This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft File: syu38vqMQUxnGIvau_t2IVaTuoc.mft (raw, json) Hash identifier: nnetjnHIo6eRG27LMkJh3Q8nbHEfNcZO/6xC65hwje0= Subject key identifier: 92:43:06:4D:5B:89:F8:73:3A:69:41:EE:1A:CA:91:F4:74:36:2B:AB Authority key identifier: B3:2B:B7:F2:FA:8C:41:4C:67:18:8B:DA:BB:FB:76:21:56:93:BA:87 Certificate issuer: /CN=b32bb7f2fa8c414c67188bdabbfb76215693ba87 Certificate serial: 019B36456FE044BAC7C492FE60DFCE4140CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft Manifest number: 0580 Signing time: Fri 19 Dec 2025 11:01:18 +0000 Manifest this update: Fri 19 Dec 2025 11:01:18 +0000 Manifest next update: Sat 20 Dec 2025 11:01:18 +0000 Files and hashes: 1: dlFU-VFKr3DcjZAchl6XqyqKK5c.roa (hash: neVLf32lP2kuQND5P5wXOeNSgGn0qOcZGwTsUoY1fZs=) 2: syu38vqMQUxnGIvau_t2IVaTuoc.crl (hash: nOikpy3rt2AelHZYTvuCw4TxjGE+/ksp1/4X9Li21AI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:6f:e0:44:ba:c7:c4:92:fe:60:df:ce:41:40:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32bb7f2fa8c414c67188bdabbfb76215693ba87 Validity Not Before: Dec 19 11:01:18 2025 GMT Not After : Dec 20 11:01:18 2025 GMT Subject: CN=9243064d5b89f8733a6941ee1aca91f474362bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:be:8f:40:a6:52:22:f6:4a:ad:48:b2:2f:ab: c4:77:81:c3:20:8d:72:bd:19:a7:12:35:05:b0:e6: 74:66:3d:2f:8f:31:65:4a:1f:73:3a:04:d0:89:e4: 70:82:94:dc:0c:3d:02:69:70:95:78:0e:64:1b:3d: 4a:93:07:e4:be:90:6f:d7:02:43:4a:24:8e:a9:6c: 37:65:2e:6f:c5:df:5a:d6:d7:1e:17:cc:d6:4b:27: db:09:40:f0:5d:2a:3b:47:ab:01:47:38:8f:d8:9f: f9:6b:7d:9e:95:72:50:3a:fc:86:b0:2e:c0:3b:aa: 29:55:99:0c:86:e3:dc:75:56:c2:91:2d:33:0a:36: a7:64:9b:e4:96:fb:10:2d:df:58:b5:f0:19:f6:73: fd:0d:7d:d0:e7:72:0c:ac:a5:fd:4e:f2:a3:2f:34: 29:a1:e1:b6:47:72:42:fc:86:6d:35:5d:a4:74:1b: 42:03:27:84:0c:b8:eb:4d:57:4d:4e:e4:34:75:50: df:34:f2:08:3a:71:24:e8:10:f0:99:db:f6:19:29: 7b:b7:d4:5a:b7:60:69:f1:0f:05:fb:1b:61:79:d0: 2b:28:aa:42:c7:5e:72:12:2a:53:3b:01:4c:a9:4f: 16:3f:ae:0d:9e:aa:a5:ef:6a:7f:2e:0e:9e:97:ab: 15:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:43:06:4D:5B:89:F8:73:3A:69:41:EE:1A:CA:91:F4:74:36:2B:AB X509v3 Authority Key Identifier: keyid:B3:2B:B7:F2:FA:8C:41:4C:67:18:8B:DA:BB:FB:76:21:56:93:BA:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:65:10:87:1b:77:24:5a:59:a8:e6:98:36:19:0b:e4:d5:a1: 