This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft File: SROyYa2_ee42pqOt-mh6fsZYIQs.mft (raw, json) Hash identifier: AmC+A28uxlEoZazqFF3rGggFR6mxIGS19gDt17qyBSI= Subject key identifier: 2F:54:87:F4:3E:3E:D4:90:64:B0:77:4E:1E:40:61:30:7D:AE:D1:7F Authority key identifier: 49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B Certificate issuer: /CN=4913b261adbf79ee36a6a3adfa687a7ec658210b Certificate serial: 019B2E8B8BAF4485C0DE635033331BBECCE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft Manifest number: 0E80 Signing time: Wed 17 Dec 2025 23:00:55 +0000 Manifest this update: Wed 17 Dec 2025 23:00:55 +0000 Manifest next update: Thu 18 Dec 2025 23:00:55 +0000 Files and hashes: 1: 9VMEesSV6a-x_SjygxcaosIGoNs.roa (hash: j886WgvsxRYSzK/QB3dbJNQTgLbqJaUrZ8NkjBVnb/g=) 2: SROyYa2_ee42pqOt-mh6fsZYIQs.crl (hash: fgmtnCsQmtVoVMnROukCMBhNOWL31ypLglRVXEcDqxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:8b:af:44:85:c0:de:63:50:33:33:1b:be:cc:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4913b261adbf79ee36a6a3adfa687a7ec658210b Validity Not Before: Dec 17 23:00:55 2025 GMT Not After : Dec 18 23:00:55 2025 GMT Subject: CN=2f5487f43e3ed49064b0774e1e4061307daed17f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:96:77:c9:c3:bd:8e:99:11:c0:a5:85:dc:bc: 6a:0c:86:1c:05:ee:9b:6f:cb:49:5d:ca:45:a5:dd: ac:f2:ec:93:4e:51:d2:c9:6d:3d:fe:6d:45:d9:05: 15:ca:8f:44:6a:39:1d:d8:53:1f:5b:9a:c8:e8:ab: 16:81:f5:06:0d:00:60:37:6a:89:a9:c4:a9:2e:c1: 76:bb:33:d0:bf:ce:4a:54:f0:a8:84:47:93:d9:32: 0a:fb:65:20:aa:92:a4:58:69:80:d2:b0:56:8d:c6: 6f:58:c3:49:a2:45:c2:63:97:83:71:b9:07:79:10: 38:11:df:0b:24:69:1c:0c:e1:59:36:80:40:32:c4: 4f:c1:39:82:99:ee:55:db:52:23:c4:33:3e:63:96: 90:65:c2:28:d9:7f:e5:55:2d:aa:a3:dd:06:8f:b9: 7f:f9:42:c3:a8:44:b6:c3:ef:ca:c4:75:fc:b1:a3: 58:00:8e:06:b3:47:1a:78:35:3e:07:72:9e:a0:36: 58:b8:65:8d:bd:ec:62:01:47:ac:fa:e8:e3:9e:a5: af:62:cd:e6:50:94:2e:0e:f7:d1:39:00:f1:31:aa: df:68:53:7f:01:2a:93:7a:b5:42:be:a8:72:d5:81: be:b0:35:74:5f:b1:de:d4:5d:65:25:a3:b3:c3:bf: 80:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:54:87:F4:3E:3E:D4:90:64:B0:77:4E:1E:40:61:30:7D:AE:D1:7F X509v3 Authority Key Identifier: keyid:49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:83:49:84:10:d6:5a:a7:0c:f4:82:0e:21:a5:60:b8:12:67: 25:50:04:36:14:b6:c1:48:b9:dc:4c:2e:e5:8a:2c:ce:29:ad: fd:c3:e3:b9:97:0c:91:6f:0d:bb:48:6d:8e:bb:92:12:9e:1c: c5:46:d7:4a:b8:70:43:60:0b:6f:c3:3d:52:fc:de:e5:68:5f: bc:0a:c6:ae:18:db:90:c5:fe:85:fe:08:85:fc:03:34:70:cc: ce:bf:61:eb:96:fe:3a:73:30:02:b2:65:88:c9:22:72:69:d0: 2a:13:a8:67:28:05:1c:b0:1a:75:a6:cb:7e:ea:cf:48:80:96: 7a:ec:e4:dd:6d:ec:4d:46:4e:bd:ef:c5:8f:12:d9:c0:22:cc: 9f:e6:a3:d9:5e:91:e8:d5:fa:3e:b4:c8:01:1b:05:05:40:5a: d7:b0:1d:51:b4:9f:78:85:13:bb:70:6a:31:66:1e:c0:ab:43: 57:ea:5e:9e:ad:b3:16:b6:b7:e4:9e:51:f2:97:c6:76:54:92: bd:b4:5a:a5:8a:b1:07:a6:9c:22:13:9c:00:5b:d5:fb:55:87: 8a:a9:3f:07:72:b2:ce:23:1c:f2:0c:4c:99:1c:7e:b6:da:93: 35:fb:c9:9d:23:07:2d:ca:3b:a0:60:f5:57:cb:b8:33:93:91: 01:99:ac:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsui4uvRIXA3mNQMzMbvsznMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MTNiMjYxYWRiZjc5ZWUzNmE2YTNhZGZhNjg3YTdlYzY1 ODIxMGIwHhcNMjUxMjE3MjMwMDU1WhcNMjUxMjE4MjMwMDU1WjAzMTEwLwYDVQQD EygyZjU0ODdmNDNlM2VkNDkwNjRiMDc3NGUxZTQwNjEzMDdkYWVkMTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5Z3ycO9jpkRwKWF3LxqDIYcBe6b b8tJXcpFpd2s8uyTTlHSyW09/m1F2QUVyo9Eajkd2FMfW5rI6KsWgfUGDQBgN2qJ qcSpLsF2uzPQv85KVPCohEeT2TIK+2UgqpKkWGmA0rBWjcZvWMNJokXCY5eDcbkH eRA4Ed8LJGkcDOFZNoBAMsRPwTmCme5V21IjxDM+Y5aQZcIo2X/lVS2qo90Gj7l/ +ULDqES2w+/KxHX8saNYAI4Gs0caeDU+B3KeoDZYuGWNvexiAUes+ujjnqWvYs3m UJQuDvfROQDxMarfaFN/ASqTerVCvqhy1YG+sDV0X7He1F1lJaOzw7+A5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9Uh/Q+PtSQZLB3Th5AYTB9rtF/MB8GA1UdIwQY MBaAFEkTsmGtv3nuNqajrfpoen7GWCELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1JPeVlhMl9lZTQycHFPdC1taDZmc1pZSVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84ODBjNDctZmE5Mi00ZWVmLWIyNzYt YThhMGU1NWY1ZTMxLzEvU1JPeVlhMl9lZTQycHFPdC1taDZmc1pZSVFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC84ODBjNDctZmE5Mi00ZWVmLWIyNzYtYThhMGU1NWY1ZTMx LzEvU1JPeVlhMl9lZTQycHFPdC1taDZmc1pZSVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADINJhBDW WqcM9IIOIaVguBJnJVAENhS2wUi53Ewu5Yoszimt/cPjuZcMkW8Nu0htjruSEp4c xUbXSrhwQ2ALb8M9Uvze5WhfvArGrhjbkMX+hf4IhfwDNHDMzr9h65b+OnMwArJl iMkicmnQKhOoZygFHLAadabLfurPSICWeuzk3W3sTUZOve/FjxLZwCLMn+aj2V6R 6NX6PrTIARsFBUBa17AdUbSfeIUTu3BqMWYewKtDV+penq2zFra35J5R8pfGdlSS vbRapYqxB6acIhOcAFvV+1WHiqk/B3KyziMc8gxMmRx+ttqTNfvJnSMHLco7oGD1 V8u4M5ORAZmsGA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:09:46 2025 by rpki-client