This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft File: SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft (raw, json) Hash identifier: NCEgDnBzcczz8xwXD4G+MVkeLoaoW5syld+P28hmT4w= Subject key identifier: 7A:67:94:70:3D:5B:94:5E:E1:D7:AF:D9:8D:14:CD:AB:EE:0A:2B:43 Authority key identifier: 4A:75:5A:6D:E5:C1:67:80:9F:81:9C:85:F8:C8:E5:A6:E4:CE:12:7D Certificate issuer: /CN=4a755a6de5c167809f819c85f8c8e5a6e4ce127d Certificate serial: 019AF164320D3D1AD68E9019786158C5BCD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft Manifest number: 08B3 Signing time: Sat 06 Dec 2025 02:01:06 +0000 Manifest this update: Sat 06 Dec 2025 02:01:06 +0000 Manifest next update: Sun 07 Dec 2025 02:01:06 +0000 Files and hashes: 1: SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl (hash: gB9QsVYvGX15hcg6/4wMdU2mlst9Gpo2ynXINURUxMQ=) 2: Ss43uKVk12glj7GND1Q0DQOfOOI.roa (hash: afk/nkdp+pPj29GdfzUTdj7jJFKdBQ7g7Tl5QgpoC38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:32:0d:3d:1a:d6:8e:90:19:78:61:58:c5:bc:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a755a6de5c167809f819c85f8c8e5a6e4ce127d Validity Not Before: Dec 6 02:01:06 2025 GMT Not After : Dec 7 02:01:06 2025 GMT Subject: CN=7a6794703d5b945ee1d7afd98d14cdabee0a2b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:54:a1:f6:e7:7c:9f:68:89:c5:be:30:90:71: 02:8e:bb:51:19:75:45:42:ef:b0:51:40:f3:a5:bc: bb:e3:b3:48:2d:e5:05:fc:59:d7:5d:24:72:1e:35: 18:6f:48:a8:c1:07:f0:1c:5f:e9:06:0f:fa:2a:0e: c1:c0:8f:1b:fb:28:3d:c6:1e:ff:8a:a9:8f:8a:58: 53:0a:30:09:84:ea:c6:1c:fe:bf:13:72:ec:e5:09: 98:e9:f7:63:68:e9:2c:07:ba:33:38:21:97:fb:23: e8:9b:68:19:b7:81:57:61:9e:f1:dd:fd:15:52:9f: 0e:ef:eb:20:cc:61:f5:43:72:c3:71:4a:2c:79:db: 6f:03:4f:26:1c:17:4a:1e:60:f9:ef:eb:9b:6b:48: d1:a0:d5:a9:1d:66:33:19:b0:15:9c:ba:2c:4a:4c: 88:e1:ab:82:a7:f8:37:2c:18:5b:ce:01:7d:74:68: fa:93:f7:8c:e7:4d:19:da:6a:77:b5:48:a7:c5:91: 89:f9:25:f1:07:63:1a:a5:96:58:29:c9:e1:21:86: 7c:01:ad:c8:0c:dc:48:dd:14:15:95:98:2f:8e:28: 69:e1:3e:35:70:c0:89:05:c7:b7:07:c2:61:4a:be: c7:f5:e2:01:03:1f:13:bf:70:52:be:cf:e8:0a:07: 6a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:67:94:70:3D:5B:94:5E:E1:D7:AF:D9:8D:14:CD:AB:EE:0A:2B:43 X509v3 Authority Key Identifier: keyid:4A:75:5A:6D:E5:C1:67:80:9F:81:9C:85:F8:C8:E5:A6:E4:CE:12:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ac:7c:c4:f4:83:6c:ff:68:3a:2d:ee:6c:74:9c:c4:da:c1: 