This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft File: SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft (raw, json) Hash identifier: 9p5p94pj03cD8W1GzxBL1lofY/jy+tqsqEBoOgse+kU= Subject key identifier: 0B:CA:D7:32:C0:2E:B1:CE:3B:DC:7E:3F:58:4F:02:D2:2E:F2:64:BC Authority key identifier: 48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D Certificate issuer: /CN=4813b9c5fe8315807d7856cd230003aa16741c0d Certificate serial: 019B6B458AACDECDCB9A66C391932F48CFE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft Manifest number: 0D68 Signing time: Mon 29 Dec 2025 18:01:17 +0000 Manifest this update: Mon 29 Dec 2025 18:01:17 +0000 Manifest next update: Tue 30 Dec 2025 18:01:17 +0000 Files and hashes: 1: SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl (hash: p1H17OhC/Hzh4OAI5u36p3NhWjmby2/I1Dx7wQTn0TM=) 2: Y-7q9kMx7K8cMciXy89it_JnTm4.roa (hash: wJcOhSoBOyFBrlWVrA3BCNeS+YWlGnk/CzTU7ZurV5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 18:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:45:8a:ac:de:cd:cb:9a:66:c3:91:93:2f:48:cf:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4813b9c5fe8315807d7856cd230003aa16741c0d Validity Not Before: Dec 29 18:01:17 2025 GMT Not After : Dec 30 18:01:17 2025 GMT Subject: CN=0bcad732c02eb1ce3bdc7e3f584f02d22ef264bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d0:1f:86:27:98:8b:e4:e6:0d:da:58:05:99: 8e:64:c0:44:e7:18:5a:4c:38:80:45:cf:64:ed:78: c0:3a:1d:b6:81:ad:97:17:b8:f6:ec:07:8d:54:41: 3f:12:e0:68:60:30:4c:5b:b2:14:19:96:d5:b3:be: b2:3c:50:c5:6f:d9:ba:32:5f:18:5d:a5:7b:9e:d8: e2:ea:87:13:f5:1f:f2:6a:02:7b:e0:e9:25:9d:3e: cf:52:30:06:45:60:c4:64:04:1f:f2:25:80:3e:a0: af:f9:bd:4e:a6:b3:71:d2:c5:ff:c8:5f:fd:5d:5f: ee:04:67:4d:23:06:97:b1:ea:6e:e7:42:24:13:05: f5:2e:a0:6e:8f:70:94:41:81:f4:8d:bd:7e:7a:d2: eb:84:69:08:bc:f2:c8:40:f9:6c:25:6e:50:7c:ec: d4:b7:48:a8:5b:5d:e5:59:a3:ee:42:71:ba:c5:42: 75:96:f9:c1:f7:bc:0d:8e:ac:bd:18:a4:fe:5c:ba: 33:1a:36:ea:ec:c4:7e:bd:a5:33:9f:97:92:38:6c: fe:b5:ca:4c:64:91:94:1d:db:ec:36:91:71:2a:57: 76:93:61:5b:92:97:04:cc:cf:19:e1:09:ac:2f:b8: 56:5b:14:46:62:58:4f:18:21:67:c6:6e:e1:91:f7: dd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:CA:D7:32:C0:2E:B1:CE:3B:DC:7E:3F:58:4F:02:D2:2E:F2:64:BC X509v3 Authority Key Identifier: keyid:48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b1:a5:56:ca:34:d6:0c:23:ff:69:55:e7:0e:fc:c9:98:c4: 