This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft File: snkS_-9nB4uwa9SpAh-6lq2xgL4.mft (raw, json) Hash identifier: jZkyAj40G+3WrlhDEjKgeY+dPIHSm9Vl/HqBJzMg8rQ= Subject key identifier: 07:99:57:F1:A7:87:EB:6C:DE:6F:76:84:75:22:33:01:88:60:40:5E Authority key identifier: B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE Certificate issuer: /CN=b27912ffef67078bb06bd4a9021fba96adb180be Certificate serial: 019AF3BFE0C26210770EBD6E630F33BD9716 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft Manifest number: 12FE Signing time: Sat 06 Dec 2025 13:00:29 +0000 Manifest this update: Sat 06 Dec 2025 13:00:29 +0000 Manifest next update: Sun 07 Dec 2025 13:00:29 +0000 Files and hashes: 1: Q0e2nZwWTgSOnN3XYro_yC3AqqY.roa (hash: p1jDlEZ3jtWSk1Gt2ui3hdbzWJmpWW1M0qlAGcolPG0=) 2: snkS_-9nB4uwa9SpAh-6lq2xgL4.crl (hash: nZw4uqPDHNfNwTTvwSS5v2Z+sh/7OKhmuY9R3zV0Rec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:e0:c2:62:10:77:0e:bd:6e:63:0f:33:bd:97:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b27912ffef67078bb06bd4a9021fba96adb180be Validity Not Before: Dec 6 13:00:29 2025 GMT Not After : Dec 7 13:00:29 2025 GMT Subject: CN=079957f1a787eb6cde6f7684752233018860405e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:49:95:56:5d:c6:17:14:7e:57:e6:2c:cd:8f: be:7c:37:81:b9:0e:51:03:2c:2b:6f:05:55:9a:91: e9:8c:9c:a5:30:eb:f1:6a:b9:6c:32:67:7b:ad:a1: e8:e3:08:5e:57:11:85:54:39:5d:c2:dd:c1:7f:6a: a3:e2:d6:df:a2:79:3c:28:cd:0b:0d:91:eb:5f:d0: a7:23:6f:05:63:f6:4c:9b:3b:45:e6:c9:00:19:92: e7:74:4a:5d:90:9e:93:c7:89:2b:4c:a7:fe:81:ac: 5d:55:cb:ba:66:31:56:d9:d1:1d:41:dd:65:23:db: 8b:ad:6c:0f:a7:00:f6:26:c6:98:a5:c1:4b:6d:e5: 02:3c:94:df:18:86:39:8a:13:27:4f:8c:76:23:1b: 12:3a:5f:96:90:a0:33:49:8e:7a:f7:75:b4:e0:e4: bb:6c:ff:a2:27:29:d6:d9:a9:80:de:69:a0:13:c7: 64:8e:e6:b1:a7:f9:ff:05:4b:dd:d2:19:61:ff:d9: 23:a2:84:83:54:4a:a7:9e:c7:1b:3d:7b:9d:ee:f0: 27:67:8e:75:59:73:71:08:1d:96:94:3d:82:a9:f2: 4a:12:43:c2:22:49:12:67:36:d0:e0:0f:a3:ce:ed: e7:cd:83:74:d5:90:6e:67:70:03:26:fc:2b:80:88: d7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:99:57:F1:A7:87:EB:6C:DE:6F:76:84:75:22:33:01:88:60:40:5E X509v3 Authority Key Identifier: keyid:B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:4d:63:67:72:91:58:0c:34:a9:b0:b3:a5:c2:2b:bd:16:c8: a2:eb:aa:0e:b6:27:37:d4:98:25:39:5d:9b:ee:20:ac:ab:c6: 