This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft File: sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft (raw, json) Hash identifier: Y8CcqqAH5uIpfrJD43l8YaM+JnuWGUL29UUqSgkZgX0= Subject key identifier: 00:4A:CD:C8:C3:86:13:A8:EA:1E:C8:3B:05:31:F0:81:6B:35:F5:DA Authority key identifier: B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85 Certificate issuer: /CN=b0d62d1666c5c4d192183531584afd72bed08485 Certificate serial: 019AF19AC3BA90EAA84A4C066C3AC0A92284 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:00:42 +0000 Manifest this update: Sat 06 Dec 2025 03:00:42 +0000 Manifest next update: Sun 07 Dec 2025 03:00:42 +0000 Files and hashes: 1: QXyQtT8qy7cZkdePrzNkoMkFsLI.roa (hash: p4NnT1oNWa0lNXGn9ql046BScEcNjINqPaeSDpvSus0=) 2: sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl (hash: ykPtiS+F+wFSqF4ljTGvYg3B6e+1Pwo2n44y9+p+nkQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c3:ba:90:ea:a8:4a:4c:06:6c:3a:c0:a9:22:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0d62d1666c5c4d192183531584afd72bed08485 Validity Not Before: Dec 6 03:00:42 2025 GMT Not After : Dec 7 03:00:42 2025 GMT Subject: CN=004acdc8c38613a8ea1ec83b0531f0816b35f5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f6:0f:f6:0d:ef:2a:d5:8c:26:0c:23:8b:63: e7:2a:24:fe:f9:3a:9f:22:4a:54:61:ae:2e:28:f9: 20:92:6c:c7:49:b8:16:05:b8:d5:24:dd:c4:b2:e8: 47:49:72:15:ff:39:e2:99:a7:b8:e1:57:e4:f1:cd: 51:91:ec:59:7b:90:9b:b9:95:e2:05:31:89:26:96: 31:0b:e8:4d:72:ec:75:f1:a1:6b:62:42:e5:3a:2e: 5c:83:b5:bc:42:c7:a2:6a:fe:c2:ca:ca:3b:08:98: ce:0c:b5:e6:4e:b6:71:34:9c:47:07:85:de:a8:9f: 09:57:87:e8:e7:37:5f:71:53:28:f4:3d:c2:f4:bd: 09:07:8a:d8:03:1a:ae:96:40:6d:49:60:34:18:aa: a2:13:7c:86:fe:0f:df:21:bc:52:4a:3e:7c:b6:79: c3:67:5d:4c:d4:e1:46:3a:59:c5:ba:83:9f:a8:05: 44:b6:04:81:97:b7:b8:15:42:bd:01:5a:67:b9:03: 6a:a7:b5:99:e3:72:90:82:77:0d:35:77:3f:4f:7f: b4:d6:1c:85:2e:f9:1d:5a:8a:7d:0c:ee:c2:a9:59: 8d:f2:a1:19:c2:86:47:6f:91:1e:45:f2:75:32:fd: 3f:b2:45:d5:0a:31:7d:c6:df:9c:7b:ce:b2:4e:78: 4e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4A:CD:C8:C3:86:13:A8:EA:1E:C8:3B:05:31:F0:81:6B:35:F5:DA X509v3 Authority Key Identifier: keyid:B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:20:c8:9a:f0:0a:8a:79:6c:df:6e:34:33:a4:40:61:c2:2b: a5:ff:77:2e:cf:66:ed:ca:c2:6d:ae:94:c2:fb:e4:ef:b9:b9: 