This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft File: Snz-iBFothWgvUEcwxS9BApNJ_Y.mft (raw, json) Hash identifier: Fz2FMUW2tNWgGRidjfvmVPicn5q3MfW7P/7Bz5p64f8= Subject key identifier: A3:67:91:22:6B:F2:CF:E4:BB:5C:06:2F:4A:FB:4C:71:9D:B4:66:C2 Authority key identifier: 4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6 Certificate issuer: /CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6 Certificate serial: 019B5A884FCA2DA4BE67513C78AB314358FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft Manifest number: 1795 Signing time: Fri 26 Dec 2025 12:00:41 +0000 Manifest this update: Fri 26 Dec 2025 12:00:41 +0000 Manifest next update: Sat 27 Dec 2025 12:00:41 +0000 Files and hashes: 1: Snz-iBFothWgvUEcwxS9BApNJ_Y.crl (hash: KSLLm2tdfKA0tUjid5yoMb+Xlye0MepIAKCaqZrTEL4=) 2: h_GYODiIwy0tVyLDmKAyNCK7Ui8.roa (hash: EVyFdfHvchtGYnioVymnJTf1ceZLIXds+uNSkp7sgG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:4f:ca:2d:a4:be:67:51:3c:78:ab:31:43:58:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6 Validity Not Before: Dec 26 12:00:41 2025 GMT Not After : Dec 27 12:00:41 2025 GMT Subject: CN=a36791226bf2cfe4bb5c062f4afb4c719db466c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:12:69:e8:9c:bb:af:f6:26:f1:71:f3:00:ea: ba:10:57:bc:0b:38:89:dd:ef:02:b7:99:52:fd:31: 97:57:68:47:71:5d:9b:ac:df:4d:1e:26:54:8a:38: b5:87:b5:f5:dc:02:9d:5a:3c:60:ed:2c:02:32:13: c9:9d:49:00:fe:6c:8e:5e:90:40:b6:34:c0:5f:89: 3a:0b:d6:64:0b:c8:92:40:76:d5:a2:ef:ef:56:b1: df:51:eb:d6:db:ad:e2:56:5e:c0:a7:2f:db:6d:77: 83:02:f2:a3:be:de:9c:82:c6:37:2f:5f:a4:b0:e1: 97:73:de:7b:f0:68:a6:b5:7f:8d:bf:77:22:b6:3a: ea:e2:9d:f5:f4:85:99:82:31:36:1a:df:6a:ca:1a: 82:58:fb:57:54:6a:b9:63:d3:5c:07:b3:b8:5c:db: bb:b8:2d:9b:bf:7a:6e:6c:f1:cb:46:87:32:7d:87: 5a:ed:1f:27:19:2b:df:81:49:6e:b4:38:02:98:d3: 70:f6:73:ff:69:b5:42:63:9f:f6:6d:76:f1:db:b2: 06:97:f6:db:da:b1:8b:79:8c:7d:09:34:56:59:2d: 12:de:b0:26:ae:6e:0b:a9:22:1d:8f:db:86:99:3e: d7:9e:dd:54:e8:fa:48:6c:d0:0c:7e:02:3b:7f:a0: 5d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:67:91:22:6B:F2:CF:E4:BB:5C:06:2F:4A:FB:4C:71:9D:B4:66:C2 X509v3 Authority Key Identifier: keyid:4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:10:bb:88:01:6e:0e:68:79:49:06:1c:0d:55:66:ae:7b:e2: 71:68:7f:9f:f4:f5:9e:5c:35:08:e3:5d:64:6b:d7:34:7b:03: 