This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft File: Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft (raw, json) Hash identifier: zSESN6k8XZjkr7gETXeJJonT1BnBy57xB6DwEqc63No= Subject key identifier: 93:D9:86:AB:AF:18:B4:DF:41:F6:ED:1D:FE:FF:AB:8D:AB:E5:E3:1E Authority key identifier: 4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0 Certificate issuer: /CN=4a7e8c622c87532f8c449f347433dae52b7738f0 Certificate serial: 019B5562288DF79814E1984B6C87C1BA6EDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft Manifest number: 02BE Signing time: Thu 25 Dec 2025 12:00:54 +0000 Manifest this update: Thu 25 Dec 2025 12:00:54 +0000 Manifest next update: Fri 26 Dec 2025 12:00:54 +0000 Files and hashes: 1: Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl (hash: cxR2a8wCbRDPQXVBWyIUVord6TVLnACME8uzK65k/EM=) 2: q7840-8NLfB9rixc3D7BnbwSdDA.roa (hash: 0Goj8+TDxdfY7h+CKm9IaOQBi4HU0GNPe4VjB2tB/pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:62:28:8d:f7:98:14:e1:98:4b:6c:87:c1:ba:6e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7e8c622c87532f8c449f347433dae52b7738f0 Validity Not Before: Dec 25 12:00:54 2025 GMT Not After : Dec 26 12:00:54 2025 GMT Subject: CN=93d986abaf18b4df41f6ed1dfeffab8dabe5e31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:40:1a:df:5b:42:a1:89:c8:59:81:60:c0:1f: 29:8c:35:67:bb:bb:2b:c0:ab:e7:3c:f3:a0:d8:f8: 47:f2:cc:89:f2:52:0c:4e:88:79:29:6f:4e:d5:64: d5:64:7f:f3:55:7c:0c:b6:80:f0:dc:c3:1a:b9:7a: 90:88:38:f1:ce:ad:ec:fa:4d:6c:7d:55:20:17:dd: 4b:d2:4d:2f:b3:61:71:8f:49:00:ca:9f:a4:2c:b7: 36:71:c5:27:0d:50:da:69:95:fd:b5:2c:29:10:be: b9:03:f1:fd:1d:f2:3c:8e:b3:1d:42:50:a2:f7:91: 18:b8:75:2d:32:02:96:9e:99:e3:18:62:d6:80:36: f3:e6:6e:12:0a:b4:85:17:2c:d2:b2:b6:ba:bb:98: 2b:a6:67:d6:83:e2:80:14:36:b0:5a:ae:1a:6f:3e: ff:ef:0a:a2:d7:fe:40:fc:d8:68:b4:13:16:06:3a: 4e:d9:08:ee:00:ee:85:bb:5c:78:a5:f3:8c:26:d6: e4:e3:69:4f:43:a9:52:ff:5e:25:4c:ca:29:b6:32: ef:69:71:ff:c7:55:f9:be:a9:2f:b0:d7:74:9d:5d: 02:b3:08:b7:10:1d:b3:f4:f0:7c:82:14:96:22:16: 0b:2b:91:fa:78:83:e5:fa:2d:9a:10:54:91:df:a0: 5a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D9:86:AB:AF:18:B4:DF:41:F6:ED:1D:FE:FF:AB:8D:AB:E5:E3:1E X509v3 Authority Key Identifier: keyid:4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:b8:1f:6e:6e:45:dd:b8:c2:e9:94:03:40:a1:25:64:dc:e6: 