This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft File: snSbyc0s-N_88v_teIT7wTyz5F0.mft (raw, json) Hash identifier: GPk6o6H8OEoYhuV9ntYlqpx9jYi4LVhqmXGCdy/EL9U= Subject key identifier: 5E:75:DF:D0:90:F4:C9:1E:71:0B:B0:27:7C:7C:0B:52:DA:3B:5F:D6 Authority key identifier: B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D Certificate issuer: /CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d Certificate serial: 019B5A1A7C7B8E9836B51E1B92E0047C5AC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft Manifest number: 13CD Signing time: Fri 26 Dec 2025 10:00:43 +0000 Manifest this update: Fri 26 Dec 2025 10:00:43 +0000 Manifest next update: Sat 27 Dec 2025 10:00:43 +0000 Files and hashes: 1: OaynJV0qbIIk7EsSxRIucNannDI.roa (hash: rLhfi7PeZU4mZH9NTsaCKUtzejxWWyeiOXooqE3dPpU=) 2: ZsJ1p0f-2YgNmBDafzu2GWckT34.roa (hash: kKQedLsISeBKSivLfM6tlDNDN9VJMt9n4EQssMfjNOQ=) 3: snSbyc0s-N_88v_teIT7wTyz5F0.crl (hash: E+wP60Oo11lFWie3CHwUtzpExT/SdrXeyzejBz3IIDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:7c:7b:8e:98:36:b5:1e:1b:92:e0:04:7c:5a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d Validity Not Before: Dec 26 10:00:43 2025 GMT Not After : Dec 27 10:00:43 2025 GMT Subject: CN=5e75dfd090f4c91e710bb0277c7c0b52da3b5fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bc:b2:52:51:94:65:71:61:7a:43:88:8c:39: 5b:cd:97:98:08:7e:98:b0:71:b2:eb:42:1e:79:d3: e1:ab:90:ab:50:c4:69:b0:15:19:62:eb:9e:cd:d9: 4f:18:f7:fe:be:2f:8b:3b:05:19:18:29:f5:84:aa: 05:8f:83:9a:5b:48:95:b4:16:f7:47:a4:94:13:09: af:f8:18:35:81:26:db:03:5d:23:fd:c7:06:8e:18: 12:e1:bf:ef:71:58:ac:a2:0c:27:55:c7:54:f7:54: 5f:3e:6c:30:60:4d:5e:88:bd:af:72:c3:1b:8f:6f: e5:85:bd:f2:53:5e:2c:93:1e:eb:8c:64:d5:56:f1: 97:33:97:44:8a:1d:86:8b:32:62:80:9e:52:56:f3: f6:c0:38:d1:bf:d9:3e:0f:25:42:e5:5d:2f:34:9f: d2:58:9d:76:0d:d0:82:c1:8f:8c:f8:9e:bc:d2:02: bb:1a:65:df:e9:41:e1:ef:a4:a4:c7:83:c8:09:28: 74:79:ce:17:cd:e9:a8:32:be:c4:d4:48:2e:f4:f5: 5d:52:18:f7:18:c0:ee:a2:b1:77:41:1d:01:95:50: 6f:3f:f7:01:62:23:5f:24:c6:39:6c:4f:2e:7a:ee: 27:ef:3b:58:47:32:af:bf:48:39:0e:ae:57:d3:67: f1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:75:DF:D0:90:F4:C9:1E:71:0B:B0:27:7C:7C:0B:52:DA:3B:5F:D6 X509v3 Authority Key Identifier: keyid:B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:fb:ec:9a:fb:1b:18:96:04:f4:e2:2d:aa:4d:6e:73:ff:f6: 