3b:7f:69:45:ac:76:4e:e0:cf:af:7b:7f:b3:3a:56:20:0f:f1: a6:76:0f:1f:8e:9d:8b:7b:bc:8c:35:56:0e:f0:2e:8e:13:3e: e0:e1:59:2d:24:94:15:51:87:cd:16:05:52:4e:1a:f8:47:0c: 2e:62:f3:67:48:8d:1a:b4:d5:41:ff:d5:8a:53:0a:ad:14:22: ee:fb:d3:27:f1:3e:00:c1:9b:bb:b5:f9:f9:40:79:73:e9:93: 06:fa:61:46:ba:43:86:3c:2c:77:cd:d8:43:c1:48:2a:3b:4f: 89:9b:0f:b3:9b:2c:63:a9:f5:70:76:76:ee:56:08:66:c9:ad: 1e:6e:59:fd:98:90:36:9f:87:f7:7f:4e:17:f1:b5:f9:7d:30: dd:6d:25:a4:5e:7f:77:5f:55:6b:a1:2e:2c:f2:ec:77:1b:59: 2e:0c:e0:5f:05:28:91:f9:a2:24:b3:2f:6c:ef:69:7d:35:e0: 45:98:61:31:d2:e4:e5:38:cc:60:38:53:06:be:fd:08:6d:db: 92:85:14:97:4e:ee:cd:f1:6e:95:79:ea:64:11:ad:a2:04:94: 5e:24:44:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv+DCYhB3Dr1uYw8zvZcWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzkxMmZmZWY2NzA3OGJiMDZiZDRhOTAyMWZiYTk2YWRi MTgwYmUwHhcNMjUxMjA2MTMwMDI5WhcNMjUxMjA3MTMwMDI5WjAzMTEwLwYDVQQD EygwNzk5NTdmMWE3ODdlYjZjZGU2Zjc2ODQ3NTIyMzMwMTg4NjA0MDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EmVVl3GFxR+V+YszY++fDeBuQ5R AywrbwVVmpHpjJylMOvxarlsMmd7raHo4wheVxGFVDldwt3Bf2qj4tbfonk8KM0L DZHrX9CnI28FY/ZMmztF5skAGZLndEpdkJ6Tx4krTKf+gaxdVcu6ZjFW2dEdQd1l I9uLrWwPpwD2JsaYpcFLbeUCPJTfGIY5ihMnT4x2IxsSOl+WkKAzSY5693W04OS7 bP+iJynW2amA3mmgE8dkjuaxp/n/BUvd0hlh/9kjooSDVEqnnscbPXud7vAnZ451 WXNxCB2WlD2CqfJKEkPCIkkSZzbQ4A+jzu3nzYN01ZBuZ3ADJvwrgIjX9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAeZV/Gnh+ts3m92hHUiMwGIYEBeMB8GA1UdIwQY MBaAFLJ5Ev/vZweLsGvUqQIfupatsYC+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25rU18tOW5CNHV3YTlTcEFoLTZscTJ4Z0w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yYjg3YzUtMzgwZC00NzZmLWE3MTQt NWMwZDkyZjlhNDlmLzEvc25rU18tOW5CNHV3YTlTcEFoLTZscTJ4Z0w0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8yYjg3YzUtMzgwZC00NzZmLWE3MTQtNWMwZDkyZjlhNDlm LzEvc25rU18tOW5CNHV3YTlTcEFoLTZscTJ4Z0w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuU1jZ3KR WAw0qbCzpcIrvRbIouuqDrYnN9SYJTldm+4grKvGO39pRax2TuDPr3t/szpWIA/x pnYPH46di3u8jDVWDvAujhM+4OFZLSSUFVGHzRYFUk4a+EcMLmLzZ0iNGrTVQf/V ilMKrRQi7vvTJ/E+AMGbu7X5+UB5c+mTBvphRrpDhjwsd83YQ8FIKjtPiZsPs5ss Y6n1cHZ27lYIZsmtHm5Z/ZiQNp+H939OF/G1+X0w3W0lpF5/d19Va6EuLPLsdxtZ LgzgXwUokfmiJLMvbO9pfTXgRZhhMdLk5TjMYDhTBr79CG3bkoUUl07uzfFulXnq ZBGtogSUXiRE4A== -----END CERTIFICATE-----Generated at Sat Dec 6 20:38:49 2025 by rpki-client