This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft File: SnX6lUdbre63H4ROCwtEtqj-qf4.mft (raw, json) Hash identifier: w1M56H5mxD6zGk/7/0oeR9sx+7VzHBfXcLOeS2hSnwQ= Subject key identifier: 21:12:55:44:F7:C2:A9:54:6B:F9:54:25:2B:D1:13:4E:76:EE:24:C3 Authority key identifier: 4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE Certificate issuer: /CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe Certificate serial: 019AF2401FF791936D88B509FF34D349952F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft Manifest number: 0A50 Signing time: Sat 06 Dec 2025 06:01:20 +0000 Manifest this update: Sat 06 Dec 2025 06:01:20 +0000 Manifest next update: Sun 07 Dec 2025 06:01:20 +0000 Files and hashes: 1: SnX6lUdbre63H4ROCwtEtqj-qf4.crl (hash: LPhxYKALxfHATepH+w5Dz2UTrAruoOPMdZJ0yE4pQuM=) 2: _2GPXm0W5pqTGfOSlDVI1ePI1QE.roa (hash: 9R3xfYmKYkm/k3uZLHas6Z2h3l83dSwTWGdwQsjNnVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:1f:f7:91:93:6d:88:b5:09:ff:34:d3:49:95:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe Validity Not Before: Dec 6 06:01:20 2025 GMT Not After : Dec 7 06:01:20 2025 GMT Subject: CN=21125544f7c2a9546bf954252bd1134e76ee24c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:53:52:99:55:51:7f:d9:97:23:60:84:6d:70: 86:32:76:d2:7c:cf:fb:30:25:c7:1f:1b:06:60:8d: 84:20:a3:43:ea:64:ad:f0:e3:23:f9:56:75:55:1d: b4:28:f9:cf:89:bb:d9:46:8d:34:e8:70:42:88:d3: b3:74:3d:0e:15:63:b2:4e:80:0a:28:bf:a8:a0:4e: 32:f6:f7:c5:d3:c4:3b:0d:c1:0a:da:e2:0e:f6:42: 6c:e2:3b:c7:dc:b4:76:06:04:6f:df:79:25:1c:91: 14:26:bd:0e:77:9c:c0:07:41:3f:62:78:c2:35:42: e9:99:f4:54:f7:60:aa:16:5e:0d:ea:06:03:3f:fe: af:c4:bf:22:f1:f6:c9:ad:2d:5d:a2:0e:d3:c0:d2: 5c:c4:7a:d6:6d:ca:53:d5:3d:a4:bc:70:c8:66:07: 86:c3:4f:62:0a:d5:85:e0:95:c2:38:60:af:b4:89: 29:cb:00:8b:36:63:07:1f:b4:1f:ba:e5:9e:45:bb: 19:c2:dc:c7:de:71:36:c0:b3:cf:af:da:1f:fe:ec: d0:cb:cf:fe:80:1d:41:59:0d:47:8f:24:87:a9:28: 31:62:13:8c:6c:cc:24:09:2f:12:b3:5b:e8:8a:f0: bb:f2:b4:d3:d0:09:9e:54:e8:88:dc:1c:63:ff:07: bd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:12:55:44:F7:C2:A9:54:6B:F9:54:25:2B:D1:13:4E:76:EE:24:C3 X509v3 Authority Key Identifier: keyid:4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:88:01:d0:88:67:06:bb:ce:06:d7:f3:50:72:ad:12:51:05: 38:ee:7c:77:73:a1:1d:67:59:7a:d8:36:4e:7f:e3:03:c9:ff: 