This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft File: snNZg9-yJ6JG35iHbsnRr5Hz13k.mft (raw, json) Hash identifier: rjSymPwAJpMPHg0auevSr7aq7JtJQpDofE1XUub2uD8= Subject key identifier: 48:BE:39:78:DD:94:12:36:C3:CA:EF:90:D2:8A:53:7C:2D:C2:70:F1 Authority key identifier: B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79 Certificate issuer: /CN=b2735983dfb227a246df98876ec9d1af91f3d779 Certificate serial: 019B59E4375927E1CC61BA624681795DDE9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft Manifest number: 0FCA Signing time: Fri 26 Dec 2025 09:01:27 +0000 Manifest this update: Fri 26 Dec 2025 09:01:27 +0000 Manifest next update: Sat 27 Dec 2025 09:01:27 +0000 Files and hashes: 1: HRiBqkMm3jYdrvB2_suIlLpeJLU.roa (hash: thuo/2wKh04k5fV07y+BJSuu+CRS6TthbxD3yT9m+AM=) 2: snNZg9-yJ6JG35iHbsnRr5Hz13k.crl (hash: L4DnyrIMn04dkX26KbIPy5mCPGbGpZa3kAaOQ4caK/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:37:59:27:e1:cc:61:ba:62:46:81:79:5d:de:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2735983dfb227a246df98876ec9d1af91f3d779 Validity Not Before: Dec 26 09:01:27 2025 GMT Not After : Dec 27 09:01:27 2025 GMT Subject: CN=48be3978dd941236c3caef90d28a537c2dc270f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:43:e9:cd:6d:0f:6a:c0:87:a7:61:bc:77:8a: c1:d8:f9:de:1b:6e:ab:c5:e0:74:76:0f:f4:77:84: 9a:b0:8a:0a:5a:11:34:aa:dc:53:b0:e0:ad:29:fe: 42:f7:fc:30:46:82:36:ce:ea:2a:e3:ba:18:70:3f: 46:97:e8:29:17:80:1e:a9:8d:d8:e4:a5:2d:ac:f4: 69:3c:f6:d6:14:ba:6c:0f:11:ce:e6:49:b7:ba:b1: 10:eb:cc:cb:c9:a1:3e:86:0b:b4:71:c6:a1:43:62: 77:1d:b3:ca:09:c2:d4:58:61:ff:3a:05:2c:71:e3: 3a:72:cc:37:bc:a9:53:56:62:44:ce:30:c0:82:cb: f5:bf:41:1a:fe:d2:77:9a:13:02:ad:27:df:c5:a0: f4:0e:85:41:a6:fa:c1:cb:cc:51:4b:67:c1:63:95: b3:bb:ca:25:54:ee:20:70:ca:a0:24:ee:87:6b:84: 8c:67:70:7c:c8:a6:cd:eb:6a:04:2e:af:63:03:73: 6e:dc:ee:c6:6d:2a:9a:30:48:d3:f7:26:01:be:36: 7a:dc:a6:c2:de:76:cd:6a:1e:a2:97:26:9a:c9:2b: ae:f1:49:26:17:63:db:84:ba:2a:40:9f:7f:c9:af: 22:85:08:33:1c:a9:28:42:8d:7b:83:fb:d5:de:2f: fb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BE:39:78:DD:94:12:36:C3:CA:EF:90:D2:8A:53:7C:2D:C2:70:F1 X509v3 Authority Key Identifier: keyid:B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:92:eb:1e:84:7f:3d:7c:13:58:44:fd:97:75:2d:46:5d:0e: d8:08:91:cf:89:ef:29:1c:81:59:b7:3c:e5:13:d4:47:12:f7: f9:7f:ed:43:22:8f:b1:3f:23:23:89:e5:70:41:8c:5d:70:7f: 1b:14:5e:1d:fa:b3:9c:67:ef:5f:68:83:8c:38:93:1f:73:0d: 74:45:83:d8:5c:66:9b:f0:5a:d3:55:02:25:fc:c0:df:15:d1: c9:95:0f:36:d3:dc:af:e8:85:01:c9:88:4a:ec:9e:3c:72:37: 21:84:b6:f0:a0:af:31:49:44:06:45:88:48:fc:50:46:36:17: e0:43:16:dc:d0:1d:86:a6:72:fe:a2:f0:93:42:8e:86:93:24: 88:28:93:19:6b:d1:5e:4b:0a:dc:c5:4e:46:a3:05:eb:e1:1e: 29:2b:60:7f:be:79:55:4b:fe:ce:43:84:f2:79:a4:69:a9:6b: f8:0c:79:56:78:62:20:16:a1:df:da:e3:e0:d2:1e:6c:8d:79: 4b:47:8a:a4:02:0a:ee:c4:57:fe:27:47:40:39:67:d8:aa:00: dd:ee:af:a9:e2:ec:ed:e1:34:a8:1a:49:e9:fd:ad:e4:cd:f4: fc:c8:9e:67:30:c2:3f:91:fd:1f:01:68:de:4e:ee:d4:18:17: 36:13:fa:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5DdZJ+HMYbpiRoF5Xd6eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzM1OTgzZGZiMjI3YTI0NmRmOTg4NzZlYzlkMWFmOTFm M2Q3NzkwHhcNMjUxMjI2MDkwMTI3WhcNMjUxMjI3MDkwMTI3WjAzMTEwLwYDVQQD Eyg0OGJlMzk3OGRkOTQxMjM2YzNjYWVmOTBkMjhhNTM3YzJkYzI3MGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0PpzW0PasCHp2G8d4rB2PneG26r xeB0dg/0d4SasIoKWhE0qtxTsOCtKf5C9/wwRoI2zuoq47oYcD9Gl+gpF4AeqY3Y 5KUtrPRpPPbWFLpsDxHO5km3urEQ68zLyaE+hgu0ccahQ2J3HbPKCcLUWGH/OgUs ceM6csw3vKlTVmJEzjDAgsv1v0Ea/tJ3mhMCrSffxaD0DoVBpvrBy8xRS2fBY5Wz u8olVO4gcMqgJO6Ha4SMZ3B8yKbN62oELq9jA3Nu3O7GbSqaMEjT9yYBvjZ63KbC 3nbNah6ilyaaySuu8UkmF2PbhLoqQJ9/ya8ihQgzHKkoQo17g/vV3i/75QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEi+OXjdlBI2w8rvkNKKU3wtwnDxMB8GA1UdIwQY MBaAFLJzWYPfsieiRt+Yh27J0a+R89d5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25OWmc5LXlKNkpHMzVpSGJzblJyNUh6MTNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi80NzVlMTktOWZiZi00ZDQzLTkyODUt ZWM1YjMyNWM2ZWIyLzEvc25OWmc5LXlKNkpHMzVpSGJzblJyNUh6MTNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi80NzVlMTktOWZiZi00ZDQzLTkyODUtZWM1YjMyNWM2ZWIy LzEvc25OWmc5LXlKNkpHMzVpSGJzblJyNUh6MTNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZLrHoR/ PXwTWET9l3UtRl0O2AiRz4nvKRyBWbc85RPURxL3+X/tQyKPsT8jI4nlcEGMXXB/ GxReHfqznGfvX2iDjDiTH3MNdEWD2Fxmm/Ba01UCJfzA3xXRyZUPNtPcr+iFAcmI SuyePHI3IYS28KCvMUlEBkWISPxQRjYX4EMW3NAdhqZy/qLwk0KOhpMkiCiTGWvR XksK3MVORqMF6+EeKStgf755VUv+zkOE8nmkaalr+Ax5VnhiIBah39rj4NIebI15 S0eKpAIK7sRX/idHQDln2KoA3e6vqeLs7eE0qBpJ6f2t5M30/MieZzDCP5H9HwFo 3k7u1BgXNhP6oA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:26 2025 by rpki-client