90:0f:a8:30:60:26:db:ea:e4:da:85:a0:3e:13:b4:ff:d3:93: d4:e9:33:30:bd:bd:86:07:9b:6b:a0:de:70:d9:12:ea:f9:41: 80:f1:52:5c:12:4c:83:ab:4a:5f:36:a3:8e:f1:8c:d3:49:c9: 4b:85:ff:6a:05:af:69:dc:cd:4a:94:ab:a9:74:3d:e9:b8:14: 11:1f:5c:9c:c5:26:b9:13:d2:95:a9:4c:e4:d8:03:10:18:0d: bf:67:60:1a:ef:2a:76:35:b5:ab:e9:36:b0:0f:43:e9:4a:01: 2a:b7:25:fe:f9:52:c5:72:76:61:35:4a:d6:31:f1:af:47:d8: 0e:0d:f4:3e:ff:ce:07:64:47:82:22:5e:34:c4:6d:e1:28:df: 8b:13:25:5c:95:92:12:5f:bc:4d:fa:8a:90:12:9e:1f:8c:21: 90:0f:96:63:2b:f0:70:4e:2d:25:33:dc:7e:1b:a2:77:cc:5f: 43:f3:3a:48:ea:51:a8:b6:8d:53:d4:17:f5:99:39:7f:82:48: f4:44:3b:00:6b:0c:21:44:d9:7a:58:aa:a6:d1:a7:34:6e:11: 29:82:90:98:9d:e2:be:25:15:8f:af:a0:ef:c3:ff:ed:89:05: 64:20:65:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrRYqs3s3LmmbDkZMvSM/mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MTNiOWM1ZmU4MzE1ODA3ZDc4NTZjZDIzMDAwM2FhMTY3 NDFjMGQwHhcNMjUxMjI5MTgwMTE3WhcNMjUxMjMwMTgwMTE3WjAzMTEwLwYDVQQD EygwYmNhZDczMmMwMmViMWNlM2JkYzdlM2Y1ODRmMDJkMjJlZjI2NGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39AfhieYi+TmDdpYBZmOZMBE5xha TDiARc9k7XjAOh22ga2XF7j27AeNVEE/EuBoYDBMW7IUGZbVs76yPFDFb9m6Ml8Y XaV7ntji6ocT9R/yagJ74OklnT7PUjAGRWDEZAQf8iWAPqCv+b1OprNx0sX/yF/9 XV/uBGdNIwaXsepu50IkEwX1LqBuj3CUQYH0jb1+etLrhGkIvPLIQPlsJW5QfOzU t0ioW13lWaPuQnG6xUJ1lvnB97wNjqy9GKT+XLozGjbq7MR+vaUzn5eSOGz+tcpM ZJGUHdvsNpFxKld2k2FbkpcEzM8Z4QmsL7hWWxRGYlhPGCFnxm7hkffdBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvK1zLALrHOO9x+P1hPAtIu8mS8MB8GA1UdIwQY MBaAFEgTucX+gxWAfXhWzSMAA6oWdBwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JPNXhmNkRGWUI5ZUZiTkl3QURxaFowSEEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS84ZjQxYTQtZTE0MC00ZjY1LTgwZTYt MjgxNzBhYzAyYjMyLzEvU0JPNXhmNkRGWUI5ZUZiTkl3QURxaFowSEEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS84ZjQxYTQtZTE0MC00ZjY1LTgwZTYtMjgxNzBhYzAyYjMy LzEvU0JPNXhmNkRGWUI5ZUZiTkl3QURxaFowSEEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7GlVso0 1gwj/2lV5w78yZjEkA+oMGAm2+rk2oWgPhO0/9OT1OkzML29hgeba6DecNkS6vlB gPFSXBJMg6tKXzajjvGM00nJS4X/agWvadzNSpSrqXQ96bgUER9cnMUmuRPSlalM 5NgDEBgNv2dgGu8qdjW1q+k2sA9D6UoBKrcl/vlSxXJ2YTVK1jHxr0fYDg30Pv/O B2RHgiJeNMRt4SjfixMlXJWSEl+8TfqKkBKeH4whkA+WYyvwcE4tJTPcfhuid8xf Q/M6SOpRqLaNU9QX9Zk5f4JI9EQ7AGsMIUTZeliqptGnNG4RKYKQmJ3iviUVj6+g 78P/7YkFZCBlJg== -----END CERTIFICATE-----Generated at Tue Dec 30 01:29:41 2025 by rpki-client