This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft File: SnqRfdz8JujIezCFi28H8po9tD4.mft (raw, json) Hash identifier: gl8FVT58sLDtc84xKdK15IRMeSKl71PObAisFbL0WTU= Subject key identifier: BB:7F:EB:A0:F6:3C:08:23:06:69:CC:B4:F6:B7:D9:4E:E9:4F:D1:FC Authority key identifier: 4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E Certificate issuer: /CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e Certificate serial: 019B3FB5EC582B1CA44ADA66153652612CA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft Manifest number: 1739 Signing time: Sun 21 Dec 2025 07:00:45 +0000 Manifest this update: Sun 21 Dec 2025 07:00:45 +0000 Manifest next update: Mon 22 Dec 2025 07:00:45 +0000 Files and hashes: 1: P2xh5AQS8g63oefSEJQg-RsTiE4.roa (hash: fyGkFWMTxDql0OoutRE6aQhGU1Ek1V6QoGNhwV3E3j8=) 2: SnqRfdz8JujIezCFi28H8po9tD4.crl (hash: B6r6E/aOY2yP+dHrP5wb1a9TphF0CmA2yS1sqrTobtc=) 3: wZuLHZACRgaqannQqtWTgy9AnFY.roa (hash: ArTL5+VwNfVl+VzsgeZQzp979burQZd57vVQg0xpNM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 07:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:ec:58:2b:1c:a4:4a:da:66:15:36:52:61:2c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e Validity Not Before: Dec 21 07:00:45 2025 GMT Not After : Dec 22 07:00:45 2025 GMT Subject: CN=bb7feba0f63c08230669ccb4f6b7d94ee94fd1fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7d:f9:5e:46:1c:f6:87:5e:ea:10:fc:16:26: 13:76:93:25:6e:e1:c9:55:04:34:55:59:96:f2:bb: de:eb:66:af:3e:5a:92:50:b8:6e:8c:17:48:f4:68: c0:22:86:56:4b:f2:02:8b:fc:58:36:3d:b3:e2:ed: cf:fc:05:7b:a8:7a:70:ab:96:14:32:db:c0:63:8e: 61:e0:c2:99:62:95:31:d0:44:28:11:98:af:f6:64: 93:21:4b:1b:f5:1d:d9:4f:1d:6e:df:9c:e4:2a:da: 6b:1b:0d:9f:58:5e:21:96:f1:13:a2:ab:a3:59:a1: a3:36:5a:f3:81:d4:43:d5:03:03:6e:b1:3a:fd:f5: 44:6a:69:61:d5:d3:3c:86:e1:e3:97:d9:34:48:b4: 90:2f:af:2d:d9:a8:b6:f9:e2:a9:7b:c5:34:d8:13: 0c:d9:61:9f:4a:06:3d:dd:1b:07:cc:07:66:ef:c1: 1f:42:32:89:ba:6e:5f:2c:3f:f4:74:e8:9a:c9:df: 36:7d:5c:5b:ef:9b:d7:1b:81:f7:e8:9b:03:5f:52: c9:3a:01:fb:c5:ff:d4:cd:9f:df:86:3f:0b:24:23: f3:6a:35:06:db:a8:e2:89:0a:a2:a8:07:80:97:fb: b6:14:02:b6:88:a2:67:d4:62:08:d2:70:3e:ee:f7: 4e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:7F:EB:A0:F6:3C:08:23:06:69:CC:B4:F6:B7:D9:4E:E9:4F:D1:FC X509v3 Authority Key Identifier: keyid:4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:a5:63:e7:93:4e:d9:8f:d4:a4:ea:7f:26:04:4a:83:ae:c8: 