35:6d:6e:9d:fe:f7:ce:10:77:16:4e:7b:70:bd:04:86:09:b9: 59:c3:84:6c:40:4a:9b:cb:92:d6:3b:06:74:56:e4:71:37:5f: 1f:fe:a3:50:fa:4e:cb:94:18:26:ce:bd:cf:6f:e6:e8:78:2a: 40:3e:ca:16:98:28:cb:6e:1c:64:77:04:2b:c8:27:bf:b6:db: 0b:f1:35:80:66:c9:a7:32:e2:5a:ee:c5:20:a8:ff:46:44:47: 10:9c:1d:94:a7:04:dc:60:b3:92:5a:f9:72:d3:57:92:6f:3b: 4b:a3:9a:c6:be:ad:82:0c:16:47:48:8d:42:2c:a1:b2:7d:71: 15:99:71:8a:25:54:53:86:ed:e5:13:01:5b:49:de:2d:cc:da: 15:12:91:f4:6a:80:f3:3f:bb:55:f0:f6:1d:b8:dc:cf:09:de: 1e:48:d8:f7:2a:ab:99:62:3c:88:d3:12:fd:67:d8:1d:82:db: 9c:02:72:67:3e:8a:2a:bb:98:2e:1d:4d:d1:bd:f9:dc:9a:ab: de:0a:2c:12:14:52:e6:4e:6c:2d:d4:d9:1b:ef:ed:9c:26:38: 0f:b0:bf:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsO6kOqoSkwGbDrAqSKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwZDYyZDE2NjZjNWM0ZDE5MjE4MzUzMTU4NGFmZDcyYmVk MDg0ODUwHhcNMjUxMjA2MDMwMDQyWhcNMjUxMjA3MDMwMDQyWjAzMTEwLwYDVQQD EygwMDRhY2RjOGMzODYxM2E4ZWExZWM4M2IwNTMxZjA4MTZiMzVmNWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vYP9g3vKtWMJgwji2PnKiT++Tqf IkpUYa4uKPkgkmzHSbgWBbjVJN3EsuhHSXIV/znimae44Vfk8c1RkexZe5CbuZXi BTGJJpYxC+hNcux18aFrYkLlOi5cg7W8Qseiav7Cyso7CJjODLXmTrZxNJxHB4Xe qJ8JV4fo5zdfcVMo9D3C9L0JB4rYAxqulkBtSWA0GKqiE3yG/g/fIbxSSj58tnnD Z11M1OFGOlnFuoOfqAVEtgSBl7e4FUK9AVpnuQNqp7WZ43KQgncNNXc/T3+01hyF LvkdWop9DO7CqVmN8qEZwoZHb5EeRfJ1Mv0/skXVCjF9xt+ce86yTnhOPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFABKzcjDhhOo6h7IOwUx8IFrNfXaMB8GA1UdIwQY MBaAFLDWLRZmxcTRkhg1MVhK/XK+0ISFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc05ZdEZtYkZ4TkdTR0RVeFdFcjljcjdRaElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iNGFhNjMtNDI1OS00NGU2LWFjMjkt NGZhNTNiZjBlMTU1LzEvc05ZdEZtYkZ4TkdTR0RVeFdFcjljcjdRaElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9iNGFhNjMtNDI1OS00NGU2LWFjMjktNGZhNTNiZjBlMTU1 LzEvc05ZdEZtYkZ4TkdTR0RVeFdFcjljcjdRaElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEiDImvAK inls3240M6RAYcIrpf93Ls9m7crCba6Uwvvk77m5NW1unf73zhB3Fk57cL0Ehgm5 WcOEbEBKm8uS1jsGdFbkcTdfH/6jUPpOy5QYJs69z2/m6HgqQD7KFpgoy24cZHcE K8gnv7bbC/E1gGbJpzLiWu7FIKj/RkRHEJwdlKcE3GCzklr5ctNXkm87S6Oaxr6t ggwWR0iNQiyhsn1xFZlxiiVUU4bt5RMBW0neLczaFRKR9GqA8z+7VfD2Hbjczwne HkjY9yqrmWI8iNMS/WfYHYLbnAJyZz6KKruYLh1N0b353Jqr3gosEhRS5k5sLdTZ G+/tnCY4D7C/Xg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:26:40 2025 by rpki-client