This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft File: sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft (raw, json) Hash identifier: c1FAp7/1WEd4ZRbOGSWo+MtbP11e3rnfVRIJLelHDdY= Subject key identifier: 69:1B:6F:E3:DA:D0:17:4B:84:9D:38:D2:C1:CF:1F:98:86:9F:BB:AB Authority key identifier: B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85 Certificate issuer: /CN=b0d62d1666c5c4d192183531584afd72bed08485 Certificate serial: 019B35323BE7826BAFD642D1C340534D5F3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 06:00:43 +0000 Manifest this update: Fri 19 Dec 2025 06:00:43 +0000 Manifest next update: Sat 20 Dec 2025 06:00:43 +0000 Files and hashes: 1: QXyQtT8qy7cZkdePrzNkoMkFsLI.roa (hash: p4NnT1oNWa0lNXGn9ql046BScEcNjINqPaeSDpvSus0=) 2: sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl (hash: +aPgR3JVe/cXfzdnTlm592DEuwt940E9AqONzzv2bd4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:3b:e7:82:6b:af:d6:42:d1:c3:40:53:4d:5f:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0d62d1666c5c4d192183531584afd72bed08485 Validity Not Before: Dec 19 06:00:43 2025 GMT Not After : Dec 20 06:00:43 2025 GMT Subject: CN=691b6fe3dad0174b849d38d2c1cf1f98869fbbab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9a:d0:1e:5b:d3:6d:a6:4c:cb:65:c0:5f:7b: 9d:b4:ec:d1:42:09:2f:93:af:7d:52:20:bf:3c:4c: 77:9c:9f:41:9a:59:25:94:d5:46:d3:3c:45:1f:78: 1c:f4:e7:c3:ab:0e:ca:7c:69:5a:bc:62:55:db:d8: 9c:51:e8:ad:39:61:c8:c4:8e:04:a0:88:67:67:ed: 72:a0:10:f5:96:2f:4e:47:f1:b8:59:01:20:06:d9: 45:d7:15:f4:40:35:2a:69:9b:a5:8b:3e:ba:b2:01: 58:64:74:54:19:22:89:ef:dd:75:d7:39:b5:0a:88: e8:bd:e1:c4:16:ae:a7:0d:fc:b2:57:f8:5a:9f:e4: 80:52:4b:c5:b1:e3:30:49:ae:83:a3:fe:f8:f1:11: a7:0e:7a:f4:6b:fc:1e:d6:51:95:fb:64:b4:39:69: fd:c2:25:c9:be:fc:04:33:ef:e3:ff:67:d4:e5:7d: e7:ba:81:d3:a1:8f:f5:1e:cf:c1:bb:a0:c8:f1:83: ee:76:49:3c:a6:ec:a3:e5:40:f3:81:c2:04:d3:63: 5e:54:6b:d5:e6:11:72:2a:69:3d:18:e1:57:22:a2: fb:f9:00:16:9a:fc:ec:46:f2:66:31:33:17:29:1b: e9:49:b2:f8:16:81:79:7a:96:cf:79:c2:85:f6:fb: 67:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1B:6F:E3:DA:D0:17:4B:84:9D:38:D2:C1:CF:1F:98:86:9F:BB:AB X509v3 Authority Key Identifier: keyid:B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:84:4f:93:99:b9:95:ac:e2:e9:cd:93:4c:4b:dd:b4:ba:bf: 94:26:50:8d:91:20:c1:f7:81:a6:e4:72:e6:81:4a:df:0e:cc: 