This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft File: syHLgokI9DB0nuOl8qYt5fgi99E.mft (raw, json) Hash identifier: G/8/nCBo1CXIrUHW6trZdFkbxHD3cWfi+Az6BXrFQ9E= Subject key identifier: B5:6A:0C:64:BD:4A:70:52:C5:41:ED:14:08:4A:06:53:14:A8:D6:4B Authority key identifier: B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1 Certificate issuer: /CN=b321cb828908f430749ee3a5f2a62de5f822f7d1 Certificate serial: 019B2D4240B806D3FE6F07DBFBE6B5888121 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft Manifest number: 12C0 Signing time: Wed 17 Dec 2025 17:01:15 +0000 Manifest this update: Wed 17 Dec 2025 17:01:15 +0000 Manifest next update: Thu 18 Dec 2025 17:01:15 +0000 Files and hashes: 1: 7Vf5R0kVboHfQe1HmwZydUmPy3w.roa (hash: CSR8lVlOICslmIH5THMhkf2ZR8pm8M7MZ0mWBD2ElFE=) 2: syHLgokI9DB0nuOl8qYt5fgi99E.crl (hash: eTLXBV+Lva8ruxxqYMyEtigQAHqQL4O79Gj0jglpKtY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 17:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:42:40:b8:06:d3:fe:6f:07:db:fb:e6:b5:88:81:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b321cb828908f430749ee3a5f2a62de5f822f7d1 Validity Not Before: Dec 17 17:01:15 2025 GMT Not After : Dec 18 17:01:15 2025 GMT Subject: CN=b56a0c64bd4a7052c541ed14084a065314a8d64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4a:b0:a8:fd:5c:93:a9:9a:00:1a:e1:51:9f: 01:e3:db:94:e8:05:94:6f:70:11:c1:be:58:54:04: a7:d9:fa:2d:b2:96:1c:62:35:82:4a:5e:ab:bb:49: c2:e0:73:f6:f4:f0:47:ea:00:1b:94:71:4a:00:6b: 8a:6f:5f:8d:9b:d1:06:da:3f:bc:06:2c:62:b4:d1: c3:8b:ab:d5:8c:ea:c2:e5:db:91:12:4b:bd:6d:ca: 83:6a:17:0b:2b:58:f2:10:1e:a2:4f:68:bb:69:41: 45:40:30:53:e5:7c:18:b9:9d:46:71:c6:82:0b:b5: 95:8e:26:77:fd:e9:86:c9:ce:1c:cf:55:d5:e4:46: 48:e9:4b:12:a1:9c:a7:51:8e:ae:57:96:a1:15:b4: 03:1d:27:a7:76:5f:1a:72:2e:9a:a0:df:9d:ad:c5: 89:92:b7:e1:d3:40:52:d5:0c:c0:5e:a7:5f:de:84: ce:ba:98:fa:25:a3:e5:e0:69:9d:99:6c:53:1d:84: 7f:00:5a:bd:b3:44:c0:0a:66:22:17:17:2b:c7:81: d5:4f:3a:d9:30:58:c2:c7:52:6d:ea:d9:74:58:a8: 63:a0:4c:02:29:21:09:ab:0f:00:a9:8d:f8:da:a1: 56:55:03:41:1d:91:f0:d4:c2:f2:83:bd:c0:c5:23: 95:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6A:0C:64:BD:4A:70:52:C5:41:ED:14:08:4A:06:53:14:A8:D6:4B X509v3 Authority Key Identifier: keyid:B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b4:45:8f:f2:f3:9d:40:dc:be:28:ea:fd:8e:e4:ac:57:f4: 