This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft File: sbIBNjzMVWvsiHAladjTgaDolWY.mft (raw, json) Hash identifier: HLLVE2T/d+3kpQdYSiF8nF3TqAcTS6T8FqIVJlrLC1s= Subject key identifier: 1C:57:6C:1C:40:42:C6:CA:59:CE:2A:1F:0B:5E:D3:4F:DA:EA:2A:08 Authority key identifier: B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66 Certificate issuer: /CN=b1b201363ccc556bec88702569d8d381a0e89566 Certificate serial: 019B6CC5F6601A2C2B8549A93BB4760CB35F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft Manifest number: 0E1C Signing time: Tue 30 Dec 2025 01:01:11 +0000 Manifest this update: Tue 30 Dec 2025 01:01:11 +0000 Manifest next update: Wed 31 Dec 2025 01:01:11 +0000 Files and hashes: 1: lqeFydVXrdHwpq6mWSJTL5OgZAY.roa (hash: YaK2y/qIg0D8N7eA9vbxZ0CRyImPi+H1Zg28ZURYmRg=) 2: sbIBNjzMVWvsiHAladjTgaDolWY.crl (hash: iKLbq7izHCoq+fyBKkAUvcf/9wa1HbPtiGuxtWJvdb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:f6:60:1a:2c:2b:85:49:a9:3b:b4:76:0c:b3:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1b201363ccc556bec88702569d8d381a0e89566 Validity Not Before: Dec 30 01:01:11 2025 GMT Not After : Dec 31 01:01:11 2025 GMT Subject: CN=1c576c1c4042c6ca59ce2a1f0b5ed34fdaea2a08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a4:9c:9e:f8:08:3f:33:98:56:25:95:2f:fe: d6:40:70:bd:a9:74:5e:86:9a:d5:80:1a:ad:34:07: b6:62:f2:bc:97:1c:b5:f5:29:cb:84:5d:3f:e1:a7: ae:23:c1:f8:28:e2:4b:e9:d0:ea:65:49:bf:02:00: 8c:83:5b:dc:5b:69:99:4b:b5:b2:4d:97:6d:9d:c7: b1:51:58:78:39:64:b9:ee:0b:19:ae:cc:d1:0a:72: d8:c0:5d:4d:b3:d3:a4:a8:b7:dd:8b:ac:e6:61:bd: 12:7f:b5:4f:4e:d8:b7:0b:86:5a:03:b5:81:f2:4a: fa:cc:c0:4e:a6:b5:a0:c0:d9:7a:7e:66:a3:97:af: 24:79:b9:30:31:f3:f7:ec:c0:94:ce:8b:59:b2:18: 9a:d8:60:9f:0b:4f:80:ed:aa:9b:32:19:dc:cc:90: ce:32:99:a5:27:c7:a7:96:d9:bf:87:17:c1:a7:7e: dc:b3:66:32:5f:fc:2b:1a:51:ed:be:07:fc:10:e9: ea:6c:2d:24:0c:e3:f9:e2:cc:ce:2f:86:e0:0a:cf: 06:21:8a:f7:5f:3b:cc:2f:93:e2:87:c4:d5:52:5c: 7d:59:21:1d:84:a1:a2:e1:43:9a:19:6a:f5:95:9b: d5:1d:6b:34:d8:80:2a:ae:b5:31:3e:22:6a:76:78: d5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:57:6C:1C:40:42:C6:CA:59:CE:2A:1F:0B:5E:D3:4F:DA:EA:2A:08 X509v3 Authority Key Identifier: keyid:B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:5d:8e:ae:69:c1:7b:5e:1f:cb:d9:16:2b:22:d4:df:3c:cf: bf:f0:34:05:d7:22:f9:20:05:a4:d4:c3:fc:c5:9a:19:be:8f: 