This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft File: SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft (raw, json) Hash identifier: EoWFPxqzwaHhVcmlWm+nkCLti9oTkcLI6atl3AlW0V4= Subject key identifier: E7:71:8F:C4:2A:4C:41:E9:A8:6E:B2:01:73:7B:DC:4C:CB:07:7A:B1 Authority key identifier: 4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95 Certificate issuer: /CN=4a2027dbb89427a8e031b90962e26e44affa5a95 Certificate serial: 019B39EA98DCB14D62E538D863877E59DB6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 04:00:34 +0000 Manifest this update: Sat 20 Dec 2025 04:00:34 +0000 Manifest next update: Sun 21 Dec 2025 04:00:34 +0000 Files and hashes: 1: KUfFcY4n_r75t21wBTn8NHwpPWo.roa (hash: Vj4b0HHRAbzzjfGSfe71X4pK6wA9f27I+UmGi3mJNYI=) 2: SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl (hash: 5bGjdluBuxG9YrWBSFA3SKvBvcANiDRyh+DSpWF0uvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:98:dc:b1:4d:62:e5:38:d8:63:87:7e:59:db:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a2027dbb89427a8e031b90962e26e44affa5a95 Validity Not Before: Dec 20 04:00:34 2025 GMT Not After : Dec 21 04:00:34 2025 GMT Subject: CN=e7718fc42a4c41e9a86eb201737bdc4ccb077ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f4:25:17:0d:c5:2c:a1:f5:37:d9:19:69:4e: 63:cb:97:7e:b8:6b:a5:db:d9:92:30:18:00:85:94: 7f:9b:3e:1a:af:63:fb:58:1c:c7:17:14:91:f8:ac: 42:b0:33:ed:b7:18:4b:15:e0:88:b0:77:cd:64:92: a6:5c:c2:77:40:61:03:5b:3e:44:c0:10:9c:a8:43: 60:97:eb:2b:8a:8a:be:76:b2:e4:22:6b:c0:24:a4: d4:8b:31:11:c7:de:75:00:4c:16:8d:58:8c:0b:68: 10:5b:03:cd:7e:4a:d1:e5:e1:d7:59:8c:1b:8d:30: 67:cf:f4:30:c6:8f:b0:0e:4e:7a:c5:1f:88:1e:1a: d5:65:fb:3d:4a:e1:72:62:d5:17:a2:01:23:56:e4: 85:ef:93:e9:d8:53:67:6b:4a:6f:80:45:77:0e:c0: 35:2d:e2:b5:b2:78:22:88:f3:c7:70:3f:59:73:c3: 19:1a:30:3d:6f:45:f5:2e:93:bd:59:0f:02:a6:fb: 4d:f4:7a:7e:da:90:45:84:38:cb:dc:c8:7e:52:6e: de:ec:3e:ba:72:90:be:7d:d3:85:1a:2f:cb:f9:14: ff:d2:20:be:7d:4b:ec:3b:23:8e:a7:b2:5f:23:36: 0f:49:fc:b1:d8:08:58:f4:92:7f:64:52:75:82:3d: 5a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:71:8F:C4:2A:4C:41:E9:A8:6E:B2:01:73:7B:DC:4C:CB:07:7A:B1 X509v3 Authority Key Identifier: keyid:4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:6c:88:89:7a:8f:85:2f:e4:a1:e5:99:d5:c2:25:06:1b:51: c2:d7:23:33:0b:7f:31:66:05:8a:a2:fc:11:9c:23:ba:d5:28: