This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
File: SYbHOZTQLZH8l9kW6YCabZgeaxc.mft (raw, json)
Hash identifier: LWOBB3wFPF8da93cOH2ZY8HmVNWrhwgl1enaBRYi8+U=
Subject key identifier: 7B:29:B9:26:9E:9D:0B:43:41:4F:7B:E0:3C:FC:88:46:E4:79:1F:04
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 019B307A022DF4C0152C15B22C022649FFBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
Manifest number: 1813
Signing time: Thu 18 Dec 2025 08:01:00 +0000
Manifest this update: Thu 18 Dec 2025 08:01:00 +0000
Manifest next update: Fri 19 Dec 2025 08:01:00 +0000
Files and hashes: 1: 2H8bk0scnZWZCejbJpVwKzPODxU.roa (hash: hMVwt69RjByg01GyzZs8pwlz2+q4Wpy8Ui3CHMqWQVM=)
2: BhKXE6iuo9SfBVLFhVn_mkUc-7o.roa (hash: 6UQPEWEZQ8R2LqnkEpCKEGwsYAPkUMrvkndL11WKeoQ=)
3: SYbHOZTQLZH8l9kW6YCabZgeaxc.crl (hash: I7GiaIfhCefSRUBysWd2z8dvsZQRcn/9nRrzAXFn6sQ=)
4: dEkWV8xPj6ZjKfgx5t3dIacQr1A.roa (hash: ZOk1wKX5K0Mx4fspQclTvx+3kOne5shTmWgvCBY9O/Q=)
5: j-RMRHJ23qu7rbAmxPP-MPbufuc.roa (hash: dJtuGeJTvCUEBM+hGg9srwzgusTpj+o/Wmaam12pfeg=)
6: jQ5qWaYZOuGFbmK6xWnSAiBZvC4.roa (hash: hOBNFEt7+n9S44ThfKSG8bjP2CvsYahZ60/Dq1Sii/s=)
7: kYpZLQ-AuudDB2VaPbw0Spka5lg.roa (hash: 5naLUifPbVvyChqmHEXOpfanoJmyL4cI6dCLv8ZRPLk=)
8: xsBxTTHCu0M91jc-x-84709M1aw.roa (hash: n7OhK3FL5HSbtyKHt6+A8Y5XXP+dcUu4LzkiF/oZmAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:30:7a:02:2d:f4:c0:15:2c:15:b2:2c:02:26:49:ff:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Dec 18 08:01:00 2025 GMT
Not After : Dec 19 08:01:00 2025 GMT
Subject: CN=7b29b9269e9d0b43414f7be03cfc8846e4791f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ee:3b:35:fc:bd:a6:a7:99:c2:8f:5c:5b:38:
aa:60:d3:c4:99:c3:f9:02:b4:32:20:68:45:c5:c3:
f1:c0:ff:1e:bf:4d:2c:29:03:bc:c1:7e:e8:87:0c:
75:73:6d:18:b9:ae:3f:f4:cd:c0:00:55:25:b5:ea:
f2:e9:62:4a:2f:8f:d9:ee:e8:a7:3a:a6:e8:79:73:
ce:08:56:3d:19:41:3a:d0:6f:3a:03:4b:cb:41:1f:
d4:4e:92:03:e1:ad:e9:ce:0f:73:cc:cf:5f:e7:3e:
a3:2e:5d:a5:6c:4b:05:39:b6:62:49:4b:57:25:79:
b8:9e:c7:db:fd:2c:72:47:42:18:6f:da:96:65:5c:
81:0b:32:86:00:75:f8:f3:cf:be:03:6d:ed:64:71:
1a:5b:7c:72:ec:ec:be:d3:53:fc:0e:3a:62:be:da:
fe:2e:c0:f3:02:3a:97:0c:62:96:dd:8a:08:52:3c:
8c:19:5e:39:76:2e:f8:75:53:dc:bd:ac:54:43:93:
d9:b4:79:1a:97:5c:18:c4:f0:8d:3c:d7:ec:3a:5e:
06:fd:21:a3:1f:a0:3f:a9:34:a1:d4:cd:2d:63:e2:
a2:14:cf:05:e2:18:70:35:17:19:71:8d:39:0e:dc:
b7:83:11:e8:8c:69:24:20:78:f5:04:89:b1:7b:84:
71:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:29:B9:26:9E:9D:0B:43:41:4F:7B:E0:3C:FC:88:46:E4:79:1F:04
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:96:d7:2d:b8:97:c4:c9:82:52:4a:5d:c6:2d:36:e5:f3:39:
8e:83:fe:fe:af:36:f8:c9:a7:50:5b:8f:8b:60:86:04:16:26:
48:37:c9:78:d0:58:d4:5f:39:8f:f1:11:b9:1f:a7:95:b5:b8:
4e:24:33:74:1c:11:51:ea:1c:fc:de:5b:a2:01:49:d4:10:94:
34:32:31:74:ae:07:d1:34:1a:2d:0b:c7:77:a6:4e:92:cd:36:
a9:10:58:8d:93:6a:f9:b1:85:89:66:73:8c:9d:10:98:64:5f:
15:0a:cb:53:55:9c:db:d2:31:f0:2b:d3:0a:75:6f:96:a4:b8:
5b:79:41:bc:10:3c:b0:37:db:aa:74:76:22:d4:ce:60:91:86:
06:4b:33:a3:1d:33:83:c2:76:1b:82:1f:cd:66:ea:68:0f:95:
a6:87:65:eb:5a:19:cb:12:79:de:67:10:cb:13:08:d8:b6:90:
00:e9:7c:3a:29:e2:e0:16:d4:51:d3:67:17:34:32:c3:a7:53:
f0:c9:f7:95:44:b8:95:c4:c6:6f:81:f6:a0:b4:b1:38:23:d8:
dc:49:c4:dd:16:25:28:8a:6a:ce:7f:5c:e5:b3:32:12:fd:53:
12:55:5a:05:d0:f1:4c:19:97:5a:fc:64:b8:7e:ca:c3:3f:5c:
6e:15:88:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:17:21 2025 by rpki-client