This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft File: syHLgokI9DB0nuOl8qYt5fgi99E.mft (raw, json) Hash identifier: LnqPtuVWJY8XLCwxj3+e0eGbLiEonMvA1xPGZQmdyOc= Subject key identifier: 42:03:72:64:B8:92:31:88:13:37:2E:EB:D8:A6:F7:38:14:DC:2E:4A Authority key identifier: B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1 Certificate issuer: /CN=b321cb828908f430749ee3a5f2a62de5f822f7d1 Certificate serial: 019AF164943D94140D9C7B82D6B129676D44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft Manifest number: 12A1 Signing time: Sat 06 Dec 2025 02:01:31 +0000 Manifest this update: Sat 06 Dec 2025 02:01:31 +0000 Manifest next update: Sun 07 Dec 2025 02:01:31 +0000 Files and hashes: 1: 7Vf5R0kVboHfQe1HmwZydUmPy3w.roa (hash: CSR8lVlOICslmIH5THMhkf2ZR8pm8M7MZ0mWBD2ElFE=) 2: syHLgokI9DB0nuOl8qYt5fgi99E.crl (hash: +tc7e4MtlD34XSYDbxRprEY0F638mDL37W7M4NBazPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:94:3d:94:14:0d:9c:7b:82:d6:b1:29:67:6d:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b321cb828908f430749ee3a5f2a62de5f822f7d1 Validity Not Before: Dec 6 02:01:31 2025 GMT Not After : Dec 7 02:01:31 2025 GMT Subject: CN=42037264b892318813372eebd8a6f73814dc2e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0b:a6:68:93:d5:1a:72:e5:31:fa:3a:0a:e7: b6:78:a1:f1:36:ba:10:ad:06:c7:02:cd:d5:91:5e: 5c:93:16:a1:64:52:8c:40:25:bf:1f:3c:89:23:5f: da:54:d3:ad:35:f4:49:cd:87:17:a1:14:d2:a9:93: c2:17:03:2d:1e:5a:78:7e:a0:82:24:3e:31:fb:b9: 94:6f:f9:bd:2a:10:5e:7a:cf:94:26:56:a0:01:62: 23:04:62:86:03:cf:0f:55:41:82:42:46:fa:8c:27: c9:63:1d:40:10:06:25:34:fb:61:c8:38:01:20:1b: da:ca:e3:da:d4:54:c1:e6:cd:48:98:04:21:49:cb: da:7b:fe:f7:e6:12:15:82:bd:16:0f:43:6a:4f:42: 89:15:d3:2a:1c:2e:0c:28:6c:fb:7b:25:04:08:31: e0:68:c1:74:84:d8:d7:05:14:2f:b5:b9:d3:9e:82: 91:3f:fd:e9:db:ca:7a:cc:ce:79:7c:c7:58:f0:0d: 75:92:3f:9f:bd:e6:86:a1:95:b1:f5:09:6d:6f:6d: 24:75:22:32:f5:b9:e3:f1:7b:ac:12:bf:69:c7:70: 13:cf:df:39:74:dd:fb:28:02:e1:8a:97:08:2a:36: 83:da:3c:1c:e6:0f:9d:5f:a6:d9:ed:96:61:1f:86: b6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:03:72:64:B8:92:31:88:13:37:2E:EB:D8:A6:F7:38:14:DC:2E:4A X509v3 Authority Key Identifier: keyid:B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:a7:1a:a6:54:65:1f:9d:95:73:ab:88:ba:40:31:eb:37:b4: 6d:c8:23:2e:d4:f1:7a:fb:11:89:84:8b:b7:40:4b:f2:e1:f7: 