This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft File: SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft (raw, json) Hash identifier: L10iFBXRR/LXJDzvSaxP2D540kVyz9/NTMvAFubWmyE= Subject key identifier: 18:35:45:22:4A:B5:0C:E3:05:10:45:BD:7D:AC:7D:03:5D:4C:15:CA Authority key identifier: 4A:75:5A:6D:E5:C1:67:80:9F:81:9C:85:F8:C8:E5:A6:E4:CE:12:7D Certificate issuer: /CN=4a755a6de5c167809f819c85f8c8e5a6e4ce127d Certificate serial: 019B3CB4D58DA4F4874C4CD1B2FACA280656 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft Manifest number: 08DA Signing time: Sat 20 Dec 2025 17:00:42 +0000 Manifest this update: Sat 20 Dec 2025 17:00:42 +0000 Manifest next update: Sun 21 Dec 2025 17:00:42 +0000 Files and hashes: 1: SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl (hash: CiiyJAf9S/rSwO9g92n/RL2O6j0DOpv/k1Fp0989P74=) 2: Ss43uKVk12glj7GND1Q0DQOfOOI.roa (hash: afk/nkdp+pPj29GdfzUTdj7jJFKdBQ7g7Tl5QgpoC38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:d5:8d:a4:f4:87:4c:4c:d1:b2:fa:ca:28:06:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a755a6de5c167809f819c85f8c8e5a6e4ce127d Validity Not Before: Dec 20 17:00:42 2025 GMT Not After : Dec 21 17:00:42 2025 GMT Subject: CN=183545224ab50ce3051045bd7dac7d035d4c15ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:96:72:52:85:1c:21:4f:29:92:3f:e4:c9:45: bd:ab:d3:7f:78:23:52:4e:78:4b:17:ba:5c:e0:ce: d4:c2:9a:3d:b0:25:25:ae:37:57:b1:54:5c:c3:f9: 6a:7f:3b:97:4c:9f:07:00:74:02:68:d4:00:a0:cb: 89:63:98:03:2f:fb:50:ac:cb:d8:84:7e:db:95:cb: b5:75:7a:fa:33:e5:b0:28:d7:21:e4:d2:c6:e0:a0: 49:c1:08:21:22:d0:34:68:81:33:dc:59:09:ee:79: ef:4b:b9:a6:9a:eb:12:75:39:3b:05:e3:4b:40:7e: 91:75:8f:0a:a8:36:da:92:1d:50:1c:45:1c:bb:f0: 7f:8f:49:2c:66:06:1c:8d:55:46:6c:f8:f7:8f:3f: 45:32:4b:c0:d4:93:bc:6d:14:89:6b:31:78:59:a2: ba:89:42:02:de:5c:5d:fa:1f:5a:87:74:86:1c:33: 72:6c:c4:de:f1:60:c8:6f:a0:71:64:85:58:b8:ee: 6e:e4:bb:0c:aa:cd:82:cc:e5:16:ac:bb:61:16:50: f7:fa:a7:78:52:2e:d8:6e:41:ba:b5:a2:3c:30:92: f4:ac:e8:e9:fd:be:9e:3b:92:47:ed:d4:4b:c3:7b: 75:8c:00:80:64:be:02:50:ad:92:45:c8:73:7f:e5: 11:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:35:45:22:4A:B5:0C:E3:05:10:45:BD:7D:AC:7D:03:5D:4C:15:CA X509v3 Authority Key Identifier: keyid:4A:75:5A:6D:E5:C1:67:80:9F:81:9C:85:F8:C8:E5:A6:E4:CE:12:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:a2:83:cc:2b:ca:f5:01:61:65:da:9f:29:be:9f:7d:1b:3e: 