMSlvuKc9r6ORgYHt3W201yi9o v8P+9p/J4iJrTif8uLWODO7BM0RMvmZsT12Z7m9D7dYDehXKIj/W/qWK0YzN18U/ L+gI2egGpxf4Onf1ZByzKyX2L9cP/JN6aIKV7w6tKauIiBDI6WhmnGS5O7cf92lA IaR3N8PJQFXAgpWXQwH6Kxu5VWSp7akjExgNMM5A928zIOlgn3dMzJxJ5yGvzEtW iJQJSgHmfzvMIertCl9NfmXF3XauU5oGkZpd3GMNkCYG15uaa1tsx0c2zfvYiuiO E5/dkApCPRlrNZ6Asjn1HyLMt0IL3pFeIsO/L7l2Ixiad+sYp75u+ugpdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJzO09LUy+fhEEDM3fsDLl+KBNaMB8GA1UdIwQY MBaAFEmyREZExDNI18UPTlDnQ1bpiW2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi82NGNkYmQtYzg1MS00YjM1LWJiNzkt NzUzZDk2OWEwNzAyLzEvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi82NGNkYmQtYzg1MS00YjM1LWJiNzktNzUzZDk2OWEwNzAy LzEvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASibRu7hk tMM4RZDSR1EmG7fd5jNpdHTxFsMr4ck6lxYFQ1iofFvvfu1D1Q+DZguX9ioEh3qh 5S6Uw9CdqeGpwhxS7AAzMaESxaRKyPoRZb3hOPwSUzr784kGj/ra5Qg9PsY6PQoF zHHT0d1r+1NCBQqbMGMw3VabaJJ3yCw0ajXgeK53OJZcS4cUAYR1mx//l49wai0d 97ICkz4H1EuNVDXVYXus+DfA2D9LHrFSEyvwxSYsEWbEnCGZgCpWlG4kX5S4Rgfn E+X+m0Oop0IF9okJhc3JxBcVIA4rRPQqUQDjl9JqDCOVEXhLr49IhFwCTshMilJy yMiw46ZElIdWhA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:09:03 2025 by rpki-client