This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft File: SYbHOZTQLZH8l9kW6YCabZgeaxc.mft (raw, json) Hash identifier: M62WNfWxHIB0w+wh5vAs6yVPKPTrSBYPKXF+JKd02gM= Subject key identifier: 98:3A:B4:C3:17:A1:54:B2:AB:0B:0A:9A:2E:64:1B:56:5A:B0:83:7A Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17 Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17 Certificate serial: 019B3A219266850A5F6F3B8E4AED5C1E6F0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft Manifest number: 1818 Signing time: Sat 20 Dec 2025 05:00:37 +0000 Manifest this update: Sat 20 Dec 2025 05:00:37 +0000 Manifest next update: Sun 21 Dec 2025 05:00:37 +0000 Files and hashes: 1: 2H8bk0scnZWZCejbJpVwKzPODxU.roa (hash: hMVwt69RjByg01GyzZs8pwlz2+q4Wpy8Ui3CHMqWQVM=) 2: BhKXE6iuo9SfBVLFhVn_mkUc-7o.roa (hash: 6UQPEWEZQ8R2LqnkEpCKEGwsYAPkUMrvkndL11WKeoQ=) 3: SYbHOZTQLZH8l9kW6YCabZgeaxc.crl (hash: qR0+YbzXxXMKydntwF/+/mBtvOUtFaw7UZXo7dABIuQ=) 4: dEkWV8xPj6ZjKfgx5t3dIacQr1A.roa (hash: ZOk1wKX5K0Mx4fspQclTvx+3kOne5shTmWgvCBY9O/Q=) 5: j-RMRHJ23qu7rbAmxPP-MPbufuc.roa (hash: dJtuGeJTvCUEBM+hGg9srwzgusTpj+o/Wmaam12pfeg=) 6: jQ5qWaYZOuGFbmK6xWnSAiBZvC4.roa (hash: hOBNFEt7+n9S44ThfKSG8bjP2CvsYahZ60/Dq1Sii/s=) 7: kYpZLQ-AuudDB2VaPbw0Spka5lg.roa (hash: 5naLUifPbVvyChqmHEXOpfanoJmyL4cI6dCLv8ZRPLk=) 8: xsBxTTHCu0M91jc-x-84709M1aw.roa (hash: n7OhK3FL5HSbtyKHt6+A8Y5XXP+dcUu4LzkiF/oZmAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:92:66:85:0a:5f:6f:3b:8e:4a:ed:5c:1e:6f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17 Validity Not Before: Dec 20 05:00:37 2025 GMT Not After : Dec 21 05:00:37 2025 GMT Subject: CN=983ab4c317a154b2ab0b0a9a2e641b565ab0837a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ad:ae:7d:d8:9a:c8:4e:ae:c3:3a:63:7d:3e: 6e:2a:5c:00:e9:e6:c1:7b:91:29:b4:e8:ce:52:2f: 04:5d:b9:e9:39:dc:a3:7d:fd:5b:4f:a4:30:94:b9: e4:64:40:a8:51:e1:c2:ac:b6:88:6c:1d:c9:19:13: 9e:ed:c7:5d:70:60:92:f1:30:31:04:06:6b:db:5b: 48:02:aa:c9:e0:c9:8a:33:80:a0:45:89:79:a5:af: 20:79:45:1a:a7:c8:b7:b0:bf:69:30:24:c8:d3:87: 74:2f:d7:68:1a:d9:95:f2:48:33:3b:cf:0a:e7:ae: ec:2b:fa:c0:1f:ab:38:80:68:86:0c:a7:3c:ff:96: 51:18:06:9b:cc:ca:35:48:23:31:ea:11:55:84:53: 69:c5:41:98:6b:d4:85:05:97:69:07:c1:5b:2a:df: 2d:6b:41:32:95:ed:4e:cc:68:2b:23:d8:0f:1e:b1: 3e:2b:a3:bd:50:1f:83:7b:9b:7a:b6:54:18:a3:f7: 3f:7a:21:d2:52:71:87:3e:39:78:1b:b5:d6:34:e1: d9:81:3b:52:ff:1b:9b:6c:ac:70:6a:cb:54:e6:ec: 73:95:f2:af:7d:dc:4e:25:fc:9b:b8:9a:15:4d:82: 