d1:01:ba:d0:7f:48:25:a2:a6:52:e8:59:98:5a:9a:45:94:d3: a4:fd:8a:25:ee:b0:19:f7:2b:8d:65:b0:f7:fa:95:51:a0:02: cb:6c:bf:e6:8e:6d:ec:3c:95:de:cd:79:d6:63:0b:78:13:78: e2:c1:37:85:a3:5c:38:1b:a6:22:a1:ab:6a:06:fe:08:b4:9b: 43:bc:69:02:b9:47:b1:24:ff:af:fe:fd:5d:a5:40:db:d9:ac: 52:a9:cd:ec:36:6e:c2:36:e1:73:3b:45:4d:be:53:0a:87:b3: 4d:ea:56:a7:c2:16:c0:ed:50:40:66:9e:e2:98:ac:0a:f1:45: 00:01:6e:ea:34:33:e0:e2:66:e7:1b:ab:e0:bf:76:6b:9f:b8: d6:f9:c0:bc:d5:8c:73:4b:65:32:c7:eb:9e:5d:b7:ff:02:d1: 96:99:53:78:18:ba:64:eb:55:aa:dc:df:1e:d2:06:76:e4:b4: 2d:5c:a2:96:31:06:0c:57:e7:f2:49:78:27:87:f1:ca:73:82: 6f:99:3e:62:9d:20:fa:16:61:4f:c0:43:06:b5:d3:ca:37:45: 91:50:f4:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56pjcsU1i5TjYY4d+WdtvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhMjAyN2RiYjg5NDI3YThlMDMxYjkwOTYyZTI2ZTQ0YWZm YTVhOTUwHhcNMjUxMjIwMDQwMDM0WhcNMjUxMjIxMDQwMDM0WjAzMTEwLwYDVQQD EyhlNzcxOGZjNDJhNGM0MWU5YTg2ZWIyMDE3MzdiZGM0Y2NiMDc3YWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/QlFw3FLKH1N9kZaU5jy5d+uGul 29mSMBgAhZR/mz4ar2P7WBzHFxSR+KxCsDPttxhLFeCIsHfNZJKmXMJ3QGEDWz5E wBCcqENgl+srioq+drLkImvAJKTUizERx951AEwWjViMC2gQWwPNfkrR5eHXWYwb jTBnz/Qwxo+wDk56xR+IHhrVZfs9SuFyYtUXogEjVuSF75Pp2FNna0pvgEV3DsA1 LeK1sngiiPPHcD9Zc8MZGjA9b0X1LpO9WQ8CpvtN9Hp+2pBFhDjL3Mh+Um7e7D66 cpC+fdOFGi/L+RT/0iC+fUvsOyOOp7JfIzYPSfyx2AhY9JJ/ZFJ1gj1ajwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdxj8QqTEHpqG6yAXN73EzLB3qxMB8GA1UdIwQY MBaAFEogJ9u4lCeo4DG5CWLibkSv+lqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2lBbjI3aVVKNmpnTWJrSll1SnVSS182V3BVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80NzExYTEtNGQyNS00N2U2LWFjZjct YjA3MTJhYjBiMDc3LzEvU2lBbjI3aVVKNmpnTWJrSll1SnVSS182V3BVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC80NzExYTEtNGQyNS00N2U2LWFjZjctYjA3MTJhYjBiMDc3 LzEvU2lBbjI3aVVKNmpnTWJrSll1SnVSS182V3BVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWyIiXqP hS/koeWZ1cIlBhtRwtcjMwt/MWYFiqL8EZwjutUo0QG60H9IJaKmUuhZmFqaRZTT pP2KJe6wGfcrjWWw9/qVUaACy2y/5o5t7DyV3s151mMLeBN44sE3haNcOBumIqGr agb+CLSbQ7xpArlHsST/r/79XaVA29msUqnN7DZuwjbhcztFTb5TCoezTepWp8IW wO1QQGae4pisCvFFAAFu6jQz4OJm5xur4L92a5+41vnAvNWMc0tlMsfrnl23/wLR lplTeBi6ZOtVqtzfHtIGduS0LVyiljEGDFfn8kl4J4fxynOCb5k+Yp0g+hZhT8BD BrXTyjdFkVD0IA== -----END CERTIFICATE-----Generated at Sat Dec 20 06:51:11 2025 by rpki-client