This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft File: SROyYa2_ee42pqOt-mh6fsZYIQs.mft (raw, json) Hash identifier: jv2J61uyMBAnPYQ2YxZ0wpY1Ahy6jEwM3fLrTU/5F0A= Subject key identifier: 10:EB:3F:A0:EF:AA:52:88:98:85:FF:44:66:37:C3:40:A1:26:9E:F8 Authority key identifier: 49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B Certificate issuer: /CN=4913b261adbf79ee36a6a3adfa687a7ec658210b Certificate serial: 019B3FECB9943183B856DDAA132FBBC648EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft Manifest number: 0E89 Signing time: Sun 21 Dec 2025 08:00:37 +0000 Manifest this update: Sun 21 Dec 2025 08:00:37 +0000 Manifest next update: Mon 22 Dec 2025 08:00:37 +0000 Files and hashes: 1: 9VMEesSV6a-x_SjygxcaosIGoNs.roa (hash: j886WgvsxRYSzK/QB3dbJNQTgLbqJaUrZ8NkjBVnb/g=) 2: SROyYa2_ee42pqOt-mh6fsZYIQs.crl (hash: cddpEL6cTs7GJ4Hx0B4LGJrw/miuHcNm0RU4GIIfrlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:b9:94:31:83:b8:56:dd:aa:13:2f:bb:c6:48:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4913b261adbf79ee36a6a3adfa687a7ec658210b Validity Not Before: Dec 21 08:00:37 2025 GMT Not After : Dec 22 08:00:37 2025 GMT Subject: CN=10eb3fa0efaa52889885ff446637c340a1269ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9f:96:5c:68:31:0a:b4:16:85:7e:e5:75:4b: 3f:03:cf:95:d1:1c:66:c6:29:f9:b8:f5:27:70:76: 46:52:39:79:03:f5:f2:a7:9d:53:16:89:7b:39:32: e4:fe:3c:c0:d9:9f:05:0d:50:19:4c:5c:b8:74:28: b8:2b:30:f7:00:d1:78:15:41:d2:a9:fa:73:be:37: 56:f4:5d:2e:33:f7:bd:39:d7:11:38:7a:c5:6d:c3: 51:d8:57:82:7a:cf:f2:76:7d:b5:c5:cc:c6:9a:4f: 0c:0f:ba:ab:f7:94:69:0f:78:62:d2:09:6e:60:37: c5:96:25:2e:09:ad:6d:a3:9f:1c:31:52:75:30:c3: e3:35:70:ab:ac:9a:af:09:42:17:5d:4b:c8:a8:0c: 26:d3:c5:0a:75:12:5e:ed:7f:26:cb:a6:3e:69:0f: cc:90:20:63:c7:c7:19:f6:d7:fe:c5:4d:0f:27:11: 3b:8d:65:01:4e:20:b7:4d:b7:84:86:11:de:5d:41: de:ac:dd:48:45:67:93:e7:7c:20:29:fe:54:1d:a3: c6:d1:a8:87:43:f6:a9:42:35:70:9a:1e:ff:d4:6a: 8e:85:33:5e:66:a4:6d:30:52:ec:f2:20:36:23:1c: 48:50:ed:3c:2e:b9:e8:f5:16:f7:73:91:94:b4:eb: 01:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EB:3F:A0:EF:AA:52:88:98:85:FF:44:66:37:C3:40:A1:26:9E:F8 X509v3 Authority Key Identifier: keyid:49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:72:3d:b4:f4:98:1e:c5:84:73:09:8e:77:5d:e2:84:0a:f9: 1f:03:5b:18:3d:9c:12:e8:3d:42:15:29:a3:cc:ab:a0:9b:e1: fa:12:4e:2d:7b:78:6c:19:60:3a:84:1a:1b:0b:b2:93:cd:e0: 0e:7f:6e:1f:ad:9e:73:d5:85:07:cc:b2:ca:df:e5:26:22:5d: db:e0:af:4a:b9:60:f0:95:58:7b:35:64:cb:61:e0:54:78:52: 8d:66:40:a4:7e:54:c3:57:0a:af:6d:06:c1:a0:01:b6:35:62: ef:de:9f:72:ac:21:7f:63:02:e5:8d:93:62:69:10:de:03:82: d4:69:4b:f0:82:9d:2b:a6:2d:c8:f2:6f:27:5e:70:d2:b0:65: 12:78:57:c4:7f:b4:81:5a:5b:93:92:c9:1a:a8:89:57:66:51: e1:4c:65:42:1e:fa:37:ec:b9:4a:07:56:7f:87:b7:50:59:39: bf:ef:7b:3d:d9:13:9c:da:04:49:e8:eb:d9:ea:67:ff:24:dc: db:93:32:c9:5a:b2:09:55:91:c7:e6:bc:d7:b0:a5:4e:ce:bd: 36:0d:d7:cd:ca:a8:ae:29:44:a0:91:ba:cb:bf:99:f9:27:36: 07:31:e9:b0:18:88:92:0b:db:78:c7:0f:5c:9f:04:3d:da:bb: b2:2f:2c:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7LmUMYO4Vt2qEy+7xkjrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MTNiMjYxYWRiZjc5ZWUzNmE2YTNhZGZhNjg3YTdlYzY1 ODIxMGIwHhcNMjUxMjIxMDgwMDM3WhcNMjUxMjIyMDgwMDM3WjAzMTEwLwYDVQQD EygxMGViM2ZhMGVmYWE1Mjg4OTg4NWZmNDQ2NjM3YzM0MGExMjY5ZWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Z+WXGgxCrQWhX7ldUs/A8+V0Rxm xin5uPUncHZGUjl5A/Xyp51TFol7OTLk/jzA2Z8FDVAZTFy4dCi4KzD3ANF4FUHS qfpzvjdW9F0uM/e9OdcROHrFbcNR2FeCes/ydn21xczGmk8MD7qr95RpD3hi0glu YDfFliUuCa1to58cMVJ1MMPjNXCrrJqvCUIXXUvIqAwm08UKdRJe7X8my6Y+aQ/M kCBjx8cZ9tf+xU0PJxE7jWUBTiC3TbeEhhHeXUHerN1IRWeT53wgKf5UHaPG0aiH Q/apQjVwmh7/1GqOhTNeZqRtMFLs8iA2IxxIUO08Lrno9Rb3c5GUtOsBUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDrP6DvqlKImIX/RGY3w0ChJp74MB8GA1UdIwQY MBaAFEkTsmGtv3nuNqajrfpoen7GWCELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1JPeVlhMl9lZTQycHFPdC1taDZmc1pZSVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84ODBjNDctZmE5Mi00ZWVmLWIyNzYt YThhMGU1NWY1ZTMxLzEvU1JPeVlhMl9lZTQycHFPdC1taDZmc1pZSVFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC84ODBjNDctZmE5Mi00ZWVmLWIyNzYtYThhMGU1NWY1ZTMx LzEvU1JPeVlhMl9lZTQycHFPdC1taDZmc1pZSVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHI9tPSY HsWEcwmOd13ihAr5HwNbGD2cEug9QhUpo8yroJvh+hJOLXt4bBlgOoQaGwuyk83g Dn9uH62ec9WFB8yyyt/lJiJd2+CvSrlg8JVYezVky2HgVHhSjWZApH5Uw1cKr20G waABtjVi796fcqwhf2MC5Y2TYmkQ3gOC1GlL8IKdK6YtyPJvJ15w0rBlEnhXxH+0 gVpbk5LJGqiJV2ZR4UxlQh76N+y5SgdWf4e3UFk5v+97PdkTnNoESejr2epn/yTc 25MyyVqyCVWRx+a817ClTs69Ng3XzcqorilEoJG6y7+Z+Sc2BzHpsBiIkgvbeMcP XJ8EPdq7si8sgQ== -----END CERTIFICATE-----Generated at Sun Dec 21 15:32:31 2025 by rpki-client