45:50:4d:43:79:5d:82:1b:de:d8:26:07:34:f2:c7:80:6a:23: fd:b8:63:a8:47:f0:6e:99:8f:d2:49:b4:9c:10:ce:91:73:0f: ee:eb:14:8f:c9:52:e4:d3:0a:4e:dc:3c:d4:bc:26:19:fd:19: 8b:fb:ea:dd:a5:93:4b:b4:27:89:60:fe:27:d7:04:e4:09:5d: 53:e5:5a:1a:4f:02:81:81:e9:ab:67:44:fe:37:5e:56:4a:4e: 2a:01:8d:dc:2b:79:6a:95:a7:23:4a:a8:5b:96:38:0b:e7:85: 9d:c3:bd:4c:cb:31:a4:df:81:38:c7:3c:19:8f:1b:a0:79:7d: df:50:3c:16:8d:46:76:8b:51:05:5f:1d:69:72:9c:06:12:45: ba:33:6c:e4:4a:84:39:90:e0:52:d2:ad:15:6c:8e:81:a3:53: 04:39:e3:89:ad:62:23:6e:6b:76:d5:65:03:02:e5:9c:85:1c: 09:ce:87:c1:6f:e4:3a:2d:4c:8b:ce:91:71:4b:97:58:49:e1: b9:8c:91:aa:7b:07:c1:ad:51:76:4a:c2:ee:c5:0e:16:40:84: c9:7a:51:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQB/3kZNtiLUJ/zTTSZUvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNzVmYTk1NDc1YmFkZWViNzFmODQ0ZTBiMGI0NGI2YThm ZWE5ZmUwHhcNMjUxMjA2MDYwMTIwWhcNMjUxMjA3MDYwMTIwWjAzMTEwLwYDVQQD EygyMTEyNTU0NGY3YzJhOTU0NmJmOTU0MjUyYmQxMTM0ZTc2ZWUyNGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1NSmVVRf9mXI2CEbXCGMnbSfM/7 MCXHHxsGYI2EIKND6mSt8OMj+VZ1VR20KPnPibvZRo006HBCiNOzdD0OFWOyToAK KL+ooE4y9vfF08Q7DcEK2uIO9kJs4jvH3LR2BgRv33klHJEUJr0Od5zAB0E/YnjC NULpmfRU92CqFl4N6gYDP/6vxL8i8fbJrS1dog7TwNJcxHrWbcpT1T2kvHDIZgeG w09iCtWF4JXCOGCvtIkpywCLNmMHH7QfuuWeRbsZwtzH3nE2wLPPr9of/uzQy8/+ gB1BWQ1HjySHqSgxYhOMbMwkCS8Ss1voivC78rTT0AmeVOiI3Bxj/we9DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCESVUT3wqlUa/lUJSvRE0527iTDMB8GA1UdIwQY MBaAFEp1+pVHW63utx+ETgsLRLao/qn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU25YNmxVZGJyZTYzSDRST0N3dEV0cWotcWY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85OTA1OTUtNTE1Ny00MDM2LWI2MDEt NjA4NDNiNWJiYjgxLzEvU25YNmxVZGJyZTYzSDRST0N3dEV0cWotcWY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85OTA1OTUtNTE1Ny00MDM2LWI2MDEtNjA4NDNiNWJiYjgx LzEvU25YNmxVZGJyZTYzSDRST0N3dEV0cWotcWY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGogB0Ihn BrvOBtfzUHKtElEFOO58d3OhHWdZetg2Tn/jA8n/RVBNQ3ldghve2CYHNPLHgGoj /bhjqEfwbpmP0km0nBDOkXMP7usUj8lS5NMKTtw81LwmGf0Zi/vq3aWTS7QniWD+ J9cE5AldU+VaGk8CgYHpq2dE/jdeVkpOKgGN3Ct5apWnI0qoW5Y4C+eFncO9TMsx pN+BOMc8GY8boHl931A8Fo1GdotRBV8daXKcBhJFujNs5EqEOZDgUtKtFWyOgaNT BDnjia1iI25rdtVlAwLlnIUcCc6HwW/kOi1Mi86RcUuXWEnhuYyRqnsHwa1RdkrC 7sUOFkCEyXpRtA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:37 2025 by rpki-client