This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft File: SYeUHnTBwD56ujuHhTAJXrb6h04.mft (raw, json) Hash identifier: 1ndwJgR0v92xstvMLPwyY6IGxa6Dom0boshOiWfwgXA= Subject key identifier: 23:7B:2B:30:E5:E1:64:5E:2C:05:ED:98:B5:DD:EB:A5:A6:6E:16:84 Authority key identifier: 49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E Certificate issuer: /CN=4987941e74c1c03e7aba3b878530095eb6fa874e Certificate serial: 019B3CB4B0C620F819CFE3DCFCBBF6AF45B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft Manifest number: 0BE3 Signing time: Sat 20 Dec 2025 17:00:33 +0000 Manifest this update: Sat 20 Dec 2025 17:00:33 +0000 Manifest next update: Sun 21 Dec 2025 17:00:33 +0000 Files and hashes: 1: SYeUHnTBwD56ujuHhTAJXrb6h04.crl (hash: 0jxts2z/FaN4vZJNW6ybSeSnm/5UiVE047/CTWD70P4=) 2: kGUp47WG5G_Wel7cs85ecDXJxm4.roa (hash: FarWEvOJ/JgOa5f9B3LnYP5C2r/V9zA4q1xgJVraMqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:b0:c6:20:f8:19:cf:e3:dc:fc:bb:f6:af:45:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4987941e74c1c03e7aba3b878530095eb6fa874e Validity Not Before: Dec 20 17:00:33 2025 GMT Not After : Dec 21 17:00:33 2025 GMT Subject: CN=237b2b30e5e1645e2c05ed98b5ddeba5a66e1684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:54:24:cf:59:db:2a:e3:64:97:a9:0a:8c:e8: 4b:34:bd:90:9f:39:f9:14:2a:2d:f6:57:6f:67:aa: 0b:25:a3:38:a9:f8:f2:78:c5:b2:08:bc:66:be:30: 00:f8:d6:77:81:cb:f6:c3:c7:61:cd:92:8e:64:17: 2a:b6:b5:b6:2a:35:7d:99:c8:b6:6c:c8:fa:ff:b6: 75:9d:8e:9b:da:84:e7:58:14:fa:9e:70:57:43:c6: 99:9e:97:b2:d2:23:4c:9c:30:9c:8b:6a:84:c2:dd: 0b:2a:32:19:4c:d0:14:7c:de:a3:76:01:f4:59:f8: 03:ed:95:85:8e:2a:a0:8a:fa:c7:57:71:85:22:9e: 47:42:5c:7e:43:ce:e7:ab:bc:9c:28:98:d9:17:24: 0a:40:8a:29:80:ed:85:3b:4e:c6:3a:5f:47:2a:96: 62:ae:f3:64:0a:eb:ee:8f:5a:ea:70:b6:85:24:95: f1:49:af:57:fe:d8:69:a4:2a:4a:df:f1:09:c8:7e: a2:e4:e2:12:aa:8c:e9:0c:76:58:5c:86:d2:90:38: 8f:94:59:86:df:32:b6:f1:85:4c:f5:af:3d:e1:b5: 18:1b:c6:11:d1:12:2f:5f:23:91:9b:1b:9c:7f:49: 07:58:f3:1c:07:81:38:56:80:07:53:73:e0:43:b4: 54:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7B:2B:30:E5:E1:64:5E:2C:05:ED:98:B5:DD:EB:A5:A6:6E:16:84 X509v3 Authority Key Identifier: keyid:49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:fd:b9:5e:b7:fd:50:a0:6c:07:16:60:d6:e0:6e:54:b8:59: 