This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft File: Sy7AqbnmDoZSFoymnZI58nMHw3I.mft (raw, json) Hash identifier: 4WPnR3OLE0E3ffGhrrHN1SPTNS5FnjLzJZ0L2YUNyU0= Subject key identifier: EB:EB:0E:B3:27:DC:A0:14:33:8A:28:58:34:5A:6C:A5:A4:09:CC:58 Authority key identifier: 4B:2E:C0:A9:B9:E6:0E:86:52:16:8C:A6:9D:92:39:F2:73:07:C3:72 Certificate issuer: /CN=4b2ec0a9b9e60e8652168ca69d9239f27307c372 Certificate serial: 019AF1D2534B2576A21BA17946F4423F95A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft Manifest number: 16C6 Signing time: Sat 06 Dec 2025 04:01:24 +0000 Manifest this update: Sat 06 Dec 2025 04:01:24 +0000 Manifest next update: Sun 07 Dec 2025 04:01:24 +0000 Files and hashes: 1: I0uKuQxKXFKWPHV3tWp8USg1X-E.roa (hash: WXxoeNxUFy+lmF1DwKWF+FMyVOrtNM4sTEwb6rXBq/g=) 2: Sy7AqbnmDoZSFoymnZI58nMHw3I.crl (hash: WXHAKx3sap5qJKSmC9601fg7lqIv8LmA8zQMDoopSuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.crl rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:53:4b:25:76:a2:1b:a1:79:46:f4:42:3f:95:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b2ec0a9b9e60e8652168ca69d9239f27307c372 Validity Not Before: Dec 6 04:01:24 2025 GMT Not After : Dec 7 04:01:24 2025 GMT Subject: CN=ebeb0eb327dca014338a2858345a6ca5a409cc58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:68:85:b9:79:29:d6:37:b5:f6:7b:88:7c:7f: 58:ab:59:2e:54:18:5e:e5:d9:d1:93:b3:4b:f1:1b: 4a:6b:92:ff:e7:a2:2a:a7:c4:48:c8:6c:76:ec:f7: b5:d7:67:06:6f:ed:0e:f5:23:ea:9c:a5:19:ab:ec: 79:d1:e8:20:14:60:40:ce:00:4b:48:bb:33:58:8b: 4f:05:07:1e:57:f8:81:04:c9:b3:3c:43:b0:a5:6d: 10:65:32:82:07:5b:cd:f6:34:1f:2b:ce:85:73:2c: be:9b:97:ba:22:9c:65:e9:33:50:14:64:b7:5f:6c: c2:e1:3d:a8:6e:13:95:88:51:33:1a:85:99:de:69: de:f6:10:96:f5:7a:f1:4f:c4:67:21:05:7f:1c:c4: 19:a3:70:c8:75:aa:f9:2a:c4:8c:15:af:82:11:7d: 40:ca:ae:0f:30:4b:0d:7a:a1:8c:36:5d:2e:ae:39: 2c:4f:b4:f4:89:97:b2:2c:f4:62:ec:06:e8:24:2b: 1a:e6:49:0b:60:ff:26:b9:34:c4:32:1a:4d:a7:cc: 65:97:4f:65:3b:24:6c:0f:2c:bc:f5:07:00:cc:9a: b9:fd:88:ee:f5:63:ab:d9:f8:53:7d:5d:e0:1e:30: 5f:a6:6e:dc:37:3a:43:11:f5:6a:e8:a5:21:01:13: e6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EB:0E:B3:27:DC:A0:14:33:8A:28:58:34:5A:6C:A5:A4:09:CC:58 X509v3 Authority Key Identifier: keyid:4B:2E:C0:A9:B9:E6:0E:86:52:16:8C:A6:9D:92:39:F2:73:07:C3:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:cf:04:7d:99:cc:d1:0b:36:4e:d8:8b:f9:91:04:e6:16:26: 