This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft File: snSbyc0s-N_88v_teIT7wTyz5F0.mft (raw, json) Hash identifier: Six5xwxtW39iuG6nSgAfm4BVzM32vXhcAuolc80iZj8= Subject key identifier: 9E:41:B1:AB:BA:D3:33:B5:29:FD:C1:25:79:DA:5D:87:4C:75:E0:AE Authority key identifier: B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D Certificate issuer: /CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d Certificate serial: 019AF1D2383F5FD5020BA9FB68E91FA8C0BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft Manifest number: 1397 Signing time: Sat 06 Dec 2025 04:01:17 +0000 Manifest this update: Sat 06 Dec 2025 04:01:17 +0000 Manifest next update: Sun 07 Dec 2025 04:01:17 +0000 Files and hashes: 1: OaynJV0qbIIk7EsSxRIucNannDI.roa (hash: rLhfi7PeZU4mZH9NTsaCKUtzejxWWyeiOXooqE3dPpU=) 2: ZsJ1p0f-2YgNmBDafzu2GWckT34.roa (hash: kKQedLsISeBKSivLfM6tlDNDN9VJMt9n4EQssMfjNOQ=) 3: snSbyc0s-N_88v_teIT7wTyz5F0.crl (hash: IX6wVsMxYhkCjMFlez7Cg9Qoe/TXi7NeDUeaK9Wwj6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:38:3f:5f:d5:02:0b:a9:fb:68:e9:1f:a8:c0:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d Validity Not Before: Dec 6 04:01:17 2025 GMT Not After : Dec 7 04:01:17 2025 GMT Subject: CN=9e41b1abbad333b529fdc12579da5d874c75e0ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:82:e5:42:ea:02:a0:93:81:82:af:a1:b1:1d: fa:4e:ce:d3:18:69:32:9b:df:a0:c7:e2:eb:38:06: 7c:37:87:a4:90:50:9c:9f:5a:3d:97:1b:e0:ce:94: 38:35:45:f6:b4:9f:65:47:31:b0:d7:5e:46:fb:43: 28:6d:fc:65:12:d5:4b:1e:a7:70:52:b5:ff:2f:0f: 0a:cf:d5:0c:a6:ce:2b:45:b8:6c:f5:67:3b:fa:68: f8:d0:4f:51:84:4b:2a:ea:34:1a:a5:7b:63:b3:8b: 59:52:36:82:7d:af:95:97:c7:d1:50:47:b0:46:63: 0c:8e:8b:c9:37:dc:cc:48:f1:78:61:82:08:12:88: c2:c8:aa:99:3d:42:13:88:0a:60:03:41:5b:bd:a7: 16:47:ca:d8:8e:de:c8:7f:d8:53:70:a1:a5:cc:bb: ee:80:32:8c:53:7f:a2:76:99:66:27:de:50:98:9a: 84:46:ec:7b:fd:ec:a5:21:2e:de:34:b8:2e:52:6e: c2:4d:93:d9:54:3b:38:14:eb:43:0e:ce:b9:15:62: 11:90:e0:a0:61:ca:05:30:f7:ab:76:2d:a5:2d:6f: 05:2a:3b:2d:f7:21:c2:37:8f:dd:0b:2d:c7:de:ec: c7:a4:2a:d5:36:33:0d:9a:9b:0b:f2:e8:41:9a:56: be:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:41:B1:AB:BA:D3:33:B5:29:FD:C1:25:79:DA:5D:87:4C:75:E0:AE X509v3 Authority Key Identifier: keyid:B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:86:23:90:e8:c7:c0:89:d4:e9:f5:1f:59:87:15:29:af:13: 