This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft File: SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft (raw, json) Hash identifier: BB89pGHIX/u8sRFtTMUwue2EvqA6dzAqOxyD1XEfiAg= Subject key identifier: DB:C7:AD:B0:03:87:73:15:08:F6:22:84:D2:89:4C:D3:34:C1:3A:AE Authority key identifier: 4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95 Certificate issuer: /CN=4a2027dbb89427a8e031b90962e26e44affa5a95 Certificate serial: 019AF27657F2C4574BB272097743E60DB6A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 07:00:33 +0000 Manifest this update: Sat 06 Dec 2025 07:00:33 +0000 Manifest next update: Sun 07 Dec 2025 07:00:33 +0000 Files and hashes: 1: KUfFcY4n_r75t21wBTn8NHwpPWo.roa (hash: Vj4b0HHRAbzzjfGSfe71X4pK6wA9f27I+UmGi3mJNYI=) 2: SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl (hash: QPCrvgBdcxW6e4rROqsFY8mMTAOKVICEXUltI7SZPwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:57:f2:c4:57:4b:b2:72:09:77:43:e6:0d:b6:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a2027dbb89427a8e031b90962e26e44affa5a95 Validity Not Before: Dec 6 07:00:33 2025 GMT Not After : Dec 7 07:00:33 2025 GMT Subject: CN=dbc7adb00387731508f62284d2894cd334c13aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f9:34:40:f7:59:e6:30:8a:dc:d4:f8:d1:15: bf:5b:26:48:53:3a:09:a9:ef:98:92:43:ff:6e:86: 91:47:5b:12:53:d8:a1:be:14:a3:42:a2:57:a9:8f: bd:3f:20:c5:85:8e:3f:43:74:eb:1f:b4:ea:e3:87: 6c:27:bf:6b:8d:a7:b3:24:c3:17:47:05:26:05:30: 66:2a:91:c4:54:24:4d:41:65:2e:cb:83:4f:d2:64: 5d:62:a2:02:2f:56:92:dd:60:79:b9:83:2d:e2:0e: 41:fc:08:ef:43:6e:db:d1:ac:f8:0f:36:da:19:ba: 28:8a:b9:be:06:0c:e8:f3:d3:00:0f:07:1f:90:0c: 66:8a:7d:0d:99:6e:18:51:7a:82:c5:c4:a7:2c:99: f6:51:de:cc:c9:38:c8:6a:47:2b:e6:d4:94:5c:01: 4a:5a:d9:43:aa:fa:73:f3:55:c4:fa:3b:3d:59:45: 35:d2:c1:a8:ef:fd:25:99:91:d0:28:1a:59:23:19: 22:37:0f:44:ec:43:c2:58:27:d8:80:38:48:8d:9f: 73:2e:08:b6:26:ed:e3:f6:74:50:08:5e:44:e0:7f: 3e:24:34:23:0a:9b:b3:e8:fa:d0:f1:0d:46:4c:fc: 3b:0b:6a:4d:22:6f:5c:52:8c:90:ba:0a:80:0f:4a: 6e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C7:AD:B0:03:87:73:15:08:F6:22:84:D2:89:4C:D3:34:C1:3A:AE X509v3 Authority Key Identifier: keyid:4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:03:fe:d6:ab:5c:51:a8:84:44:3b:c0:1f:d3:4c:bf:92:2c: d5:a7:0f:f5:ac:39:28:9a:02:6e:9e:67:8d:31:b4:5e:15:1f: c2:50:61:ae:9e:b7:84:6a:d8:5f:29:87:04:ce:05:98:49:8e: a0:e8:bc:45:a0:89:3b:67:7b:88:08:a8:52:44:3d:1c:ce:fc: 8e:be:86:dc:9d:5b:56:00:e3:c6:25:08:4c:6a:6b:bb:3d:04: d7:8b:fc:2b:6a:2c:ee:5d:c6:b8:e0:9a:a6:5e:a1:46:c1:d6: 96:a9:f4:26:12:82:5f:f0:38:2e:af:c4:91:b7:3a:64:17:b8: c4:45:74:99:ec:a9:f7:df:c3:9d:a8:79:97:8a:75:73:8a:f4: 8a:4f:6f:b5:69:45:85:ec:69:06:b0:a4:cc:fb:f8:7e:45:31: 33:be:d7:21:f0:13:31:6b:45:68:11:25:53:2c:7b:c4:af:a3: df:49:42:c0:60:36:23:26:f0:46:dd:86:b0:de:fc:ee:81:a1: 9c:39:95:96:05:3e:ca:a8:55:4e:54:4e:16:04:58:b1:db:42: 95:06:62:62:b9:a0:c8:8e:b3:9d:69:69:e9:e4:96:bb:de:be: 78:bf:ac:4d:c6:52:b4:e9:1d:e3:f3:8f:b3:a2:3e:c9:d0:09: 09:0f:5e:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlfyxFdLsnIJd0PmDbakMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhMjAyN2RiYjg5NDI3YThlMDMxYjkwOTYyZTI2ZTQ0YWZm YTVhOTUwHhcNMjUxMjA2MDcwMDMzWhcNMjUxMjA3MDcwMDMzWjAzMTEwLwYDVQQD EyhkYmM3YWRiMDAzODc3MzE1MDhmNjIyODRkMjg5NGNkMzM0YzEzYWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vk0QPdZ5jCK3NT40RW/WyZIUzoJ qe+YkkP/boaRR1sSU9ihvhSjQqJXqY+9PyDFhY4/Q3TrH7Tq44dsJ79rjaezJMMX RwUmBTBmKpHEVCRNQWUuy4NP0mRdYqICL1aS3WB5uYMt4g5B/AjvQ27b0az4Dzba Gbooirm+Bgzo89MADwcfkAxmin0NmW4YUXqCxcSnLJn2Ud7MyTjIakcr5tSUXAFK WtlDqvpz81XE+js9WUU10sGo7/0lmZHQKBpZIxkiNw9E7EPCWCfYgDhIjZ9zLgi2 Ju3j9nRQCF5E4H8+JDQjCpuz6PrQ8Q1GTPw7C2pNIm9cUoyQugqAD0puhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvHrbADh3MVCPYihNKJTNM0wTquMB8GA1UdIwQY MBaAFEogJ9u4lCeo4DG5CWLibkSv+lqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2lBbjI3aVVKNmpnTWJrSll1SnVSS182V3BVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80NzExYTEtNGQyNS00N2U2LWFjZjct YjA3MTJhYjBiMDc3LzEvU2lBbjI3aVVKNmpnTWJrSll1SnVSS182V3BVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC80NzExYTEtNGQyNS00N2U2LWFjZjctYjA3MTJhYjBiMDc3 LzEvU2lBbjI3aVVKNmpnTWJrSll1SnVSS182V3BVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegP+1qtc UaiERDvAH9NMv5Is1acP9aw5KJoCbp5njTG0XhUfwlBhrp63hGrYXymHBM4FmEmO oOi8RaCJO2d7iAioUkQ9HM78jr6G3J1bVgDjxiUITGpruz0E14v8K2os7l3GuOCa pl6hRsHWlqn0JhKCX/A4Lq/Ekbc6ZBe4xEV0meyp99/Dnah5l4p1c4r0ik9vtWlF hexpBrCkzPv4fkUxM77XIfATMWtFaBElUyx7xK+j30lCwGA2IybwRt2GsN787oGh nDmVlgU+yqhVTlROFgRYsdtClQZiYrmgyI6znWlp6eSWu96+eL+sTcZStOkd4/OP s6I+ydAJCQ9e9w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:34 2025 by rpki-client