This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft File: SROyYa2_ee42pqOt-mh6fsZYIQs.mft (raw, json) Hash identifier: kpXkT/NDmnMb/3/9FUC9pol0NAA1LUrqu/CjFE76Vqo= Subject key identifier: 0F:A6:52:58:95:E1:F5:B8:DD:70:8C:61:50:31:DE:48:A6:B3:1A:11 Authority key identifier: 49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B Certificate issuer: /CN=4913b261adbf79ee36a6a3adfa687a7ec658210b Certificate serial: 019B3DFEA485000FCA40F98C3F2EC5234A5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft Manifest number: 0E88 Signing time: Sat 20 Dec 2025 23:00:56 +0000 Manifest this update: Sat 20 Dec 2025 23:00:56 +0000 Manifest next update: Sun 21 Dec 2025 23:00:56 +0000 Files and hashes: 1: 9VMEesSV6a-x_SjygxcaosIGoNs.roa (hash: j886WgvsxRYSzK/QB3dbJNQTgLbqJaUrZ8NkjBVnb/g=) 2: SROyYa2_ee42pqOt-mh6fsZYIQs.crl (hash: K3mjVbkiAhjoKq4vTUxn40IJYaDbZLaBukz7L2KF4Pk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:a4:85:00:0f:ca:40:f9:8c:3f:2e:c5:23:4a:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4913b261adbf79ee36a6a3adfa687a7ec658210b Validity Not Before: Dec 20 23:00:56 2025 GMT Not After : Dec 21 23:00:56 2025 GMT Subject: CN=0fa6525895e1f5b8dd708c615031de48a6b31a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0d:c7:64:b8:d7:25:46:40:15:c8:47:4a:f0: 29:68:dd:4f:61:77:0e:05:2f:70:7b:0d:75:e4:19: 26:39:89:4e:50:02:f2:23:4d:47:71:99:67:b6:dc: 6d:35:b7:87:93:d2:68:3f:f9:68:fe:7c:e2:90:bf: ce:43:f2:aa:7c:dc:e3:25:57:79:87:1e:2d:90:fa: d2:5b:b0:b9:3f:d0:9e:45:43:2f:64:a1:83:f9:cb: a2:12:ff:d9:a6:4b:b8:7a:41:70:95:d3:0b:63:9d: cd:c5:f2:86:1c:95:79:42:52:d8:af:0b:ba:e8:0f: 63:0f:9f:4b:8d:ac:41:c0:fe:cc:66:71:f5:08:23: 4a:e9:3f:1b:a0:0a:3c:97:3c:fe:78:cc:b0:a6:6e: 6e:9e:31:21:8e:b8:9b:99:70:56:76:65:c6:c4:69: c1:67:fa:5f:e2:fe:f5:f7:67:18:e7:a5:cb:04:38: 60:a9:8a:da:10:e6:88:69:e0:2f:cf:a1:02:b7:3b: 37:ec:e4:c8:62:b9:69:8b:ce:34:d7:16:5f:de:45: 5b:02:7c:04:d8:64:bc:e9:c8:d8:d1:4b:db:69:a8: 5e:7a:f4:92:a3:0e:1e:0c:c8:19:e1:2b:59:73:08: 8a:06:4a:b4:80:fd:3f:0f:36:99:34:38:a3:cf:ba: f6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A6:52:58:95:E1:F5:B8:DD:70:8C:61:50:31:DE:48:A6:B3:1A:11 X509v3 Authority Key Identifier: keyid:49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c9:e4:1c:53:f1:5b:6d:d5:e2:53:3a:11:c9:bd:d2:a2:bf: d8:ee:28:69:61:b1:65:c6:78:fe:37:2d:50:b3:e3:58:66:de: 