30:31:6f:9b:12:c3:04:d0:7a:17:b7:19:5b:b5:c1:43:62:24: 9e:cc:45:22:e9:ff:0a:52:24:86:dc:ae:4d:68:28:3c:e3:7e: bd:87:45:72:36:8d:30:98:45:05:dc:59:7f:a8:bb:5d:a0:10: 33:c5:50:43:47:64:0a:be:48:79:aa:a3:8a:9c:9f:16:02:54: 0c:33:58:6b:77:8a:d4:36:04:aa:e4:b4:78:ed:7d:a6:73:80: a6:83:0a:d2:05:e5:98:41:c1:dd:cc:1e:ed:6b:eb:88:f4:e1: eb:e5:8e:d7:3d:a6:46:76:ba:52:94:2c:9c:c0:8b:eb:80:aa: 3a:ae:fd:28:72:5a:c8:ec:cc:a3:24:ba:d8:53:94:56:90:7a: 73:c1:d2:1c:a5:d4:bc:2d:a9:66:b4:0e:58:d3:be:3a:18:9e: 38:e4:16:5d:29:04:de:d6:98:15:53:24:a6:d3:2f:81:23:0a: 21:0d:da:a6:05:c0:2b:68:49:ae:58:74:67:8a:2a:79:49:de: f5:56:f2:ee:7f:44:da:bb:6e:4d:f1:40:c7:c9:b7:3e:75:d4: 00:0f:f5:32:51:39:56:51:cb:b9:90:7a:ef:13:4a:95:26:37: 5e:ce:93:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RW/gRLrHxJL+YN/OQUDNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMmJiN2YyZmE4YzQxNGM2NzE4OGJkYWJiZmI3NjIxNTY5 M2JhODcwHhcNMjUxMjE5MTEwMTE4WhcNMjUxMjIwMTEwMTE4WjAzMTEwLwYDVQQD Eyg5MjQzMDY0ZDViODlmODczM2E2OTQxZWUxYWNhOTFmNDc0MzYyYmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL6PQKZSIvZKrUiyL6vEd4HDII1y vRmnEjUFsOZ0Zj0vjzFlSh9zOgTQieRwgpTcDD0CaXCVeA5kGz1KkwfkvpBv1wJD SiSOqWw3ZS5vxd9a1tceF8zWSyfbCUDwXSo7R6sBRziP2J/5a32elXJQOvyGsC7A O6opVZkMhuPcdVbCkS0zCjanZJvklvsQLd9YtfAZ9nP9DX3Q53IMrKX9TvKjLzQp oeG2R3JC/IZtNV2kdBtCAyeEDLjrTVdNTuQ0dVDfNPIIOnEk6BDwmdv2GSl7t9Ra t2Bp8Q8F+xthedArKKpCx15yEipTOwFMqU8WP64Nnqql72p/Lg6el6sVbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJDBk1bifhzOmlB7hrKkfR0NiurMB8GA1UdIwQY MBaAFLMrt/L6jEFMZxiL2rv7diFWk7qHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3l1Mzh2cU1RVXhuR0l2YXVfdDJJVmFUdW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZjMxYWItMmUzNC00N2ZiLTk2MTEt MjIzYTRkOTQ3MDllLzEvc3l1Mzh2cU1RVXhuR0l2YXVfdDJJVmFUdW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9hZjMxYWItMmUzNC00N2ZiLTk2MTEtMjIzYTRkOTQ3MDll LzEvc3l1Mzh2cU1RVXhuR0l2YXVfdDJJVmFUdW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGUQhxt3 JFpZqOaYNhkL5NWhMDFvmxLDBNB6F7cZW7XBQ2IknsxFIun/ClIkhtyuTWgoPON+ vYdFcjaNMJhFBdxZf6i7XaAQM8VQQ0dkCr5IeaqjipyfFgJUDDNYa3eK1DYEquS0 eO19pnOApoMK0gXlmEHB3cwe7WvriPTh6+WO1z2mRna6UpQsnMCL64CqOq79KHJa yOzMoyS62FOUVpB6c8HSHKXUvC2pZrQOWNO+OhieOOQWXSkE3taYFVMkptMvgSMK IQ3apgXAK2hJrlh0Z4oqeUne9Vby7n9E2rtuTfFAx8m3PnXUAA/1MlE5VlHLuZB6 7xNKlSY3Xs6TaA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:30:30 2025 by rpki-client