This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft File: Snz-iBFothWgvUEcwxS9BApNJ_Y.mft (raw, json) Hash identifier: JHPce7aX8CaEhZJtWlfKwybf30niEeewEp5JERTWtmI= Subject key identifier: FD:A8:4B:41:EE:B2:90:A8:1C:78:B0:0C:5C:1B:60:F1:9E:74:F5:A8 Authority key identifier: 4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6 Certificate issuer: /CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6 Certificate serial: 019AF42E3C67CD68C098F42378F1A7339906 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 15:01:02 +0000 Manifest this update: Sat 06 Dec 2025 15:01:02 +0000 Manifest next update: Sun 07 Dec 2025 15:01:02 +0000 Files and hashes: 1: Snz-iBFothWgvUEcwxS9BApNJ_Y.crl (hash: lG9RM8IZ0R8F/weRCKi5qf3sujEzIfEvOD4nGmqaBsc=) 2: h_GYODiIwy0tVyLDmKAyNCK7Ui8.roa (hash: EVyFdfHvchtGYnioVymnJTf1ceZLIXds+uNSkp7sgG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:3c:67:cd:68:c0:98:f4:23:78:f1:a7:33:99:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6 Validity Not Before: Dec 6 15:01:02 2025 GMT Not After : Dec 7 15:01:02 2025 GMT Subject: CN=fda84b41eeb290a81c78b00c5c1b60f19e74f5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:75:07:e5:ea:59:24:d8:73:50:cf:e8:40:6e: 76:d6:18:35:53:4b:aa:9a:b8:df:9a:69:96:e4:a3: f8:7e:3d:fd:69:80:37:20:0e:98:e4:a8:3d:e6:a5: 50:21:69:13:95:b2:98:a0:2c:41:ce:66:cf:29:9b: 5c:c8:ec:9d:5f:ca:51:26:16:d9:f6:93:c5:05:1e: ad:68:30:92:e8:b2:6c:77:58:96:c7:8a:9a:5e:5a: 7e:7c:3a:26:84:89:29:84:52:12:1f:bb:27:78:8d: d1:b4:ce:19:c0:a9:67:31:a8:99:ff:00:92:b1:b8: 3c:57:cb:b0:a1:47:6a:77:d9:11:b9:2a:7c:f4:70: 66:62:d5:9a:d0:7a:73:f6:cc:43:dd:ec:5d:39:28: 9d:46:dd:73:b2:0e:27:51:55:0d:23:37:bf:81:12: ba:55:56:0a:b2:b6:75:6a:8d:56:60:cd:97:4c:8b: 8c:df:9e:85:ab:27:38:7f:af:7e:23:c7:97:5d:63: 43:8a:13:1d:a9:ef:15:08:22:ce:94:5d:bf:56:dd: 33:65:ac:39:9b:8b:06:3e:5e:bb:23:40:79:31:35: 19:44:c2:a6:d8:79:25:a8:0c:b1:83:1e:55:bc:2e: dc:fe:71:32:77:55:96:61:95:62:c1:78:28:94:64: 05:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A8:4B:41:EE:B2:90:A8:1C:78:B0:0C:5C:1B:60:F1:9E:74:F5:A8 X509v3 Authority Key Identifier: keyid:4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:9a:e8:6e:68:3f:35:84:d9:f3:9e:96:d2:b1:53:6d:44:90: 40:0d:37:45:db:61:ac:f8:db:e1:d0:99:fd:e9:f1:db:12:09: f7:d7:11:9a:de:32:e8:9a:c0:02:45:ff:f9:ce:22:9d:ca:55: 2b:4a:95:8a:23:30:bf:b1:40:a0:14:09:14:d6:93:fa:cd:66: c0:cf:37:2e:65:3a:0e:4f:6f:6c:a4:d0:03:39:87:02:c4:d7: 68:03:11:fa:4a:25:5a:18:d7:42:f4:72:c4:f9:5a:59:15:e1: 08:f5:5f:1e:ae:7e:4b:94:e3:46:70:cc:77:db:87:e4:ea:6c: 4f:27:c6:e1:4a:40:89:c2:05:0a:a2:f3:d3:d0:89:96:a4:75: 13:58:fb:c2:de:84:c9:68:73:41:2f:d5:7e:e6:f5:57:17:8d: 6f:02:1c:0b:50:bc:93:da:b7:8e:54:b4:02:cd:ae:28:40:42: b1:fa:1f:82:03:ab:ce:02:31:c6:88:41:67:aa:d4:64:0b:25: 97:53:f7:66:26:73:74:b5:d7:5a:42:05:1f:62:69:2a:14:18: 99:cb:03:2e:62:9f:c7:45:80:53:a4:66:90:0d:ad:01:2f:61: fe:c1:80:58:04:d8:3a:ff:ca:ff:99:5e:a3:12:6e:e7:64:4a: 4b:69:eb:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LjxnzWjAmPQjePGnM5kGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhN2NmZTg4MTE2OGI2MTVhMGJkNDExY2MzMTRiZDA0MGE0 ZDI3ZjYwHhcNMjUxMjA2MTUwMTAyWhcNMjUxMjA3MTUwMTAyWjAzMTEwLwYDVQQD EyhmZGE4NGI0MWVlYjI5MGE4MWM3OGIwMGM1YzFiNjBmMTllNzRmNWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHUH5epZJNhzUM/oQG521hg1U0uq mrjfmmmW5KP4fj39aYA3IA6Y5Kg95qVQIWkTlbKYoCxBzmbPKZtcyOydX8pRJhbZ 9pPFBR6taDCS6LJsd1iWx4qaXlp+fDomhIkphFISH7sneI3RtM4ZwKlnMaiZ/wCS sbg8V8uwoUdqd9kRuSp89HBmYtWa0Hpz9sxD3exdOSidRt1zsg4nUVUNIze/gRK6 VVYKsrZ1ao1WYM2XTIuM356Fqyc4f69+I8eXXWNDihMdqe8VCCLOlF2/Vt0zZaw5 m4sGPl67I0B5MTUZRMKm2HklqAyxgx5VvC7c/nEyd1WWYZViwXgolGQFMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2oS0HuspCoHHiwDFwbYPGedPWoMB8GA1UdIwQY MBaAFEp8/ogRaLYVoL1BHMMUvQQKTSf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU256LWlCRm90aFdndlVFY3d4UzlCQXBOSl9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zMjI0NTAtMjFjYS00MWFmLTliNjUt Y2JlMDg0ODcyMTc0LzEvU256LWlCRm90aFdndlVFY3d4UzlCQXBOSl9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8zMjI0NTAtMjFjYS00MWFmLTliNjUtY2JlMDg0ODcyMTc0 LzEvU256LWlCRm90aFdndlVFY3d4UzlCQXBOSl9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5robmg/ NYTZ856W0rFTbUSQQA03RdthrPjb4dCZ/enx2xIJ99cRmt4y6JrAAkX/+c4incpV K0qViiMwv7FAoBQJFNaT+s1mwM83LmU6Dk9vbKTQAzmHAsTXaAMR+kolWhjXQvRy xPlaWRXhCPVfHq5+S5TjRnDMd9uH5OpsTyfG4UpAicIFCqLz09CJlqR1E1j7wt6E yWhzQS/Vfub1VxeNbwIcC1C8k9q3jlS0As2uKEBCsfofggOrzgIxxohBZ6rUZAsl l1P3ZiZzdLXXWkIFH2JpKhQYmcsDLmKfx0WAU6RmkA2tAS9h/sGAWATYOv/K/5le oxJu52RKS2nrYg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:37:10 2025 by rpki-client