7c:aa:c1:2b:3e:77:04:23:f7:ad:79:12:26:d0:bb:c8:a1:f6: b2:37:7b:09:9d:90:ce:68:a1:74:ed:f1:3c:6d:5d:ee:b1:e3: d5:12:5c:ea:d5:04:ef:ef:7c:25:ec:6c:25:5e:30:78:41:ae: b1:38:60:9a:2b:b5:17:58:37:2a:fe:15:e8:c0:e5:5b:61:98: a7:a1:ad:b1:11:f6:8c:9e:05:7c:6f:0a:62:e9:d1:54:84:c5: f8:69:99:d8:bd:70:ed:1c:1e:88:85:66:f5:ee:2f:91:de:74: 46:fc:8a:cf:e3:9e:61:7c:a0:16:56:9b:a7:bd:b1:05:d9:6e: 18:79:ad:7a:d3:3b:3a:d7:f3:1b:09:24:67:4f:81:b0:51:d0: f2:0a:a5:aa:ae:6d:df:72:25:0d:1d:26:d2:de:12:8b:fa:15: 91:b9:ac:f0:b7:ad:bb:0c:fb:ac:fa:6e:39:f1:b8:92:dc:26: 97:0b:73:86:ad:79:c8:53:d7:7f:0f:61:2b:24:98:43:ac:62: a0:14:48:79:10:e3:b9:ac:e5:92:e2:26:8d:9f:ec:ab:10:3b: 4a:97:4b:0c:28:01:d1:4e:9d:c5:fc:f4:70:9e:49:30:4b:bb: 94:37:af:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/texYKxykStpmFTZSYSyhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhN2E5MTdkZGNmYzI2ZThjODdiMzA4NThiNmYwN2YyOWEz ZGI0M2UwHhcNMjUxMjIxMDcwMDQ1WhcNMjUxMjIyMDcwMDQ1WjAzMTEwLwYDVQQD EyhiYjdmZWJhMGY2M2MwODIzMDY2OWNjYjRmNmI3ZDk0ZWU5NGZkMWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx335XkYc9ode6hD8FiYTdpMlbuHJ VQQ0VVmW8rve62avPlqSULhujBdI9GjAIoZWS/ICi/xYNj2z4u3P/AV7qHpwq5YU MtvAY45h4MKZYpUx0EQoEZiv9mSTIUsb9R3ZTx1u35zkKtprGw2fWF4hlvEToquj WaGjNlrzgdRD1QMDbrE6/fVEamlh1dM8huHjl9k0SLSQL68t2ai2+eKpe8U02BMM 2WGfSgY93RsHzAdm78EfQjKJum5fLD/0dOiayd82fVxb75vXG4H36JsDX1LJOgH7 xf/UzZ/fhj8LJCPzajUG26jiiQqiqAeAl/u2FAK2iKJn1GII0nA+7vdOmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLt/66D2PAgjBmnMtPa32U7pT9H8MB8GA1UdIwQY MBaAFEp6kX3c/CboyHswhYtvB/KaPbQ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU25xUmZkejhKdWpJZXpDRmkyOEg4cG85dEQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNGMyYmItNzllYS00ZjM5LWFjODIt ODIwMTZkZTQyMjEyLzEvU25xUmZkejhKdWpJZXpDRmkyOEg4cG85dEQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8zNGMyYmItNzllYS00ZjM5LWFjODItODIwMTZkZTQyMjEy LzEvU25xUmZkejhKdWpJZXpDRmkyOEg4cG85dEQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUaVj55NO 2Y/UpOp/JgRKg67IfKrBKz53BCP3rXkSJtC7yKH2sjd7CZ2QzmihdO3xPG1d7rHj 1RJc6tUE7+98JexsJV4weEGusThgmiu1F1g3Kv4V6MDlW2GYp6GtsRH2jJ4FfG8K YunRVITF+GmZ2L1w7RweiIVm9e4vkd50RvyKz+OeYXygFlabp72xBdluGHmtetM7 OtfzGwkkZ0+BsFHQ8gqlqq5t33IlDR0m0t4Si/oVkbms8Letuwz7rPpuOfG4ktwm lwtzhq15yFPXfw9hKySYQ6xioBRIeRDjuazlkuImjZ/sqxA7SpdLDCgB0U6dxfz0 cJ5JMEu7lDevuA== -----END CERTIFICATE-----Generated at Sun Dec 21 17:26:54 2025 by rpki-client