This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft File: SanokeBtQid9xPtfvWnpq9jimIM.mft (raw, json) Hash identifier: upbFbF30p3f+5UmTcwr4TEbDNfut/9DWXPv+KB4arHs= Subject key identifier: 9A:53:73:C4:A7:45:78:B1:D8:90:BA:5D:41:96:A0:F0:53:47:B6:04 Authority key identifier: 49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83 Certificate issuer: /CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883 Certificate serial: 019B52618A2D4D2448EE833DE7AB7B3D2458 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft Manifest number: 1796 Signing time: Wed 24 Dec 2025 22:01:22 +0000 Manifest this update: Wed 24 Dec 2025 22:01:22 +0000 Manifest next update: Thu 25 Dec 2025 22:01:22 +0000 Files and hashes: 1: SanokeBtQid9xPtfvWnpq9jimIM.crl (hash: gpBmcmMajq4vS+8EKRt42gGPunyONcyDFSAiJMHfHb4=) 2: V8zD_fceDFK7bKm0UJWlvFSbGqc.roa (hash: Le4LPJ6tIhm6aij63pajwkdMuW6+ZunlQYJepBMOhII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:61:8a:2d:4d:24:48:ee:83:3d:e7:ab:7b:3d:24:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883 Validity Not Before: Dec 24 22:01:22 2025 GMT Not After : Dec 25 22:01:22 2025 GMT Subject: CN=9a5373c4a74578b1d890ba5d4196a0f05347b604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f4:ee:82:dc:c3:99:62:7f:a2:bc:e6:33:12: 09:5c:83:d4:6e:6c:55:87:ca:2a:13:b7:f0:bd:a9: d6:a0:a6:2c:ee:b1:21:f0:26:04:f0:f4:e5:03:a5: e3:06:94:c7:35:a8:cc:e8:38:6c:15:75:15:3e:a4: a0:20:12:55:84:e2:af:ef:04:de:54:e7:45:d6:af: 7c:ab:b9:e9:f3:6e:61:69:de:79:f3:b2:18:b5:80: cb:ef:f9:29:77:d1:ad:83:bb:10:4b:20:c8:09:fe: 6e:32:af:3e:8f:77:93:8d:5b:7c:dd:ae:8e:87:cd: 7f:1d:f5:50:12:27:39:1c:21:30:69:c6:49:63:72: 91:cf:e2:30:06:4e:1b:dc:7d:91:c0:bb:86:6a:50: 23:80:f2:5f:6b:64:36:6d:cb:d8:c9:39:a4:f2:a9: 1e:3a:4f:e1:09:1d:5e:65:f3:2d:77:be:c6:6d:e7: 26:6a:cd:4f:ed:57:bd:49:f5:46:c1:b2:74:45:f0: 2e:ab:5f:b8:f8:62:ed:dc:30:98:ba:13:2c:6a:91: bf:0e:2e:d6:1c:e7:9e:44:3a:d9:0e:75:8b:ee:49: 68:c7:02:7c:0a:02:ab:9e:74:61:62:cc:9c:6b:62: c0:27:81:1b:2e:8a:84:c4:a6:10:0f:12:1b:18:45: a3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:53:73:C4:A7:45:78:B1:D8:90:BA:5D:41:96:A0:F0:53:47:B6:04 X509v3 Authority Key Identifier: keyid:49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:45:d7:5f:5e:c3:13:81:79:6e:31:c8:69:81:48:fe:12:c0: 8e:d4:aa:3c:1d:bf:19:3c:9d:fe:ad:22:b9:e1:3a:40:d1:5e: a2:39:e6:ad:55:5e:27:82:cb:0e:7c:a3:ab:e2:6f:c6:c4:17: 80:28:13:60:76:c1:1f:55:48:8e:b0:c6:fe:b8:c4:dd:eb:8b: 83:d2:4e:28:68:76:92:37:96:ce:7f:97:a0:3f:ea:c8:fb:4e: 22:6e:de:4c:76:83:61:2d:44:05:db:81:9f:00:31:de:67:9c: 73:ea:1e:e8:51:0c:9a:49:2b:96:ae:ef:10:6e:44:ca:04:75: 5d:b3:43:d4:db:06:f7:ec:e1:b8:f6:9a:d8:16:a5:c0:24:3d: dd:a5:e2:6e:2d:98:12:f2:3b:35:97:98:be:4c:6d:59:30:ec: 2f:0c:dd:1a:2a:ab:7c:1f:52:cc:e8:c2:12:54:7a:9e:99:3e: 7d:8e:7a:db:6e:6d:9d:cf:9c:a4:54:e4:51:68:c3:9b:73:20: cd:9d:be:9e:32:07:22:92:01:2c:4c:0d:03:c3:7f:cd:39:06: b3:f4:4c:3c:d8:52:4c:85:6a:1a:27:7a:e1:74:fb:5e:60:d2: 3f:93:79:54:b2:86:0a:28:c0:80:76:08:81:7e:2b:de:7b:da: da:b5:c9:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYYotTSRI7oM956t7PSRYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YTllODkxZTA2ZDQyMjc3ZGM0ZmI1ZmJkNjllOWFiZDhl Mjk4ODMwHhcNMjUxMjI0MjIwMTIyWhcNMjUxMjI1MjIwMTIyWjAzMTEwLwYDVQQD Eyg5YTUzNzNjNGE3NDU3OGIxZDg5MGJhNWQ0MTk2YTBmMDUzNDdiNjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vTugtzDmWJ/orzmMxIJXIPUbmxV h8oqE7fwvanWoKYs7rEh8CYE8PTlA6XjBpTHNajM6DhsFXUVPqSgIBJVhOKv7wTe VOdF1q98q7np825had5587IYtYDL7/kpd9Gtg7sQSyDICf5uMq8+j3eTjVt83a6O h81/HfVQEic5HCEwacZJY3KRz+IwBk4b3H2RwLuGalAjgPJfa2Q2bcvYyTmk8qke Ok/hCR1eZfMtd77Gbecmas1P7Ve9SfVGwbJ0RfAuq1+4+GLt3DCYuhMsapG/Di7W HOeeRDrZDnWL7kloxwJ8CgKrnnRhYsyca2LAJ4EbLoqExKYQDxIbGEWj7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpTc8SnRXix2JC6XUGWoPBTR7YEMB8GA1UdIwQY MBaAFEmp6JHgbUInfcT7X71p6avY4piDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2Fub2tlQnRRaWQ5eFB0ZnZXbnBxOWppbUlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81MzY5NmYtZjk3My00N2ZiLThkNzkt YWRkYzZkNGJiMmU3LzEvU2Fub2tlQnRRaWQ5eFB0ZnZXbnBxOWppbUlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi81MzY5NmYtZjk3My00N2ZiLThkNzktYWRkYzZkNGJiMmU3 LzEvU2Fub2tlQnRRaWQ5eFB0ZnZXbnBxOWppbUlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkXXX17D E4F5bjHIaYFI/hLAjtSqPB2/GTyd/q0iueE6QNFeojnmrVVeJ4LLDnyjq+JvxsQX gCgTYHbBH1VIjrDG/rjE3euLg9JOKGh2kjeWzn+XoD/qyPtOIm7eTHaDYS1EBduB nwAx3mecc+oe6FEMmkkrlq7vEG5EygR1XbND1NsG9+zhuPaa2BalwCQ93aXibi2Y EvI7NZeYvkxtWTDsLwzdGiqrfB9SzOjCElR6npk+fY56225tnc+cpFTkUWjDm3Mg zZ2+njIHIpIBLEwNA8N/zTkGs/RMPNhSTIVqGid64XT7XmDSP5N5VLKGCijAgHYI gX4r3nva2rXJ4w== -----END CERTIFICATE-----Generated at Thu Dec 25 03:30:51 2025 by rpki-client