This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft File: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft (raw, json) Hash identifier: Tws4vU+jiJt+YM7/ovkwIDlgg7b800A3ELJmqhKH7PU= Subject key identifier: 67:5A:92:46:42:8E:7B:92:D4:67:4C:1B:ED:D6:7E:71:94:0F:D4:90 Authority key identifier: 49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B Certificate issuer: /CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b Certificate serial: 019B3CEBAD9B69702D8FFAC5178DE72E7092 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft Manifest number: 111F Signing time: Sat 20 Dec 2025 18:00:36 +0000 Manifest this update: Sat 20 Dec 2025 18:00:36 +0000 Manifest next update: Sun 21 Dec 2025 18:00:36 +0000 Files and hashes: 1: Exo16zEYgO3PueRCaRsMKkkEhy0.roa (hash: kH5z+KdUp6OrMDZjKD02kQC0jLALZ4m/6if0eLS0ZaE=) 2: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl (hash: E6cs7yceB9EiE5ZJXJ3dIT6sLGU0eHupbUMw0swapJE=) 3: eNexU45z9hsg8uDVbcM1xgFPzmA.roa (hash: lxTKbrWjdwK3UVl5lIUje+cFbf9AlxZL9yRVio/psAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:ad:9b:69:70:2d:8f:fa:c5:17:8d:e7:2e:70:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b Validity Not Before: Dec 20 18:00:36 2025 GMT Not After : Dec 21 18:00:36 2025 GMT Subject: CN=675a9246428e7b92d4674c1bedd67e71940fd490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:70:b7:a2:53:0c:21:e1:15:a3:b5:47:6d:ff: a6:33:73:d9:7f:03:4b:7f:40:df:bb:15:51:1a:78: 8a:1e:2a:0e:23:f2:25:1f:68:50:f5:4c:ad:13:18: 82:d8:d7:d2:76:e6:b0:6d:67:47:ad:d9:c7:23:bf: eb:9d:1b:be:5d:54:45:bc:aa:83:9f:71:58:18:63: e9:6c:af:f1:e7:5e:bb:91:ed:ad:2e:80:ac:7f:fb: de:98:54:89:33:f1:67:6c:c0:8a:f1:b2:fb:26:57: a6:62:16:11:42:3f:dd:7a:7d:ed:e7:ec:d9:78:92: f9:86:ca:40:44:39:d9:e1:b5:23:c3:56:12:9b:b7: 9e:6e:68:4b:66:ff:bf:af:1d:62:6e:28:5d:74:55: 44:d4:3f:e6:51:2c:31:66:3b:21:f6:00:bc:73:29: b1:fd:5c:66:95:5d:51:74:8d:7c:ff:4d:62:a3:72: bf:a3:29:bb:77:b7:bd:ce:e9:ca:01:a3:68:ab:b1: 86:ba:17:48:d8:00:46:b4:62:33:4d:53:1a:5b:48: bf:10:79:14:7a:1b:42:67:f0:c1:0a:c9:65:13:7c: 1e:09:02:7c:04:28:84:ba:6b:ea:0b:0a:90:3c:1d: 02:c1:db:e0:f0:97:93:5f:24:fe:0b:0b:49:18:40: 2c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5A:92:46:42:8E:7B:92:D4:67:4C:1B:ED:D6:7E:71:94:0F:D4:90 X509v3 Authority Key Identifier: keyid:49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:83:99:31:a2:f8:57:22:b0:41:85:4a:3c:96:63:39:23:cf: 