This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft File: SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft (raw, json) Hash identifier: hP3eBDKB3RcyBjY+xCgKsKM1APDiqqy0xCtUeRu2JqU= Subject key identifier: 97:B7:72:B0:65:6D:25:F3:11:18:66:49:CF:BD:94:26:CC:76:F7:36 Authority key identifier: 48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D Certificate issuer: /CN=4813b9c5fe8315807d7856cd230003aa16741c0d Certificate serial: 019B57F5FDB12229692FA3D3FA9B544F2CE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft Manifest number: 0D5E Signing time: Fri 26 Dec 2025 00:01:37 +0000 Manifest this update: Fri 26 Dec 2025 00:01:37 +0000 Manifest next update: Sat 27 Dec 2025 00:01:37 +0000 Files and hashes: 1: SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl (hash: J/Esqvn/QGCRdDx3aX334HPHMHvbwL9mio2PoZSbB9Y=) 2: Y-7q9kMx7K8cMciXy89it_JnTm4.roa (hash: wJcOhSoBOyFBrlWVrA3BCNeS+YWlGnk/CzTU7ZurV5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 00:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:f5:fd:b1:22:29:69:2f:a3:d3:fa:9b:54:4f:2c:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4813b9c5fe8315807d7856cd230003aa16741c0d Validity Not Before: Dec 26 00:01:37 2025 GMT Not After : Dec 27 00:01:37 2025 GMT Subject: CN=97b772b0656d25f311186649cfbd9426cc76f736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2e:7d:9b:a2:e2:e8:c7:11:9d:e3:41:24:d8: 4b:26:18:72:a8:5c:a0:61:19:3c:d6:61:84:2d:7a: 77:59:08:47:0c:25:5c:61:e5:db:cc:2f:9d:be:62: d7:2c:0d:18:ff:d1:a8:9d:a7:2b:3d:45:b8:f8:37: 30:50:8f:fa:7a:f3:ce:ea:21:33:1f:3f:25:dd:86: 9b:b2:e1:65:88:19:79:84:4d:a6:55:89:0a:df:60: 4c:26:0b:db:b6:62:2f:44:fb:bc:b2:44:01:b1:32: 38:4d:c0:bc:40:9a:5b:38:16:4a:de:09:ac:68:a7: 7d:c3:c8:1d:39:d7:ed:c1:10:6e:70:46:a9:f9:d4: a5:2d:c4:6a:88:0d:78:1f:a5:c5:e1:df:c4:14:91: 11:62:60:5e:cf:4d:bf:49:af:8d:29:9f:70:9b:da: 36:33:43:52:e0:3c:fa:1b:c7:72:4c:4e:28:a2:99: ba:67:88:59:eb:f4:de:77:5f:8a:2d:32:4a:83:c9: 34:39:c7:e6:25:b9:21:60:81:16:af:95:94:9c:32: c7:9a:12:17:31:3f:48:0f:02:cb:49:0e:3c:74:cb: 56:09:b6:d6:f5:10:d7:82:35:82:1f:8b:4d:bb:66: 47:99:55:14:de:b2:c3:f6:a6:f3:ca:46:c1:fb:87: b4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B7:72:B0:65:6D:25:F3:11:18:66:49:CF:BD:94:26:CC:76:F7:36 X509v3 Authority Key Identifier: keyid:48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:de:2f:9a:93:44:b6:73:07:15:ba:33:17:f4:86:f4:01:91: 