This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft File: SyOwbWDsPna0kgsrZBQfo69uX7s.mft (raw, json) Hash identifier: cDZEK3KVQ850DM7pZJLHwoDhSJ5eyS+1d6dAQTPbzk4= Subject key identifier: 36:2C:1A:E9:B7:D6:8E:77:7C:A8:CC:CA:8F:FC:40:80:0B:26:6E:F8 Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB Certificate issuer: /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb Certificate serial: 019AF31C4486FD21DF7D009CAD340439864F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft Manifest number: 0ED3 Signing time: Sat 06 Dec 2025 10:01:47 +0000 Manifest this update: Sat 06 Dec 2025 10:01:47 +0000 Manifest next update: Sun 07 Dec 2025 10:01:47 +0000 Files and hashes: 1: 2FAwhQu6ok9bOg22C73ws6AzeTA.roa (hash: NjIG5kr55nDYslaJlr/UrfkcBYGbRIfRwF+wfXlzJDo=) 2: SyOwbWDsPna0kgsrZBQfo69uX7s.crl (hash: p0l+2TU2in9p4fdVE53VTfPuqXRXZKta+DWBmZlbhxY=) 3: oPMyM9DlgGOhMRIoLDO1OdPuuaA.roa (hash: ZO3/wqoicRWPL4+s7QSyOKEb1NF7BoLY/968foDdnC8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:44:86:fd:21:df:7d:00:9c:ad:34:04:39:86:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb Validity Not Before: Dec 6 10:01:47 2025 GMT Not After : Dec 7 10:01:47 2025 GMT Subject: CN=362c1ae9b7d68e777ca8ccca8ffc40800b266ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:63:d5:97:65:f5:2e:f0:36:cc:87:46:fb:b1: 65:79:d0:12:dd:53:e0:53:23:87:76:02:86:a5:c0: 6f:30:f2:fd:88:8c:49:11:e9:df:7d:2e:1e:59:44: 1c:ff:48:9f:98:b1:0f:f0:ae:6a:48:9a:93:80:29: 56:e6:11:1d:3b:54:34:b1:fd:16:63:a1:f7:22:58: b7:05:15:cf:3a:27:6d:84:0f:06:b7:3f:7b:31:0a: cc:a2:8e:1e:71:30:c8:65:17:4f:1f:9a:45:20:b7: 60:03:45:90:ed:ec:7e:cf:68:f3:a9:55:07:c2:eb: 7b:fc:e7:2b:c2:a8:83:d2:0e:9b:98:a1:62:dc:30: 74:93:e8:d2:44:8d:fe:80:f7:53:b1:ef:1a:24:8c: a4:69:ea:af:59:59:fb:a0:ba:89:17:27:01:be:ed: 50:3e:82:f8:3d:7b:30:28:c9:ec:10:4f:85:aa:ad: 47:f3:9f:4d:09:1a:f9:35:4f:ee:0f:d2:18:28:a0: eb:da:f6:5e:11:67:16:ff:f7:54:77:f2:5e:05:a5: 3c:55:04:e3:a3:f6:8d:74:a6:1b:31:99:5e:41:91: 78:a7:53:46:8c:8a:9b:cd:dc:27:12:92:7a:10:b1: 03:6c:89:40:43:2b:65:0d:e5:5b:dd:40:49:55:4f: 1e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2C:1A:E9:B7:D6:8E:77:7C:A8:CC:CA:8F:FC:40:80:0B:26:6E:F8 X509v3 Authority Key Identifier: keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0d:95:8d:61:b9:dc:9c:68:99:8d:77:b0:62:ff:8b:37:d1: 60:34:2a:a1:60:c4:6b:60:eb:ed:61:6b:64:50:3b:04:25:ba: 