38:7c:c8:90:8e:17:6f:80:94:16:e9:13:97:52:cc:b6:96:13: 80:12:05:86:2a:41:d7:6d:9f:da:32:25:1e:d3:73:ba:37:0a: 71:48:f7:d6:93:5d:8a:48:88:54:0e:54:c9:41:9e:a3:3f:1a: f2:3f:9e:11:99:db:9a:00:69:d4:9f:cc:c3:d3:8c:b7:4e:99: f7:98:7a:69:82:bf:d9:89:10:91:22:59:71:19:e0:17:f3:18: 53:21:d3:1d:89:f1:c3:c3:19:4a:94:ab:89:60:bb:ad:56:9a: 55:39:0f:48:ce:5e:98:5a:07:68:e4:3d:54:2d:f3:25:30:48: b8:47:25:d8:f6:ed:8c:79:eb:d6:15:07:55:c4:ea:53:ec:0f: 84:06:56:42:2c:63:44:7a:53:73:3f:10:98:f6:35:ca:8f:4f: df:ee:64:7b:ed:cd:7e:c9:b3:fc:5e:52:9b:6a:85:3e:c3:fa: fc:70:d3:7b:12:32:5e:ea:29:4f:56:d8:34:cd:bb:d9:63:32: 67:3f:97:2b:df:68:cd:a9:05:62:20:69:8e:18:ee:2b:b6:80: 2e:70:8b:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxfZgGiwrhUmpO7R2DLNfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYjIwMTM2M2NjYzU1NmJlYzg4NzAyNTY5ZDhkMzgxYTBl ODk1NjYwHhcNMjUxMjMwMDEwMTExWhcNMjUxMjMxMDEwMTExWjAzMTEwLwYDVQQD EygxYzU3NmMxYzQwNDJjNmNhNTljZTJhMWYwYjVlZDM0ZmRhZWEyYTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KScnvgIPzOYViWVL/7WQHC9qXRe hprVgBqtNAe2YvK8lxy19SnLhF0/4aeuI8H4KOJL6dDqZUm/AgCMg1vcW2mZS7Wy TZdtncexUVh4OWS57gsZrszRCnLYwF1Ns9OkqLfdi6zmYb0Sf7VPTti3C4ZaA7WB 8kr6zMBOprWgwNl6fmajl68kebkwMfP37MCUzotZshia2GCfC0+A7aqbMhnczJDO MpmlJ8enltm/hxfBp37cs2YyX/wrGlHtvgf8EOnqbC0kDOP54szOL4bgCs8GIYr3 XzvML5Pih8TVUlx9WSEdhKGi4UOaGWr1lZvVHWs02IAqrrUxPiJqdnjVwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxXbBxAQsbKWc4qHwte00/a6ioIMB8GA1UdIwQY MBaAFLGyATY8zFVr7IhwJWnY04Gg6JVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2JJQk5qek1WV3ZzaUhBbGFkalRnYURvbFdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81YWU4YmYtZjk5OS00Yzc0LTlmNDYt MzI1NjI3YzQ2NmUyLzEvc2JJQk5qek1WV3ZzaUhBbGFkalRnYURvbFdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi81YWU4YmYtZjk5OS00Yzc0LTlmNDYtMzI1NjI3YzQ2NmUy LzEvc2JJQk5qek1WV3ZzaUhBbGFkalRnYURvbFdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJl2OrmnB e14fy9kWKyLU3zzPv/A0Bdci+SAFpNTD/MWaGb6POHzIkI4Xb4CUFukTl1LMtpYT gBIFhipB122f2jIlHtNzujcKcUj31pNdikiIVA5UyUGeoz8a8j+eEZnbmgBp1J/M w9OMt06Z95h6aYK/2YkQkSJZcRngF/MYUyHTHYnxw8MZSpSriWC7rVaaVTkPSM5e mFoHaOQ9VC3zJTBIuEcl2PbtjHnr1hUHVcTqU+wPhAZWQixjRHpTcz8QmPY1yo9P 3+5ke+3Nfsmz/F5Sm2qFPsP6/HDTexIyXuopT1bYNM272WMyZz+XK99ozakFYiBp jhjuK7aALnCLuw== -----END CERTIFICATE-----Generated at Tue Dec 30 07:17:59 2025 by rpki-client