This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.mft File: sYFWgYZC3I8E5A-Gd1aNZjzPSxs.mft (raw, json) Hash identifier: ve4KCMKYs7Ou39xo5Z36vNKQPpsjE2OBcHJQRdJGHFs= Subject key identifier: 25:F7:9B:1F:39:F1:BC:6F:7A:F3:8D:06:16:6C:64:A8:96:EF:34:9A Authority key identifier: B1:81:56:81:86:42:DC:8F:04:E4:0F:86:77:56:8D:66:3C:CF:4B:1B Certificate issuer: /CN=b18156818642dc8f04e40f8677568d663ccf4b1b Certificate serial: 019AF38918538713AEEBF84737988FAF1939 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.mft Manifest number: 0154 Signing time: Sat 06 Dec 2025 12:00:39 +0000 Manifest this update: Sat 06 Dec 2025 12:00:39 +0000 Manifest next update: Sun 07 Dec 2025 12:00:39 +0000 Files and hashes: 1: FUgWL_lEitw648dAxbpzgHtUVSg.roa (hash: wprSxLZeem8Akk4r6OWoOul/6l4o4VUD6WM3B2aSMl8=) 2: sYFWgYZC3I8E5A-Gd1aNZjzPSxs.crl (hash: z1wNzk5O6sHQm1UqgMuEdByJT5pUsQd8CPExbWDIFi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.mft rsync://rpki.ripe.net/repository/DEFAULT/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:18:53:87:13:ae:eb:f8:47:37:98:8f:af:19:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b18156818642dc8f04e40f8677568d663ccf4b1b Validity Not Before: Dec 6 12:00:39 2025 GMT Not After : Dec 7 12:00:39 2025 GMT Subject: CN=25f79b1f39f1bc6f7af38d06166c64a896ef349a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4f:f2:e8:18:63:66:d9:42:b3:9b:60:8e:ef: 0e:35:70:15:3a:f2:6b:63:ae:2b:cd:12:ac:ea:ac: f5:1b:9f:cb:fa:6d:58:4b:4b:03:20:b9:d2:4e:f5: 7b:02:f2:22:e5:71:2e:6b:0d:bb:f8:f0:5d:c7:0f: 0b:ae:e1:40:9f:61:d5:11:f7:12:a1:e4:35:d6:e3: d6:ca:31:9c:46:66:4c:bb:00:5b:3f:36:fa:6c:59: e8:b5:e2:87:e6:f2:89:20:4c:79:15:11:37:a1:ff: 4d:c5:25:93:f8:5a:d3:27:0f:3b:58:d9:59:14:92: 41:88:b7:e6:2c:0b:88:8d:06:81:fb:09:8e:e1:cf: 5e:e7:4a:d0:8a:3e:9b:06:be:11:7d:9a:d9:e2:a0: 04:94:d4:84:f6:3b:a1:98:b7:00:4e:d6:b4:76:d6: c9:e4:f4:31:c8:28:f2:94:f3:1f:9c:42:d4:63:47: 9b:d4:f4:3e:cd:1e:b0:78:1a:d2:27:51:00:90:71: 27:15:01:36:4b:0b:a2:a5:ef:22:30:c4:cd:88:43: 31:e4:8e:be:96:16:50:82:05:0c:da:92:55:db:b8: a9:50:cd:e1:ba:11:75:c9:8e:5c:16:ee:32:71:63: bf:71:78:c4:b7:83:02:db:a7:1e:d8:da:6b:fb:a5: 4d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F7:9B:1F:39:F1:BC:6F:7A:F3:8D:06:16:6C:64:A8:96:EF:34:9A X509v3 Authority Key Identifier: keyid:B1:81:56:81:86:42:DC:8F:04:E4:0F:86:77:56:8D:66:3C:CF:4B:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:37:c6:42:7e:08:95:28:df:47:7e:00:dd:e1:c5:5c:fb:6f: 