8a:4b:82:8f:d5:95:b7:b7:fb:79:3a:ca:2e:81:e4:30:6a:78: 7e:5d:d5:b0:7e:b5:c9:b0:bc:fa:11:b6:db:a1:07:9a:b5:79: 27:d7:99:dd:d5:34:42:14:c8:e4:78:9f:0d:96:3b:e1:98:35: 95:ff:35:ed:0a:54:4a:45:b4:28:41:18:7c:c4:bc:9a:89:ec: 23:73:69:3f:97:67:d3:cb:4b:e6:21:9b:9f:35:96:8a:42:91: 6e:07:32:b1:10:a5:23:59:7e:f8:39:8b:ba:28:76:14:25:b8: 61:79:6e:31:ba:13:f7:6f:73:11:d2:44:f2:7b:bf:75:5f:d8: d3:f0:31:6e:20:e8:cc:71:de:f0:50:88:ac:26:6e:b4:e4:1b: c7:70:07:f0:0a:df:d8:4d:67:f0:bd:88:51:dc:5d:5f:fb:f4: 72:0d:a5:4d:85:eb:14:a8:eb:f8:52:60:fb:10:55:91:1d:c5: 5c:18:32:24:9d:33:d9:ad:de:33:d6:9b:ef:ec:ee:2f:ef:9d: 76:0f:b0:e9:b8:e0:c9:02:fa:29:98:e6:f6:f1:cb:37:94:e1: ad:8c:fa:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHESG/SHffQCcrTQEOYZPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMjNiMDZkNjBlYzNlNzZiNDkyMGIyYjY0MTQxZmEzYWY2 ZTVmYmIwHhcNMjUxMjA2MTAwMTQ3WhcNMjUxMjA3MTAwMTQ3WjAzMTEwLwYDVQQD EygzNjJjMWFlOWI3ZDY4ZTc3N2NhOGNjY2E4ZmZjNDA4MDBiMjY2ZWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GPVl2X1LvA2zIdG+7FledAS3VPg UyOHdgKGpcBvMPL9iIxJEenffS4eWUQc/0ifmLEP8K5qSJqTgClW5hEdO1Q0sf0W Y6H3Ili3BRXPOidthA8Gtz97MQrMoo4ecTDIZRdPH5pFILdgA0WQ7ex+z2jzqVUH wut7/OcrwqiD0g6bmKFi3DB0k+jSRI3+gPdTse8aJIykaeqvWVn7oLqJFycBvu1Q PoL4PXswKMnsEE+Fqq1H859NCRr5NU/uD9IYKKDr2vZeEWcW//dUd/JeBaU8VQTj o/aNdKYbMZleQZF4p1NGjIqbzdwnEpJ6ELEDbIlAQytlDeVb3UBJVU8e9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYsGum31o53fKjMyo/8QIALJm74MB8GA1UdIwQY MBaAFEsjsG1g7D52tJILK2QUH6Ovbl+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3lPd2JXRHNQbmEwa2dzclpCUWZvNjl1WDdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS81YWFjZjMtYmJjOS00M2M0LTg2ZjAt NTRmNmU1MmY1NDdiLzEvU3lPd2JXRHNQbmEwa2dzclpCUWZvNjl1WDdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS81YWFjZjMtYmJjOS00M2M0LTg2ZjAtNTRmNmU1MmY1NDdi LzEvU3lPd2JXRHNQbmEwa2dzclpCUWZvNjl1WDdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQ2VjWG5 3JxomY13sGL/izfRYDQqoWDEa2Dr7WFrZFA7BCW6ikuCj9WVt7f7eTrKLoHkMGp4 fl3VsH61ybC8+hG226EHmrV5J9eZ3dU0QhTI5HifDZY74Zg1lf817QpUSkW0KEEY fMS8monsI3NpP5dn08tL5iGbnzWWikKRbgcysRClI1l++DmLuih2FCW4YXluMboT 929zEdJE8nu/dV/Y0/AxbiDozHHe8FCIrCZutOQbx3AH8Arf2E1n8L2IUdxdX/v0 cg2lTYXrFKjr+FJg+xBVkR3FXBgyJJ0z2a3eM9ab7+zuL++ddg+w6bjgyQL6KZjm 9vHLN5ThrYz6Rg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:20:16 2025 by rpki-client