This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft File: snJh1xU0i_1zzp27ckiGVpk7ovE.mft (raw, json) Hash identifier: LtB3MUSckrAYhq+TO0Pv8uVnw5FE77CWovG+72d1Ymg= Subject key identifier: 2A:79:77:5F:2E:CA:4B:1E:92:A8:59:B4:DB:C4:A3:42:7B:F6:74:FC Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Certificate serial: 019AF35285316AA6515E7B245E4ECC3BCAD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft Manifest number: 128F Signing time: Sat 06 Dec 2025 11:01:02 +0000 Manifest this update: Sat 06 Dec 2025 11:01:02 +0000 Manifest next update: Sun 07 Dec 2025 11:01:02 +0000 Files and hashes: 1: 54iLRsUEYQSLlV8kHVTer9P4keA.roa (hash: Oib7LJlXh4bUMGiTPxF+59IQOdwF+fvCUOmQ1Sv5YqM=) 2: 83ZfI9Fyoy0-0Ed7XViCJUVWAUk.roa (hash: x5Erfp0LUGN9evcbs1ECyXblatyvnAhrnm8OrbCDB8k=) 3: DtWqKYrRCyGx6dsd9f2L7CKfIRc.roa (hash: O7NemdIlDZpd4quz6YecLMnjW1CyD/u06cKhcBOTRro=) 4: GrZCo-Pl-pKds5zmwg7ubalVFTA.roa (hash: XSM4rBpjvcsUyAb/r/u55Oo3ZCJqxZNIGwjYsJQ68bw=) 5: M80ufUXhkNHfa9K4zU6X6k_ofZQ.roa (hash: 4dQl+qST57nUFs67WwcEmlUV01oY2iEO29630JMqbwE=) 6: OcXOGlX2Gc26JEdm5iWVWnBYg58.roa (hash: /vGDKbgE4iZUS4BzIvVP16inipE2apdXrS0M45rcngw=) 7: QpucqboD9L8Uv9-I8wC2eqyytjM.roa (hash: QJ36JcAEae+tPmwoLHxsrKQ/qHkNlapv2iTQudy3nXg=) 8: VLrSYlONO7JZUvaeI6OzgjRksA0.roa (hash: LTkUIoLhvOTPKcASxWAtrGL8orynFjazuB3yg7c0ZYo=) 9: W95VCieFrYA-UWvQbNSL7N3Y2Cg.roa (hash: YvWvtJ9d+roXNfi60DzUNUYY7G9jfkQp1ZTCPAwbx+g=) 10: Yw4yz2qvg4rQujrK-dIx_KPixQM.roa (hash: rPOdhOXTd0LJkvjvgXHjpfcSX15w4WKfBaBl0s4PykM=) 11: mMdAkncXd62KSLEMH5-GZ2xifmI.roa (hash: BsiKxHj0OcEVg20ZYqrvGiqQgj+ynivI6054d313+QE=) 12: snJh1xU0i_1zzp27ckiGVpk7ovE.crl (hash: iAU6z8lSVUDoA6rAnJN6J1ac+vVcH2PYWWkkBIVcarg=) 13: tXmj_lk4J_cxjq5mg9Y-DnR4g68.roa (hash: FkJnyg1Nbp4kUP6A2c71ys6CgKIoTjWwYiDec6OD1BY=) 14: x93oIxwN7f9CnY5MK-gEMFA9RCs.roa (hash: iUrM+UkqfotbOBAOD6sNrVDAFzEQJnu2I0F39zCKGjM=) 15: x_9TAtatN7OaJxTBmrfHpUlXZDA.roa (hash: 2gG4s/omQ5P0Lbi33p1Th/x4L/bao6YkNKtuc6UmamA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:85:31:6a:a6:51:5e:7b:24:5e:4e:cc:3b:ca:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Validity Not Before: Dec 6 11:01:02 2025 GMT Not After : Dec 7 11:01:02 2025 GMT Subject: CN=2a79775f2eca4b1e92a859b4dbc4a3427bf674fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:50:71:e0:a5:27:76:da:65:bf:a9:6b:97:19: 77:ac:4e:66:79:46:0f:4d:18:56:f1:f5:79:e2:8a: 67:c7:6f:fe:3b:de:62:55:ef:5f:9a:69:90:a5:7f: 92:54:21:ed:c4:0d:c6:b0:69:3a:26:43:77:4f:13: 82:df:ff:8f:c4:1a:88:91:72:7b:39:15:57:78:93: be:e4:19:a7:96:5c:53:26:c2:07:1a:fb:76:b3:a8: e7:04:60:20:87:af:5e:a3:cf:7a:18:01:27:5d:78: 0e:33:1b:46:68:7a:52:fb:85:67:a0:9f:ba:7e:c7: 1a:04:41:60:a8:37:4c:85:04:01:6a:1f:f3:d7:ec: 