20:69:e7:6d:b0:6a:5f:a0:ba:ad:c7:9b:83:0d:54:f4:4f:a4: c0:0e:6d:33:8a:d5:85:38:04:4b:ff:f9:ef:04:19:5a:f9:e0: ac:61:e8:44:5c:0f:d5:f1:13:a6:62:76:15:dd:4b:79:f8:70: 0b:5c:00:cc:2e:6b:48:11:f1:08:21:9e:c9:96:2f:1e:2c:8b: b2:92:c4:a2:d2:a6:68:25:e4:9f:e2:11:da:1a:31:0e:04:68: 34:d5:c4:91:d9:d0:69:d8:e8:0d:3f:19:96:90:ac:6f:31:45: 79:ff:09:61:e0:5a:3e:80:da:e6:d2:05:45:89:aa:09:1d:88: 67:ad:63:85:e5:7d:7f:4e:05:2a:a5:49:24:7f:04:8f:a9:ed: db:0f:a6:38:54:bf:67:09:ee:61:fb:6c:6e:fe:73:d8:60:ba: 0b:14:a2:e1:02:97:d6:b0:cf:84:95:39:10:9c:14:1a:f3:2d: 01:d7:34:fd:c8:e8:88:64:64:05:28:f7:83:d0:2c:df:57:89: 41:55:d4:86:fb:bb:9e:8b:2b:aa:00:a2:a6:5b:61:f7:ec:47: 58:9f:75:7d:df:1a:bb:0e:7a:3b:76:24:e7:ce:0b:9a:8b:48: dd:b9:57:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tLDGIPgZz+Pc/Lv2r0WxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODc5NDFlNzRjMWMwM2U3YWJhM2I4Nzg1MzAwOTVlYjZm YTg3NGUwHhcNMjUxMjIwMTcwMDMzWhcNMjUxMjIxMTcwMDMzWjAzMTEwLwYDVQQD EygyMzdiMmIzMGU1ZTE2NDVlMmMwNWVkOThiNWRkZWJhNWE2NmUxNjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVQkz1nbKuNkl6kKjOhLNL2Qnzn5 FCot9ldvZ6oLJaM4qfjyeMWyCLxmvjAA+NZ3gcv2w8dhzZKOZBcqtrW2KjV9mci2 bMj6/7Z1nY6b2oTnWBT6nnBXQ8aZnpey0iNMnDCci2qEwt0LKjIZTNAUfN6jdgH0 WfgD7ZWFjiqgivrHV3GFIp5HQlx+Q87nq7ycKJjZFyQKQIopgO2FO07GOl9HKpZi rvNkCuvuj1rqcLaFJJXxSa9X/thppCpK3/EJyH6i5OISqozpDHZYXIbSkDiPlFmG 3zK28YVM9a894bUYG8YR0RIvXyORmxucf0kHWPMcB4E4VoAHU3PgQ7RUBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCN7KzDl4WReLAXtmLXd66WmbhaEMB8GA1UdIwQY MBaAFEmHlB50wcA+ero7h4UwCV62+odOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83MDc3N2ItNjhiMC00MmE4LTllOWQt ZThhZGE1MWVlOGZmLzEvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83MDc3N2ItNjhiMC00MmE4LTllOWQtZThhZGE1MWVlOGZm LzEvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAif25Xrf9 UKBsBxZg1uBuVLhZIGnnbbBqX6C6rcebgw1U9E+kwA5tM4rVhTgES//57wQZWvng rGHoRFwP1fETpmJ2Fd1LefhwC1wAzC5rSBHxCCGeyZYvHiyLspLEotKmaCXkn+IR 2hoxDgRoNNXEkdnQadjoDT8ZlpCsbzFFef8JYeBaPoDa5tIFRYmqCR2IZ61jheV9 f04FKqVJJH8Ej6nt2w+mOFS/ZwnuYftsbv5z2GC6CxSi4QKX1rDPhJU5EJwUGvMt Adc0/cjoiGRkBSj3g9As31eJQVXUhvu7nosrqgCiplth9+xHWJ91fd8auw56O3Yk 584LmotI3blXJg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:08:42 2025 by rpki-client