This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.mft File: syj-JYobm_YUimzg6KcS8YhAkEw.mft (raw, json) Hash identifier: mPRnrhUU5uNUG61j3LFbUlmT0suloN442HhofJy6oA4= Subject key identifier: C5:F5:4E:55:92:F7:5B:FA:C9:50:5F:0B:28:85:2D:88:42:B8:7E:0E Authority key identifier: B3:28:FE:25:8A:1B:9B:F6:14:8A:6C:E0:E8:A7:12:F1:88:40:90:4C Certificate issuer: /CN=b328fe258a1b9bf6148a6ce0e8a712f18840904c Certificate serial: 019AF5E5F6EC9A0EBA2385F9EB12EC1FD1B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syj-JYobm_YUimzg6KcS8YhAkEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.mft Manifest number: 176B Signing time: Sat 06 Dec 2025 23:01:20 +0000 Manifest this update: Sat 06 Dec 2025 23:01:20 +0000 Manifest next update: Sun 07 Dec 2025 23:01:20 +0000 Files and hashes: 1: csVsVOJyNiX8ZBdrkB1Q1Y3Vh50.roa (hash: WI/e8U0rzHFdNl/a0Rdvy6scdzkHY7t0thSHPZwHq5o=) 2: syj-JYobm_YUimzg6KcS8YhAkEw.crl (hash: sLfhSXajfkkLu+oQ1l8AogKQ0IMo0ybwmXE5uY5zatQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.mft rsync://rpki.ripe.net/repository/DEFAULT/syj-JYobm_YUimzg6KcS8YhAkEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:f6:ec:9a:0e:ba:23:85:f9:eb:12:ec:1f:d1:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b328fe258a1b9bf6148a6ce0e8a712f18840904c Validity Not Before: Dec 6 23:01:20 2025 GMT Not After : Dec 7 23:01:20 2025 GMT Subject: CN=c5f54e5592f75bfac9505f0b28852d8842b87e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ff:a3:51:ba:6f:cb:e6:03:ab:bb:c6:32:92: ef:5d:d6:cf:39:f1:ff:b2:cd:66:91:b3:ec:77:ec: f6:1a:27:65:78:25:cd:5a:5a:d5:ad:7c:e2:45:fb: f2:ae:64:52:3b:ec:ad:a3:dc:00:0e:ba:48:f1:96: ae:55:ba:e2:a7:c5:b1:26:c3:ae:cd:c1:79:ca:3f: 55:3e:81:49:dd:a3:b2:d0:7f:d2:8f:1b:71:8c:07: 0c:f7:c5:c5:19:f3:bf:1a:e4:9f:1a:47:91:bb:ef: 90:47:73:5e:96:20:ba:a6:9c:ce:84:54:d9:b6:5e: 16:b1:b8:7b:a6:82:19:90:af:65:f5:82:15:5a:dc: a8:12:8a:a4:01:6e:4d:b8:04:88:e8:aa:7b:05:d2: cb:a5:e8:96:57:a0:51:66:67:df:66:1e:c1:84:bd: b1:43:9b:0c:86:7d:d9:d2:04:02:b9:e0:45:ee:82: 1d:cf:7e:52:42:04:12:9e:51:72:a6:92:6a:3d:ff: da:7c:b0:f8:0e:e1:6a:05:f1:4b:56:dd:d9:7b:93: 19:45:4a:5a:99:be:2c:e4:07:ce:a4:06:90:a1:77: 51:88:d0:ec:95:ec:fb:56:c0:c8:78:a7:18:62:1a: af:91:c1:42:8e:70:dd:ae:28:1b:6c:b8:b8:52:e4: f8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F5:4E:55:92:F7:5B:FA:C9:50:5F:0B:28:85:2D:88:42:B8:7E:0E X509v3 Authority Key Identifier: keyid:B3:28:FE:25:8A:1B:9B:F6:14:8A:6C:E0:E8:A7:12:F1:88:40:90:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syj-JYobm_YUimzg6KcS8YhAkEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a188bc-deee-42ec-8289-ed84a0058a9f/1/syj-JYobm_YUimzg6KcS8YhAkEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:e9:07:e9:c5:01:50:dc:1f:ef:32:25:d9:70:69:aa:4d:9f: