This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft File: SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft (raw, json) Hash identifier: gleWmu5ghcbatskpM3NQHy2FFi/zmKqxLEqlMBUEi+4= Subject key identifier: 6D:25:E7:AA:BE:77:8C:4D:DC:4C:2C:2C:F8:6F:A8:D6:D7:03:FF:7C Authority key identifier: 49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8 Certificate issuer: /CN=4983e96ff270f4eca9701258081bb5cf818966c8 Certificate serial: 019B3CEBC73CF8A6129207CF29AB2904ED49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft Manifest number: 0365 Signing time: Sat 20 Dec 2025 18:00:43 +0000 Manifest this update: Sat 20 Dec 2025 18:00:43 +0000 Manifest next update: Sun 21 Dec 2025 18:00:43 +0000 Files and hashes: 1: SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl (hash: vcNpumIK7qLT+KVOXOG+Vn2EPp05KE/XLsHbBm0SnAs=) 2: kFX-uYTQe-hNv7R7b32AFNfIUMM.roa (hash: dfEaZcwO+Rs/PwwE6piUHmyj/TNPDDXLzEVdyeyS3Ys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:c7:3c:f8:a6:12:92:07:cf:29:ab:29:04:ed:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4983e96ff270f4eca9701258081bb5cf818966c8 Validity Not Before: Dec 20 18:00:43 2025 GMT Not After : Dec 21 18:00:43 2025 GMT Subject: CN=6d25e7aabe778c4ddc4c2c2cf86fa8d6d703ff7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:da:cd:2f:19:3c:15:0e:9c:9a:4e:a9:69:18: 17:4c:8b:0a:21:56:39:c2:31:3e:75:c8:47:1f:47: a6:6d:f9:53:c4:14:78:e3:be:81:e3:60:c5:e3:9d: fd:95:0d:d8:b7:7a:7b:4a:e9:a9:be:33:38:e7:4f: 4c:73:54:13:62:70:4e:9c:51:cc:9e:ce:4c:a3:09: 9e:91:39:49:6c:c5:13:e7:60:b9:9e:17:df:d1:f5: 29:37:a8:17:56:22:8a:60:03:6d:d9:86:13:6c:9f: ab:d5:5f:7a:8a:13:c0:fe:f1:57:ca:59:b6:c0:51: 91:2a:42:37:e6:f2:9c:fe:b0:26:87:cf:35:e0:bf: 4c:6c:e4:b8:f7:43:79:98:9c:e0:2f:c0:a3:ac:a2: 15:fc:5f:05:4e:bc:66:d0:1e:89:c0:40:11:45:86: 1e:51:6b:f6:a1:b4:19:97:d5:21:7f:03:92:d2:17: 4d:e9:4a:ff:84:ac:bc:4c:c5:ca:6e:4a:47:6a:cc: 82:2e:da:08:2c:83:11:27:28:bf:5f:23:72:5a:ad: a8:31:92:ed:f2:c5:2a:7d:2b:95:bb:35:75:88:21: 23:6f:40:ef:ac:2e:31:22:99:dd:72:5b:88:94:c7: b1:01:d0:f2:9f:fa:61:41:2d:66:d2:8a:12:ee:39: e5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:25:E7:AA:BE:77:8C:4D:DC:4C:2C:2C:F8:6F:A8:D6:D7:03:FF:7C X509v3 Authority Key Identifier: keyid:49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:59:ee:b1:20:46:2e:56:00:15:0f:bd:7b:f1:9a:c6:4f:1f: 