This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft File: snSbyc0s-N_88v_teIT7wTyz5F0.mft (raw, json) Hash identifier: XCUME0iHVxLooS3MACfp43JlizWi72hciPlBuF/L8jE= Subject key identifier: BE:F7:9A:2F:EB:F1:85:B2:8F:B0:E8:90:A4:EA:56:90:97:19:9B:BC Authority key identifier: B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D Certificate issuer: /CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d Certificate serial: 019B3F11511933F539AD8145791F971F864F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft Manifest number: 13BF Signing time: Sun 21 Dec 2025 04:00:58 +0000 Manifest this update: Sun 21 Dec 2025 04:00:58 +0000 Manifest next update: Mon 22 Dec 2025 04:00:58 +0000 Files and hashes: 1: OaynJV0qbIIk7EsSxRIucNannDI.roa (hash: rLhfi7PeZU4mZH9NTsaCKUtzejxWWyeiOXooqE3dPpU=) 2: ZsJ1p0f-2YgNmBDafzu2GWckT34.roa (hash: kKQedLsISeBKSivLfM6tlDNDN9VJMt9n4EQssMfjNOQ=) 3: snSbyc0s-N_88v_teIT7wTyz5F0.crl (hash: OhPH+79BCZ8Q+zTAwNSDTFLnBLDxiYO3Gy2OpzoUUFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:51:19:33:f5:39:ad:81:45:79:1f:97:1f:86:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d Validity Not Before: Dec 21 04:00:58 2025 GMT Not After : Dec 22 04:00:58 2025 GMT Subject: CN=bef79a2febf185b28fb0e890a4ea569097199bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:95:51:b9:b3:8b:33:42:ec:02:67:0d:b8: f3:89:6f:0f:dd:69:de:c9:58:66:d4:d0:1c:d8:83: b5:49:ad:6c:6e:79:a7:73:8e:df:84:76:02:07:24: 2f:c5:23:07:b8:20:f9:93:dc:3e:77:82:80:c0:31: f6:d9:d3:46:e4:3c:6f:c7:cc:6d:5d:69:c9:07:6f: 1a:22:3a:b9:40:09:8b:5a:eb:9e:69:62:cb:43:99: 72:2b:10:9b:d7:09:53:4e:6f:81:ad:5d:68:f2:ea: a1:3e:76:2d:82:19:68:8e:23:ae:40:16:b4:4a:c9: 69:5d:78:79:03:bd:5e:d3:79:94:82:07:e8:6b:8a: e0:31:61:66:ba:7d:f0:28:a8:08:09:d1:2b:af:4c: 26:59:9f:42:b1:3b:6c:37:76:87:47:88:87:b8:8b: 4e:fc:21:55:f6:cc:6b:c7:48:1c:46:ad:4a:55:67: 96:1c:04:49:41:78:8e:c2:af:d7:15:68:90:2f:76: c5:39:67:71:17:bf:bd:8c:ea:7f:e0:d7:c5:e1:f5: 71:5e:1c:38:44:c8:1d:71:fb:b0:eb:03:2f:99:24: f1:95:e9:8c:ca:58:47:47:4b:6c:36:a7:9f:5f:b6: 94:e3:39:cf:95:6c:ac:b1:1c:a1:91:3c:91:af:a9: 27:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F7:9A:2F:EB:F1:85:B2:8F:B0:E8:90:A4:EA:56:90:97:19:9B:BC X509v3 Authority Key Identifier: keyid:B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:fc:45:a7:74:e3:f7:e5:ac:f0:79:6f:71:f1:0d:43:47:d1: b7:c2:9b:74:2f:c3:cd:6e:cb:1a:21:53:77:7d:db:a8:8d:2a: 34:b2:f8:28:1b:d7:1a:02:e6:27:c6:56:93:93:e0:fc:40:df: 65:10:c0:fc:88:b2:b3:f3:a0:a2:6b:e5:df:04:6e:99:90:47: d4:90:4a:0e:69:13:67:85:5c:50:1d:95:29:bc:d7:66:27:54: b1:2b:07:86:10:c8:75:9a:7d:a6:58:74:60:4c:de:c0:84:aa: 1b:12:e8:60:88:6d:0b:c6:b9:75:3f:46:dd:cd:2c:01:5e:cb: 96:b9:9d:2b:cf:86:61:49:6c:ac:58:e3:8b:91:d2:cc:5f:89: 8a:5f:29:52:6f:9b:60:a3:31:c4:78:d1:0e:34:6e:3f:77:1c: 22:48:0e:82:51:67:f9:00:3f:c7:e5:8a:d9:41:6e:4a:20:31: 0e:ae:60:8e:a4:f6:31:ac:53:9d:08:df:4c:ca:86:f0:f6:6d: 40:69:cf:3a:6f:22:9f:f4:24:f7:00:10:e1:96:94:87:49:ac: 2f:65:d0:c4:85:c5:cd:30:0f:7a:30:ac:85:75:ba:53:9f:a1: d2:12:11:10:d0:c5:0f:0e:4c:01:98:bf:6a:a6:db:9f:25:52: c9:ac:ca:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EVEZM/U5rYFFeR+XH4ZPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzQ5YmM5Y2QyY2Y4ZGZmY2YyZmZlZDc4ODRmYmMxM2Ni M2U0NWQwHhcNMjUxMjIxMDQwMDU4WhcNMjUxMjIyMDQwMDU4WjAzMTEwLwYDVQQD EyhiZWY3OWEyZmViZjE4NWIyOGZiMGU4OTBhNGVhNTY5MDk3MTk5YmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIyVUbmzizNC7AJnDbjziW8P3Wne yVhm1NAc2IO1Sa1sbnmnc47fhHYCByQvxSMHuCD5k9w+d4KAwDH22dNG5Dxvx8xt XWnJB28aIjq5QAmLWuueaWLLQ5lyKxCb1wlTTm+BrV1o8uqhPnYtghlojiOuQBa0 SslpXXh5A71e03mUggfoa4rgMWFmun3wKKgICdErr0wmWZ9CsTtsN3aHR4iHuItO /CFV9sxrx0gcRq1KVWeWHARJQXiOwq/XFWiQL3bFOWdxF7+9jOp/4NfF4fVxXhw4 RMgdcfuw6wMvmSTxlemMylhHR0tsNqefX7aU4znPlWyssRyhkTyRr6knxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL73mi/r8YWyj7DokKTqVpCXGZu8MB8GA1UdIwQY MBaAFLJ0m8nNLPjf/PL/7XiE+8E8s+RdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25TYnljMHMtTl84OHZfdGVJVDd3VHl6NUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hYzhmZGMtOWQ1NS00NWRiLWEyNDMt ZjE2Njk3ZDcyYTcxLzEvc25TYnljMHMtTl84OHZfdGVJVDd3VHl6NUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9hYzhmZGMtOWQ1NS00NWRiLWEyNDMtZjE2Njk3ZDcyYTcx LzEvc25TYnljMHMtTl84OHZfdGVJVDd3VHl6NUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafxFp3Tj 9+Ws8HlvcfENQ0fRt8KbdC/DzW7LGiFTd33bqI0qNLL4KBvXGgLmJ8ZWk5Pg/EDf ZRDA/Iiys/Ogomvl3wRumZBH1JBKDmkTZ4VcUB2VKbzXZidUsSsHhhDIdZp9plh0 YEzewISqGxLoYIhtC8a5dT9G3c0sAV7LlrmdK8+GYUlsrFjji5HSzF+Jil8pUm+b YKMxxHjRDjRuP3ccIkgOglFn+QA/x+WK2UFuSiAxDq5gjqT2MaxTnQjfTMqG8PZt QGnPOm8in/Qk9wAQ4ZaUh0msL2XQxIXFzTAPejCshXW6U5+h0hIRENDFDw5MAZi/ aqbbnyVSyazK2A== -----END CERTIFICATE-----Generated at Sun Dec 21 12:11:44 2025 by rpki-client