This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft File: SnqRfdz8JujIezCFi28H8po9tD4.mft (raw, json) Hash identifier: DPaCkJxtIszQs6f/NM7cw3KcDojSpw5RT9TEju5tzK8= Subject key identifier: 35:CF:99:C1:EF:6A:FF:F2:DE:4B:BA:0D:F4:65:CD:A1:FE:39:2D:5A Authority key identifier: 4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E Certificate issuer: /CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e Certificate serial: 019B3BD9A0617270EC296C19E556313F4ECD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft Manifest number: 1737 Signing time: Sat 20 Dec 2025 13:01:16 +0000 Manifest this update: Sat 20 Dec 2025 13:01:16 +0000 Manifest next update: Sun 21 Dec 2025 13:01:16 +0000 Files and hashes: 1: P2xh5AQS8g63oefSEJQg-RsTiE4.roa (hash: fyGkFWMTxDql0OoutRE6aQhGU1Ek1V6QoGNhwV3E3j8=) 2: SnqRfdz8JujIezCFi28H8po9tD4.crl (hash: dhapGmwTdXJm7YgjBFQqGU5muHFpmR9PO/7r/ZzH5p8=) 3: wZuLHZACRgaqannQqtWTgy9AnFY.roa (hash: ArTL5+VwNfVl+VzsgeZQzp979burQZd57vVQg0xpNM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:a0:61:72:70:ec:29:6c:19:e5:56:31:3f:4e:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e Validity Not Before: Dec 20 13:01:16 2025 GMT Not After : Dec 21 13:01:16 2025 GMT Subject: CN=35cf99c1ef6afff2de4bba0df465cda1fe392d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:13:00:ff:b1:6a:76:7d:f2:35:2e:d3:42:1c: a2:55:75:a2:7a:86:48:e5:a0:a4:ec:93:13:1a:8a: 12:92:cd:33:91:e7:94:31:a1:57:b2:59:22:ae:87: 24:8a:6c:3b:25:13:95:a0:98:bd:cb:9b:e4:ba:88: 83:1a:4e:a5:4d:9a:7e:aa:9e:d9:21:57:5a:14:5a: dd:84:e7:70:f9:43:5e:72:11:e8:ba:f6:dd:b6:e9: 08:43:67:e5:39:a4:8e:c3:cb:98:70:06:8a:6f:71: 5e:e5:01:45:37:b3:21:b9:b2:5e:a8:1e:6d:15:e0: 3a:3c:92:20:93:c3:31:26:18:72:01:d3:aa:60:ab: 3f:ca:e4:d7:b6:b3:4d:c6:50:bb:8e:03:c9:eb:e2: 37:d5:0f:79:30:1b:4a:55:b0:48:4a:05:1a:35:0b: 34:16:fc:2b:21:7d:3b:6e:b8:83:37:e2:19:93:01: 2f:54:a4:75:48:d5:88:82:35:d8:30:be:94:f4:38: 30:2c:26:52:4b:bd:6f:c2:94:bf:1e:ee:15:93:00: 2d:65:04:a0:b1:aa:f6:03:7f:ef:d3:ba:33:aa:21: ef:56:b5:cf:82:24:76:f3:cd:9f:08:a5:22:89:f2: 31:85:7f:2e:af:99:cf:2b:02:4a:9b:ff:c2:8d:24: 20:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CF:99:C1:EF:6A:FF:F2:DE:4B:BA:0D:F4:65:CD:A1:FE:39:2D:5A X509v3 Authority Key Identifier: keyid:4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:b7:a7:fa:3f:68:ff:d1:1f:09:11:d9:f9:53:35:f0:49:db: 