This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft File: SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json) Hash identifier: NR0wZ/oWCrCAyujwlzqH/w3wD0gk7U9ZKejC3pgcrdY= Subject key identifier: 1F:B4:68:B2:25:F8:46:E2:C2:07:91:1D:CC:C6:CC:03:CE:0F:7F:BE Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18 Certificate issuer: /CN=498f55534e38eac2c327a941e1a26b9c4031be18 Certificate serial: 019B3D90717DBA842A328F85AC92381959E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft Manifest number: 0E6F Signing time: Sat 20 Dec 2025 21:00:34 +0000 Manifest this update: Sat 20 Dec 2025 21:00:34 +0000 Manifest next update: Sun 21 Dec 2025 21:00:34 +0000 Files and hashes: 1: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: yLjskyS+WCoBpEY3SV+yhBS1MOHS4uq5CddV0aZlcbI=) 2: bTKBc42tXDi_zX0dMq0HddtScgI.roa (hash: lEi06vaib9NpWsrvDpoqTavKihSNsj4G7hhaYfH95VQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:71:7d:ba:84:2a:32:8f:85:ac:92:38:19:59:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18 Validity Not Before: Dec 20 21:00:34 2025 GMT Not After : Dec 21 21:00:34 2025 GMT Subject: CN=1fb468b225f846e2c207911dccc6cc03ce0f7fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6b:4e:e8:b4:4e:3e:b6:d9:a3:61:1d:14:5d: da:08:3f:df:8c:88:00:f8:8c:45:7a:55:82:ce:ae: 00:91:4e:ba:81:0f:8e:a3:de:68:dd:e1:9b:28:11: d1:20:3d:ca:f2:90:62:04:3e:3b:13:ec:a7:1c:91: 97:ce:cb:18:12:bc:d5:50:86:f7:c3:62:8e:f6:f2: 71:74:a2:2f:b0:73:20:a5:e0:64:23:21:ea:49:83: 44:68:72:65:91:1f:78:b3:9c:39:18:ad:e0:42:45: 6f:8d:65:69:1e:0c:0b:36:47:c6:cb:cd:3f:1f:eb: e8:5a:31:48:2a:0f:12:48:75:cd:05:07:67:ee:05: db:c0:ce:fa:f4:61:7c:e4:9b:f5:59:45:76:cb:77: 6a:a8:8d:80:3b:23:c9:61:51:c5:11:a0:d5:cb:d9: f7:c3:ea:99:74:e0:e1:07:65:0a:9d:1c:c8:4f:39: 4e:0e:2a:0b:f6:c5:ec:f1:bf:11:62:19:4a:07:64: dd:65:be:55:9a:d2:70:88:9c:93:cc:11:39:00:84: 4a:ea:4d:5e:be:27:51:01:fb:5d:b6:a6:46:49:e5: 3b:0b:53:8e:14:9c:79:97:ae:77:9b:5a:72:61:94: 42:9c:1c:d4:85:a8:09:27:80:01:ab:29:dd:bf:88: ec:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B4:68:B2:25:F8:46:E2:C2:07:91:1D:CC:C6:CC:03:CE:0F:7F:BE X509v3 Authority Key Identifier: keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ae:57:57:f6:b3:f2:f4:f6:ba:89:19:d4:e8:1b:b6:bf:04: 06:e7:58:c8:76:38:10:00:44:e7:08:c7:c0:37:db:9d:05:16: dd:d9:8e:5e:a3:4d:71:4a:71:39:de:3b:fe:b4:53:41:af:21: f9:2b:77:ba:14:60:f3:79:bd:70:67:aa:d4:47:64:d6:68:bf: 7d:cc:1d:aa:7f:3d:93:75:b1:47:8a:5a:6b:7f:f3:95:fb:c4: 8a:76:7c:01:d4:88:e2:c8:35:dd:8a:31:28:9a:8a:4b:5c:f9: b8:b3:98:8f:a5:72:93:12:a1:41:fe:50:43:f4:25:db:1f:67: 11:32:37:2e:1e:60:f1:e4:de:3e:86:b3:c4:44:df:52:7a:90: b6:f9:1d:54:f1:7b:56:bb:e4:48:dd:d0:51:da:c9:32:f8:92: 6e:45:d0:9f:bb:51:f8:1c:5e:90:1f:7c:1a:b1:d5:26:6c:2c: bb:ce:26:9e:c0:83:e5:68:ef:25:2d:cc:6d:c2:a6:0c:fb:74: d3:a1:4f:03:23:91:79:b9:3f:ca:cd:de:12:f6:85:c0:ff:f4: a9:a0:2a:70:88:3b:47:bf:82:6c:43:26:d3:7f:9a:6a:a4:db: 7e:f2:fd:0a:e5:de:f5:c1:73:67:b0:9a:e7:9c:a0:97:e2:a2: 67:75:05:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kHF9uoQqMo+FrJI4GVnkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5OGY1NTUzNGUzOGVhYzJjMzI3YTk0MWUxYTI2YjljNDAz MWJlMTgwHhcNMjUxMjIwMjEwMDM0WhcNMjUxMjIxMjEwMDM0WjAzMTEwLwYDVQQD EygxZmI0NjhiMjI1Zjg0NmUyYzIwNzkxMWRjY2M2Y2MwM2NlMGY3ZmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mtO6LROPrbZo2EdFF3aCD/fjIgA +IxFelWCzq4AkU66gQ+Oo95o3eGbKBHRID3K8pBiBD47E+ynHJGXzssYErzVUIb3 w2KO9vJxdKIvsHMgpeBkIyHqSYNEaHJlkR94s5w5GK3gQkVvjWVpHgwLNkfGy80/ H+voWjFIKg8SSHXNBQdn7gXbwM769GF85Jv1WUV2y3dqqI2AOyPJYVHFEaDVy9n3 w+qZdODhB2UKnRzITzlODioL9sXs8b8RYhlKB2TdZb5VmtJwiJyTzBE5AIRK6k1e vidRAftdtqZGSeU7C1OOFJx5l653m1pyYZRCnBzUhagJJ4ABqyndv4jsaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+0aLIl+EbiwgeRHczGzAPOD3++MB8GA1UdIwQY MBaAFEmPVVNOOOrCwyepQeGia5xAMb4YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1k5VlUwNDQ2c0xESjZsQjRhSnJuRUF4dmhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yNWIzN2YtM2I2OC00ODRlLWIyOWYt M2VlNjM2MmVhMzdiLzEvU1k5VlUwNDQ2c0xESjZsQjRhSnJuRUF4dmhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8yNWIzN2YtM2I2OC00ODRlLWIyOWYtM2VlNjM2MmVhMzdi LzEvU1k5VlUwNDQ2c0xESjZsQjRhSnJuRUF4dmhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATq5XV/az 8vT2uokZ1Ogbtr8EBudYyHY4EABE5wjHwDfbnQUW3dmOXqNNcUpxOd47/rRTQa8h +St3uhRg83m9cGeq1Edk1mi/fcwdqn89k3WxR4paa3/zlfvEinZ8AdSI4sg13Yox KJqKS1z5uLOYj6VykxKhQf5QQ/Ql2x9nETI3Lh5g8eTePoazxETfUnqQtvkdVPF7 VrvkSN3QUdrJMviSbkXQn7tR+BxekB98GrHVJmwsu84mnsCD5WjvJS3MbcKmDPt0 06FPAyORebk/ys3eEvaFwP/0qaAqcIg7R7+CbEMm03+aaqTbfvL9CuXe9cFzZ7Ca 55ygl+KiZ3UFOg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:25:16 2025 by rpki-client