52:aa:77:55:6a:ec:ec:c6:5f:f7:c4:fd:af:a9:25:d6:9d:29: f0:e2:34:59:de:a1:62:40:e9:f4:55:36:6f:60:70:de:59:db: 03:e6:2b:a3:11:bf:1a:00:8c:aa:45:d1:4a:d3:68:07:32:52: 8d:0f:d2:95:0c:99:aa:91:17:de:b1:1f:40:18:e7:a7:45:cf: 6d:71:73:9f:c8:63:f4:fb:5c:59:55:50:f7:4c:89:0c:21:94: 0a:fa:9e:ad:59:90:8f:8d:c4:a0:34:22:f9:aa:80:fd:32:8b: 0f:30:06:c2:2d:de:ad:ab:d2:7a:38:2b:74:fa:be:5c:31:f7: f4:bc:af:82:7e:cd:6a:4c:37:7e:fb:14:ad:55:96:f5:93:b7: da:07:9b:cc:32:c3:8d:e1:5c:c8:57:07:09:9c:4f:37:e1:08: f4:a4:5f:a9:06:7b:a5:3a:53:1f:b3:5d:a9:73:03:3d:a4:a5: ce:c5:6f:df:2d:79:ab:16:29:20:42:2c:ac:cf:e1:dc:89:90: a5:3a:d0:39:74:61:a5:dc:9a:84:b9:bb:0b:7e:11:05:34:2f: c2:f3:56:e5:b2:01:e0:3e:18:be:2f:c3:93:78:72:87:fa:ab: 5a:44:c6:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVYiiN95gU4ZhLbIfBum7fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhN2U4YzYyMmM4NzUzMmY4YzQ0OWYzNDc0MzNkYWU1MmI3 NzM4ZjAwHhcNMjUxMjI1MTIwMDU0WhcNMjUxMjI2MTIwMDU0WjAzMTEwLwYDVQQD Eyg5M2Q5ODZhYmFmMThiNGRmNDFmNmVkMWRmZWZmYWI4ZGFiZTVlMzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EAa31tCoYnIWYFgwB8pjDVnu7sr wKvnPPOg2PhH8syJ8lIMToh5KW9O1WTVZH/zVXwMtoDw3MMauXqQiDjxzq3s+k1s fVUgF91L0k0vs2Fxj0kAyp+kLLc2ccUnDVDaaZX9tSwpEL65A/H9HfI8jrMdQlCi 95EYuHUtMgKWnpnjGGLWgDbz5m4SCrSFFyzSsra6u5grpmfWg+KAFDawWq4abz7/ 7wqi1/5A/NhotBMWBjpO2QjuAO6Fu1x4pfOMJtbk42lPQ6lS/14lTMoptjLvaXH/ x1X5vqkvsNd0nV0Cswi3EB2z9PB8ghSWIhYLK5H6eIPl+i2aEFSR36BaFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPZhquvGLTfQfbtHf7/q42r5eMeMB8GA1UdIwQY MBaAFEp+jGIsh1MvjESfNHQz2uUrdzjwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU242TVlpeUhVeS1NUko4MGREUGE1U3QzT1BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83NDc4MzYtNzgyMi00ZWQ3LTgyOTEt ZGFjMjViMjY2ZDhlLzEvU242TVlpeUhVeS1NUko4MGREUGE1U3QzT1BBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS83NDc4MzYtNzgyMi00ZWQ3LTgyOTEtZGFjMjViMjY2ZDhl LzEvU242TVlpeUhVeS1NUko4MGREUGE1U3QzT1BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7gfbm5F 3bjC6ZQDQKElZNzmUqp3VWrs7MZf98T9r6kl1p0p8OI0Wd6hYkDp9FU2b2Bw3lnb A+YroxG/GgCMqkXRStNoBzJSjQ/SlQyZqpEX3rEfQBjnp0XPbXFzn8hj9PtcWVVQ 90yJDCGUCvqerVmQj43EoDQi+aqA/TKLDzAGwi3eravSejgrdPq+XDH39Lyvgn7N akw3fvsUrVWW9ZO32gebzDLDjeFcyFcHCZxPN+EI9KRfqQZ7pTpTH7NdqXMDPaSl zsVv3y15qxYpIEIsrM/h3ImQpTrQOXRhpdyahLm7C34RBTQvwvNW5bIB4D4Yvi/D k3hyh/qrWkTGGw== -----END CERTIFICATE-----Generated at Thu Dec 25 17:09:39 2025 by rpki-client