This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft File: snNZg9-yJ6JG35iHbsnRr5Hz13k.mft (raw, json) Hash identifier: qOZqd1DGyqF2DHIE3944ZipZxzDUQqPkdDJtjPckxNQ= Subject key identifier: 97:6E:B9:25:E2:5F:9C:0C:03:2D:75:E8:38:72:D0:19:ED:5C:52:AC Authority key identifier: B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79 Certificate issuer: /CN=b2735983dfb227a246df98876ec9d1af91f3d779 Certificate serial: 019B5418EAAA13AEFEAA016A8CE2AEE27206 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft Manifest number: 0FC7 Signing time: Thu 25 Dec 2025 06:01:17 +0000 Manifest this update: Thu 25 Dec 2025 06:01:17 +0000 Manifest next update: Fri 26 Dec 2025 06:01:17 +0000 Files and hashes: 1: HRiBqkMm3jYdrvB2_suIlLpeJLU.roa (hash: thuo/2wKh04k5fV07y+BJSuu+CRS6TthbxD3yT9m+AM=) 2: snNZg9-yJ6JG35iHbsnRr5Hz13k.crl (hash: Z8Ivq3DjzR7qq/H//VgjaHEODh+damcez8qLsBqBx7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:ea:aa:13:ae:fe:aa:01:6a:8c:e2:ae:e2:72:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2735983dfb227a246df98876ec9d1af91f3d779 Validity Not Before: Dec 25 06:01:17 2025 GMT Not After : Dec 26 06:01:17 2025 GMT Subject: CN=976eb925e25f9c0c032d75e83872d019ed5c52ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:49:a0:be:e9:4d:77:85:23:86:4f:62:f2:55: 30:89:e8:21:e5:03:e0:9a:da:92:dc:e4:b8:81:60: e1:38:12:37:0b:ee:92:c4:58:23:df:28:6c:4b:81: 39:e2:64:3b:ef:b2:b1:0b:ef:ee:e3:d0:08:4d:ba: 45:6d:16:2c:25:3f:de:a7:8c:20:05:40:34:49:32: 94:da:04:ac:bd:29:4b:ef:c1:ff:13:de:d5:33:be: 60:f9:40:bf:aa:b1:b3:ea:fd:dc:c6:1f:de:3b:d8: 02:3d:03:98:1d:d9:9d:54:3f:1a:06:44:cd:da:13: a1:12:c2:55:4e:23:55:ac:3a:40:14:63:a1:fa:40: 41:15:4d:d4:07:62:4d:af:6b:5f:68:ef:d4:b3:7b: 0c:f2:85:f0:a6:d1:62:f0:ee:11:34:ce:23:01:f3: 6f:17:99:95:63:35:c4:ad:39:84:46:a0:5f:95:56: 5d:37:18:67:4e:f0:18:ab:02:57:82:e0:b3:93:fb: b0:1a:00:57:fa:c1:da:ca:44:21:c9:d1:7e:19:c6: 62:1f:28:f7:6f:78:d1:54:d1:31:85:d8:2c:98:20: ba:0f:7c:74:c1:2a:5b:09:20:e8:72:6b:85:3d:7c: cc:de:5c:bd:19:34:20:84:ea:b1:18:58:11:e3:4a: 7b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:6E:B9:25:E2:5F:9C:0C:03:2D:75:E8:38:72:D0:19:ED:5C:52:AC X509v3 Authority Key Identifier: keyid:B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ad:dd:79:02:cd:53:92:71:cc:27:60:f0:f2:07:e6:e2:f1: df:7f:85:df:b7:98:e8:69:e6:6b:db:7f:f0:4a:19:c3:b6:04: e1:51:ce:21:44:59:b0:2b:87:20:49:65:78:d3:25:2f:11:66: 8b:86:6a:d1:cb:89:1e:b2:6d:f5:35:74:c8:bf:30:00:46:3b: 2c:62:40:c5:44:90:3a:ab:3a:bb:d2:9d:e8:65:90:d2:90:a2: 03:e7:72:7c:d8:e0:92:0a:41:1e:f7:56:61:1f:be:32:c5:7b: aa:3f:48:6c:89:2a:37:09:e6:cf:5c:70:f6:46:df:65:8a:4d: ef:23:5a:ae:f5:eb:be:ad:ec:53:17:5d:7a:eb:e1:f4:5d:28: 77:eb:cb:48:91:7b:26:4f:cc:50:c6:69:80:87:59:91:66:c5: ff:aa:7a:09:ed:8e:3c:cd:12:a4:5c:40:41:02:83:b9:b6:7d: c7:18:23:35:8e:70:df:5f:cc:68:3e:9b:f3:f4:b5:54:4b:bb: e9:5d:9a:b3:c7:5f:84:5f:88:30:7f:fb:2e:85:b0:f4:48:c3: e8:1c:80:63:cf:d7:c2:de:e9:ea:a8:47:b7:c7:a5:b9:91:07: 4a:08:9e:06:32:85:e0:62:9b:1d:41:b4:ba:75:03:c4:5b:bf: 52:67:4f:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGOqqE67+qgFqjOKu4nIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzM1OTgzZGZiMjI3YTI0NmRmOTg4NzZlYzlkMWFmOTFm M2Q3NzkwHhcNMjUxMjI1MDYwMTE3WhcNMjUxMjI2MDYwMTE3WjAzMTEwLwYDVQQD Eyg5NzZlYjkyNWUyNWY5YzBjMDMyZDc1ZTgzODcyZDAxOWVkNWM1MmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EmgvulNd4Ujhk9i8lUwiegh5QPg mtqS3OS4gWDhOBI3C+6SxFgj3yhsS4E54mQ777KxC+/u49AITbpFbRYsJT/ep4wg BUA0STKU2gSsvSlL78H/E97VM75g+UC/qrGz6v3cxh/eO9gCPQOYHdmdVD8aBkTN 2hOhEsJVTiNVrDpAFGOh+kBBFU3UB2JNr2tfaO/Us3sM8oXwptFi8O4RNM4jAfNv F5mVYzXErTmERqBflVZdNxhnTvAYqwJXguCzk/uwGgBX+sHaykQhydF+GcZiHyj3 b3jRVNExhdgsmCC6D3x0wSpbCSDocmuFPXzM3ly9GTQghOqxGFgR40p7aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJduuSXiX5wMAy116Dhy0BntXFKsMB8GA1UdIwQY MBaAFLJzWYPfsieiRt+Yh27J0a+R89d5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25OWmc5LXlKNkpHMzVpSGJzblJyNUh6MTNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi80NzVlMTktOWZiZi00ZDQzLTkyODUt ZWM1YjMyNWM2ZWIyLzEvc25OWmc5LXlKNkpHMzVpSGJzblJyNUh6MTNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi80NzVlMTktOWZiZi00ZDQzLTkyODUtZWM1YjMyNWM2ZWIy LzEvc25OWmc5LXlKNkpHMzVpSGJzblJyNUh6MTNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL63deQLN U5JxzCdg8PIH5uLx33+F37eY6Gnma9t/8EoZw7YE4VHOIURZsCuHIElleNMlLxFm i4Zq0cuJHrJt9TV0yL8wAEY7LGJAxUSQOqs6u9Kd6GWQ0pCiA+dyfNjgkgpBHvdW YR++MsV7qj9IbIkqNwnmz1xw9kbfZYpN7yNarvXrvq3sUxddeuvh9F0od+vLSJF7 Jk/MUMZpgIdZkWbF/6p6Ce2OPM0SpFxAQQKDubZ9xxgjNY5w31/MaD6b8/S1VEu7 6V2as8dfhF+IMH/7LoWw9EjD6ByAY8/Xwt7p6qhHt8eluZEHSgieBjKF4GKbHUG0 unUDxFu/UmdPmQ== -----END CERTIFICATE-----Generated at Thu Dec 25 07:11:09 2025 by rpki-client