This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft File: SY_lsoKxx9sA9nu0oT2feVIFCLc.mft (raw, json) Hash identifier: BJbX8E3bVDTQnGQVJVWWRgiLqB4AEClcsOr9+5L92FM= Subject key identifier: 83:57:35:49:65:C3:76:E7:C0:0D:AB:88:DC:EB:F4:C7:B7:4C:FE:65 Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7 Certificate issuer: /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7 Certificate serial: 019AF12DC33ED9738CD9ACE694E69F97963C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft Manifest number: 0A89 Signing time: Sat 06 Dec 2025 01:01:39 +0000 Manifest this update: Sat 06 Dec 2025 01:01:39 +0000 Manifest next update: Sun 07 Dec 2025 01:01:39 +0000 Files and hashes: 1: 8K5eZmO6X2MbGoBeK8qQvKjxcoU.roa (hash: KbO6Ab2C27LaWeTnTdU2aLz+mT2b0V6KrOUj4Nm0t/k=) 2: SY_lsoKxx9sA9nu0oT2feVIFCLc.crl (hash: JHhj8ViVjunK9tauQTy4J+iy7o/31Ye67NIVtdljI78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:c3:3e:d9:73:8c:d9:ac:e6:94:e6:9f:97:96:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7 Validity Not Before: Dec 6 01:01:39 2025 GMT Not After : Dec 7 01:01:39 2025 GMT Subject: CN=8357354965c376e7c00dab88dcebf4c7b74cfe65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:12:28:18:0c:8c:bc:21:c8:77:e3:44:30:f3: 70:ca:9c:28:1c:b4:73:48:cf:7c:9d:c4:95:93:af: 2c:a8:5d:17:54:7e:09:4e:b6:f5:1c:28:c1:2d:fe: 5e:72:39:d9:09:aa:32:80:4f:50:23:2b:67:52:61: d3:6b:8e:4b:22:a4:81:4d:8c:44:0c:bd:7e:9b:60: 95:f7:32:77:47:cc:3d:b9:04:e2:21:6c:aa:3d:91: 8e:8c:eb:09:95:9e:bc:fc:14:79:42:e0:e4:33:55: 8d:f3:f8:23:99:c5:a0:8b:0f:0b:26:71:cb:f1:c7: 67:8c:df:5c:97:45:07:59:96:53:9f:2a:a1:88:e1: 01:fc:e9:48:4e:26:70:ca:34:8f:53:f6:46:a4:7d: eb:60:9b:1d:4b:df:a6:03:d1:dc:16:64:35:7f:02: a2:2a:dd:4e:f8:3e:6a:74:c3:82:2e:65:6e:9f:17: c7:5b:20:09:f3:d9:13:01:fb:5f:f5:3d:86:2e:41: 12:fd:ce:b5:f7:27:15:e6:0e:8c:59:c5:1b:4c:21: ab:4b:38:3c:b8:85:09:ec:b0:69:f5:58:a5:3f:eb: 37:c5:3c:dc:30:d8:de:da:ea:af:de:7b:b1:8d:97: bd:02:fe:5a:b6:c0:c4:8d:ec:61:40:15:93:71:a0: a3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:57:35:49:65:C3:76:E7:C0:0D:AB:88:DC:EB:F4:C7:B7:4C:FE:65 X509v3 Authority Key Identifier: keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:51:44:b6:f4:1f:f6:85:47:b8:9e:fd:dc:15:74:b1:7b:00: 4b:d8:08:c6:dc:6f:5f:58:f6:ff:75:29:cd:32:28:d3:c9:4e: 4d:1c:b3:84:79:5a:3e:49:5c:50:ee:db:47:96:b7:b1:77:ea: 13:60:07:2e:ed:cc:ed:cb:00:d3:c9:a0:a5:17:c3:9f:5d:2b: b1:4a:b7:52:68:1e:b8:57:02:b1:87:2a:c4:25:69:75:87:7e: 89:d2:67:4d:be:04:8a:b2:53:ae:4b:1c:ad:08:24:1a:d5:69: 3d:a3:6e:73:e9:71:cc:9b:95:10:a3:92:91:03:f3:24:f1:e4: c4:c2:c3:e4:b1:14:aa:d3:19:b2:a7:85:41:1a:94:30:74:8c: 84:91:d2:00:cc:c0:9f:18:27:81:42:01:d2:01:b7:43:d9:51: d6:70:17:ca:96:e7:7b:19:cd:d9:87:2f:9a:40:f4:b1:ad:00: 91:9c:7b:0e:1c:0b:63:eb:c7:7b:e9:41:3e:31:80:ec:3b:b9: b1:70:c7:db:bf:5d:b4:1d:bb:59:03:08:00:9d:17:b0:53:34: cd:e9:53:11:86:eb:86:f2:c9:a0:6e:07:1b:c4:8c:42:48:45: be:ae:d2:14:80:62:87:86:0c:da:f4:6d:2c:cd:e2:10:2f:e6: ed:87:c3:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLcM+2XOM2azmlOafl5Y8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5OGZlNWIyODJiMWM3ZGIwMGY2N2JiNGExM2Q5Zjc5NTIw NTA4YjcwHhcNMjUxMjA2MDEwMTM5WhcNMjUxMjA3MDEwMTM5WjAzMTEwLwYDVQQD Eyg4MzU3MzU0OTY1YzM3NmU3YzAwZGFiODhkY2ViZjRjN2I3NGNmZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRIoGAyMvCHId+NEMPNwypwoHLRz SM98ncSVk68sqF0XVH4JTrb1HCjBLf5ecjnZCaoygE9QIytnUmHTa45LIqSBTYxE DL1+m2CV9zJ3R8w9uQTiIWyqPZGOjOsJlZ68/BR5QuDkM1WN8/gjmcWgiw8LJnHL 8cdnjN9cl0UHWZZTnyqhiOEB/OlITiZwyjSPU/ZGpH3rYJsdS9+mA9HcFmQ1fwKi Kt1O+D5qdMOCLmVunxfHWyAJ89kTAftf9T2GLkES/c619ycV5g6MWcUbTCGrSzg8 uIUJ7LBp9VilP+s3xTzcMNje2uqv3nuxjZe9Av5atsDEjexhQBWTcaCj5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINXNUllw3bnwA2riNzr9Me3TP5lMB8GA1UdIwQY MBaAFEmP5bKCscfbAPZ7tKE9n3lSBQi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWIt MDA0MDNiNjQwNTVhLzEvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWItMDA0MDNiNjQwNTVh LzEvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1FEtvQf 9oVHuJ793BV0sXsAS9gIxtxvX1j2/3UpzTIo08lOTRyzhHlaPklcUO7bR5a3sXfq E2AHLu3M7csA08mgpRfDn10rsUq3UmgeuFcCsYcqxCVpdYd+idJnTb4EirJTrksc rQgkGtVpPaNuc+lxzJuVEKOSkQPzJPHkxMLD5LEUqtMZsqeFQRqUMHSMhJHSAMzA nxgngUIB0gG3Q9lR1nAXypbnexnN2YcvmkD0sa0AkZx7DhwLY+vHe+lBPjGA7Du5 sXDH279dtB27WQMIAJ0XsFM0zelTEYbrhvLJoG4HG8SMQkhFvq7SFIBih4YM2vRt LM3iEC/m7YfDyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:58 2025 by rpki-client