58:bd:57:a9:ab:83:a0:4c:0a:4e:f4:c1:9e:f7:41:07:50:65: 44:18:6a:41:fb:90:b6:59:aa:89:73:01:f6:40:dd:35:1a:92: 9a:82:84:95:d5:a6:8f:36:27:12:fb:fe:86:64:e6:04:4b:c6: 89:f2:bb:8b:35:13:ef:95:65:13:50:eb:0e:de:40:91:99:49: e0:f7:31:60:6a:a4:37:ff:2e:59:f5:90:1e:e3:9f:3f:6b:a6: 13:cc:06:04:4e:ba:05:d0:dd:20:93:13:a7:cd:a9:85:03:67: dc:e9:a8:80:12:1a:e8:af:6e:d6:77:90:7f:68:df:a8:b9:a3: e3:2c:9b:c3:7c:9c:7d:0c:6d:48:97:0f:9b:19:05:de:f4:67: 55:fc:6f:2f:6c:ba:a7:3c:6f:66:18:5e:3d:28:2b:d7:9b:fc: 13:62:9e:19:50:8f:cc:16:89:d0:4c:c8:76:b2:b1:c9:05:f9: a7:95:a3:68:dd:d3:f3:7b:a9:0b:ce:c6:3c:6a:1d:dd:cc:68: 20:fa:8f:14:83:ff:71:8c:4e:6b:40:60:4e:f5:3b:2d:a1:bf: a4:dd:a8:8c:6d:19:19:5f:4a:4b:d4:7c:9e:ca:ad:9a:ea:fc: b5:74:f8:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jg/X9UCC6n7aOkfqMC6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzQ5YmM5Y2QyY2Y4ZGZmY2YyZmZlZDc4ODRmYmMxM2Ni M2U0NWQwHhcNMjUxMjA2MDQwMTE3WhcNMjUxMjA3MDQwMTE3WjAzMTEwLwYDVQQD Eyg5ZTQxYjFhYmJhZDMzM2I1MjlmZGMxMjU3OWRhNWQ4NzRjNzVlMGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYLlQuoCoJOBgq+hsR36Ts7TGGky m9+gx+LrOAZ8N4ekkFCcn1o9lxvgzpQ4NUX2tJ9lRzGw115G+0MobfxlEtVLHqdw UrX/Lw8Kz9UMps4rRbhs9Wc7+mj40E9RhEsq6jQapXtjs4tZUjaCfa+Vl8fRUEew RmMMjovJN9zMSPF4YYIIEojCyKqZPUITiApgA0FbvacWR8rYjt7If9hTcKGlzLvu gDKMU3+idplmJ95QmJqERux7/eylIS7eNLguUm7CTZPZVDs4FOtDDs65FWIRkOCg YcoFMPerdi2lLW8FKjst9yHCN4/dCy3H3uzHpCrVNjMNmpsL8uhBmla+lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5Bsau60zO1Kf3BJXnaXYdMdeCuMB8GA1UdIwQY MBaAFLJ0m8nNLPjf/PL/7XiE+8E8s+RdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25TYnljMHMtTl84OHZfdGVJVDd3VHl6NUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hYzhmZGMtOWQ1NS00NWRiLWEyNDMt ZjE2Njk3ZDcyYTcxLzEvc25TYnljMHMtTl84OHZfdGVJVDd3VHl6NUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9hYzhmZGMtOWQ1NS00NWRiLWEyNDMtZjE2Njk3ZDcyYTcx LzEvc25TYnljMHMtTl84OHZfdGVJVDd3VHl6NUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIYjkOjH wInU6fUfWYcVKa8TWL1XqauDoEwKTvTBnvdBB1BlRBhqQfuQtlmqiXMB9kDdNRqS moKEldWmjzYnEvv+hmTmBEvGifK7izUT75VlE1DrDt5AkZlJ4PcxYGqkN/8uWfWQ HuOfP2umE8wGBE66BdDdIJMTp82phQNn3OmogBIa6K9u1neQf2jfqLmj4yybw3yc fQxtSJcPmxkF3vRnVfxvL2y6pzxvZhhePSgr15v8E2KeGVCPzBaJ0EzIdrKxyQX5 p5WjaN3T83upC87GPGod3cxoIPqPFIP/cYxOa0BgTvU7LaG/pN2ojG0ZGV9KS9R8 nsqtmur8tXT4jA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:46 2025 by rpki-client