8b:87:38:59:87:5a:f6:2e:6c:b5:90:92:bd:0e:42: 5d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3A:B4:C3:17:A1:54:B2:AB:0B:0A:9A:2E:64:1B:56:5A:B0:83:7A X509v3 Authority Key Identifier: keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:4b:d9:1e:2c:ab:e7:d0:85:af:05:aa:8b:08:73:0b:b4:a7: 7f:45:34:6e:f4:37:71:76:9d:64:36:72:86:05:4d:44:45:96: 46:69:2e:79:ec:da:b0:71:47:04:68:a6:e0:ca:b0:af:03:54: dd:e2:11:46:83:24:01:d3:85:9e:6b:38:d5:8e:65:ff:40:08: 04:76:ae:44:f3:1a:3d:2d:f4:a4:14:41:9c:e1:0d:4c:43:6f: 4d:14:14:13:ef:07:55:a7:9f:14:e1:0d:6c:c3:b7:7c:68:bf: 78:d8:11:bc:d4:99:59:06:97:01:d5:18:22:47:d3:a7:f3:53: 69:55:00:54:50:8c:1e:1c:6e:0d:36:f6:2f:f8:0f:91:5d:ef: b9:fe:bb:c8:83:e6:2d:3e:2b:18:82:98:40:88:83:41:6b:2d: 25:cc:18:24:4a:c3:74:45:9b:a6:26:94:ec:5c:b7:68:91:be: 6a:10:94:0c:0d:5f:bc:25:d7:6a:f4:00:00:35:d0:8e:dd:92: 73:7e:8f:80:de:88:1c:f5:6c:32:6b:b7:22:5e:f7:80:cf:b0: c8:60:9d:57:44:e7:8a:3f:c5:7b:5b:9a:74:8f:65:a2:83:ff: 78:b6:36:1d:97:b8:a4:07:b2:83:31:f6:28:ee:d6:79:f8:de: 25:56:df:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IZJmhQpfbzuOSu1cHm8LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODZjNzM5OTRkMDJkOTFmYzk3ZDkxNmU5ODA5YTZkOTgx ZTZiMTcwHhcNMjUxMjIwMDUwMDM3WhcNMjUxMjIxMDUwMDM3WjAzMTEwLwYDVQQD Eyg5ODNhYjRjMzE3YTE1NGIyYWIwYjBhOWEyZTY0MWI1NjVhYjA4MzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K2ufdiayE6uwzpjfT5uKlwA6ebB e5EptOjOUi8EXbnpOdyjff1bT6QwlLnkZECoUeHCrLaIbB3JGROe7cddcGCS8TAx BAZr21tIAqrJ4MmKM4CgRYl5pa8geUUap8i3sL9pMCTI04d0L9doGtmV8kgzO88K 567sK/rAH6s4gGiGDKc8/5ZRGAabzMo1SCMx6hFVhFNpxUGYa9SFBZdpB8FbKt8t a0Eyle1OzGgrI9gPHrE+K6O9UB+De5t6tlQYo/c/eiHSUnGHPjl4G7XWNOHZgTtS /xubbKxwastU5uxzlfKvfdxOJfybuJoVTYKLhzhZh1r2Lmy1kJK9DkJdaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJg6tMMXoVSyqwsKmi5kG1ZasIN6MB8GA1UdIwQY MBaAFEmGxzmU0C2R/JfZFumAmm2YHmsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzIt OWU4OTVkMGVmOGQyLzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzItOWU4OTVkMGVmOGQy LzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqEvZHiyr 59CFrwWqiwhzC7Snf0U0bvQ3cXadZDZyhgVNREWWRmkueezasHFHBGim4MqwrwNU 3eIRRoMkAdOFnms41Y5l/0AIBHauRPMaPS30pBRBnOENTENvTRQUE+8HVaefFOEN bMO3fGi/eNgRvNSZWQaXAdUYIkfTp/NTaVUAVFCMHhxuDTb2L/gPkV3vuf67yIPm LT4rGIKYQIiDQWstJcwYJErDdEWbpiaU7Fy3aJG+ahCUDA1fvCXXavQAADXQjt2S c36PgN6IHPVsMmu3Il73gM+wyGCdV0Tnij/Fe1uadI9looP/eLY2HZe4pAeygzH2 KO7WefjeJVbfvQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:39:41 2025 by rpki-client