This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft File: SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft (raw, json) Hash identifier: ZbYl5VuhGBEA1Z9DtQVG+X7Oh5ujCuNjEkqNKczrW+0= Subject key identifier: 44:7D:75:5C:82:E3:69:E8:55:88:BB:3F:29:8C:89:0F:E9:0A:42:51 Authority key identifier: 48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D Certificate issuer: /CN=4813b9c5fe8315807d7856cd230003aa16741c0d Certificate serial: 019B2B8A867C0551257D7A25138780FEB983 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft Manifest number: 0D47 Signing time: Wed 17 Dec 2025 09:00:57 +0000 Manifest this update: Wed 17 Dec 2025 09:00:57 +0000 Manifest next update: Thu 18 Dec 2025 09:00:57 +0000 Files and hashes: 1: SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl (hash: cPidGUiMdKuAx3xELrW95m45+LHKwsgeTvyPCqOkRe8=) 2: Y-7q9kMx7K8cMciXy89it_JnTm4.roa (hash: wJcOhSoBOyFBrlWVrA3BCNeS+YWlGnk/CzTU7ZurV5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:86:7c:05:51:25:7d:7a:25:13:87:80:fe:b9:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4813b9c5fe8315807d7856cd230003aa16741c0d Validity Not Before: Dec 17 09:00:57 2025 GMT Not After : Dec 18 09:00:57 2025 GMT Subject: CN=447d755c82e369e85588bb3f298c890fe90a4251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:03:dc:5f:09:ad:be:53:8b:f1:11:e6:b0:cb: e8:fa:b2:0f:4e:46:68:3b:27:26:a1:35:ab:d5:0e: d6:e5:a0:60:38:d6:85:ee:ae:d8:4b:0a:2a:89:48: e9:ea:7e:08:cc:bb:95:19:3f:e5:15:c7:0e:2e:67: c1:ba:6a:05:7c:30:9f:c5:85:96:98:e6:5e:e2:54: 2b:91:e4:99:93:d4:b4:77:a5:76:67:12:bf:22:04: 7a:69:96:ca:3f:7e:88:57:cd:36:b4:7c:97:27:b0: ab:79:fb:b3:9c:7b:5a:66:4f:9b:08:74:ff:d1:dd: 83:8f:ad:41:6d:86:da:54:49:6c:93:29:05:48:df: 0d:8c:c5:ae:47:55:c8:53:8b:cb:b0:54:fe:82:25: d8:0f:b4:dd:20:bb:99:49:56:7f:1d:dc:cc:ef:cb: 7e:02:d0:1a:b2:17:85:3f:30:64:30:40:ba:d1:59: 08:3e:c7:b1:87:c0:f2:b9:5f:02:4d:42:73:50:49: 05:c4:37:83:69:d8:ef:9f:7b:af:c1:32:42:fe:71: ec:03:88:bb:c4:0e:11:32:b1:6e:7a:22:b9:c9:48: 76:9e:46:ce:dc:be:3d:e1:73:68:26:30:52:12:0c: 4b:c5:05:d4:ee:f4:71:c1:fe:5d:66:ed:9f:eb:6e: 8b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:7D:75:5C:82:E3:69:E8:55:88:BB:3F:29:8C:89:0F:E9:0A:42:51 X509v3 Authority Key Identifier: keyid:48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:02:c0:c3:36:ab:69:a3:a0:be:ce:29:bc:13:0e:72:34:a3: 