This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft File: Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft (raw, json) Hash identifier: 2Td1T89dYi3jCY0Tf+2FIOueY3NGzlaxjmJMmDLASGU= Subject key identifier: 3E:98:7B:D2:54:CC:3E:78:DB:0C:23:DA:1F:EF:45:7E:D0:31:51:64 Authority key identifier: 4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E Certificate issuer: /CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e Certificate serial: 019B3FB620D939680F6C15DE825ED1C72CBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft Manifest number: 1323 Signing time: Sun 21 Dec 2025 07:00:59 +0000 Manifest this update: Sun 21 Dec 2025 07:00:59 +0000 Manifest next update: Mon 22 Dec 2025 07:00:59 +0000 Files and hashes: 1: Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl (hash: Ggr1DAae4E1cHJoMtZXy9wt8pIAf40waw8qkvVFCO4c=) 2: VulQHWhzzPXQiRPOfzUk9fbQoJg.roa (hash: 1pq8LhNOVu3KfmYwRxokFt42T5gBAiGcBFnCuEB+z6M=) 3: mGb7BxKlXQ1k9CHjDWD7BMFZHSQ.roa (hash: tJF8uovUStWmO8f7TDEtjdEZUW2noIjEbpOLcO1y40s=) 4: nGPZ_NATggl_6nfv7Xs72s2omBg.roa (hash: Ctlvy2xSgma+HOqaqZwfMsyO5ZwXHLYT1LbAR4ndsm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 07:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:20:d9:39:68:0f:6c:15:de:82:5e:d1:c7:2c:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e Validity Not Before: Dec 21 07:00:59 2025 GMT Not After : Dec 22 07:00:59 2025 GMT Subject: CN=3e987bd254cc3e78db0c23da1fef457ed0315164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e7:52:1f:dc:22:36:97:0d:da:f3:00:85:26: 67:06:d9:8a:9b:c3:eb:0c:69:68:c1:61:33:e9:3f: 3b:1d:2b:8b:82:a2:be:b4:d0:7c:24:8c:98:e1:df: 4c:70:a3:13:6b:43:a0:d3:0e:f4:70:1e:ce:c4:d7: 33:a0:fc:4b:44:4c:98:61:bc:d8:ab:52:07:d4:42: f0:28:c4:1b:8d:c7:50:a4:5b:d6:df:91:57:bf:a7: 9a:c6:5b:d2:3c:1f:7e:f5:23:c3:33:aa:34:a1:bb: 8f:66:f3:f9:4d:b9:b4:76:91:73:ed:a4:9e:66:81: d7:07:5f:32:54:9b:47:2b:2d:1a:16:e1:e5:b0:6d: 21:29:b9:b7:f9:4e:5e:3c:a3:f8:69:b4:b8:a1:98: a5:2a:ed:51:34:64:40:28:0b:65:49:ef:63:cd:6b: ee:6b:5f:3e:1f:75:24:94:88:4e:20:b0:bf:bf:5b: 6a:2f:b5:0c:9c:19:21:42:46:4f:fe:e9:2b:0e:cc: 4c:3f:15:a9:14:08:19:2f:d5:66:1c:2f:72:0f:b1: dc:96:9f:16:49:f0:d2:50:4e:e4:15:0f:58:99:7b: 2f:df:ae:ab:70:fa:e7:ab:54:b6:ec:92:d0:53:d5: c3:06:8c:79:43:b7:23:fc:fd:8a:70:af:e4:33:e6: 50:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:98:7B:D2:54:CC:3E:78:DB:0C:23:DA:1F:EF:45:7E:D0:31:51:64 X509v3 Authority Key Identifier: keyid:4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:2c:e3:73:64:f4:a8:a4:e4:63:2a:65:ce:77:95:03:2e:4f: ab:12:fe:41:ae:9d:b9:d2:66:87:0f:62:40:c5:ac:c6:d4:0c: af:ed:2f:14:e6:31:e3:33:df:ae:91:25:8d:5d:f5:60:a1:4c: 98:90:e7:ab:4e:db:a2:7a:27:6d:32:9b:d2:dd:80:05:7d:75: 83:39:78:ad:e2:69:7c:52:33:a6:fa:5a:96:d2:e1:05:67:1d: 98:28:ee:1d:e8:16:13:25:6e:54:d4:f8:8b:ed:b9:db:24:c3: cb:7f:75:99:58:44:c5:08:6f:d3:64:7c:b2:32:b1:47:c2:b6: 8a:54:d5:f8:e5:dc:b2:ed:ab:fb:35:5f:ed:fe:61:0f:00:57: 8c:f2:02:71:9c:9c:3f:0e:fc:c3:d9:b4:f8:4d:24:55:33:ce: be:07:97:6c:37:02:cd:75:7a:77:88:9c:52:af:f4:a2:3a:57: f9:e2:32:fe:45:80:4e:66:6f:1e:61:76:a0:b7:5c:c3:fd:21: 7b:3e:01:67:ef:64:50:b9:d8:e3:f3:67:fa:b8:a1:d4:1c:ad: a4:53:44:8e:42:41:c2:92:1c:90:ca:78:07:12:6f:b8:57:90: 55:14:dd:1d:06:51:42:ec:a9:f8:e3:f2:45:18:a8:47:0a:33: 37:a5:4c:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tiDZOWgPbBXegl7Rxyy7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhN2Y0ZjhhYzhjYTczNDNlZDFiNGZmMTJjZTI3NjMxOGI2 OWQxMGUwHhcNMjUxMjIxMDcwMDU5WhcNMjUxMjIyMDcwMDU5WjAzMTEwLwYDVQQD EygzZTk4N2JkMjU0Y2MzZTc4ZGIwYzIzZGExZmVmNDU3ZWQwMzE1MTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOdSH9wiNpcN2vMAhSZnBtmKm8Pr DGlowWEz6T87HSuLgqK+tNB8JIyY4d9McKMTa0Og0w70cB7OxNczoPxLREyYYbzY q1IH1ELwKMQbjcdQpFvW35FXv6eaxlvSPB9+9SPDM6o0obuPZvP5Tbm0dpFz7aSe ZoHXB18yVJtHKy0aFuHlsG0hKbm3+U5ePKP4abS4oZilKu1RNGRAKAtlSe9jzWvu a18+H3UklIhOILC/v1tqL7UMnBkhQkZP/ukrDsxMPxWpFAgZL9VmHC9yD7Hclp8W SfDSUE7kFQ9YmXsv366rcPrnq1S27JLQU9XDBox5Q7cj/P2KcK/kM+ZQEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6Ye9JUzD542wwj2h/vRX7QMVFkMB8GA1UdIwQY MBaAFEp/T4rIynND7RtP8SzidjGLadEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU245UGlzaktjMFB0RzBfeExPSjJNWXRwMFE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wZTY5NjItOTZiNy00ZmI4LWE4Mzkt OWVjN2FkZDBlYjY4LzEvU245UGlzaktjMFB0RzBfeExPSjJNWXRwMFE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8wZTY5NjItOTZiNy00ZmI4LWE4MzktOWVjN2FkZDBlYjY4 LzEvU245UGlzaktjMFB0RzBfeExPSjJNWXRwMFE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhizjc2T0 qKTkYyplzneVAy5PqxL+Qa6dudJmhw9iQMWsxtQMr+0vFOYx4zPfrpEljV31YKFM mJDnq07bononbTKb0t2ABX11gzl4reJpfFIzpvpaltLhBWcdmCjuHegWEyVuVNT4 i+252yTDy391mVhExQhv02R8sjKxR8K2ilTV+OXcsu2r+zVf7f5hDwBXjPICcZyc Pw78w9m0+E0kVTPOvgeXbDcCzXV6d4icUq/0ojpX+eIy/kWATmZvHmF2oLdcw/0h ez4BZ+9kULnY4/Nn+rih1BytpFNEjkJBwpIckMp4BxJvuFeQVRTdHQZRQuyp+OPy RRioRwozN6VM1w== -----END CERTIFICATE-----Generated at Sun Dec 21 17:27:41 2025 by rpki-client