37:b1:7e:2a:54:55:95:e0:60:dd:91:86:a8:c0:44: 5c:40:be:64:ea:a7:60:47:36:43:70:80:e8:df:0e: 0f:c2:5b:0e:54:54:28:58:b5:f8:7a:bd:07:7a:21: 3f:2f:6c:e7:c2:3e:82:72:3c:f5:b8:e4:2f:f1:4c: 18:2c:9f:4d:19:7d:5b:13:d2:02:44:40:34:96:5e: b7:61:08:8d:a3:76:f0:01:d1:5f:91:51:6b:62:a5: ca:dc:35:5c:0d:a6:bd:8f:33:d9:3a:39:6b:fb:d6: db:e0:67:d8:1c:6c:8b:d0:e0:54:e0:b9:a5:89:6f: 93:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:79:77:5F:2E:CA:4B:1E:92:A8:59:B4:DB:C4:A3:42:7B:F6:74:FC X509v3 Authority Key Identifier: keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:dc:4f:ec:73:74:f5:59:e6:7b:91:c0:8a:80:12:70:3b:54: 96:85:1a:01:f6:83:7a:d1:be:16:20:f2:e2:05:74:2d:8f:c9: be:6f:be:25:49:6f:a9:89:50:9d:35:ee:e7:d9:43:e9:ba:e9: d8:3d:71:c5:e3:7a:d3:dc:35:54:46:c7:f6:62:22:80:1d:43: 97:e7:c9:ea:ae:89:b3:00:08:44:26:5f:69:41:a7:b0:ba:52: d1:29:bf:3c:60:8f:71:03:54:d3:73:7b:43:60:9a:4f:4d:e5: 79:67:d4:89:42:0b:09:2e:02:90:14:22:44:27:91:f6:b9:75: d7:4c:b0:6e:71:cb:5b:cd:f2:b6:0d:ba:47:1f:a8:0f:98:8d: a3:d4:fe:d7:d2:4c:60:79:52:32:93:a2:23:12:7d:51:9d:5c: cc:f1:99:4a:bc:9a:44:f7:69:40:19:f6:22:9d:8c:fe:64:e2: 3c:36:d4:57:88:28:19:27:97:ad:f0:49:e9:6e:ff:82:61:52: 31:cb:49:6d:6a:40:f9:e9:fe:00:76:c6:a7:80:be:37:95:9a: 22:86:c3:99:61:95:0d:eb:e4:6e:fb:67:c6:97:5e:ab:5a:32: b8:39:fc:46:c8:68:b7:5a:19:a4:87:3d:2b:78:8a:93:ac:39: cf:3e:49:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUoUxaqZRXnskXk7MO8rRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz YmEyZjEwHhcNMjUxMjA2MTEwMTAyWhcNMjUxMjA3MTEwMTAyWjAzMTEwLwYDVQQD EygyYTc5Nzc1ZjJlY2E0YjFlOTJhODU5YjRkYmM0YTM0MjdiZjY3NGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11Bx4KUndtplv6lrlxl3rE5meUYP TRhW8fV54opnx2/+O95iVe9fmmmQpX+SVCHtxA3GsGk6JkN3TxOC3/+PxBqIkXJ7 ORVXeJO+5BmnllxTJsIHGvt2s6jnBGAgh69eo896GAEnXXgOMxtGaHpS+4VnoJ+6 fscaBEFgqDdMhQQBah/z1+w3sX4qVFWV4GDdkYaowERcQL5k6qdgRzZDcIDo3w4P wlsOVFQoWLX4er0HeiE/L2znwj6Ccjz1uOQv8UwYLJ9NGX1bE9ICREA0ll63YQiN o3bwAdFfkVFrYqXK3DVcDaa9jzPZOjlr+9bb4GfYHGyL0OBU4LmliW+TJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCp5d18uyksekqhZtNvEo0J79nT8MB8GA1UdIwQY MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt NTA0ZjI3NjY3NjBmLzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtxP7HN0 9Vnme5HAioAScDtUloUaAfaDetG+FiDy4gV0LY/Jvm++JUlvqYlQnTXu59lD6brp 2D1xxeN609w1VEbH9mIigB1Dl+fJ6q6JswAIRCZfaUGnsLpS0Sm/PGCPcQNU03N7 Q2CaT03leWfUiUILCS4CkBQiRCeR9rl110ywbnHLW83ytg26Rx+oD5iNo9T+19JM YHlSMpOiIxJ9UZ1czPGZSryaRPdpQBn2Ip2M/mTiPDbUV4goGSeXrfBJ6W7/gmFS MctJbWpA+en+AHbGp4C+N5WaIobDmWGVDevkbvtnxpdeq1oyuDn8Rshot1oZpIc9 K3iKk6w5zz5JdA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:05:35 2025 by rpki-client