55:de:ef:f5:21:b9:1a:de:e4:68:85:f9:de:b7:a7:46:14:36: 1f:86:60:fe:3a:db:03:13:91:92:72:f5:31:c6:0d:2d:4f:32: 9b:d6:25:9b:a5:85:bf:39:a8:6a:ec:22:cf:24:63:dc:ee:15: 4d:c7:a9:34:40:22:33:4a:e3:3e:e6:37:e1:fc:0b:90:4b:fb: a0:32:55:2a:9c:a1:c6:44:53:87:e3:0f:72:75:cb:49:5c:41: 8a:8a:93:4b:5a:aa:98:7e:23:c1:c4:2e:4f:18:4f:85:79:6c: e3:c1:20:63:4b:2d:e0:29:fe:a9:f2:c7:38:d8:a6:c6:35:f6: 70:74:3a:ec:dd:b2:96:13:ca:be:81:7f:75:af:ab:5f:f4:f3: bf:0c:13:e1:ff:15:19:09:5b:d9:89:65:15:2c:90:d9:c5:5e: f2:f5:ca:55:5e:77:fb:66:02:0c:10:48:d1:c2:40:fa:ba:99: 75:08:11:29:99:0c:7c:14:3f:20:10:3b:ca:9a:69:86:cd:fa: 75:53:05:9b:3e:34:ae:5e:d7:01:8c:40:e0:eb:4c:a4:94:4d: 13:25:31:6a:d8:01:be:b9:b8:2f:93:e2:be:eb:06:b7:8d:dc: f3:f1:7f:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtX9f2xIilpL6PT+ptUTyzmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MTNiOWM1ZmU4MzE1ODA3ZDc4NTZjZDIzMDAwM2FhMTY3 NDFjMGQwHhcNMjUxMjI2MDAwMTM3WhcNMjUxMjI3MDAwMTM3WjAzMTEwLwYDVQQD Eyg5N2I3NzJiMDY1NmQyNWYzMTExODY2NDljZmJkOTQyNmNjNzZmNzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC59m6Li6McRneNBJNhLJhhyqFyg YRk81mGELXp3WQhHDCVcYeXbzC+dvmLXLA0Y/9GonacrPUW4+DcwUI/6evPO6iEz Hz8l3YabsuFliBl5hE2mVYkK32BMJgvbtmIvRPu8skQBsTI4TcC8QJpbOBZK3gms aKd9w8gdOdftwRBucEap+dSlLcRqiA14H6XF4d/EFJERYmBez02/Sa+NKZ9wm9o2 M0NS4Dz6G8dyTE4oopm6Z4hZ6/Ted1+KLTJKg8k0OcfmJbkhYIEWr5WUnDLHmhIX MT9IDwLLSQ48dMtWCbbW9RDXgjWCH4tNu2ZHmVUU3rLD9qbzykbB+4e0ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJe3crBlbSXzERhmSc+9lCbMdvc2MB8GA1UdIwQY MBaAFEgTucX+gxWAfXhWzSMAA6oWdBwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JPNXhmNkRGWUI5ZUZiTkl3QURxaFowSEEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS84ZjQxYTQtZTE0MC00ZjY1LTgwZTYt MjgxNzBhYzAyYjMyLzEvU0JPNXhmNkRGWUI5ZUZiTkl3QURxaFowSEEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS84ZjQxYTQtZTE0MC00ZjY1LTgwZTYtMjgxNzBhYzAyYjMy LzEvU0JPNXhmNkRGWUI5ZUZiTkl3QURxaFowSEEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW94vmpNE tnMHFbozF/SG9AGRVd7v9SG5Gt7kaIX53renRhQ2H4Zg/jrbAxORknL1McYNLU8y m9Ylm6WFvzmoauwizyRj3O4VTcepNEAiM0rjPuY34fwLkEv7oDJVKpyhxkRTh+MP cnXLSVxBioqTS1qqmH4jwcQuTxhPhXls48EgY0st4Cn+qfLHONimxjX2cHQ67N2y lhPKvoF/da+rX/TzvwwT4f8VGQlb2YllFSyQ2cVe8vXKVV53+2YCDBBI0cJA+rqZ dQgRKZkMfBQ/IBA7yppphs36dVMFmz40rl7XAYxA4OtMpJRNEyUxatgBvrm4L5Pi vusGt43c8/F/0w== -----END CERTIFICATE-----Generated at Fri Dec 26 09:23:31 2025 by rpki-client