93:e2:9e:bd:07:4c:d9:c7:a6:a8:c7:06:d3:69:a6:56:03:3d: 3c:a7:62:67:ea:07:6c:53:6a:1f:49:e5:17:15:e9:ef:a3:76: d4:a5:e2:49:de:bb:fa:09:8c:41:1e:80:59:a0:a5:7c:9b:39: 7c:e6:50:ce:f2:d8:38:b5:5e:22:e8:d8:13:a8:2c:5f:29:0f: 3a:fd:47:be:6e:f9:c2:64:97:22:78:57:ac:9e:4e:ca:85:49: c4:a8:b4:97:2b:a1:06:d6:42:de:fd:53:31:67:47:d3:26:21: f3:80:8e:d2:a6:ca:80:5a:71:9c:f9:a2:2c:93:bb:00:a2:d6: 26:57:f6:d1:75:ca:16:b5:66:48:6c:27:88:f9:04:e5:36:5e: 35:68:79:67:fb:40:16:65:66:a5:04:02:bc:5d:65:ac:87:af: d3:c5:b4:22:5b:4f:80:29:63:a0:89:e8:4c:2b:0d:88:44:cc: de:72:ec:85:f0:13:01:60:65:10:51:0c:3c:a1:15:48:d2:60: 36:1f:52:48:8d:dc:48:c6:30:00:83:71:53:dc:21:ba:d6:fd: 0a:4d:3e:94:64:b9:7f:5f:1f:09:8f:65:a6:30:f0:95:91:f1: 17:0b:2a:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrioZ8BVElfXolE4eA/rmDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MTNiOWM1ZmU4MzE1ODA3ZDc4NTZjZDIzMDAwM2FhMTY3 NDFjMGQwHhcNMjUxMjE3MDkwMDU3WhcNMjUxMjE4MDkwMDU3WjAzMTEwLwYDVQQD Eyg0NDdkNzU1YzgyZTM2OWU4NTU4OGJiM2YyOThjODkwZmU5MGE0MjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwPcXwmtvlOL8RHmsMvo+rIPTkZo OycmoTWr1Q7W5aBgONaF7q7YSwoqiUjp6n4IzLuVGT/lFccOLmfBumoFfDCfxYWW mOZe4lQrkeSZk9S0d6V2ZxK/IgR6aZbKP36IV802tHyXJ7CrefuznHtaZk+bCHT/ 0d2Dj61BbYbaVElskykFSN8NjMWuR1XIU4vLsFT+giXYD7TdILuZSVZ/HdzM78t+ AtAasheFPzBkMEC60VkIPsexh8DyuV8CTUJzUEkFxDeDadjvn3uvwTJC/nHsA4i7 xA4RMrFueiK5yUh2nkbO3L494XNoJjBSEgxLxQXU7vRxwf5dZu2f626LjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFER9dVyC42noVYi7PymMiQ/pCkJRMB8GA1UdIwQY MBaAFEgTucX+gxWAfXhWzSMAA6oWdBwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JPNXhmNkRGWUI5ZUZiTkl3QURxaFowSEEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS84ZjQxYTQtZTE0MC00ZjY1LTgwZTYt MjgxNzBhYzAyYjMyLzEvU0JPNXhmNkRGWUI5ZUZiTkl3QURxaFowSEEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS84ZjQxYTQtZTE0MC00ZjY1LTgwZTYtMjgxNzBhYzAyYjMy LzEvU0JPNXhmNkRGWUI5ZUZiTkl3QURxaFowSEEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjwLAwzar aaOgvs4pvBMOcjSjk+KevQdM2cemqMcG02mmVgM9PKdiZ+oHbFNqH0nlFxXp76N2 1KXiSd67+gmMQR6AWaClfJs5fOZQzvLYOLVeIujYE6gsXykPOv1Hvm75wmSXInhX rJ5OyoVJxKi0lyuhBtZC3v1TMWdH0yYh84CO0qbKgFpxnPmiLJO7AKLWJlf20XXK FrVmSGwniPkE5TZeNWh5Z/tAFmVmpQQCvF1lrIev08W0IltPgCljoInoTCsNiETM 3nLshfATAWBlEFEMPKEVSNJgNh9SSI3cSMYwAINxU9whutb9Ck0+lGS5f18fCY9l pjDwlZHxFwsqGw== -----END CERTIFICATE-----Generated at Wed Dec 17 16:52:57 2025 by rpki-client