90:f6:e2:1f:ef:29:86:ac:ed:4a:12:16:3a:b2:7c:af:32:78: cf:7e:14:a4:80:a5:1a:75:18:a3:48:6b:7d:be:11:23:aa:57: c9:5d:b3:c3:f3:ab:93:6e:22:f4:d4:41:6a:e1:02:5a:ff:ad: 90:41:c7:65:4d:e1:88:31:95:bc:68:fa:3a:6d:ac:2d:31:39: b0:9c:bd:2a:bb:4e:da:dd:68:e2:1e:85:c8:af:79:0a:4a:9d: fd:89:c5:0a:06:22:70:ed:1d:c9:46:24:90:fd:29:ca:db:56: 4e:f5:b9:a9:aa:26:54:11:1e:1d:ee:af:90:35:96:f1:e2:b4: 39:84:e5:59:da:a2:b0:a8:88:45:55:df:9f:65:cd:d9:0a:5c: 30:5c:ba:57:d3:36:58:cf:d2:bd:e4:e1:02:3a:a5:b7:30:ee: 19:6c:6b:d7:00:0d:0e:cf:2e:83:f5:e5:22:f0:db:a6:7f:50: b1:75:e9:d1:37:0f:f2:28:b9:7d:07:27:a8:c1:31:ab:a2:6f: 8f:1a:e0:6c:88:e0:b2:79:b9:8a:05:20:93:e7:05:03:ae:38: 75:cb:79:0f:0f:e9:8c:46:55:18:2d:ff:46:d8:d2:0e:a9:ca: dd:31:09:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziRhThxOu6/hHN5iPrxk5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxODE1NjgxODY0MmRjOGYwNGU0MGY4Njc3NTY4ZDY2M2Nj ZjRiMWIwHhcNMjUxMjA2MTIwMDM5WhcNMjUxMjA3MTIwMDM5WjAzMTEwLwYDVQQD EygyNWY3OWIxZjM5ZjFiYzZmN2FmMzhkMDYxNjZjNjRhODk2ZWYzNDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU/y6BhjZtlCs5tgju8ONXAVOvJr Y64rzRKs6qz1G5/L+m1YS0sDILnSTvV7AvIi5XEuaw27+PBdxw8LruFAn2HVEfcS oeQ11uPWyjGcRmZMuwBbPzb6bFnoteKH5vKJIEx5FRE3of9NxSWT+FrTJw87WNlZ FJJBiLfmLAuIjQaB+wmO4c9e50rQij6bBr4RfZrZ4qAElNSE9juhmLcATta0dtbJ 5PQxyCjylPMfnELUY0eb1PQ+zR6weBrSJ1EAkHEnFQE2Swuipe8iMMTNiEMx5I6+ lhZQggUM2pJV27ipUM3huhF1yY5cFu4ycWO/cXjEt4MC26ce2Npr+6VN0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCX3mx858bxvevONBhZsZKiW7zSaMB8GA1UdIwQY MBaAFLGBVoGGQtyPBOQPhndWjWY8z0sbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1lGV2dZWkMzSThFNUEtR2QxYU5aanpQU3hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81NjY1MzItYjA3Ny00ODg5LTlmZTYt NjU3NmM2ZDlhYTY5LzEvc1lGV2dZWkMzSThFNUEtR2QxYU5aanpQU3hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC81NjY1MzItYjA3Ny00ODg5LTlmZTYtNjU3NmM2ZDlhYTY5 LzEvc1lGV2dZWkMzSThFNUEtR2QxYU5aanpQU3hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzfGQn4I lSjfR34A3eHFXPtvkPbiH+8phqztShIWOrJ8rzJ4z34UpIClGnUYo0hrfb4RI6pX yV2zw/Ork24i9NRBauECWv+tkEHHZU3hiDGVvGj6Om2sLTE5sJy9KrtO2t1o4h6F yK95Ckqd/YnFCgYicO0dyUYkkP0pyttWTvW5qaomVBEeHe6vkDWW8eK0OYTlWdqi sKiIRVXfn2XN2QpcMFy6V9M2WM/SveThAjqltzDuGWxr1wANDs8ug/XlIvDbpn9Q sXXp0TcP8ii5fQcnqMExq6JvjxrgbIjgsnm5igUgk+cFA644dct5Dw/pjEZVGC3/ RtjSDqnK3TEJQg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:45:02 2025 by rpki-client