This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft File: Sy7AqbnmDoZSFoymnZI58nMHw3I.mft (raw, json) Hash identifier: NXILhmwlbK3vbUANAz7fQc/L8aB6+kNAWuLfwlsNUzQ= Subject key identifier: 3E:0F:A6:F7:12:4D:E0:16:6D:42:D0:23:A4:F8:F8:41:87:65:47:13 Authority key identifier: 4B:2E:C0:A9:B9:E6:0E:86:52:16:8C:A6:9D:92:39:F2:73:07:C3:72 Certificate issuer: /CN=4b2ec0a9b9e60e8652168ca69d9239f27307c372 Certificate serial: 019B24082D88E704D25D000203BFB227A234 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft Manifest number: 16E0 Signing time: Mon 15 Dec 2025 22:01:14 +0000 Manifest this update: Mon 15 Dec 2025 22:01:14 +0000 Manifest next update: Tue 16 Dec 2025 22:01:14 +0000 Files and hashes: 1: I0uKuQxKXFKWPHV3tWp8USg1X-E.roa (hash: WXxoeNxUFy+lmF1DwKWF+FMyVOrtNM4sTEwb6rXBq/g=) 2: Sy7AqbnmDoZSFoymnZI58nMHw3I.crl (hash: JFQIEuiOXcxogWtts+4+KgtjsgADVlirBF8gV3i2BZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.crl rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:08:2d:88:e7:04:d2:5d:00:02:03:bf:b2:27:a2:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b2ec0a9b9e60e8652168ca69d9239f27307c372 Validity Not Before: Dec 15 22:01:14 2025 GMT Not After : Dec 16 22:01:14 2025 GMT Subject: CN=3e0fa6f7124de0166d42d023a4f8f84187654713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3a:5c:38:95:e3:e0:e6:0d:09:d2:b7:b0:c1: 62:24:68:27:ed:fe:e8:6b:9a:bd:62:fb:76:6a:b7: cf:4b:80:05:10:24:71:cf:7a:7e:db:1b:e8:cf:72: 13:1f:33:14:9e:1f:a6:da:47:66:31:1a:d6:b8:1e: 5c:27:31:2a:bb:f5:b5:8c:51:71:3b:9e:5c:15:4a: 56:c0:cc:03:a6:b6:e8:cd:07:04:72:b5:78:68:fa: 47:0a:0b:56:cb:4c:5d:27:d2:68:40:5a:02:d2:ad: 46:ff:d4:ed:5f:ac:76:42:5c:07:16:d8:fb:cf:1e: 18:4b:d6:cd:6c:ec:3f:05:93:3f:77:99:4d:fc:fb: 62:1a:fe:e2:3a:0c:38:2a:33:d9:bb:c7:24:90:3c: b6:e8:85:a7:b0:94:ec:89:9d:e2:4f:cc:7d:c2:5f: 48:21:70:3d:1c:92:9e:82:a8:73:14:0b:cd:82:57: eb:5c:7d:e1:84:cf:71:8c:76:50:a1:a7:74:18:27: be:94:6c:d4:88:15:c8:cc:57:c1:94:19:1a:6d:5f: 70:21:99:2e:d3:d9:79:29:3f:91:fd:55:36:e2:b8: 2f:27:33:98:eb:56:d5:4f:d9:70:ae:c0:95:f9:33: 60:83:53:fb:bd:40:4e:4e:59:69:83:03:11:cd:5b: ce:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0F:A6:F7:12:4D:E0:16:6D:42:D0:23:A4:F8:F8:41:87:65:47:13 X509v3 Authority Key Identifier: keyid:4B:2E:C0:A9:B9:E6:0E:86:52:16:8C:A6:9D:92:39:F2:73:07:C3:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:3a:14:dc:c7:2a:31:41:8e:f6:ff:75:0e:60:3c:41:fc:a7: c0:ce:e2:64:12:29:30:dd:19:65:05:62:5e:05:5e:25:64:1c: 61:54:b1:8c:20:9b:94:9c:33:3b:5b:2c:da:a3:25:79:07:e1: 25:88:b4:fd:e0:4f:95:c4:df:64:fa:b3:1b:36:64:08:7d:44: 28:10:7f:0f:4a:22:d8:75:a1:48:8c:ce:8e:c9:66:3e:5e:42: 76:3d:21:64:58:2c:78:2d:02:b3:02:20:61:4e:ee:7d:cb:69: 5c:db:47:fe:01:cf:58:eb:eb:78:f0:d4:52:46:7c:73:a0:19: 32:ba:62:af:b4:06:14:1f:72:32:2a:94:02:2d:01:1b:f3:77: 3c:75:ca:86:5b:c0:b0:ee:d4:16:dc:94:73:dd:1e:e6:fb:2b: 8e:9e:26:64:c3:da:78:41:1f:23:f9:6f:1d:56:a3:7f:89:a1: f7:8a:bb:c0:54:a8:88:8b:1a:43:f3:92:ce:bf:5d:cb:77:73: 7b:71:ae:bd:67:4c:d1:4d:8e:7a:d6:bc:e3:19:f6:d8:f0:33: e1:65:64:96:90:4b:83:00:4e:eb:15:26:d1:a8:b8:02:5a:91: 3a:3d:1e:cb:bb:37:f3:67:35:98:6c:e3:83:62:80:9f:c2:00: d1:65:ac:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskCC2I5wTSXQACA7+yJ6I0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMmVjMGE5YjllNjBlODY1MjE2OGNhNjlkOTIzOWYyNzMw N2MzNzIwHhcNMjUxMjE1MjIwMTE0WhcNMjUxMjE2MjIwMTE0WjAzMTEwLwYDVQQD EygzZTBmYTZmNzEyNGRlMDE2NmQ0MmQwMjNhNGY4Zjg0MTg3NjU0NzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DpcOJXj4OYNCdK3sMFiJGgn7f7o a5q9Yvt2arfPS4AFECRxz3p+2xvoz3ITHzMUnh+m2kdmMRrWuB5cJzEqu/W1jFFx O55cFUpWwMwDprbozQcEcrV4aPpHCgtWy0xdJ9JoQFoC0q1G/9TtX6x2QlwHFtj7 zx4YS9bNbOw/BZM/d5lN/PtiGv7iOgw4KjPZu8ckkDy26IWnsJTsiZ3iT8x9wl9I IXA9HJKegqhzFAvNglfrXH3hhM9xjHZQoad0GCe+lGzUiBXIzFfBlBkabV9wIZku 09l5KT+R/VU24rgvJzOY61bVT9lwrsCV+TNgg1P7vUBOTllpgwMRzVvOgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4PpvcSTeAWbULQI6T4+EGHZUcTMB8GA1UdIwQY MBaAFEsuwKm55g6GUhaMpp2SOfJzB8NyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3k3QXFibm1Eb1pTRm95bW5aSTU4bk1IdzNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mZDUzZjctODMxNS00MGQyLTkxNWIt Y2QwZjU5YzI4ZDJkLzEvU3k3QXFibm1Eb1pTRm95bW5aSTU4bk1IdzNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9mZDUzZjctODMxNS00MGQyLTkxNWItY2QwZjU5YzI4ZDJk LzEvU3k3QXFibm1Eb1pTRm95bW5aSTU4bk1IdzNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzoU3Mcq MUGO9v91DmA8QfynwM7iZBIpMN0ZZQViXgVeJWQcYVSxjCCblJwzO1ss2qMleQfh JYi0/eBPlcTfZPqzGzZkCH1EKBB/D0oi2HWhSIzOjslmPl5Cdj0hZFgseC0CswIg YU7ufctpXNtH/gHPWOvrePDUUkZ8c6AZMrpir7QGFB9yMiqUAi0BG/N3PHXKhlvA sO7UFtyUc90e5vsrjp4mZMPaeEEfI/lvHVajf4mh94q7wFSoiIsaQ/OSzr9dy3dz e3GuvWdM0U2Oeta84xn22PAz4WVklpBLgwBO6xUm0ai4AlqROj0ey7s382c1mGzj g2KAn8IA0WWsIA== -----END CERTIFICATE-----Generated at Tue Dec 16 00:33:18 2025 by rpki-client