This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft File: SY_lsoKxx9sA9nu0oT2feVIFCLc.mft (raw, json) Hash identifier: 5WlAr8NRy9pDIv0ppeGL3/HKAySGxmhttQntx7uC4rM= Subject key identifier: 12:86:93:76:29:12:95:C2:9B:98:47:E0:A3:7C:9D:B1:CB:12:8A:2B Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7 Certificate issuer: /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7 Certificate serial: 019B631EDE1E528FED8C631033DB7C3B227A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft Manifest number: 0AC4 Signing time: Sun 28 Dec 2025 04:02:05 +0000 Manifest this update: Sun 28 Dec 2025 04:02:05 +0000 Manifest next update: Mon 29 Dec 2025 04:02:05 +0000 Files and hashes: 1: 8K5eZmO6X2MbGoBeK8qQvKjxcoU.roa (hash: KbO6Ab2C27LaWeTnTdU2aLz+mT2b0V6KrOUj4Nm0t/k=) 2: SY_lsoKxx9sA9nu0oT2feVIFCLc.crl (hash: jOw0MioRsHN2qFbM6mdqJPguGGy+nWIxG7yTyooNi28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1e:de:1e:52:8f:ed:8c:63:10:33:db:7c:3b:22:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7 Validity Not Before: Dec 28 04:02:05 2025 GMT Not After : Dec 29 04:02:05 2025 GMT Subject: CN=12869376291295c29b9847e0a37c9db1cb128a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ff:10:7b:b0:36:7c:b4:13:51:75:89:e7:d1: d9:fd:e5:03:79:81:63:53:b9:ec:f3:76:39:11:1c: 3d:4d:a0:5a:83:60:8e:e1:04:5e:2d:b8:60:ce:8e: 79:c8:1b:7d:36:33:3c:0e:eb:4a:5b:c0:bb:2f:37: 63:39:9f:ed:a9:76:11:ae:c3:22:4c:c7:a9:a2:a8: ca:b6:1c:34:30:03:f4:c1:c0:45:58:a4:ff:c2:a7: cb:aa:87:7b:a6:70:43:dd:77:b3:d3:cb:7c:9d:9c: 71:4e:0d:ab:1d:63:43:2d:6b:c0:e9:63:cf:bf:75: d6:39:79:75:d6:44:b1:6d:b3:18:b9:3e:3b:c1:92: eb:b5:b0:54:26:f9:bf:cd:b2:df:e1:fa:66:24:9a: e1:5a:01:41:4c:18:f3:e3:4c:8e:a4:5d:49:35:57: 96:5f:34:a0:54:6a:47:e9:d4:ed:8a:6c:34:25:64: 1a:10:fb:15:a4:1a:d8:61:2a:bf:69:60:17:38:64: 59:13:4b:ec:87:4f:c5:0a:a5:41:83:0e:fe:f8:61: 57:42:85:07:7f:77:c7:c3:e8:9a:17:a9:6f:e1:80: 8d:f8:44:e8:e4:2f:75:bf:f3:09:bc:e8:16:c1:0d: 37:2a:0a:d1:00:0c:2e:b2:bb:45:8d:7b:1e:2c:a9: bb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:86:93:76:29:12:95:C2:9B:98:47:E0:A3:7C:9D:B1:CB:12:8A:2B X509v3 Authority Key Identifier: keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:28:a6:8f:a2:1c:34:9a:ab:2b:2d:67:bb:84:23:49:2c:87: 6f:23:bc:50:eb:52:90:31:ea:9c:c0:d5:1f:f1:5e:d4:7f:d3: b9:8f:3c:a3:1c:ab:8e:b6:bb:21:43:4e:92:67:83:ad:9c:f2: b5:72:78:a0:55:58:3f:cb:86:78:b7:4c:25:df:f5:cd:5b:ed: df:30:e1:e1:a2:a5:0d:06:a1:82:18:d8:16:bd:11:7f:10:bc: a5:c7:d9:bd:59:d5:28:48:04:67:c3:6c:4b:d5:49:d4:44:ee: 8b:d4:4b:40:57:ed:86:b9:0b:a3:60:95:54:04:65:b1:59:9c: 9a:67:35:8c:39:8a:d0:89:26:4c:90:48:4e:1f:2b:28:32:bb: bd:24:a7:83:fe:ca:07:79:c8:50:fe:ba:13:ba:9b:01:96:c2: 20:e9:d3:cb:36:e4:57:4f:99:cd:78:93:ba:fa:b8:f0:ae:b7: 42:52:02:36:62:9f:4a:11:90:c2:d3:e2:f0:3c:96:30:4b:31: 5f:3b:2d:fb:bf:35:5f:17:d4:78:fb:cd:33:89:89:e9:a8:96: 34:c7:ab:ad:e9:c6:55:b7:7c:a2:6d:93:72:e0:dd:00:c6:1a: ab:7d:64:98:18:1d:35:f7:22:91:8e:68:a2:2b:84:e7:33:80: 96:31:e8:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHt4eUo/tjGMQM9t8OyJ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5OGZlNWIyODJiMWM3ZGIwMGY2N2JiNGExM2Q5Zjc5NTIw NTA4YjcwHhcNMjUxMjI4MDQwMjA1WhcNMjUxMjI5MDQwMjA1WjAzMTEwLwYDVQQD EygxMjg2OTM3NjI5MTI5NWMyOWI5ODQ3ZTBhMzdjOWRiMWNiMTI4YTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf8Qe7A2fLQTUXWJ59HZ/eUDeYFj U7ns83Y5ERw9TaBag2CO4QReLbhgzo55yBt9NjM8DutKW8C7LzdjOZ/tqXYRrsMi TMepoqjKthw0MAP0wcBFWKT/wqfLqod7pnBD3Xez08t8nZxxTg2rHWNDLWvA6WPP v3XWOXl11kSxbbMYuT47wZLrtbBUJvm/zbLf4fpmJJrhWgFBTBjz40yOpF1JNVeW XzSgVGpH6dTtimw0JWQaEPsVpBrYYSq/aWAXOGRZE0vsh0/FCqVBgw7++GFXQoUH f3fHw+iaF6lv4YCN+ETo5C91v/MJvOgWwQ03KgrRAAwusrtFjXseLKm7WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKGk3YpEpXCm5hH4KN8nbHLEoorMB8GA1UdIwQY MBaAFEmP5bKCscfbAPZ7tKE9n3lSBQi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWIt MDA0MDNiNjQwNTVhLzEvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWItMDA0MDNiNjQwNTVh LzEvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqyimj6Ic NJqrKy1nu4QjSSyHbyO8UOtSkDHqnMDVH/Fe1H/TuY88oxyrjra7IUNOkmeDrZzy tXJ4oFVYP8uGeLdMJd/1zVvt3zDh4aKlDQahghjYFr0RfxC8pcfZvVnVKEgEZ8Ns S9VJ1ETui9RLQFfthrkLo2CVVARlsVmcmmc1jDmK0IkmTJBITh8rKDK7vSSng/7K B3nIUP66E7qbAZbCIOnTyzbkV0+ZzXiTuvq48K63QlICNmKfShGQwtPi8DyWMEsx Xzst+781XxfUePvNM4mJ6aiWNMerrenGVbd8om2TcuDdAMYaq31kmBgdNfcikY5o oiuE5zOAljHoFw== -----END CERTIFICATE-----Generated at Sun Dec 28 05:52:55 2025 by rpki-client