87:33:fd:21:21:1f:9a:12:f4:74:76:cb:ae:26:e5:92:9b:bd: 6c:38:80:55:b9:25:e4:b4:01:14:47:c1:b1:d1:89:16:72:fd: 65:4c:7c:cc:1a:23:86:4d:9e:d0:59:ba:bb:e3:17:d3:ed:57: e1:fb:aa:13:a0:b3:28:5b:d8:68:e8:cc:f0:a9:a2:36:96:40: 96:cf:db:83:5d:e4:98:18:b8:b4:17:b4:a3:ba:9d:72:b5:6c: a3:e3:87:5d:e8:5e:d0:3e:36:9c:51:33:f0:de:0d:6a:8d:35: c9:6d:ec:52:50:80:1a:d1:88:8f:e3:22:5f:10:e5:9e:3b:30: 12:65:31:c5:94:a8:eb:a6:62:c9:4c:39:7c:e9:41:38:0c:40: 6b:5c:d6:96:36:13:e9:b3:51:15:42:dc:92:1a:27:1f:b8:6f: 59:79:a1:8b:d6:c9:0d:38:09:7e:9b:29:e3:e3:a1:90:ba:d3: 3b:7b:6a:6a:02:d2:26:a6:c5:66:be:46:de:53:ce:28:b5:4f: 5f:dd:de:23:7b:f5:fb:8c:13:16:d8:52:ea:5a:1d:65:71:7e: 03:07:39:c5:17:65:9d:88:f5:32:47:c3:e1:38:69:76:b3:75: 47:61:89:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8662baXAtj/rFF43nLnCSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODRkMGNjNjcwM2JmOTQyYzZkYWM4OWRmZjFhN2JmNjYz MmVhOGIwHhcNMjUxMjIwMTgwMDM2WhcNMjUxMjIxMTgwMDM2WjAzMTEwLwYDVQQD Eyg2NzVhOTI0NjQyOGU3YjkyZDQ2NzRjMWJlZGQ2N2U3MTk0MGZkNDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXC3olMMIeEVo7VHbf+mM3PZfwNL f0DfuxVRGniKHioOI/IlH2hQ9UytExiC2NfSduawbWdHrdnHI7/rnRu+XVRFvKqD n3FYGGPpbK/x5167ke2tLoCsf/vemFSJM/FnbMCK8bL7JlemYhYRQj/den3t5+zZ eJL5hspARDnZ4bUjw1YSm7eebmhLZv+/rx1ibihddFVE1D/mUSwxZjsh9gC8cymx /VxmlV1RdI18/01io3K/oym7d7e9zunKAaNoq7GGuhdI2ABGtGIzTVMaW0i/EHkU ehtCZ/DBCsllE3weCQJ8BCiEumvqCwqQPB0Cwdvg8JeTXyT+CwtJGEAsRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdakkZCjnuS1GdMG+3WfnGUD9SQMB8GA1UdIwQY MBaAFEmE0MxnA7+ULG2sid/xp79mMuqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1lUUXpHY0R2NVFzYmF5SjNfR252Mll5Nm9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNTgzMTEtZTY3NC00MDVjLTk4ZjIt MTQ3MGJjY2VlYjFiLzEvU1lUUXpHY0R2NVFzYmF5SjNfR252Mll5Nm9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hNTgzMTEtZTY3NC00MDVjLTk4ZjItMTQ3MGJjY2VlYjFi LzEvU1lUUXpHY0R2NVFzYmF5SjNfR252Mll5Nm9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4OZMaL4 VyKwQYVKPJZjOSPPhzP9ISEfmhL0dHbLriblkpu9bDiAVbkl5LQBFEfBsdGJFnL9 ZUx8zBojhk2e0Fm6u+MX0+1X4fuqE6CzKFvYaOjM8KmiNpZAls/bg13kmBi4tBe0 o7qdcrVso+OHXehe0D42nFEz8N4Nao01yW3sUlCAGtGIj+MiXxDlnjswEmUxxZSo 66ZiyUw5fOlBOAxAa1zWljYT6bNRFULckhonH7hvWXmhi9bJDTgJfpsp4+OhkLrT O3tqagLSJqbFZr5G3lPOKLVPX93eI3v1+4wTFthS6lodZXF+Awc5xRdlnYj1MkfD 4ThpdrN1R2GJOQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:24:19 2025 by rpki-client