6b:54:8d:55:0c:3e:12:43:c2:4d:2e:5e:00:24:dd:48:7f:de: 8b:27:9e:09:f1:42:df:fa:0a:4c:8d:0f:26:8e:4a:61:28:5d: 1d:a9:ff:42:ae:ce:34:c8:f2:38:4f:c6:8e:0e:3e:68:2e:d9: 0f:82:35:f9:f3:4f:0f:01:98:1a:9c:fe:b9:9c:3a:16:2b:b6: 51:78:06:d3:aa:ba:97:68:f4:7e:a2:0c:8b:4e:e6:b0:db:96: 68:ea:03:e4:ef:17:30:16:2c:11:26:dc:87:0b:6d:1a:81:ba: 35:f7:f1:b2:83:c0:c6:5e:62:30:61:3e:f3:d1:b7:db:3c:fc: 5e:28:1f:da:18:98:42:e3:d7:c4:65:9a:8d:91:1a:bc:21:9e: 24:22:1c:7c:bc:41:98:03:f5:0f:59:9b:f9:7b:95:00:f7:7e: f7:91:d2:04:01:27:1e:67:93:02:cc:c1:ec:3c:f2:13:0f:32: 37:af:09:b0:7f:8c:9e:7d:36:9f:e1:b1:d5:9b:61:31:53:e5: 11:18:ab:7a:23:4b:24:03:15:30:97:0a:38:7e:61:1a:9c:c0: 9b:e2:f3:50:48:4e:31:8e:28:5d:76:f6:7b:78:51:fd:cf:78: 86:77:69:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs868c8+KYSkgfPKaspBO1JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODNlOTZmZjI3MGY0ZWNhOTcwMTI1ODA4MWJiNWNmODE4 OTY2YzgwHhcNMjUxMjIwMTgwMDQzWhcNMjUxMjIxMTgwMDQzWjAzMTEwLwYDVQQD Eyg2ZDI1ZTdhYWJlNzc4YzRkZGM0YzJjMmNmODZmYThkNmQ3MDNmZjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtrNLxk8FQ6cmk6paRgXTIsKIVY5 wjE+dchHH0embflTxBR4476B42DF4539lQ3Yt3p7SumpvjM4509Mc1QTYnBOnFHM ns5MowmekTlJbMUT52C5nhff0fUpN6gXViKKYANt2YYTbJ+r1V96ihPA/vFXylm2 wFGRKkI35vKc/rAmh8814L9MbOS490N5mJzgL8CjrKIV/F8FTrxm0B6JwEARRYYe UWv2obQZl9UhfwOS0hdN6Ur/hKy8TMXKbkpHasyCLtoILIMRJyi/XyNyWq2oMZLt 8sUqfSuVuzV1iCEjb0DvrC4xIpndcluIlMexAdDyn/phQS1m0ooS7jnl8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0l56q+d4xN3EwsLPhvqNbXA/98MB8GA1UdIwQY MBaAFEmD6W/ycPTsqXASWAgbtc+BiWbIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1lQcGJfSnc5T3lwY0JKWUNCdTF6NEdKWnNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ZTBhNjctMGQ0NC00MjllLTlmOTct NmNmNjgyYTE4NWQ0LzEvU1lQcGJfSnc5T3lwY0JKWUNCdTF6NEdKWnNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85ZTBhNjctMGQ0NC00MjllLTlmOTctNmNmNjgyYTE4NWQ0 LzEvU1lQcGJfSnc5T3lwY0JKWUNCdTF6NEdKWnNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1nusSBG LlYAFQ+9e/Gaxk8fa1SNVQw+EkPCTS5eACTdSH/eiyeeCfFC3/oKTI0PJo5KYShd Han/Qq7ONMjyOE/Gjg4+aC7ZD4I1+fNPDwGYGpz+uZw6Fiu2UXgG06q6l2j0fqIM i07msNuWaOoD5O8XMBYsESbchwttGoG6NffxsoPAxl5iMGE+89G32zz8Xigf2hiY QuPXxGWajZEavCGeJCIcfLxBmAP1D1mb+XuVAPd+95HSBAEnHmeTAszB7DzyEw8y N68JsH+Mnn02n+Gx1ZthMVPlERireiNLJAMVMJcKOH5hGpzAm+LzUEhOMY4oXXb2 e3hR/c94hndprg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:39:55 2025 by rpki-client