This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft File: SYKxcZtP7HCLpmsper4NsI-tDh4.mft (raw, json) Hash identifier: UcXsNkQ3Jhmyf/kIDj0G0iaolgjlWbSPaG86IOXOkPg= Subject key identifier: 7B:BF:F0:AF:55:19:84:B1:C9:5F:5B:73:50:CC:53:B1:CC:BD:13:02 Authority key identifier: 49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E Certificate issuer: /CN=4982b1719b4fec708ba66b297abe0db08fad0e1e Certificate serial: 019B65E8342178C3D237FD20971FFE74DEE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft Manifest number: 156F Signing time: Sun 28 Dec 2025 17:01:15 +0000 Manifest this update: Sun 28 Dec 2025 17:01:15 +0000 Manifest next update: Mon 29 Dec 2025 17:01:15 +0000 Files and hashes: 1: 0KNJIwezZb-3FaFJUpqxhGPSa2k.roa (hash: A4j/zF7WMM+1P8qhcyYitAkcAPo5hxRepqaqzU+Jk9c=) 2: CLHhdOeMNXgExKSCdON9sy75K9Y.roa (hash: 38I9hpL0OwteLRFzo32bZbguPasIk9LP7nDY3tAu3zY=) 3: Mz_0oopSyUD8tIkNMNqzhKplVuM.roa (hash: DOtqb1hTDcb0EkPiiKGPxHU95felEP0mxUFdKqkLpas=) 4: SYKxcZtP7HCLpmsper4NsI-tDh4.crl (hash: HB2P8BJGI7epp7m2GxdkNaAT8fo+oYUfRudZ9cPVXAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 17:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:e8:34:21:78:c3:d2:37:fd:20:97:1f:fe:74:de:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4982b1719b4fec708ba66b297abe0db08fad0e1e Validity Not Before: Dec 28 17:01:15 2025 GMT Not After : Dec 29 17:01:15 2025 GMT Subject: CN=7bbff0af551984b1c95f5b7350cc53b1ccbd1302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ee:10:8e:ab:45:a2:67:15:25:3e:8a:fa:a8: 64:66:40:02:07:34:7d:60:78:f4:d1:73:05:29:35: 29:a6:45:95:ef:5b:6d:b2:eb:d5:da:20:d4:be:80: b4:9e:13:ba:1a:6b:5b:c5:06:97:cc:f8:8a:37:27: c8:19:bc:55:23:33:e5:f8:e0:4e:4b:97:b1:66:0f: ab:db:34:01:dc:7d:69:61:8e:e3:5b:60:3d:3e:e1: db:23:24:0a:42:16:8e:23:d1:a9:08:ed:a4:ab:11: 5f:3b:73:a3:d7:f7:77:54:63:1c:62:59:6b:a1:7b: b9:97:ee:86:11:4f:23:68:7e:a0:34:f1:2c:01:72: a1:df:15:52:d5:18:4d:45:7c:b4:82:20:a8:55:54: 45:32:4e:46:e6:79:8a:25:70:b7:d3:09:7a:cb:52: 8d:bf:61:a3:9b:e5:c4:24:cb:97:f2:ff:93:ec:1b: 3b:7b:50:71:d7:ba:dd:74:f5:45:e7:d7:1e:56:01: 04:2a:3a:48:db:38:97:79:05:12:bc:54:7e:e8:57: 8f:7b:5c:c2:93:ca:eb:10:d6:8c:d6:6f:b5:cf:c5: 6a:4d:76:4e:e3:bc:da:24:15:f1:cb:26:4d:35:45: 02:b4:fb:3f:e0:36:a3:82:72:40:3e:c5:0e:d7:79: e6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BF:F0:AF:55:19:84:B1:C9:5F:5B:73:50:CC:53:B1:CC:BD:13:02 X509v3 Authority Key Identifier: keyid:49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:aa:6d:81:25:86:0e:4b:4d:b5:7c:b4:8b:5c:5f:a8:81:77: d1:43:d1:be:16:b2:f4:c3:55:1f:79:28:bb:cd:da:9b:e4:7e: c8:da:09:3f:66:6a:cd:70:03:61:cc:35:c0:fc:05:9b:0a:1b: b7:fb:3b:6f:73:e3:65:87:91:3c:72:91:2d:4b:3f:25:e0:32: 54:91:15:22:4b:23:1b:6e:ad:d3:88:84:2d:ec:40:6c:1d:48: f7:30:7a:2c:4d:0c:72:6f:bf:eb:b8:7c:25:d7:a7:cb:f5:fc: 53:7d:75:21:4e:9a:30:bf:ed:c8:80:8e:7c:f8:9a:87:51:b3: 12:7a:f4:e8:21:32:69:54:4d:dd:f0:84:b5:9d:9e:38:7e:48: 98:e4:4f:c9:d8:da:68:a1:40:99:88:c4:09:ff:8f:3a:eb:d2: 95:10:3f:64:11:48:5e:75:75:df:5b:b5:15:5b:42:11:10:52: df:91:82:a9:b4:e7:16:7c:6e:da:a7:71:6f:4d:e9:d6:d0:2b: 73:b4:47:20:6a:7d:0a:ed:82:15:0b:82:27:c9:0f:82:5e:bd: 21:46:0b:8e:4b:24:ae:b1:d9:fb:2e:0b:c0:0e:34:5c:dd:3d: e4:6b:d7:2a:6e:41:43:6a:a4:54:a4:17:61:96:b6:21:89:c8: 1c:79:02:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtl6DQheMPSN/0glx/+dN7pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODJiMTcxOWI0ZmVjNzA4YmE2NmIyOTdhYmUwZGIwOGZh ZDBlMWUwHhcNMjUxMjI4MTcwMTE1WhcNMjUxMjI5MTcwMTE1WjAzMTEwLwYDVQQD Eyg3YmJmZjBhZjU1MTk4NGIxYzk1ZjViNzM1MGNjNTNiMWNjYmQxMzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+4QjqtFomcVJT6K+qhkZkACBzR9 YHj00XMFKTUppkWV71ttsuvV2iDUvoC0nhO6GmtbxQaXzPiKNyfIGbxVIzPl+OBO S5exZg+r2zQB3H1pYY7jW2A9PuHbIyQKQhaOI9GpCO2kqxFfO3Oj1/d3VGMcYllr oXu5l+6GEU8jaH6gNPEsAXKh3xVS1RhNRXy0giCoVVRFMk5G5nmKJXC30wl6y1KN v2Gjm+XEJMuX8v+T7Bs7e1Bx17rddPVF59ceVgEEKjpI2ziXeQUSvFR+6FePe1zC k8rrENaM1m+1z8VqTXZO47zaJBXxyyZNNUUCtPs/4DajgnJAPsUO13nmwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHu/8K9VGYSxyV9bc1DMU7HMvRMCMB8GA1UdIwQY MBaAFEmCsXGbT+xwi6ZrKXq+DbCPrQ4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1lLeGNadFA3SENMcG1zcGVyNE5zSS10RGg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kOGYxNDUtMWUwZC00NzFkLTg1MzYt YWU2Yjg0YzI4MTk1LzEvU1lLeGNadFA3SENMcG1zcGVyNE5zSS10RGg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9kOGYxNDUtMWUwZC00NzFkLTg1MzYtYWU2Yjg0YzI4MTk1 LzEvU1lLeGNadFA3SENMcG1zcGVyNE5zSS10RGg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtaptgSWG DktNtXy0i1xfqIF30UPRvhay9MNVH3kou83am+R+yNoJP2ZqzXADYcw1wPwFmwob t/s7b3PjZYeRPHKRLUs/JeAyVJEVIksjG26t04iELexAbB1I9zB6LE0Mcm+/67h8 Jdeny/X8U311IU6aML/tyICOfPiah1GzEnr06CEyaVRN3fCEtZ2eOH5ImORPydja aKFAmYjECf+POuvSlRA/ZBFIXnV131u1FVtCERBS35GCqbTnFnxu2qdxb03p1tAr c7RHIGp9Cu2CFQuCJ8kPgl69IUYLjkskrrHZ+y4LwA40XN095GvXKm5BQ2qkVKQX YZa2IYnIHHkC3Q== -----END CERTIFICATE-----Generated at Sun Dec 28 23:39:03 2025 by rpki-client