This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft File: SYKxcZtP7HCLpmsper4NsI-tDh4.mft (raw, json) Hash identifier: i5eqtxAV3zoYa1QNRqxCfOKujxI5bH/yK7KqKk+i4Dk= Subject key identifier: DD:0A:75:C4:76:1C:83:86:90:22:A3:23:FC:64:0B:D6:67:22:85:45 Authority key identifier: 49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E Certificate issuer: /CN=4982b1719b4fec708ba66b297abe0db08fad0e1e Certificate serial: 019AF3F76F3CFE1515B0A2B376501AAC90BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft Manifest number: 1534 Signing time: Sat 06 Dec 2025 14:01:10 +0000 Manifest this update: Sat 06 Dec 2025 14:01:10 +0000 Manifest next update: Sun 07 Dec 2025 14:01:10 +0000 Files and hashes: 1: 0KNJIwezZb-3FaFJUpqxhGPSa2k.roa (hash: A4j/zF7WMM+1P8qhcyYitAkcAPo5hxRepqaqzU+Jk9c=) 2: CLHhdOeMNXgExKSCdON9sy75K9Y.roa (hash: 38I9hpL0OwteLRFzo32bZbguPasIk9LP7nDY3tAu3zY=) 3: Mz_0oopSyUD8tIkNMNqzhKplVuM.roa (hash: DOtqb1hTDcb0EkPiiKGPxHU95felEP0mxUFdKqkLpas=) 4: SYKxcZtP7HCLpmsper4NsI-tDh4.crl (hash: pjAdyDaQhKPEZo1Ne2UA3ab+2pKJb/rtCT+b+1JpP88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:6f:3c:fe:15:15:b0:a2:b3:76:50:1a:ac:90:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4982b1719b4fec708ba66b297abe0db08fad0e1e Validity Not Before: Dec 6 14:01:10 2025 GMT Not After : Dec 7 14:01:10 2025 GMT Subject: CN=dd0a75c4761c83869022a323fc640bd667228545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e8:7a:93:ed:9c:16:a5:b0:63:05:03:95:3b: 05:5f:26:da:12:c3:1b:94:49:ad:d5:cc:37:13:68: a3:ad:17:92:bd:81:e6:4c:ce:36:75:be:ad:46:f7: 07:d1:72:76:fc:f3:34:57:54:03:79:16:36:aa:66: 51:9a:1f:a0:ab:09:08:a3:77:2e:cd:ab:d9:92:b7: e0:c5:be:aa:62:c6:ce:4e:33:b2:86:52:55:ea:82: c6:36:c8:b0:43:de:1c:69:82:3e:80:70:b2:3b:2f: e7:e2:0a:4b:17:15:f7:07:60:55:49:30:d9:41:c1: 4d:3b:f6:03:e0:88:f7:2f:f8:23:a6:c0:43:31:ca: 73:1c:01:3f:c6:ba:28:8a:61:01:8f:90:bd:02:41: 9c:93:3f:20:15:af:79:96:de:a7:51:76:64:fa:d5: 88:6e:0d:4a:bc:ba:87:9f:21:7b:fa:fd:d6:4e:b6: 41:c3:2d:66:a3:c7:41:ca:34:89:4e:27:a7:01:e9: 29:96:db:3c:38:da:ef:04:3e:85:c0:22:a0:b1:ca: f2:ba:63:0c:3b:63:d7:7e:9c:46:7f:c0:7b:2e:70: c3:61:9f:bc:6f:7b:1e:d9:85:2f:f6:37:59:8d:dd: 6f:4c:b7:68:ab:31:e6:8c:79:bc:0a:cf:bd:a3:96: 21:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0A:75:C4:76:1C:83:86:90:22:A3:23:FC:64:0B:D6:67:22:85:45 X509v3 Authority Key Identifier: keyid:49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:9a:d5:9d:f1:f9:9c:68:22:f8:1a:d6:bc:31:00:5c:74:b6: 