5e:97:79:e5:11:09:27:ec:e1:f4:cb:ff:d8:eb:c1:85:e3:93: 82:38:df:00:15:f8:73:b4:b3:79:3a:a0:96:a0:f5:9f:54:34: a4:9f:ef:65:c7:27:4e:a1:f3:a3:a8:e7:9a:75:e5:71:99:b3: 48:ae:9c:86:ef:8b:8a:b4:a8:02:93:1f:c3:ca:af:85:c8:8b: 3f:c0:42:20:c1:48:07:f4:aa:58:e0:30:55:af:94:00:6d:02: f6:c6:0b:f9:9b:cf:02:a3:04:4d:d9:c8:ac:e6:cd:1a:ed:0d: e6:96:60:46:29:43:8c:b0:de:ab:9d:21:0d:a4:12:84:e5:f6: 96:1d:02:a1:bf:65:60:fb:50:bf:33:55:01:9f:f0:94:e0:bd: 7d:97:d9:09:77:42:65:cf:b2:8e:98:2c:21:09:b5:f0:c1:d0: 9e:01:d1:58:6e:9f:52:46:04:33:0f:0c:38:59:ee:dc:2c:8e: 4f:54:68:0c:d3:77:e3:96:60:6d:1b:fc:d9:19:40:5b:ef:54: b9:54:b0:3a:68:b5:6b:25:61:1b:51:5d:b9:8d:7d:fe:45:c4: ea:80:60:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZJQ9lBQNnHuC1rEpZ21EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMjFjYjgyODkwOGY0MzA3NDllZTNhNWYyYTYyZGU1Zjgy MmY3ZDEwHhcNMjUxMjA2MDIwMTMxWhcNMjUxMjA3MDIwMTMxWjAzMTEwLwYDVQQD Eyg0MjAzNzI2NGI4OTIzMTg4MTMzNzJlZWJkOGE2ZjczODE0ZGMyZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAumaJPVGnLlMfo6Cue2eKHxNroQ rQbHAs3VkV5ckxahZFKMQCW/HzyJI1/aVNOtNfRJzYcXoRTSqZPCFwMtHlp4fqCC JD4x+7mUb/m9KhBees+UJlagAWIjBGKGA88PVUGCQkb6jCfJYx1AEAYlNPthyDgB IBvayuPa1FTB5s1ImAQhScvae/735hIVgr0WD0NqT0KJFdMqHC4MKGz7eyUECDHg aMF0hNjXBRQvtbnTnoKRP/3p28p6zM55fMdY8A11kj+fveaGoZWx9Qltb20kdSIy 9bnj8XusEr9px3ATz985dN37KALhipcIKjaD2jwc5g+dX6bZ7ZZhH4a2mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIDcmS4kjGIEzcu69im9zgU3C5KMB8GA1UdIwQY MBaAFLMhy4KJCPQwdJ7jpfKmLeX4IvfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3lITGdva0k5REIwbnVPbDhxWXQ1ZmdpOTlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jY2FhMWEtOWRhYS00NGI4LTllMjYt ODdmMzQxODg4NTYwLzEvc3lITGdva0k5REIwbnVPbDhxWXQ1ZmdpOTlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jY2FhMWEtOWRhYS00NGI4LTllMjYtODdmMzQxODg4NTYw LzEvc3lITGdva0k5REIwbnVPbDhxWXQ1ZmdpOTlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANacaplRl H52Vc6uIukAx6ze0bcgjLtTxevsRiYSLt0BL8uH3Xpd55REJJ+zh9Mv/2OvBheOT gjjfABX4c7SzeTqglqD1n1Q0pJ/vZccnTqHzo6jnmnXlcZmzSK6chu+LirSoApMf w8qvhciLP8BCIMFIB/SqWOAwVa+UAG0C9sYL+ZvPAqMETdnIrObNGu0N5pZgRilD jLDeq50hDaQShOX2lh0Cob9lYPtQvzNVAZ/wlOC9fZfZCXdCZc+yjpgsIQm18MHQ ngHRWG6fUkYEMw8MOFnu3CyOT1RoDNN345ZgbRv82RlAW+9UuVSwOmi1ayVhG1Fd uY19/kXE6oBgFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:40 2025 by rpki-client