67:1f:11:a2:ca:df:98:93:a0:1b:45:d5:88:7a:a0:5d:e6:68: ff:71:bf:1d:b2:74:be:10:4a:6a:49:53:95:cb:73:2a:c0:ce: 42:32:a2:eb:83:50:4a:f8:f5:78:04:41:6c:91:23:fc:3a:3b: bb:25:2b:40:9e:ed:6b:b8:23:7a:4b:e8:9d:d1:74:36:6b:f2: 26:c6:c8:21:47:79:5d:ec:6e:40:cf:16:de:40:2a:1c:64:5a: 1d:d1:be:d1:0d:6a:c8:95:df:8d:f4:e6:12:7f:6d:22:69:f1: 16:24:14:45:90:4a:75:8f:0c:0a:00:9c:5c:28:43:42:8d:56: f3:cf:cc:21:d3:d1:65:ae:9c:b0:87:88:65:6f:29:4d:67:34: 98:84:36:92:bd:7e:09:a3:23:e4:b5:bb:95:34:1a:60:73:1a: a1:52:75:e4:f5:16:dc:89:27:e9:21:88:e4:9c:56:24:77:9f: d5:18:a0:72:be:6f:bb:8a:bd:6f:64:91:6f:46:8d:1a:c9:3d: e9:60:ec:38:79:91:75:2d:f8:6d:84:2a:5f:dd:6a:44:fb:00: 7b:c4:dc:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/qSFAA/KQPmMPy7FI0pbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MTNiMjYxYWRiZjc5ZWUzNmE2YTNhZGZhNjg3YTdlYzY1 ODIxMGIwHhcNMjUxMjIwMjMwMDU2WhcNMjUxMjIxMjMwMDU2WjAzMTEwLwYDVQQD EygwZmE2NTI1ODk1ZTFmNWI4ZGQ3MDhjNjE1MDMxZGU0OGE2YjMxYTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ3HZLjXJUZAFchHSvApaN1PYXcO BS9wew115BkmOYlOUALyI01HcZlnttxtNbeHk9JoP/lo/nzikL/OQ/KqfNzjJVd5 hx4tkPrSW7C5P9CeRUMvZKGD+cuiEv/Zpku4ekFwldMLY53NxfKGHJV5QlLYrwu6 6A9jD59LjaxBwP7MZnH1CCNK6T8boAo8lzz+eMywpm5unjEhjribmXBWdmXGxGnB Z/pf4v7192cY56XLBDhgqYraEOaIaeAvz6ECtzs37OTIYrlpi8401xZf3kVbAnwE 2GS86cjY0UvbaaheevSSow4eDMgZ4StZcwiKBkq0gP0/DzaZNDijz7r21wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+mUliV4fW43XCMYVAx3kimsxoRMB8GA1UdIwQY MBaAFEkTsmGtv3nuNqajrfpoen7GWCELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1JPeVlhMl9lZTQycHFPdC1taDZmc1pZSVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84ODBjNDctZmE5Mi00ZWVmLWIyNzYt YThhMGU1NWY1ZTMxLzEvU1JPeVlhMl9lZTQycHFPdC1taDZmc1pZSVFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC84ODBjNDctZmE5Mi00ZWVmLWIyNzYtYThhMGU1NWY1ZTMx LzEvU1JPeVlhMl9lZTQycHFPdC1taDZmc1pZSVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMnkHFPx W23V4lM6Ecm90qK/2O4oaWGxZcZ4/jctULPjWGbeZx8RosrfmJOgG0XViHqgXeZo /3G/HbJ0vhBKaklTlctzKsDOQjKi64NQSvj1eARBbJEj/Do7uyUrQJ7ta7gjekvo ndF0NmvyJsbIIUd5XexuQM8W3kAqHGRaHdG+0Q1qyJXfjfTmEn9tImnxFiQURZBK dY8MCgCcXChDQo1W88/MIdPRZa6csIeIZW8pTWc0mIQ2kr1+CaMj5LW7lTQaYHMa oVJ15PUW3Ikn6SGI5JxWJHef1Rigcr5vu4q9b2SRb0aNGsk96WDsOHmRdS34bYQq X91qRPsAe8Tc3A== -----END CERTIFICATE-----Generated at Sun Dec 21 07:07:33 2025 by rpki-client