This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json) Hash identifier: fqmYMsy4Q2UyQKYENbFr4iMUQnqy84mhu7AIlsHV1Ck= Subject key identifier: 65:C6:9E:84:36:BC:9F:7B:AE:51:72:77:57:90:DA:1F:19:B9:91:18 Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec Certificate serial: 019B4392A74BFDFD47010E4F80FC02989F6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft Manifest number: 179C Signing time: Mon 22 Dec 2025 01:00:42 +0000 Manifest this update: Mon 22 Dec 2025 01:00:42 +0000 Manifest next update: Tue 23 Dec 2025 01:00:42 +0000 Files and hashes: 1: UJPW0acNcxjVpnidxLVQuiuOXGQ.roa (hash: a2O5xdupJ9/xqQl/Fb0t3DFJlemLpiFP2p64rJERpP8=) 2: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: jXXBGbMloUeiSwzQJekImDQZUBwFLwvYKBHYraZYfFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:a7:4b:fd:fd:47:01:0e:4f:80:fc:02:98:9f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec Validity Not Before: Dec 22 01:00:42 2025 GMT Not After : Dec 23 01:00:42 2025 GMT Subject: CN=65c69e8436bc9f7bae5172775790da1f19b99118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bd:48:9e:70:e2:12:3c:4b:8f:a1:5f:7f:e8: 08:28:d9:22:56:a5:7b:22:51:92:e8:e0:6a:71:a1: e1:7e:ce:3a:91:2b:79:00:8a:17:72:b8:0d:ce:91: ce:0b:43:0e:4a:f1:df:12:cb:fc:e2:35:a2:51:d8: 7f:42:2b:cb:06:70:cf:02:b2:40:d9:b6:1b:3a:8a: 3b:15:db:8d:b3:bd:4b:26:e0:79:45:ec:9f:dc:05: 00:48:71:76:f0:5f:4e:b1:a0:18:c2:d6:5d:4b:f3: 0a:0f:71:90:53:70:e5:0d:b8:de:88:91:49:4f:3e: a5:00:67:41:37:14:80:95:1d:90:95:90:0d:95:35: 25:4e:ae:a6:eb:39:00:6c:97:de:34:22:8b:31:52: bc:9d:46:ef:16:ab:28:5f:98:35:78:8b:9f:3d:93: 62:da:0d:f4:9d:ec:21:d4:fa:e0:dc:6e:0b:dd:fd: b9:5b:9c:fe:d5:f4:c1:f8:3f:ef:c8:79:fa:0f:b4: 8e:55:33:5c:ea:f0:cf:35:b8:fe:b8:6e:07:a9:0a: 34:07:51:75:8d:58:67:70:a8:ac:68:55:f0:7c:24: 8d:0f:43:df:e8:49:6f:66:c2:ce:44:3f:b9:16:43: 58:5a:62:3e:2e:af:a1:c8:39:42:b9:8a:d1:61:9d: e1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C6:9E:84:36:BC:9F:7B:AE:51:72:77:57:90:DA:1F:19:B9:91:18 X509v3 Authority Key Identifier: keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:96:ba:f1:31:23:60:e6:63:9e:13:9b:e3:61:b9:96:e3:64: c2:4c:57:ea:7b:86:70:02:2e:cb:9f:9d:a0:35:4a:23:f6:a3: 06:64:fc:d8:10:6f:e4:4c:a8:54:0f:94:ec:c7:c9:f9:58:19: 91:ce:6b:ba:50:a0:af:ac:7a:28:d7:6f:46:12:dc:c7:7e:1c: 54:5e:8e:23:5b:0c:14:d7:80:34:9e:fa:9b:5c:6a:1b:b6:a9: df:46:d9:a2:0b:c8:c1:39:d8:5a:81:72:ec:8b:ef:08:f1:d2: 1f:46:7c:ff:dc:11:2c:e9:5d:99:5e:41:62:af:0c:56:9c:2a: 39:b0:68:bd:56:eb:cb:d3:2b:f8:c8:08:f5:0f:70:8a:f1:26: 6d:27:e5:ee:64:06:2d:7b:6b:84:2c:51:41:e3:12:c7:51:39: ff:6c:bc:1f:a7:80:80:cb:c8:89:c4:3f:e8:b4:9f:63:be:b2: 40:ed:53:de:7c:03:c8:ac:4d:3e:9b:c1:50:eb:9a:6d:a1:d9: e6:77:11:14:a8:b1:94:6f:12:06:23:cc:a7:bf:bb:f3:88:b0: ff:ac:24:7a:1c:be:20:0c:e4:ab:fd:3e:87:44:fc:b3:e8:30: b2:1c:a4:96:2b:78:1d:94:af:28:4e:09:52:35:70:fc:e2:ef: f8:bb:32:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkqdL/f1HAQ5PgPwCmJ9rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMmVlMmIzOTcxMjM3N2I0YmZlYzllNjZhYzdlNmU5MDhl ZmNlZWMwHhcNMjUxMjIyMDEwMDQyWhcNMjUxMjIzMDEwMDQyWjAzMTEwLwYDVQQD Eyg2NWM2OWU4NDM2YmM5ZjdiYWU1MTcyNzc1NzkwZGExZjE5Yjk5MTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr1InnDiEjxLj6Fff+gIKNkiVqV7 IlGS6OBqcaHhfs46kSt5AIoXcrgNzpHOC0MOSvHfEsv84jWiUdh/QivLBnDPArJA 2bYbOoo7FduNs71LJuB5Reyf3AUASHF28F9OsaAYwtZdS/MKD3GQU3DlDbjeiJFJ Tz6lAGdBNxSAlR2QlZANlTUlTq6m6zkAbJfeNCKLMVK8nUbvFqsoX5g1eIufPZNi 2g30newh1Prg3G4L3f25W5z+1fTB+D/vyHn6D7SOVTNc6vDPNbj+uG4HqQo0B1F1 jVhncKisaFXwfCSND0Pf6ElvZsLORD+5FkNYWmI+Lq+hyDlCuYrRYZ3hhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXGnoQ2vJ97rlFyd1eQ2h8ZuZEYMB8GA1UdIwQY MBaAFLMu4rOXEjd7S/7J5mrH5ukI787sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3k3aXM1Y1NOM3RMX3NubWFzZm02UWp2enV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kZmE1MWItNDZhYS00MDg0LWEzNDMt ZjAxNmNhNWRhMjE5LzEvc3k3aXM1Y1NOM3RMX3NubWFzZm02UWp2enV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9kZmE1MWItNDZhYS00MDg0LWEzNDMtZjAxNmNhNWRhMjE5 LzEvc3k3aXM1Y1NOM3RMX3NubWFzZm02UWp2enV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5a68TEj YOZjnhOb42G5luNkwkxX6nuGcAIuy5+doDVKI/ajBmT82BBv5EyoVA+U7MfJ+VgZ kc5rulCgr6x6KNdvRhLcx34cVF6OI1sMFNeANJ76m1xqG7ap30bZogvIwTnYWoFy 7IvvCPHSH0Z8/9wRLOldmV5BYq8MVpwqObBovVbry9Mr+MgI9Q9wivEmbSfl7mQG LXtrhCxRQeMSx1E5/2y8H6eAgMvIicQ/6LSfY76yQO1T3nwDyKxNPpvBUOuabaHZ 5ncRFKixlG8SBiPMp7+784iw/6wkehy+IAzkq/0+h0T8s+gwshyklit4HZSvKE4J UjVw/OLv+LsynA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:47:33 2025 by rpki-client