6b:48:c7:37:29:d6:e6:4c:52:85:89:1f:f3:9b:ed:20:bb:32: 48:1d:40:39:cc:58:03:bc:0e:b8:c1:31:83:e8:8e:5f:43:5a: e9:ef:74:86:16:fb:db:a0:8c:09:cf:17:7b:0f:2d:44:25:af: c4:d6:b0:34:be:34:e7:bb:84:af:08:09:64:e7:8c:a0:0c:ec: 62:1e:86:33:07:f6:07:93:19:58:e1:0e:9a:6e:ea:77:0f:d1: 04:48:c7:d0:32:f7:d2:74:d5:53:fa:22:fe:e6:50:d7:f4:b5: 2e:82:e9:bc:63:14:9d:54:75:72:5e:48:43:28:fd:58:c9:99: eb:ea:48:c9:6a:82:fb:1c:52:39:bc:ad:af:9a:42:00:d8:e8: 8c:a9:01:9d:0b:80:4e:af:03:0c:16:5e:4e:09:64:3d:05:3c: af:7d:b9:0b:e0:5b:ee:f8:5c:48:f1:f4:ca:08:65:e9:4c:72: d7:6e:6d:fb:be:18:4b:3c:3c:06:2c:9a:5e:1d:f5:ef:11:30: 43:d1:cf:c4:e5:69:2c:e8:f8:dd:d7:c9:98:10:ae:09:f8:c7: 97:6d:2e:fd:53:6c:c7:64:78:7f:6d:c2:62:83:0b:eb:98:65: c3:e3:07:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstQkC4BtP+bwfb++a1iIEhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMjFjYjgyODkwOGY0MzA3NDllZTNhNWYyYTYyZGU1Zjgy MmY3ZDEwHhcNMjUxMjE3MTcwMTE1WhcNMjUxMjE4MTcwMTE1WjAzMTEwLwYDVQQD EyhiNTZhMGM2NGJkNGE3MDUyYzU0MWVkMTQwODRhMDY1MzE0YThkNjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0qwqP1ck6maABrhUZ8B49uU6AWU b3ARwb5YVASn2fotspYcYjWCSl6ru0nC4HP29PBH6gAblHFKAGuKb1+Nm9EG2j+8 BixitNHDi6vVjOrC5duREku9bcqDahcLK1jyEB6iT2i7aUFFQDBT5XwYuZ1GccaC C7WVjiZ3/emGyc4cz1XV5EZI6UsSoZynUY6uV5ahFbQDHSendl8aci6aoN+drcWJ krfh00BS1QzAXqdf3oTOupj6JaPl4GmdmWxTHYR/AFq9s0TACmYiFxcrx4HVTzrZ MFjCx1Jt6tl0WKhjoEwCKSEJqw8AqY342qFWVQNBHZHw1MLyg73AxSOVkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVqDGS9SnBSxUHtFAhKBlMUqNZLMB8GA1UdIwQY MBaAFLMhy4KJCPQwdJ7jpfKmLeX4IvfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3lITGdva0k5REIwbnVPbDhxWXQ1ZmdpOTlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jY2FhMWEtOWRhYS00NGI4LTllMjYt ODdmMzQxODg4NTYwLzEvc3lITGdva0k5REIwbnVPbDhxWXQ1ZmdpOTlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jY2FhMWEtOWRhYS00NGI4LTllMjYtODdmMzQxODg4NTYw LzEvc3lITGdva0k5REIwbnVPbDhxWXQ1ZmdpOTlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbRFj/Lz nUDcvijq/Y7krFf0a0jHNynW5kxShYkf85vtILsySB1AOcxYA7wOuMExg+iOX0Na 6e90hhb726CMCc8Xew8tRCWvxNawNL4057uErwgJZOeMoAzsYh6GMwf2B5MZWOEO mm7qdw/RBEjH0DL30nTVU/oi/uZQ1/S1LoLpvGMUnVR1cl5IQyj9WMmZ6+pIyWqC +xxSObytr5pCANjojKkBnQuATq8DDBZeTglkPQU8r325C+Bb7vhcSPH0yghl6Uxy 125t+74YSzw8BiyaXh317xEwQ9HPxOVpLOj43dfJmBCuCfjHl20u/VNsx2R4f23C YoML65hlw+MHVQ== -----END CERTIFICATE-----Generated at Wed Dec 17 22:24:37 2025 by rpki-client