65:83:33:a9:f3:72:7d:b0:44:7d:d0:01:bf:57:8c:81:83:2c: cc:fd:5a:49:a2:21:3e:63:ce:e5:69:af:15:4b:69:f4:ea:3d: 97:84:da:a6:98:ea:86:70:f8:28:5f:f6:e7:86:b4:dc:fa:e0: 64:80:2c:85:bf:6e:d1:c9:3c:0c:dc:03:17:78:ae:a2:c8:09: 9c:9c:03:ef:87:59:fe:c3:a6:39:00:6e:5d:f8:94:e5:36:f5: 98:c9:40:1f:04:02:bf:7a:97:fe:39:ff:67:f3:a5:69:df:43: 06:dc:40:1f:b9:1c:54:d3:b5:8f:67:f9:c4:f3:75:08:ce:34: 25:23:7f:4f:f4:08:fd:6a:36:1b:e0:c4:2e:96:f5:2b:dd:b5: 19:40:9e:03:68:89:ef:1d:e7:ff:56:f3:4a:99:89:db:ac:25: 2d:2f:59:1a:b9:d6:62:b2:4d:37:cf:bd:da:7a:32:ae:4d:e4: 36:72:06:e6:44:3d:59:97:d0:94:98:71:1f:e5:5a:7f:c5:9e: 2b:1e:d4:e5:55:ad:76:39:69:8b:da:7d:7d:39:75:ba:18:e2: 2d:a3:1f:b5:99:81:d9:c3:c0:ef:b3:40:25:51:f8:74:a2:83: c8:57:f4:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9288/hUVsKKzdlAarJC+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODJiMTcxOWI0ZmVjNzA4YmE2NmIyOTdhYmUwZGIwOGZh ZDBlMWUwHhcNMjUxMjA2MTQwMTEwWhcNMjUxMjA3MTQwMTEwWjAzMTEwLwYDVQQD EyhkZDBhNzVjNDc2MWM4Mzg2OTAyMmEzMjNmYzY0MGJkNjY3MjI4NTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uh6k+2cFqWwYwUDlTsFXybaEsMb lEmt1cw3E2ijrReSvYHmTM42db6tRvcH0XJ2/PM0V1QDeRY2qmZRmh+gqwkIo3cu zavZkrfgxb6qYsbOTjOyhlJV6oLGNsiwQ94caYI+gHCyOy/n4gpLFxX3B2BVSTDZ QcFNO/YD4Ij3L/gjpsBDMcpzHAE/xrooimEBj5C9AkGckz8gFa95lt6nUXZk+tWI bg1KvLqHnyF7+v3WTrZBwy1mo8dByjSJTienAekplts8ONrvBD6FwCKgscryumMM O2PXfpxGf8B7LnDDYZ+8b3se2YUv9jdZjd1vTLdoqzHmjHm8Cs+9o5YhJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0KdcR2HIOGkCKjI/xkC9ZnIoVFMB8GA1UdIwQY MBaAFEmCsXGbT+xwi6ZrKXq+DbCPrQ4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1lLeGNadFA3SENMcG1zcGVyNE5zSS10RGg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kOGYxNDUtMWUwZC00NzFkLTg1MzYt YWU2Yjg0YzI4MTk1LzEvU1lLeGNadFA3SENMcG1zcGVyNE5zSS10RGg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9kOGYxNDUtMWUwZC00NzFkLTg1MzYtYWU2Yjg0YzI4MTk1 LzEvU1lLeGNadFA3SENMcG1zcGVyNE5zSS10RGg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZrVnfH5 nGgi+BrWvDEAXHS2ZYMzqfNyfbBEfdABv1eMgYMszP1aSaIhPmPO5WmvFUtp9Oo9 l4TappjqhnD4KF/254a03PrgZIAshb9u0ck8DNwDF3iuosgJnJwD74dZ/sOmOQBu XfiU5Tb1mMlAHwQCv3qX/jn/Z/Olad9DBtxAH7kcVNO1j2f5xPN1CM40JSN/T/QI /Wo2G+DELpb1K921GUCeA2iJ7x3n/1bzSpmJ26wlLS9ZGrnWYrJNN8+92noyrk3k NnIG5kQ9WZfQlJhxH+Vaf8WeKx7U5VWtdjlpi9p9fTl1uhjiLaMftZmB2cPA77NA JVH4dKKDyFf0WQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:30:17 2025 by rpki-client