This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft File: SYeUHnTBwD56ujuHhTAJXrb6h04.mft (raw, json) Hash identifier: Hb4z+Pc2lBWzj5OkYnB16x7KNtQwpxF/KQfWN5V6RK4= Subject key identifier: 29:27:B6:54:BF:F8:FE:7F:F0:25:59:1E:4E:86:29:3F:DC:82:23:34 Authority key identifier: 49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E Certificate issuer: /CN=4987941e74c1c03e7aba3b878530095eb6fa874e Certificate serial: 019AF31C5B9149A145B6C974584B8E70AA12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft Manifest number: 0BBB Signing time: Sat 06 Dec 2025 10:01:53 +0000 Manifest this update: Sat 06 Dec 2025 10:01:53 +0000 Manifest next update: Sun 07 Dec 2025 10:01:53 +0000 Files and hashes: 1: KECb19wTvJFUN2Wl5Wm9IZPheNE.roa (hash: KtmQ4sD1wYrdGpvHK8ZZgh2HKlI71W1QM+Wlf/Sxbpo=) 2: SYeUHnTBwD56ujuHhTAJXrb6h04.crl (hash: NWxSmM54IlnwXKiK9VlrZ8BpGx9H7j42WuljMDeLeR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:5b:91:49:a1:45:b6:c9:74:58:4b:8e:70:aa:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4987941e74c1c03e7aba3b878530095eb6fa874e Validity Not Before: Dec 6 10:01:53 2025 GMT Not After : Dec 7 10:01:53 2025 GMT Subject: CN=2927b654bff8fe7ff025591e4e86293fdc822334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ce:5f:d1:84:c5:7f:2c:d1:2f:62:a7:ad:5d: 44:80:50:84:91:c3:28:81:63:0e:a7:72:6b:97:97: 33:ee:ae:70:5f:7b:24:13:00:5c:e5:04:e6:44:5b: 25:6c:42:ba:19:46:1e:58:6c:7b:be:e0:d1:88:fe: 13:69:16:71:04:33:52:6f:4d:51:25:19:c6:54:71: 07:d6:5a:86:c2:61:08:b8:1b:be:cb:e6:84:6a:11: c8:9f:f0:0c:d8:30:93:31:ac:ff:88:b3:ab:e0:da: 97:b0:f5:e9:d9:a6:19:25:19:60:21:2d:05:0e:56: b6:8a:65:0f:37:d5:27:f0:45:b0:d8:e9:d9:8a:5c: 99:7b:d0:6c:c8:87:4c:e6:7d:72:29:bd:c8:35:86: 16:97:ea:09:15:cb:67:09:a1:f7:57:c3:e5:e8:0d: c9:26:f5:1c:53:40:b0:fc:72:50:3a:a8:93:67:9a: 5b:02:dc:4e:5f:96:c1:5d:40:4f:b8:f2:97:cf:73: 61:22:d2:ee:68:f0:7f:bc:65:01:90:7a:55:b6:60: 32:63:72:7e:cc:ec:d0:eb:fd:00:10:14:f8:02:0d: 6b:31:3b:17:cf:33:d8:6c:17:d0:f2:6e:b8:0f:99: 97:21:63:fc:31:85:fd:be:cb:1f:a8:43:e3:33:cb: 48:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:27:B6:54:BF:F8:FE:7F:F0:25:59:1E:4E:86:29:3F:DC:82:23:34 X509v3 Authority Key Identifier: keyid:49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:f6:26:48:ce:dd:eb:d4:88:b3:00:00:8e:92:ee:01:f1:55: 66:bf:5b:21:37:da:46:c6:bd:89:22:50:6e:3a:c5:0e:ea:b1: 85:c5:54:bd:dc:de:e9:de:01:09:d7:11:cf:6f:5f:3f:ce:55: d3:15:5f:34:ba:ec:00:83:9b:50:73:e7:8d:88:db:27:8b:78: 4a:d8:63:12:ee:f2:e3:0b:96:01:ad:a4:84:b3:79:0a:07:b3: cb:78:41:5a:03:df:61:0b:15:f7:20:16:87:07:25:f1:99:7f: ce:f5:36:95:96:cb:28:c3:ee:66:37:bf:8e:0a:44:bc:94:bd: 68:57:b9:21:b4:fd:a3:6f:ad:ea:bb:cc:01:3d:57:4c:50:94: e8:a7:c0:2d:8b:01:f5:76:80:1f:c1:cc:4b:22:24:36:37:f0: 9e:ef:3a:ad:ff:f7:98:f3:63:12:7c:ee:6e:db:1b:b5:7e:82: 4d:92:7b:00:32:c9:ec:7d:9a:be:3e:e7:6f:d1:19:54:0e:ca: 2c:18:b5:16:e3:91:0a:70:bc:dc:81:5f:18:b1:bf:29:30:56: 7f:27:fd:71:b5:e4:a1:37:0c:d6:a7:42:38:dd:3d:c4:e8:3e: 3c:dc:4d:c3:c7:db:53:9b:3c:94:fd:4a:6f:90:66:2d:ba:af: 0e:69:7b:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHFuRSaFFtsl0WEuOcKoSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODc5NDFlNzRjMWMwM2U3YWJhM2I4Nzg1MzAwOTVlYjZm YTg3NGUwHhcNMjUxMjA2MTAwMTUzWhcNMjUxMjA3MTAwMTUzWjAzMTEwLwYDVQQD EygyOTI3YjY1NGJmZjhmZTdmZjAyNTU5MWU0ZTg2MjkzZmRjODIyMzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc5f0YTFfyzRL2KnrV1EgFCEkcMo gWMOp3Jrl5cz7q5wX3skEwBc5QTmRFslbEK6GUYeWGx7vuDRiP4TaRZxBDNSb01R JRnGVHEH1lqGwmEIuBu+y+aEahHIn/AM2DCTMaz/iLOr4NqXsPXp2aYZJRlgIS0F Dla2imUPN9Un8EWw2OnZilyZe9BsyIdM5n1yKb3INYYWl+oJFctnCaH3V8Pl6A3J JvUcU0Cw/HJQOqiTZ5pbAtxOX5bBXUBPuPKXz3NhItLuaPB/vGUBkHpVtmAyY3J+ zOzQ6/0AEBT4Ag1rMTsXzzPYbBfQ8m64D5mXIWP8MYX9vssfqEPjM8tIwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkntlS/+P5/8CVZHk6GKT/cgiM0MB8GA1UdIwQY MBaAFEmHlB50wcA+ero7h4UwCV62+odOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83MDc3N2ItNjhiMC00MmE4LTllOWQt ZThhZGE1MWVlOGZmLzEvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83MDc3N2ItNjhiMC00MmE4LTllOWQtZThhZGE1MWVlOGZm LzEvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvYmSM7d 69SIswAAjpLuAfFVZr9bITfaRsa9iSJQbjrFDuqxhcVUvdze6d4BCdcRz29fP85V 0xVfNLrsAIObUHPnjYjbJ4t4SthjEu7y4wuWAa2khLN5Cgezy3hBWgPfYQsV9yAW hwcl8Zl/zvU2lZbLKMPuZje/jgpEvJS9aFe5IbT9o2+t6rvMAT1XTFCU6KfALYsB 9XaAH8HMSyIkNjfwnu86rf/3mPNjEnzubtsbtX6CTZJ7ADLJ7H2avj7nb9EZVA7K LBi1FuORCnC83IFfGLG/KTBWfyf9cbXkoTcM1qdCON09xOg+PNxNw8fbU5s8lP1K b5BmLbqvDml7cA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:05:01 2025 by rpki-client