3f:39:05:60:76:41:75:d0:f1:6a:a9:8e:32:3f:64:89:57:e0: d3:29:50:37:07:f2:2a:1f:f9:ee:57:47:b2:33:30:9a:79:70: 24:c6:67:3a:0b:d1:a5:55:b2:c1:8a:f0:98:7e:d0:e2:ce:ed: 0f:42:5b:93:33:17:76:db:c7:6d:83:e4:49:c8:99:da:17:12: c5:da:bc:d8:c5:82:9b:4b:e9:2f:d0:63:42:bd:67:09:59:d5: 98:88:0a:11:96:54:ae:f4:63:c3:29:f8:4e:67:3e:e1:a3:77: 66:1e:d5:78:c5:20:71:ab:68:68:fb:85:1b:eb:d3:dd:9f:f7: d7:ab:da:3a:26:69:3b:db:db:ae:f5:ad:50:12:6f:a9:bb:d0: 45:f7:d5:89:b0:74:37:7a:2f:03:21:58:87:a4:28:e8:a7:d5: 16:d3:24:68:06:8e:35:8c:79:01:03:a9:63:88:3b:ff:84:36: ad:95:bf:18:b9:79:1a:bc:56:f2:c8:ba:5a:2c:37:fc:ca:de: 38:1c:b1:e4:e9:07:36:13:5f:c4:ae:37:13:72:17:b0:08:61: 05:28:37:41:e8:44:c2:8b:0b:13:38:a1:2d:64:37:ad:e0:8a: 98:bd:a2:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tNWNpPSHTEzRsvrKKAZWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNzU1YTZkZTVjMTY3ODA5ZjgxOWM4NWY4YzhlNWE2ZTRj ZTEyN2QwHhcNMjUxMjIwMTcwMDQyWhcNMjUxMjIxMTcwMDQyWjAzMTEwLwYDVQQD EygxODM1NDUyMjRhYjUwY2UzMDUxMDQ1YmQ3ZGFjN2QwMzVkNGMxNWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pZyUoUcIU8pkj/kyUW9q9N/eCNS TnhLF7pc4M7Uwpo9sCUlrjdXsVRcw/lqfzuXTJ8HAHQCaNQAoMuJY5gDL/tQrMvY hH7blcu1dXr6M+WwKNch5NLG4KBJwQghItA0aIEz3FkJ7nnvS7mmmusSdTk7BeNL QH6RdY8KqDbakh1QHEUcu/B/j0ksZgYcjVVGbPj3jz9FMkvA1JO8bRSJazF4WaK6 iUIC3lxd+h9ah3SGHDNybMTe8WDIb6BxZIVYuO5u5LsMqs2CzOUWrLthFlD3+qd4 Ui7YbkG6taI8MJL0rOjp/b6eO5JH7dRLw3t1jACAZL4CUK2SRchzf+UR8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBg1RSJKtQzjBRBFvX2sfQNdTBXKMB8GA1UdIwQY MBaAFEp1Wm3lwWeAn4GchfjI5abkzhJ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU25WYWJlWEJaNENmZ1p5Ri1NamxwdVRPRW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81NmY0MTItMGI0Yi00Yjc1LTg4ZDAt OTZjNGRjMTM3YjI3LzEvU25WYWJlWEJaNENmZ1p5Ri1NamxwdVRPRW4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS81NmY0MTItMGI0Yi00Yjc1LTg4ZDAtOTZjNGRjMTM3YjI3 LzEvU25WYWJlWEJaNENmZ1p5Ri1NamxwdVRPRW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKKDzCvK 9QFhZdqfKb6ffRs+PzkFYHZBddDxaqmOMj9kiVfg0ylQNwfyKh/57ldHsjMwmnlw JMZnOgvRpVWywYrwmH7Q4s7tD0JbkzMXdtvHbYPkSciZ2hcSxdq82MWCm0vpL9Bj Qr1nCVnVmIgKEZZUrvRjwyn4Tmc+4aN3Zh7VeMUgcatoaPuFG+vT3Z/316vaOiZp O9vbrvWtUBJvqbvQRffVibB0N3ovAyFYh6Qo6KfVFtMkaAaONYx5AQOpY4g7/4Q2 rZW/GLl5GrxW8si6Wiw3/MreOByx5OkHNhNfxK43E3IXsAhhBSg3QehEwosLEzih LWQ3reCKmL2ijw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:33:06 2025 by rpki-client