27:96:c2:34:e3:1d:67:a2:f1:01:39:b9:95:a9:5f:b7:30:b4: d5:bc:89:c4:b0:0f:89:14:d2:33:38:d9:55:05:e1:16:92:70: 3c:64:aa:1e:e2:7a:48:d7:18:b2:01:27:aa:c9:d3:dc:a7:13: c0:bc:65:71:45:44:79:29:b3:33:d7:1d:2b:90:6a:3e:f2:e3: 16:8b:4c:6b:2d:85:13:8a:ae:ed:34:2c:b0:7e:a4:a7:57:c9: b3:a7:7d:29:d9:e3:23:67:6c:1d:f2:a9:a6:9d:0b:83:ea:42: f2:ed:dc:da:a9:78:96:8b:7d:82:e9:35:30:b1:3c:3f:58:db: 15:0b:b3:cc:b1:ce:a2:4d:26:03:2e:7c:46:64:a0:64:c2:1b: 1f:5c:da:02:18:cf:fc:c7:d3:e8:5c:a2:eb:ed:64:fd:73:43: f1:2c:b3:2b:df:02:4a:c0:79:75:ae:55:9f:52:f6:e2:98:e5: e6:8d:d6:b8:86:29:e8:cf:3f:24:89:01:19:1e:b0:a6:86:27: a5:a3:24:c3:d1:0c:f8:d4:50:e0:10:61:1f:6e:d3:43:82:84: cd:11:e7:a8:bd:92:fe:d4:cc:40:be:e2:07:4d:e2:15:96:a8: 14:c7:1d:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDINPRrWjpAZeGFYxbzUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNzU1YTZkZTVjMTY3ODA5ZjgxOWM4NWY4YzhlNWE2ZTRj ZTEyN2QwHhcNMjUxMjA2MDIwMTA2WhcNMjUxMjA3MDIwMTA2WjAzMTEwLwYDVQQD Eyg3YTY3OTQ3MDNkNWI5NDVlZTFkN2FmZDk4ZDE0Y2RhYmVlMGEyYjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlSh9ud8n2iJxb4wkHECjrtRGXVF Qu+wUUDzpby747NILeUF/FnXXSRyHjUYb0iowQfwHF/pBg/6Kg7BwI8b+yg9xh7/ iqmPilhTCjAJhOrGHP6/E3Ls5QmY6fdjaOksB7ozOCGX+yPom2gZt4FXYZ7x3f0V Up8O7+sgzGH1Q3LDcUosedtvA08mHBdKHmD57+uba0jRoNWpHWYzGbAVnLosSkyI 4auCp/g3LBhbzgF9dGj6k/eM500Z2mp3tUinxZGJ+SXxB2MapZZYKcnhIYZ8Aa3I DNxI3RQVlZgvjihp4T41cMCJBce3B8JhSr7H9eIBAx8Tv3BSvs/oCgdqgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpnlHA9W5Re4dev2Y0UzavuCitDMB8GA1UdIwQY MBaAFEp1Wm3lwWeAn4GchfjI5abkzhJ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU25WYWJlWEJaNENmZ1p5Ri1NamxwdVRPRW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81NmY0MTItMGI0Yi00Yjc1LTg4ZDAt OTZjNGRjMTM3YjI3LzEvU25WYWJlWEJaNENmZ1p5Ri1NamxwdVRPRW4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS81NmY0MTItMGI0Yi00Yjc1LTg4ZDAtOTZjNGRjMTM3YjI3 LzEvU25WYWJlWEJaNENmZ1p5Ri1NamxwdVRPRW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKx8xPSD bP9oOi3ubHScxNrBJ5bCNOMdZ6LxATm5lalftzC01byJxLAPiRTSMzjZVQXhFpJw PGSqHuJ6SNcYsgEnqsnT3KcTwLxlcUVEeSmzM9cdK5BqPvLjFotMay2FE4qu7TQs sH6kp1fJs6d9KdnjI2dsHfKppp0Lg+pC8u3c2ql4lot9guk1MLE8P1jbFQuzzLHO ok0mAy58RmSgZMIbH1zaAhjP/MfT6Fyi6+1k/XND8SyzK98CSsB5da5Vn1L24pjl 5o3WuIYp6M8/JIkBGR6wpoYnpaMkw9EM+NRQ4BBhH27TQ4KEzRHnqL2S/tTMQL7i B03iFZaoFMcdGw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:12 2025 by rpki-client