47:14:4a:70:84:df:af:62:af:78:f4:07:04:f2:1f:94:da:a4: 2d:8a:7e:7c:e5:31:e2:d4:21:37:4f:80:46:bf:bf:d5:c7:1c: d5:93:35:dd:b6:17:1e:2c:fa:d6:f9:03:f0:d5:dc:be:21:35: 6d:86:48:7a:cf:83:e4:37:88:1e:6f:c7:08:9d:ef:b0:0a:bb: cf:01:38:a8:b3:ed:76:88:7e:9f:28:59:38:9f:f1:55:89:71: 61:dc:9e:2f:39:90:04:73:f5:63:b1:af:b4:77:5b:1e:a6:2b: 5c:cc:1b:bf:bb:aa:38:0c:1e:87:a8:b1:44:fc:26:93:97:28: 3c:40:af:88:bd:d3:70:6b:00:be:24:9e:40:f7:d8:04:87:24: 99:9e:f4:23:92:1c:09:e2:7c:a0:54:17:fa:22:09:43:ca:29: b5:24:83:ba:46:5f:57:99:46:eb:ac:86:06:a5:48:8a:f5:a1: ee:13:e0:59:4a:39:e1:61:04:66:84:c2:54:58:e7:5f:0e:51: 01:27:5b:f3:a9:40:91:c9:82:a0:50:66:ad:e5:5a:bc:24:5d: 91:1a:6e:1a:dd:ee:48:7e:27:28:fa:91:75:6e:d6:ea:7d:16: 0a:39:bc:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72aBhcnDsKWwZ5VYxP07NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhN2E5MTdkZGNmYzI2ZThjODdiMzA4NThiNmYwN2YyOWEz ZGI0M2UwHhcNMjUxMjIwMTMwMTE2WhcNMjUxMjIxMTMwMTE2WjAzMTEwLwYDVQQD EygzNWNmOTljMWVmNmFmZmYyZGU0YmJhMGRmNDY1Y2RhMWZlMzkyZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRMA/7Fqdn3yNS7TQhyiVXWieoZI 5aCk7JMTGooSks0zkeeUMaFXslkirockimw7JROVoJi9y5vkuoiDGk6lTZp+qp7Z IVdaFFrdhOdw+UNechHouvbdtukIQ2flOaSOw8uYcAaKb3Fe5QFFN7MhubJeqB5t FeA6PJIgk8MxJhhyAdOqYKs/yuTXtrNNxlC7jgPJ6+I31Q95MBtKVbBISgUaNQs0 FvwrIX07briDN+IZkwEvVKR1SNWIgjXYML6U9DgwLCZSS71vwpS/Hu4VkwAtZQSg sar2A3/v07ozqiHvVrXPgiR2882fCKUiifIxhX8ur5nPKwJKm//CjSQgqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXPmcHvav/y3ku6DfRlzaH+OS1aMB8GA1UdIwQY MBaAFEp6kX3c/CboyHswhYtvB/KaPbQ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU25xUmZkejhKdWpJZXpDRmkyOEg4cG85dEQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNGMyYmItNzllYS00ZjM5LWFjODIt ODIwMTZkZTQyMjEyLzEvU25xUmZkejhKdWpJZXpDRmkyOEg4cG85dEQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8zNGMyYmItNzllYS00ZjM5LWFjODItODIwMTZkZTQyMjEy LzEvU25xUmZkejhKdWpJZXpDRmkyOEg4cG85dEQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhren+j9o /9EfCRHZ+VM18EnbRxRKcITfr2KvePQHBPIflNqkLYp+fOUx4tQhN0+ARr+/1ccc 1ZM13bYXHiz61vkD8NXcviE1bYZIes+D5DeIHm/HCJ3vsAq7zwE4qLPtdoh+nyhZ OJ/xVYlxYdyeLzmQBHP1Y7GvtHdbHqYrXMwbv7uqOAweh6ixRPwmk5coPECviL3T cGsAviSeQPfYBIckmZ70I5IcCeJ8oFQX+iIJQ8optSSDukZfV5lG66yGBqVIivWh 7hPgWUo54WEEZoTCVFjnXw5RASdb86lAkcmCoFBmreVavCRdkRpuGt3uSH4nKPqR dW7W6n0WCjm8Mg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:27:10 2025 by rpki-client