f7:1c:e4:13:95:ac:8c:dd:d7:96:2b:fe:df:3a:fa:9d:79:2d: 4f:7e:54:cf:e2:7d:d4:73:6b:e7:2f:7c:84:c5:9c:b4:d3:ae: e0:77:f7:74:0b:37:ed:09:9d:3f:c5:23:bd:ea:58:c9:71:81: 1a:15:d5:73:77:b2:da:d0:e4:15:f6:5c:08:c2:43:4d:64:46: 2a:ca:2b:71:d7:9e:e3:d8:9a:fe:10:9a:21:54:bd:d7:24:99: 3b:99:44:47:f2:25:6d:56:23:18:86:ae:c6:3d:23:74:d2:7f: ef:0d:c2:25:47:4d:1d:f0:7a:e5:97:b5:81:67:fd:c2:c8:67: da:5d:d6:92:81:0c:ca:52:89:ed:7d:a0:c0:24:a4:17:e7:47: 01:50:34:ec:44:0a:cc:d9:ae:cc:e5:4c:b6:b1:64:25:09:f7: 8c:50:8b:c0:8c:35:18:b4:81:5a:ce:55:4c:7e:75:89:39:ca: 23:d1:67:a9:9d:13:81:ba:cc:56:cd:67:e9:30:8a:af:57:8f: a9:22:8b:e9:c8:4f:34:c5:17:2a:2b:7b:51:5e:21:f5:5b:92: 70:86:67:d2:66:a2:0d:07:09:3b:92:2b:7f:3f:02:c4:dd:1f: 8e:4c:b0:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15fbsmg66I4X56xLsH9G0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMjhmZTI1OGExYjliZjYxNDhhNmNlMGU4YTcxMmYxODg0 MDkwNGMwHhcNMjUxMjA2MjMwMTIwWhcNMjUxMjA3MjMwMTIwWjAzMTEwLwYDVQQD EyhjNWY1NGU1NTkyZjc1YmZhYzk1MDVmMGIyODg1MmQ4ODQyYjg3ZTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkf+jUbpvy+YDq7vGMpLvXdbPOfH/ ss1mkbPsd+z2GidleCXNWlrVrXziRfvyrmRSO+yto9wADrpI8ZauVbrip8WxJsOu zcF5yj9VPoFJ3aOy0H/SjxtxjAcM98XFGfO/GuSfGkeRu++QR3NeliC6ppzOhFTZ tl4Wsbh7poIZkK9l9YIVWtyoEoqkAW5NuASI6Kp7BdLLpeiWV6BRZmffZh7BhL2x Q5sMhn3Z0gQCueBF7oIdz35SQgQSnlFyppJqPf/afLD4DuFqBfFLVt3Ze5MZRUpa mb4s5AfOpAaQoXdRiNDslez7VsDIeKcYYhqvkcFCjnDdrigbbLi4UuT4twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMX1TlWS91v6yVBfCyiFLYhCuH4OMB8GA1UdIwQY MBaAFLMo/iWKG5v2FIps4OinEvGIQJBMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3lqLUpZb2JtX1lVaW16ZzZLY1M4WWhBa0V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hMTg4YmMtZGVlZS00MmVjLTgyODkt ZWQ4NGEwMDU4YTlmLzEvc3lqLUpZb2JtX1lVaW16ZzZLY1M4WWhBa0V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9hMTg4YmMtZGVlZS00MmVjLTgyODktZWQ4NGEwMDU4YTlm LzEvc3lqLUpZb2JtX1lVaW16ZzZLY1M4WWhBa0V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdOkH6cUB UNwf7zIl2XBpqk2f9xzkE5WsjN3Xliv+3zr6nXktT35Uz+J91HNr5y98hMWctNOu 4Hf3dAs37QmdP8UjvepYyXGBGhXVc3ey2tDkFfZcCMJDTWRGKsorcdee49ia/hCa IVS91ySZO5lER/IlbVYjGIauxj0jdNJ/7w3CJUdNHfB65Ze1gWf9wshn2l3WkoEM ylKJ7X2gwCSkF+dHAVA07EQKzNmuzOVMtrFkJQn3jFCLwIw1GLSBWs5VTH51iTnK I9FnqZ0TgbrMVs1n6TCKr1ePqSKL6chPNMUXKit7UV4h9VuScIZn0maiDQcJO5Ir fz8CxN0fjkywTg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:46:06 2025 by rpki-client