This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft File: snkS_-9nB4uwa9SpAh-6lq2xgL4.mft (raw, json) Hash identifier: OK1RTGSylO0Zh4pT5ya9d/A9SqsTRph1xdWNMdNnpeI= Subject key identifier: 1E:F2:E1:EC:9C:8A:FF:1F:DD:72:CF:AC:21:46:52:23:82:9F:CA:74 Authority key identifier: B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE Certificate issuer: /CN=b27912ffef67078bb06bd4a9021fba96adb180be Certificate serial: 019B544F29756908D93228B8ADDCA1346075 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft Manifest number: 1330 Signing time: Thu 25 Dec 2025 07:00:32 +0000 Manifest this update: Thu 25 Dec 2025 07:00:32 +0000 Manifest next update: Fri 26 Dec 2025 07:00:32 +0000 Files and hashes: 1: Q0e2nZwWTgSOnN3XYro_yC3AqqY.roa (hash: p1jDlEZ3jtWSk1Gt2ui3hdbzWJmpWW1M0qlAGcolPG0=) 2: snkS_-9nB4uwa9SpAh-6lq2xgL4.crl (hash: KNnL62aGejfH9dLxpx9tfzh3myc00T1vDk/b4mPJ0tY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 07:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:4f:29:75:69:08:d9:32:28:b8:ad:dc:a1:34:60:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b27912ffef67078bb06bd4a9021fba96adb180be Validity Not Before: Dec 25 07:00:32 2025 GMT Not After : Dec 26 07:00:32 2025 GMT Subject: CN=1ef2e1ec9c8aff1fdd72cfac21465223829fca74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3a:8a:61:72:2c:11:fa:44:b7:aa:68:35:7b: c9:40:f0:d9:c0:ed:62:68:2e:9f:27:fd:38:82:9e: 8d:a6:5c:67:13:41:20:30:cc:07:f8:39:2d:2e:09: 25:00:31:58:02:86:fa:eb:5a:fb:96:37:20:e1:ad: d0:16:94:5b:38:73:b4:df:96:19:94:03:b4:45:9c: b3:96:51:d1:70:24:dc:0f:f2:c4:d9:ce:be:ab:b0: ca:f9:2e:9c:3a:bf:59:03:23:88:75:59:c3:dc:a8: fd:ec:7b:c8:50:be:56:87:41:c4:b4:85:79:80:1f: 6d:77:0e:36:74:b1:ac:06:49:84:9a:50:de:0d:37: 6b:3c:81:89:e4:9a:47:fd:92:d0:2a:70:2e:9f:c0: 02:f3:fb:4a:22:a3:8f:7d:34:37:dd:6d:a0:1b:80: 70:d3:31:58:ed:dd:af:49:11:13:e8:77:e1:60:ed: 93:26:cd:e9:7e:ed:e9:fd:37:22:18:23:dd:db:0b: fd:44:38:56:f6:60:08:01:2b:f0:cd:99:97:61:a3: 2e:fe:01:85:be:a3:5f:84:02:1b:bb:9c:f0:21:c5: ae:d6:58:0c:b9:56:67:d0:fd:88:18:34:6a:fd:64: b5:2b:9e:02:d1:75:1a:d0:70:89:d3:5e:31:16:84: 89:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F2:E1:EC:9C:8A:FF:1F:DD:72:CF:AC:21:46:52:23:82:9F:CA:74 X509v3 Authority Key Identifier: keyid:B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:31:5b:2a:27:0e:17:24:96:95:4b:86:16:8e:78:38:23:d8: ff:6d:96:da:3d:29:d3:9f:34:dd:98:02:d9:b8:d5:f6:32:7f: 1d:d8:96:64:2e:dd:7e:9f:90:49:eb:12:83:af:85:1e:a9:e8: 0d:79:f8:82:ee:66:04:81:23:c7:75:bb:08:94:7c:69:f6:6d: 7e:d1:99:b8:24:d7:cb:9d:77:0e:c1:18:b3:27:36:6c:64:d3: 83:8f:7c:c7:47:11:28:07:c5:24:d0:f1:c9:a8:8d:f3:4b:e8: 1d:17:a1:6d:39:b7:c0:de:97:2e:07:57:a8:a9:3e:1b:27:99: fe:18:ec:6a:2a:86:c2:30:65:97:77:32:2a:eb:99:16:d8:cf: 27:fd:f9:35:03:e7:1a:30:42:dd:93:81:e3:e1:ec:ea:a5:58: 6c:79:47:8f:81:b6:29:15:2c:f5:e2:91:ad:d6:40:b7:e7:1e: 63:3b:2e:3c:61:71:19:0d:67:57:8b:82:e2:d5:db:b0:15:03: 90:e5:e4:e4:03:fc:ff:dc:36:7b:4e:9a:b6:1e:28:0d:97:a8: d6:22:f0:aa:6c:86:17:b0:e5:1f:f6:80:c7:81:da:aa:4a:ab: 1b:ff:4b:a0:37:3e:23:c5:54:3b:c1:1b:07:c3:5d:7c:e6:c4: 3b:d8:f1:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUTyl1aQjZMii4rdyhNGB1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzkxMmZmZWY2NzA3OGJiMDZiZDRhOTAyMWZiYTk2YWRi MTgwYmUwHhcNMjUxMjI1MDcwMDMyWhcNMjUxMjI2MDcwMDMyWjAzMTEwLwYDVQQD EygxZWYyZTFlYzljOGFmZjFmZGQ3MmNmYWMyMTQ2NTIyMzgyOWZjYTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzqKYXIsEfpEt6poNXvJQPDZwO1i aC6fJ/04gp6NplxnE0EgMMwH+DktLgklADFYAob661r7ljcg4a3QFpRbOHO035YZ lAO0RZyzllHRcCTcD/LE2c6+q7DK+S6cOr9ZAyOIdVnD3Kj97HvIUL5Wh0HEtIV5 gB9tdw42dLGsBkmEmlDeDTdrPIGJ5JpH/ZLQKnAun8AC8/tKIqOPfTQ33W2gG4Bw 0zFY7d2vSRET6HfhYO2TJs3pfu3p/TciGCPd2wv9RDhW9mAIASvwzZmXYaMu/gGF vqNfhAIbu5zwIcWu1lgMuVZn0P2IGDRq/WS1K54C0XUa0HCJ014xFoSJLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7y4eyciv8f3XLPrCFGUiOCn8p0MB8GA1UdIwQY MBaAFLJ5Ev/vZweLsGvUqQIfupatsYC+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25rU18tOW5CNHV3YTlTcEFoLTZscTJ4Z0w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yYjg3YzUtMzgwZC00NzZmLWE3MTQt NWMwZDkyZjlhNDlmLzEvc25rU18tOW5CNHV3YTlTcEFoLTZscTJ4Z0w0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8yYjg3YzUtMzgwZC00NzZmLWE3MTQtNWMwZDkyZjlhNDlm LzEvc25rU18tOW5CNHV3YTlTcEFoLTZscTJ4Z0w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTFbKicO FySWlUuGFo54OCPY/22W2j0p05803ZgC2bjV9jJ/HdiWZC7dfp+QSesSg6+FHqno DXn4gu5mBIEjx3W7CJR8afZtftGZuCTXy513DsEYsyc2bGTTg498x0cRKAfFJNDx yaiN80voHRehbTm3wN6XLgdXqKk+GyeZ/hjsaiqGwjBll3cyKuuZFtjPJ/35NQPn GjBC3ZOB4+Hs6qVYbHlHj4G2KRUs9eKRrdZAt+ceYzsuPGFxGQ1nV4uC4tXbsBUD kOXk5AP8/9w2e06ath4oDZeo1iLwqmyGF7DlH/aAx4HaqkqrG/9LoDc+I8VUO8Eb B8NdfObEO9jxCw== -----END CERTIFICATE-----Generated at Thu Dec 25 14:17:41 2025 by rpki-client