57:16:42:54:a8:c6:1e:de:27:50:ee:1e:0a:e4:0f:0d:17:28: 96:4d:90:46:89:36:fc:cf:3c:1d:6d:05:82:b9:27:44:d9:c4: bf:c7:11:ca:01:c6:25:6c:3f:86:51:31:f6:a5:5c:e3:c7:5d: e6:24:f9:bf:08:fb:96:09:fd:db:cd:92:a4:7c:42:85:e4:5c: 9d:20:94:75:93:bf:2e:2a:73:b1:ed:30:f1:bf:4e:e9:c7:87: 0e:fd:00:8c:40:11:19:bb:e0:06:7a:6e:f7:06:3a:d9:cb:2e: 9b:d3:39:06:11:46:f7:f0:78:04:43:1b:68:aa:7a:c2:1d:2d: 07:1d:ee:00:c9:95:d9:f6:58:db:e5:a1:98:32:09:cb:d9:1c: 1c:f7:33:41:dc:f1:7a:9c:90:f7:b2:b2:70:41:fe:bb:78:89: d6:65:81:57:1f:91:cd:13:36:df:77:a1:39:f6:4f:a7:ae:fb: 19:0f:ee:aa:cc:70:bd:dc:de:dc:4a:da:17:be:98:61:a6:b0: ec:4c:65:3e:3d:65:ff:fd:ef:50:48:42:4c:f3:d1:f6:2b:76: 74:7d:14:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiE/KLaS+Z1E8eKsxQ1j+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhN2NmZTg4MTE2OGI2MTVhMGJkNDExY2MzMTRiZDA0MGE0 ZDI3ZjYwHhcNMjUxMjI2MTIwMDQxWhcNMjUxMjI3MTIwMDQxWjAzMTEwLwYDVQQD EyhhMzY3OTEyMjZiZjJjZmU0YmI1YzA2MmY0YWZiNGM3MTlkYjQ2NmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxJp6Jy7r/Ym8XHzAOq6EFe8CziJ 3e8Ct5lS/TGXV2hHcV2brN9NHiZUiji1h7X13AKdWjxg7SwCMhPJnUkA/myOXpBA tjTAX4k6C9ZkC8iSQHbVou/vVrHfUevW263iVl7Apy/bbXeDAvKjvt6cgsY3L1+k sOGXc9578GimtX+Nv3citjrq4p319IWZgjE2Gt9qyhqCWPtXVGq5Y9NcB7O4XNu7 uC2bv3pubPHLRocyfYda7R8nGSvfgUlutDgCmNNw9nP/abVCY5/2bXbx27IGl/bb 2rGLeYx9CTRWWS0S3rAmrm4LqSIdj9uGmT7Xnt1U6PpIbNAMfgI7f6Bd7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNnkSJr8s/ku1wGL0r7THGdtGbCMB8GA1UdIwQY MBaAFEp8/ogRaLYVoL1BHMMUvQQKTSf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU256LWlCRm90aFdndlVFY3d4UzlCQXBOSl9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zMjI0NTAtMjFjYS00MWFmLTliNjUt Y2JlMDg0ODcyMTc0LzEvU256LWlCRm90aFdndlVFY3d4UzlCQXBOSl9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8zMjI0NTAtMjFjYS00MWFmLTliNjUtY2JlMDg0ODcyMTc0 LzEvU256LWlCRm90aFdndlVFY3d4UzlCQXBOSl9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhC7iAFu Dmh5SQYcDVVmrnvicWh/n/T1nlw1CONdZGvXNHsDVxZCVKjGHt4nUO4eCuQPDRco lk2QRok2/M88HW0FgrknRNnEv8cRygHGJWw/hlEx9qVc48dd5iT5vwj7lgn9282S pHxCheRcnSCUdZO/Lipzse0w8b9O6ceHDv0AjEARGbvgBnpu9wY62csum9M5BhFG 9/B4BEMbaKp6wh0tBx3uAMmV2fZY2+WhmDIJy9kcHPczQdzxepyQ97KycEH+u3iJ 1mWBVx+RzRM233ehOfZPp677GQ/uqsxwvdze3EraF76YYaaw7ExlPj1l//3vUEhC TPPR9it2dH0Uow== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:26 2025 by rpki-client