4e:fa:51:3e:ef:98:b3:11:80:53:8e:3f:4f:42:89:fb:a5:3d: 09:f5:aa:70:d8:35:c3:d8:15:d7:a2:55:7d:b1:10:b2:4e:da: 2d:23:22:bb:bc:eb:39:fd:19:88:7f:32:49:24:b2:af:63:d8: 05:a1:32:1d:4f:70:b3:79:67:24:07:a5:0a:20:1a:be:8e:07: 24:e4:68:e9:54:06:6d:2b:8f:cd:ac:5d:eb:fa:a0:2d:54:07: 1d:d3:38:18:7e:44:76:27:48:4d:11:9e:20:6e:4b:d5:46:0b: a5:7f:50:38:63:71:b2:67:63:64:49:39:12:59:bf:67:51:3b: 03:ed:d0:1d:26:50:12:b8:c1:b4:4c:f2:e9:2f:67:af:1c:6c: 5f:09:6e:53:43:e9:8c:8e:10:be:5f:ca:c6:04:da:c6:b3:d4: 70:6d:d1:87:4a:a2:a6:1f:a9:c8:3f:02:d9:57:09:f8:60:59: 9e:6d:e4:7e:4d:97:31:76:26:eb:b9:8e:29:62:16:d4:14:e7: 95:01:8f:4c:8b:c0:16:53:29:b2:5c:de:26:b3:77:ad:ff:af: 02:be:f3:95:fb:16:b6:2a:10:04:a0:65:38:3b:62:50:00:b5: 96:07:d9:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGnx7jpg2tR4bkuAEfFrGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzQ5YmM5Y2QyY2Y4ZGZmY2YyZmZlZDc4ODRmYmMxM2Ni M2U0NWQwHhcNMjUxMjI2MTAwMDQzWhcNMjUxMjI3MTAwMDQzWjAzMTEwLwYDVQQD Eyg1ZTc1ZGZkMDkwZjRjOTFlNzEwYmIwMjc3YzdjMGI1MmRhM2I1ZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ryyUlGUZXFhekOIjDlbzZeYCH6Y sHGy60IeedPhq5CrUMRpsBUZYuuezdlPGPf+vi+LOwUZGCn1hKoFj4OaW0iVtBb3 R6SUEwmv+Bg1gSbbA10j/ccGjhgS4b/vcVisogwnVcdU91RfPmwwYE1eiL2vcsMb j2/lhb3yU14skx7rjGTVVvGXM5dEih2GizJigJ5SVvP2wDjRv9k+DyVC5V0vNJ/S WJ12DdCCwY+M+J680gK7GmXf6UHh76Skx4PICSh0ec4XzemoMr7E1Egu9PVdUhj3 GMDuorF3QR0BlVBvP/cBYiNfJMY5bE8ueu4n7ztYRzKvv0g5Dq5X02fxAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5139CQ9MkecQuwJ3x8C1LaO1/WMB8GA1UdIwQY MBaAFLJ0m8nNLPjf/PL/7XiE+8E8s+RdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25TYnljMHMtTl84OHZfdGVJVDd3VHl6NUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hYzhmZGMtOWQ1NS00NWRiLWEyNDMt ZjE2Njk3ZDcyYTcxLzEvc25TYnljMHMtTl84OHZfdGVJVDd3VHl6NUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9hYzhmZGMtOWQ1NS00NWRiLWEyNDMtZjE2Njk3ZDcyYTcx LzEvc25TYnljMHMtTl84OHZfdGVJVDd3VHl6NUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfvsmvsb GJYE9OItqk1uc//2TvpRPu+YsxGAU44/T0KJ+6U9CfWqcNg1w9gV16JVfbEQsk7a LSMiu7zrOf0ZiH8ySSSyr2PYBaEyHU9ws3lnJAelCiAavo4HJORo6VQGbSuPzaxd 6/qgLVQHHdM4GH5EdidITRGeIG5L1UYLpX9QOGNxsmdjZEk5Elm/Z1E7A+3QHSZQ ErjBtEzy6S9nrxxsXwluU0PpjI4Qvl/KxgTaxrPUcG3Rh0qiph+pyD8C2VcJ+GBZ nm3kfk2XMXYm67mOKWIW1BTnlQGPTIvAFlMpslzeJrN3rf+vAr7zlfsWtioQBKBl ODtiUAC1lgfZ+g== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:20 2025 by rpki-client