65:d5:b9:ae:ee:30:67:ba:79:94:2f:d7:ee:ec:2d:8b:ec:d4: c7:b6:a7:f6:a6:d4:bc:e9:4f:23:53:48:78:1c:61:00:b6:28: 11:9f:87:da:92:d0:85:35:64:d7:b9:26:19:42:59:f2:54:63: 06:f5:8a:59:1d:0e:4e:a8:fe:b8:c0:89:28:5c:3e:82:85:ff: 63:c0:70:60:27:4c:2f:8e:b0:40:44:aa:6e:d1:19:e9:a9:80: 22:9d:57:e4:e3:dd:79:35:fc:2b:f0:c8:fe:61:55:4c:34:cc: ff:c5:5f:0e:24:8f:e2:24:ba:bf:c3:05:93:77:65:f8:4f:da: 75:08:b6:ff:01:01:7f:ae:7c:92:dd:ac:35:91:95:62:c4:a3: 9b:ba:99:f6:af:36:dd:8e:87:aa:40:4f:c8:d3:01:31:e9:6e: 3e:01:04:69:8c:90:43:38:da:05:4d:bd:8d:95:74:23:24:c0: 0c:5f:be:ad:33:db:11:2b:77:18:1a:dc:52:15:b2:c3:34:66: 6d:17:0d:01:61:0b:58:b9:64:3e:2f:13:94:44:f2:ca:0a:24: 91:5c:c7:68:b5:52:fa:6d:31:7e:3f:14:0a:4b:cf:1b:a7:1b: 62:09:6b:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lNLJXaiG6F5RvRCP5WnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMmVjMGE5YjllNjBlODY1MjE2OGNhNjlkOTIzOWYyNzMw N2MzNzIwHhcNMjUxMjA2MDQwMTI0WhcNMjUxMjA3MDQwMTI0WjAzMTEwLwYDVQQD EyhlYmViMGViMzI3ZGNhMDE0MzM4YTI4NTgzNDVhNmNhNWE0MDljYzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWiFuXkp1je19nuIfH9Yq1kuVBhe 5dnRk7NL8RtKa5L/56Iqp8RIyGx27Pe112cGb+0O9SPqnKUZq+x50eggFGBAzgBL SLszWItPBQceV/iBBMmzPEOwpW0QZTKCB1vN9jQfK86Fcyy+m5e6Ipxl6TNQFGS3 X2zC4T2obhOViFEzGoWZ3mne9hCW9XrxT8RnIQV/HMQZo3DIdar5KsSMFa+CEX1A yq4PMEsNeqGMNl0urjksT7T0iZeyLPRi7AboJCsa5kkLYP8muTTEMhpNp8xll09l OyRsDyy89QcAzJq5/Yju9WOr2fhTfV3gHjBfpm7cNzpDEfVq6KUhARPmhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvrDrMn3KAUM4ooWDRabKWkCcxYMB8GA1UdIwQY MBaAFEsuwKm55g6GUhaMpp2SOfJzB8NyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3k3QXFibm1Eb1pTRm95bW5aSTU4bk1IdzNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mZDUzZjctODMxNS00MGQyLTkxNWIt Y2QwZjU5YzI4ZDJkLzEvU3k3QXFibm1Eb1pTRm95bW5aSTU4bk1IdzNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9mZDUzZjctODMxNS00MGQyLTkxNWItY2QwZjU5YzI4ZDJk LzEvU3k3QXFibm1Eb1pTRm95bW5aSTU4bk1IdzNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATc8EfZnM 0Qs2TtiL+ZEE5hYmZdW5ru4wZ7p5lC/X7uwti+zUx7an9qbUvOlPI1NIeBxhALYo EZ+H2pLQhTVk17kmGUJZ8lRjBvWKWR0OTqj+uMCJKFw+goX/Y8BwYCdML46wQESq btEZ6amAIp1X5OPdeTX8K/DI/mFVTDTM/8VfDiSP4iS6v8MFk3dl+E/adQi2/wEB f658kt2sNZGVYsSjm7qZ9q823Y6HqkBPyNMBMeluPgEEaYyQQzjaBU29jZV0IyTA DF++rTPbESt3GBrcUhWywzRmbRcNAWELWLlkPi8TlETyygokkVzHaLVS+m0xfj8U CkvPG6cbYglrdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:37:23 2025 by rpki-client