26:73:53:01:9f:01:bc:7a:eb:bf:1f:6d:41:c0:d4:01:63:88: fa:64:1a:84:76:87:30:7b:2e:84:d4:16:cb:8a:0d:cb:c0:c1: 47:b1:b0:a1:fc:c9:c1:bc:fe:fe:e9:8b:24:06:5d:9c:53:2a: d8:bc:5d:45:52:38:66:6b:58:c0:9a:e7:ed:05:54:9a:45:a9: 43:cf:52:a6:53:a2:d1:2e:0f:18:90:72:c3:74:8b:df:c5:df: 53:db:da:6e:a2:f2:54:4c:4e:74:aa:ae:36:0a:e4:67:84:b7: e8:89:08:ca:85:6e:66:84:91:4a:83:54:74:43:1b:2c:84:88: 85:73:d4:60:d7:7f:e1:07:9f:0f:9b:6b:85:58:11:0c:24:15: 7f:a7:bb:09:4d:37:0b:c3:fd:f6:b8:ae:34:cf:0e:0b:07:a2: 60:04:22:08:78:45:30:74:ab:ad:a2:1b:37:8d:84:79:3d:52: de:e5:ee:bb:fe:43:9c:e7:5f:43:71:c7:58:ea:26:d2:64:2a: 57:84:0b:5b:04:20:1f:1e:a1:0d:a0:62:b1:34:c1:3b:e1:d6: 66:a4:27:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mjvngmuv1kLRw0BTTV86MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwZDYyZDE2NjZjNWM0ZDE5MjE4MzUzMTU4NGFmZDcyYmVk MDg0ODUwHhcNMjUxMjE5MDYwMDQzWhcNMjUxMjIwMDYwMDQzWjAzMTEwLwYDVQQD Eyg2OTFiNmZlM2RhZDAxNzRiODQ5ZDM4ZDJjMWNmMWY5ODg2OWZiYmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5rQHlvTbaZMy2XAX3udtOzRQgkv k699UiC/PEx3nJ9BmlkllNVG0zxFH3gc9OfDqw7KfGlavGJV29icUeitOWHIxI4E oIhnZ+1yoBD1li9OR/G4WQEgBtlF1xX0QDUqaZuliz66sgFYZHRUGSKJ79111zm1 CojoveHEFq6nDfyyV/han+SAUkvFseMwSa6Do/748RGnDnr0a/we1lGV+2S0OWn9 wiXJvvwEM+/j/2fU5X3nuoHToY/1Hs/Bu6DI8YPudkk8puyj5UDzgcIE02NeVGvV 5hFyKmk9GOFXIqL7+QAWmvzsRvJmMTMXKRvpSbL4FoF5epbPecKF9vtnlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkbb+Pa0BdLhJ040sHPH5iGn7urMB8GA1UdIwQY MBaAFLDWLRZmxcTRkhg1MVhK/XK+0ISFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc05ZdEZtYkZ4TkdTR0RVeFdFcjljcjdRaElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iNGFhNjMtNDI1OS00NGU2LWFjMjkt NGZhNTNiZjBlMTU1LzEvc05ZdEZtYkZ4TkdTR0RVeFdFcjljcjdRaElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9iNGFhNjMtNDI1OS00NGU2LWFjMjktNGZhNTNiZjBlMTU1 LzEvc05ZdEZtYkZ4TkdTR0RVeFdFcjljcjdRaElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4RPk5m5 lazi6c2TTEvdtLq/lCZQjZEgwfeBpuRy5oFK3w7MJnNTAZ8BvHrrvx9tQcDUAWOI +mQahHaHMHsuhNQWy4oNy8DBR7GwofzJwbz+/umLJAZdnFMq2LxdRVI4ZmtYwJrn 7QVUmkWpQ89SplOi0S4PGJByw3SL38XfU9vabqLyVExOdKquNgrkZ4S36IkIyoVu ZoSRSoNUdEMbLISIhXPUYNd/4QefD5trhVgRDCQVf6e7CU03C8P99riuNM8OCwei YAQiCHhFMHSrraIbN42EeT1S3uXuu/5DnOdfQ3HHWOom0mQqV4QLWwQgHx6hDaBi sTTBO+HWZqQnDg== -----END CERTIFICATE-----Generated at Fri Dec 19 11:22:52 2025 by rpki-client