This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft File: SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft (raw, json) Hash identifier: WpCSHGLwpkk7YD8Zwe+uS0l4HitLKRqdHNkmkT+SLaE= Subject key identifier: 63:FD:14:A1:6F:4A:60:2A:32:0A:A4:73:99:97:70:09:8D:1C:C9:50 Authority key identifier: 49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D Certificate issuer: /CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d Certificate serial: 019AF5E5704AABB9F5230186E239567FDB86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft Manifest number: 0573 Signing time: Sat 06 Dec 2025 23:00:45 +0000 Manifest this update: Sat 06 Dec 2025 23:00:45 +0000 Manifest next update: Sun 07 Dec 2025 23:00:45 +0000 Files and hashes: 1: SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl (hash: o/P3udLphp3k4t+4myKEfYuGMVq36vk9lVa11Buex+0=) 2: ie5Rxl_8lGCYh_KgPEkCnbuQsRk.roa (hash: GBFEJYPtX3jgZYzHGm9uh7GT7ECNm8iOg9HQZDPhsqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:70:4a:ab:b9:f5:23:01:86:e2:39:56:7f:db:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d Validity Not Before: Dec 6 23:00:45 2025 GMT Not After : Dec 7 23:00:45 2025 GMT Subject: CN=63fd14a16f4a602a320aa473999770098d1cc950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:16:03:be:21:8d:43:ca:ef:ba:4f:5e:e1:b5: 18:49:ec:f5:c9:26:71:6b:85:d7:4d:e1:f5:e8:89: 0c:98:89:4e:c6:49:a2:cc:5b:7a:22:fe:fa:29:f6: 9c:20:ca:66:73:7f:f8:36:a6:91:76:3b:25:d2:9e: 39:43:7e:19:b5:b8:5f:e4:a6:fa:7a:3b:a5:ed:b8: e9:9a:24:ac:c2:4d:27:87:74:57:3b:4e:aa:6e:27: 7c:6e:c0:3c:45:2e:b2:cb:d9:4a:cd:05:37:1a:1e: 7a:40:07:97:ab:d9:d2:2c:79:d0:e2:19:cd:a5:f2: eb:8c:56:b3:87:2b:66:4e:ad:c8:39:50:4f:36:b4: 88:5c:fc:13:1e:bc:bb:4d:2b:8d:59:f4:a4:c6:2d: 8e:30:92:b2:8a:06:88:7f:30:f5:1b:b5:34:94:59: 3e:2e:2b:e6:f5:0c:a0:9f:95:9c:e0:a4:18:73:df: 22:9f:19:27:3f:49:24:95:ea:f6:45:84:22:c6:fc: 13:a0:31:fe:a1:12:95:b0:02:b2:53:2e:f0:c4:89: f9:2c:20:49:f3:6d:d5:51:d8:af:67:28:a6:9c:b6: 51:c0:54:02:1b:a7:6c:05:84:aa:2b:03:0d:e5:6f: 57:fc:8e:7f:cd:82:29:cb:5f:a0:97:3f:56:63:5a: e4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FD:14:A1:6F:4A:60:2A:32:0A:A4:73:99:97:70:09:8D:1C:C9:50 X509v3 Authority Key Identifier: keyid:49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:e3:2d:ff:5f:1b:7e:bf:91:9a:2c:7f:71:32:69:ef:df:30: fc:21:44:76:ba:44:56:fe:7f:ef:43:7d:bc:59:a7:db:d6:43: 35:47:80:69:5e:76:38:04:f1:8e:71:80:2e:d6:8e:29:3d:24: b4:f1:95:d8:1b:99:e9:92:69:bf:3a:82:78:b2:4d:56:21:96: 34:5e:0a:b2:2d:55:54:10:8a:25:ce:43:88:da:26:1d:42:3a: 58:2d:73:0d:6d:93:5e:cc:c8:68:59:d4:14:0e:d1:3d:27:2a: a6:19:ec:ec:26:28:26:95:48:cc:5f:27:a0:43:60:ac:8e:36: c1:6f:54:dd:ca:ba:15:64:c2:57:83:1d:7f:6b:5e:1d:17:87: 94:f9:95:47:d3:a2:91:a8:a8:9a:4e:27:c5:ea:2d:ab:78:4a: b2:38:7b:c1:91:52:c9:b6:86:d3:54:0c:1b:b7:01:86:ae:ec: d6:e6:05:ef:0e:f1:af:86:d2:e3:28:c6:46:28:dd:64:0f:e1: e7:e3:a9:c5:aa:31:c5:f6:45:31:19:00:1d:e9:f1:92:e4:98: dc:3f:48:05:33:00:6a:de:bd:f1:fe:e5:5b:ce:fb:cb:3f:85: c2:6a:d4:b1:56:2f:9c:c8:f1:da:28:d1:99:d9:06:7c:32:a6: de:0e:17:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15XBKq7n1IwGG4jlWf9uGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODUwZjFiZmQ5OGQ4NDBhMmFhOGE4M2ZhNGYwODk0NDM5 ZDk5OGQwHhcNMjUxMjA2MjMwMDQ1WhcNMjUxMjA3MjMwMDQ1WjAzMTEwLwYDVQQD Eyg2M2ZkMTRhMTZmNGE2MDJhMzIwYWE0NzM5OTk3NzAwOThkMWNjOTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxYDviGNQ8rvuk9e4bUYSez1ySZx a4XXTeH16IkMmIlOxkmizFt6Iv76KfacIMpmc3/4NqaRdjsl0p45Q34Ztbhf5Kb6 ejul7bjpmiSswk0nh3RXO06qbid8bsA8RS6yy9lKzQU3Gh56QAeXq9nSLHnQ4hnN pfLrjFazhytmTq3IOVBPNrSIXPwTHry7TSuNWfSkxi2OMJKyigaIfzD1G7U0lFk+ Livm9Qygn5Wc4KQYc98inxknP0kkler2RYQixvwToDH+oRKVsAKyUy7wxIn5LCBJ 823VUdivZyimnLZRwFQCG6dsBYSqKwMN5W9X/I5/zYIpy1+glz9WY1rk6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGP9FKFvSmAqMgqkc5mXcAmNHMlQMB8GA1UdIwQY MBaAFEmFDxv9mNhAoqqKg/pPCJRDnZmNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1lVUEdfMlkyRUNpcW9xRC1rOElsRU9kbVkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81MGVmMmUtN2ExYy00MDVhLTkxMTct ZGUxNGUzNTMyZmQ4LzEvU1lVUEdfMlkyRUNpcW9xRC1rOElsRU9kbVkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81MGVmMmUtN2ExYy00MDVhLTkxMTctZGUxNGUzNTMyZmQ4 LzEvU1lVUEdfMlkyRUNpcW9xRC1rOElsRU9kbVkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+Mt/18b fr+Rmix/cTJp798w/CFEdrpEVv5/70N9vFmn29ZDNUeAaV52OATxjnGALtaOKT0k tPGV2BuZ6ZJpvzqCeLJNViGWNF4Ksi1VVBCKJc5DiNomHUI6WC1zDW2TXszIaFnU FA7RPScqphns7CYoJpVIzF8noENgrI42wW9U3cq6FWTCV4Mdf2teHReHlPmVR9Oi kaiomk4nxeotq3hKsjh7wZFSybaG01QMG7cBhq7s1uYF7w7xr4bS4yjGRijdZA/h 5+OpxaoxxfZFMRkAHenxkuSY3D9IBTMAat698f7lW877yz+FwmrUsVYvnMjx2ijR mdkGfDKm3g4XOw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:10 2025 by rpki-client