This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft File: Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft (raw, json) Hash identifier: oIRsV8SLn20vzKbzdjESxEXH/JPhb533kiyOkk/n4As= Subject key identifier: AF:D7:1E:3E:CF:89:F5:D0:7F:49:C8:91:62:A5:EC:CA:60:72:94:FF Authority key identifier: 4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E Certificate issuer: /CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e Certificate serial: 019B5E9C229C0FE238598205A5FED44AA66B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft Manifest number: 1333 Signing time: Sat 27 Dec 2025 07:00:49 +0000 Manifest this update: Sat 27 Dec 2025 07:00:49 +0000 Manifest next update: Sun 28 Dec 2025 07:00:49 +0000 Files and hashes: 1: Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl (hash: dCm1BalFQkQUVQEc+1rtLX2jqHHi2hJInDbPHIrJOqo=) 2: VulQHWhzzPXQiRPOfzUk9fbQoJg.roa (hash: 1pq8LhNOVu3KfmYwRxokFt42T5gBAiGcBFnCuEB+z6M=) 3: mGb7BxKlXQ1k9CHjDWD7BMFZHSQ.roa (hash: tJF8uovUStWmO8f7TDEtjdEZUW2noIjEbpOLcO1y40s=) 4: nGPZ_NATggl_6nfv7Xs72s2omBg.roa (hash: Ctlvy2xSgma+HOqaqZwfMsyO5ZwXHLYT1LbAR4ndsm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:9c:22:9c:0f:e2:38:59:82:05:a5:fe:d4:4a:a6:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e Validity Not Before: Dec 27 07:00:49 2025 GMT Not After : Dec 28 07:00:49 2025 GMT Subject: CN=afd71e3ecf89f5d07f49c89162a5ecca607294ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f8:e0:f9:08:df:b7:5d:23:7b:c6:8c:dc:85: c9:f0:3a:ca:a1:55:0c:cd:e4:ef:25:46:a7:c5:e5: cf:6b:b1:0e:a6:49:48:a4:ee:b6:50:06:d4:0d:0e: 0b:95:45:a7:3f:a2:b5:90:68:b9:e5:04:2f:c6:c1: 73:0a:ad:41:cd:f3:ae:74:00:8c:a4:1b:e2:52:bf: 3a:15:c0:43:8d:38:c5:3f:b3:6b:3f:f1:d0:c8:84: 8f:a8:70:07:86:eb:f1:7f:e4:9c:f7:93:87:96:c4: b0:93:4f:82:37:78:26:08:2f:17:47:4e:de:32:91: af:b3:30:1a:d9:d2:2e:53:43:ef:8f:be:3e:ae:3c: e8:a8:64:92:92:08:b1:7a:31:f8:b7:f9:58:f3:9e: a4:61:96:33:d5:e6:f3:7b:64:f9:f9:56:8e:93:94: 87:1c:34:9f:0b:1c:a7:84:bb:53:df:b3:7a:45:ad: a0:07:12:55:22:6d:5d:25:3f:85:fe:b5:16:46:36: 37:59:a9:49:67:34:5e:a4:a4:18:85:5a:ac:98:39: 2a:37:14:f1:a9:35:3c:10:f4:25:de:f8:66:74:90: 3d:d0:33:a6:71:18:2f:11:0f:ef:ad:39:12:13:2a: f3:a9:ab:75:9b:0d:f4:44:db:1c:6f:1e:f4:52:a3: 27:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D7:1E:3E:CF:89:F5:D0:7F:49:C8:91:62:A5:EC:CA:60:72:94:FF X509v3 Authority Key Identifier: keyid:4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:55:d9:41:45:53:6f:72:19:85:dd:dd:01:73:e8:9f:6a:05: f6:77:a3:af:6c:97:a5:2d:5d:64:05:bb:ed:af:5b:69:dc:92: 97:58:d1:20:ab:ad:1d:73:a3:81:2d:d2:a5:e2:1c:f0:85:b1: d5:f5:32:cf:2c:e1:b4:b5:bc:06:09:d8:3a:5a:1f:c6:15:c4: 3b:e1:61:bc:a2:22:7c:66:00:34:d1:6e:bc:8c:89:30:0e:78: e7:7c:7a:a2:78:90:65:07:50:71:6f:32:fd:b5:b1:75:b1:61: 01:2b:dd:c8:1f:b7:29:90:22:ab:ca:fc:e3:6c:5d:c2:58:61: 9c:6e:7f:60:dc:49:d4:e8:98:f3:89:74:94:43:23:97:3f:80: 89:7d:d3:f2:55:fc:51:d8:ed:36:aa:ce:bf:f0:3e:54:e2:13: 51:52:c0:5a:89:5f:9f:db:fa:62:ec:76:ac:84:a1:b6:12:54: d8:48:9f:7d:f1:18:25:16:66:b6:52:09:9e:7e:af:d0:52:54: 87:2a:2c:c7:42:ef:8b:b2:d6:f0:e4:31:85:10:13:c4:77:36: df:fb:25:f0:16:37:ee:b4:bd:55:24:35:14:cd:1a:26:4e:f4: d8:29:b5:a2:bb:99:b4:76:49:e3:c6:6a:38:90:43:f3:87:cc: 00:f5:14:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtenCKcD+I4WYIFpf7USqZrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhN2Y0ZjhhYzhjYTczNDNlZDFiNGZmMTJjZTI3NjMxOGI2 OWQxMGUwHhcNMjUxMjI3MDcwMDQ5WhcNMjUxMjI4MDcwMDQ5WjAzMTEwLwYDVQQD EyhhZmQ3MWUzZWNmODlmNWQwN2Y0OWM4OTE2MmE1ZWNjYTYwNzI5NGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fjg+Qjft10je8aM3IXJ8DrKoVUM zeTvJUanxeXPa7EOpklIpO62UAbUDQ4LlUWnP6K1kGi55QQvxsFzCq1BzfOudACM pBviUr86FcBDjTjFP7NrP/HQyISPqHAHhuvxf+Sc95OHlsSwk0+CN3gmCC8XR07e MpGvszAa2dIuU0Pvj74+rjzoqGSSkgixejH4t/lY856kYZYz1ebze2T5+VaOk5SH HDSfCxynhLtT37N6Ra2gBxJVIm1dJT+F/rUWRjY3WalJZzRepKQYhVqsmDkqNxTx qTU8EPQl3vhmdJA90DOmcRgvEQ/vrTkSEyrzqat1mw30RNscbx70UqMn8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/XHj7PifXQf0nIkWKl7MpgcpT/MB8GA1UdIwQY MBaAFEp/T4rIynND7RtP8SzidjGLadEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU245UGlzaktjMFB0RzBfeExPSjJNWXRwMFE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wZTY5NjItOTZiNy00ZmI4LWE4Mzkt OWVjN2FkZDBlYjY4LzEvU245UGlzaktjMFB0RzBfeExPSjJNWXRwMFE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8wZTY5NjItOTZiNy00ZmI4LWE4MzktOWVjN2FkZDBlYjY4 LzEvU245UGlzaktjMFB0RzBfeExPSjJNWXRwMFE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVXZQUVT b3IZhd3dAXPon2oF9nejr2yXpS1dZAW77a9badySl1jRIKutHXOjgS3SpeIc8IWx 1fUyzyzhtLW8BgnYOlofxhXEO+FhvKIifGYANNFuvIyJMA5453x6oniQZQdQcW8y /bWxdbFhASvdyB+3KZAiq8r842xdwlhhnG5/YNxJ1OiY84l0lEMjlz+AiX3T8lX8 UdjtNqrOv/A+VOITUVLAWolfn9v6Yux2rIShthJU2EifffEYJRZmtlIJnn6v0FJU hyosx0Lvi7LW8OQxhRATxHc23/sl8BY37rS9VSQ1FM0aJk702Cm1oruZtHZJ48Zq OJBD84fMAPUUbQ== -----END CERTIFICATE-----Generated at Sat Dec 27 15:40:20 2025 by rpki-client