This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft File: SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft (raw, json) Hash identifier: M0Y0bdSNesepRerKagyYNvKxP2NKtuRkvHtAvv/7cUQ= Subject key identifier: DC:4A:80:64:82:8E:E6:7A:0C:25:7C:34:D8:FF:47:8D:FC:37:37:BE Authority key identifier: 49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8 Certificate issuer: /CN=4983e96ff270f4eca9701258081bb5cf818966c8 Certificate serial: 019B5606B0940210D6646AACFA83BD70A84D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft Manifest number: 0372 Signing time: Thu 25 Dec 2025 15:00:37 +0000 Manifest this update: Thu 25 Dec 2025 15:00:37 +0000 Manifest next update: Fri 26 Dec 2025 15:00:37 +0000 Files and hashes: 1: SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl (hash: IuUdYd7PbCGhIVdZitlmMn+Zf1nLyXrCmtRvFWWnV10=) 2: kFX-uYTQe-hNv7R7b32AFNfIUMM.roa (hash: dfEaZcwO+Rs/PwwE6piUHmyj/TNPDDXLzEVdyeyS3Ys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:06:b0:94:02:10:d6:64:6a:ac:fa:83:bd:70:a8:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4983e96ff270f4eca9701258081bb5cf818966c8 Validity Not Before: Dec 25 15:00:37 2025 GMT Not After : Dec 26 15:00:37 2025 GMT Subject: CN=dc4a8064828ee67a0c257c34d8ff478dfc3737be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c4:d9:e7:c8:b9:25:2e:ac:4b:1c:e1:54:d5: c4:c9:b6:bb:14:de:65:c4:fa:87:26:02:00:af:1b: e0:ea:3a:06:13:cb:93:58:1f:99:eb:24:4e:69:80: db:88:f4:fb:a4:5c:00:40:4c:8c:a9:5b:d3:af:e3: 03:e5:16:28:5f:2e:6c:58:d1:be:96:91:d7:22:4b: 64:1c:cf:3a:65:6e:c4:63:f8:2f:6b:99:66:fd:b8: c3:cb:3a:92:a1:89:1b:8d:03:bd:2f:75:b8:c6:ed: 9d:6b:3a:cc:98:78:b0:46:35:c4:50:5c:a3:b8:b0: 5d:b2:41:cf:2f:ec:f9:33:aa:35:bb:88:eb:bf:33: 43:ff:cf:55:0e:0d:cf:16:03:89:a0:e8:a1:18:18: 93:24:f2:96:7c:90:a7:e7:b6:ab:69:bd:1e:c4:1a: c7:3d:86:9d:26:5d:00:fb:c3:c0:2a:ce:04:3f:f7: 65:c8:eb:af:84:4c:4a:05:43:de:4f:ae:3e:60:7c: bd:07:bb:fd:51:54:44:ff:ef:aa:89:90:f0:4b:bc: 14:a2:19:f3:c2:1a:59:4b:aa:ac:39:2a:89:5e:4c: 62:be:6f:48:d7:2f:a3:2a:a7:24:69:e7:5d:54:2e: 98:35:4e:b9:5d:75:28:a1:5d:c8:05:3e:73:02:1e: ae:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4A:80:64:82:8E:E6:7A:0C:25:7C:34:D8:FF:47:8D:FC:37:37:BE X509v3 Authority Key Identifier: keyid:49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:d6:7b:37:05:3a:bb:18:74:13:0c:78:6e:b1:08:11:3c:2e: bc:61:cf:77:42:58:5b:e5:c0:46:c7:ad:db:4d:a4:2f:89:52: f9:df:3b:c1:d0:1c:f4:1a:9c:ff:5d:fc:16:f8:62:f6:f1:83: fb:be:49:0a:87:00:d8:6e:bd:a5:60:c1:95:f5:3a:3b:a7:5a: 30:3c:1e:d6:0a:12:a8:12:d5:c2:de:91:3b:b8:ae:22:8b:5d: a9:e5:28:44:c5:bd:0f:78:ec:02:ff:a1:67:f9:f5:2c:00:fb: 90:59:8f:16:cb:76:a6:e5:46:6d:66:87:75:66:80:16:1c:ac: a4:9b:04:3d:b0:07:98:06:f0:5f:f6:d6:d8:e6:c2:49:4d:33: 3b:2b:6e:a4:40:0d:e3:83:52:c4:8e:8b:a8:84:19:7e:44:b0: 28:a0:e8:70:92:95:78:a7:0b:20:57:d8:f0:e2:56:64:ea:04: 7f:f5:16:91:3a:04:80:79:86:06:49:e2:39:aa:b6:20:52:9e: fd:46:1e:34:ac:22:2a:61:b5:16:3e:e6:35:5d:0b:af:c7:d5: 28:1f:40:03:65:56:69:12:7b:8e:28:7e:30:a5:79:0a:76:9c: 50:db:32:b1:6c:fe:0a:e8:10:23:e0:fc:07:78:b2:86:dc:9d: 93:e5:54:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWBrCUAhDWZGqs+oO9cKhNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODNlOTZmZjI3MGY0ZWNhOTcwMTI1ODA4MWJiNWNmODE4 OTY2YzgwHhcNMjUxMjI1MTUwMDM3WhcNMjUxMjI2MTUwMDM3WjAzMTEwLwYDVQQD EyhkYzRhODA2NDgyOGVlNjdhMGMyNTdjMzRkOGZmNDc4ZGZjMzczN2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcTZ58i5JS6sSxzhVNXEyba7FN5l xPqHJgIArxvg6joGE8uTWB+Z6yROaYDbiPT7pFwAQEyMqVvTr+MD5RYoXy5sWNG+ lpHXIktkHM86ZW7EY/gva5lm/bjDyzqSoYkbjQO9L3W4xu2dazrMmHiwRjXEUFyj uLBdskHPL+z5M6o1u4jrvzND/89VDg3PFgOJoOihGBiTJPKWfJCn57arab0exBrH PYadJl0A+8PAKs4EP/dlyOuvhExKBUPeT64+YHy9B7v9UVRE/++qiZDwS7wUohnz whpZS6qsOSqJXkxivm9I1y+jKqckaeddVC6YNU65XXUooV3IBT5zAh6uGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxKgGSCjuZ6DCV8NNj/R438Nze+MB8GA1UdIwQY MBaAFEmD6W/ycPTsqXASWAgbtc+BiWbIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1lQcGJfSnc5T3lwY0JKWUNCdTF6NEdKWnNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ZTBhNjctMGQ0NC00MjllLTlmOTct NmNmNjgyYTE4NWQ0LzEvU1lQcGJfSnc5T3lwY0JKWUNCdTF6NEdKWnNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85ZTBhNjctMGQ0NC00MjllLTlmOTctNmNmNjgyYTE4NWQ0 LzEvU1lQcGJfSnc5T3lwY0JKWUNCdTF6NEdKWnNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNZ7NwU6 uxh0Ewx4brEIETwuvGHPd0JYW+XARset202kL4lS+d87wdAc9Bqc/138Fvhi9vGD +75JCocA2G69pWDBlfU6O6daMDwe1goSqBLVwt6RO7iuIotdqeUoRMW9D3jsAv+h Z/n1LAD7kFmPFst2puVGbWaHdWaAFhyspJsEPbAHmAbwX/bW2ObCSU0zOytupEAN 44NSxI6LqIQZfkSwKKDocJKVeKcLIFfY8OJWZOoEf/UWkToEgHmGBkniOaq2IFKe /UYeNKwiKmG1Fj7mNV0Lr8fVKB9AA2VWaRJ7jih+MKV5CnacUNsysWz+CugQI+D8 B3iyhtydk+VUbg== -----END CERTIFICATE-----Generated at Thu Dec 25 22:15:20 2025 by rpki-client