This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft File: SnqRfdz8JujIezCFi28H8po9tD4.mft (raw, json) Hash identifier: m+hwvc8t+4wipv/qnS6aVtGGPLHrPnx4B0j/TTcLOdw= Subject key identifier: 69:95:50:A9:84:45:5A:F9:36:6B:1D:25:84:44:A0:94:4C:20:1F:ED Authority key identifier: 4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E Certificate issuer: /CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e Certificate serial: 019B476FEEFD9C0D57041FADE1DE14C4A98E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft Manifest number: 173D Signing time: Mon 22 Dec 2025 19:01:16 +0000 Manifest this update: Mon 22 Dec 2025 19:01:16 +0000 Manifest next update: Tue 23 Dec 2025 19:01:16 +0000 Files and hashes: 1: P2xh5AQS8g63oefSEJQg-RsTiE4.roa (hash: fyGkFWMTxDql0OoutRE6aQhGU1Ek1V6QoGNhwV3E3j8=) 2: SnqRfdz8JujIezCFi28H8po9tD4.crl (hash: CC2cfG1A+GXLnF/VAbk85lWOvF9a25eEVbih2nSKv4o=) 3: wZuLHZACRgaqannQqtWTgy9AnFY.roa (hash: ArTL5+VwNfVl+VzsgeZQzp979burQZd57vVQg0xpNM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 19:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:6f:ee:fd:9c:0d:57:04:1f:ad:e1:de:14:c4:a9:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e Validity Not Before: Dec 22 19:01:16 2025 GMT Not After : Dec 23 19:01:16 2025 GMT Subject: CN=699550a984455af9366b1d258444a0944c201fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ff:9f:bf:c8:46:da:64:9e:54:92:51:60:cf: 8b:66:8e:ad:ee:b5:5b:b9:22:cf:c0:16:28:07:de: a9:19:8f:5a:b2:9d:2d:39:96:e7:46:9e:c3:40:fd: 88:1e:57:c8:7d:cd:a7:4f:07:95:58:2c:f1:1a:d2: f6:34:ad:63:1a:6a:b1:35:15:66:8b:cd:36:2e:ea: c7:ae:7f:f8:32:e7:5c:0f:2d:6e:57:a1:19:a1:f8: ca:14:4e:5f:6f:14:f1:04:d3:02:da:d2:c9:c7:06: c4:56:34:42:3f:93:6c:c7:b4:cb:5b:2a:ec:5d:41: 91:44:5b:da:41:43:e3:2c:d2:4e:55:9d:1f:89:3d: 3d:5b:e1:50:36:01:32:cf:d2:cb:a0:cb:59:e3:ef: 1b:50:d7:98:66:fa:9a:c9:18:92:15:09:b3:74:c1: 8c:5f:eb:1f:38:1b:3b:55:74:1f:4a:ed:48:35:bd: 90:66:50:6b:fe:15:ae:ec:09:9b:2d:64:c3:09:70: 51:ef:0f:f5:1b:a7:55:f6:7f:36:77:2d:2c:d1:e9: 0b:7b:c2:c4:c9:6c:47:0d:c8:fc:22:6b:42:9f:1a: fb:bf:25:d4:dc:89:71:3c:34:7e:63:7d:91:43:0a: 2e:d4:ff:ac:b7:43:e5:1f:77:65:bd:db:5c:b6:17: 43:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:95:50:A9:84:45:5A:F9:36:6B:1D:25:84:44:A0:94:4C:20:1F:ED X509v3 Authority Key Identifier: keyid:4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:97:23:96:bc:d3:d1:4b:80:80:31:9d:50:77:38:8c:1c:98: fe:d3:e7:82:d9:98:41:5e:4d:8d:0d:7b:28:cf:f3:18:ff:62: ee:ba:d7:6b:e3:0f:82:58:31:21:78:41:2c:0d:d0:36:93:e2: 2d:85:f6:d0:89:a7:3f:91:fa:e5:c8:f0:88:68:94:4e:79:a9: ef:26:c1:35:98:c1:b0:6e:dc:6f:aa:36:5d:ce:67:d9:d4:29: 10:8f:fc:30:fa:f4:0c:f7:84:50:6c:4e:fa:a1:57:40:1d:de: 9b:0d:6d:f3:d1:e8:2d:31:bb:c9:c4:e9:f6:8a:1d:b5:00:ec: ca:9c:d3:97:74:c6:9f:4f:66:c3:aa:c8:6a:3b:24:1a:0a:72: 1a:41:e0:87:e5:5c:f2:2c:35:c8:de:af:2a:36:8d:1f:e7:26: 07:24:37:cf:f5:db:24:20:0a:90:61:0f:cd:f4:bd:00:e5:82: c2:3d:d7:2d:a8:b4:93:42:9a:24:3c:31:35:73:93:72:ef:bc: 9d:d5:71:61:fe:2e:0f:c1:84:7d:eb:96:65:f1:2f:5a:0e:63: 99:9a:57:9d:30:18:59:8c:b7:7b:8e:e2:54:eb:2d:bd:40:5d: 86:b9:20:80:e7:39:ff:f1:93:f0:22:5b:ae:0a:e9:58:01:94: a2:af:16:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHb+79nA1XBB+t4d4UxKmOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhN2E5MTdkZGNmYzI2ZThjODdiMzA4NThiNmYwN2YyOWEz ZGI0M2UwHhcNMjUxMjIyMTkwMTE2WhcNMjUxMjIzMTkwMTE2WjAzMTEwLwYDVQQD Eyg2OTk1NTBhOTg0NDU1YWY5MzY2YjFkMjU4NDQ0YTA5NDRjMjAxZmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf+fv8hG2mSeVJJRYM+LZo6t7rVb uSLPwBYoB96pGY9asp0tOZbnRp7DQP2IHlfIfc2nTweVWCzxGtL2NK1jGmqxNRVm i802LurHrn/4MudcDy1uV6EZofjKFE5fbxTxBNMC2tLJxwbEVjRCP5Nsx7TLWyrs XUGRRFvaQUPjLNJOVZ0fiT09W+FQNgEyz9LLoMtZ4+8bUNeYZvqayRiSFQmzdMGM X+sfOBs7VXQfSu1INb2QZlBr/hWu7AmbLWTDCXBR7w/1G6dV9n82dy0s0ekLe8LE yWxHDcj8ImtCnxr7vyXU3IlxPDR+Y32RQwou1P+st0PlH3dlvdtcthdDkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmVUKmERVr5NmsdJYREoJRMIB/tMB8GA1UdIwQY MBaAFEp6kX3c/CboyHswhYtvB/KaPbQ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU25xUmZkejhKdWpJZXpDRmkyOEg4cG85dEQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNGMyYmItNzllYS00ZjM5LWFjODIt ODIwMTZkZTQyMjEyLzEvU25xUmZkejhKdWpJZXpDRmkyOEg4cG85dEQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8zNGMyYmItNzllYS00ZjM5LWFjODItODIwMTZkZTQyMjEy LzEvU25xUmZkejhKdWpJZXpDRmkyOEg4cG85dEQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJcjlrzT 0UuAgDGdUHc4jByY/tPngtmYQV5NjQ17KM/zGP9i7rrXa+MPglgxIXhBLA3QNpPi LYX20ImnP5H65cjwiGiUTnmp7ybBNZjBsG7cb6o2Xc5n2dQpEI/8MPr0DPeEUGxO +qFXQB3emw1t89HoLTG7ycTp9oodtQDsypzTl3TGn09mw6rIajskGgpyGkHgh+Vc 8iw1yN6vKjaNH+cmByQ3z/XbJCAKkGEPzfS9AOWCwj3XLai0k0KaJDwxNXOTcu+8 ndVxYf4uD8GEfeuWZfEvWg5jmZpXnTAYWYy3e47iVOstvUBdhrkggOc5//GT8CJb rgrpWAGUoq8Wfw== -----END CERTIFICATE-----Generated at Tue Dec 23 01:57:04 2025 by rpki-client