This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft File: SyOwbWDsPna0kgsrZBQfo69uX7s.mft (raw, json) Hash identifier: 1XrwG5JQfzklwXd3IMUZaSSTOVH6nR5QbjC8oaYC3Cs= Subject key identifier: 0A:B1:49:92:F5:FF:C2:FB:D1:59:E3:B3:27:CA:75:2C:90:75:2C:5A Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB Certificate issuer: /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb Certificate serial: 019B6AD74C74E4E94D1979C1B48931A80412 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft Manifest number: 0F11 Signing time: Mon 29 Dec 2025 16:00:53 +0000 Manifest this update: Mon 29 Dec 2025 16:00:53 +0000 Manifest next update: Tue 30 Dec 2025 16:00:53 +0000 Files and hashes: 1: 2FAwhQu6ok9bOg22C73ws6AzeTA.roa (hash: NjIG5kr55nDYslaJlr/UrfkcBYGbRIfRwF+wfXlzJDo=) 2: SyOwbWDsPna0kgsrZBQfo69uX7s.crl (hash: KQ0SLRRc+LV/6WjzTu8YoZS+pypDUJDezRqin16tMe0=) 3: oPMyM9DlgGOhMRIoLDO1OdPuuaA.roa (hash: ZO3/wqoicRWPL4+s7QSyOKEb1NF7BoLY/968foDdnC8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 16:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d7:4c:74:e4:e9:4d:19:79:c1:b4:89:31:a8:04:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb Validity Not Before: Dec 29 16:00:53 2025 GMT Not After : Dec 30 16:00:53 2025 GMT Subject: CN=0ab14992f5ffc2fbd159e3b327ca752c90752c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8c:7e:98:7e:1d:fb:47:fb:34:4f:03:95:00: 10:25:fb:a0:f4:11:c4:0e:52:2e:14:6a:f0:16:a7: aa:1e:ea:38:89:30:e7:ed:d0:33:a4:1f:07:1b:a1: 01:92:ef:f5:aa:a1:ec:d8:a3:08:59:d7:e2:93:02: 4a:49:22:a5:7a:eb:1e:a2:1c:0c:e6:dd:de:0e:86: f1:da:26:8a:66:d2:f2:b3:be:6c:8c:a4:61:42:45: 00:88:43:dc:a3:27:19:b3:28:aa:c7:6f:b1:66:33: f9:1c:9b:fc:d3:1b:7c:17:2c:1c:9e:aa:3c:49:81: 11:58:70:06:ab:8e:ac:e3:99:1b:e2:17:45:0e:46: 66:46:59:4c:9c:87:57:35:2f:7d:8b:46:63:2b:b2: ec:4c:c2:c9:0e:dd:ee:cc:b3:12:99:4c:62:98:30: a3:b2:42:7a:5a:fa:05:85:7f:db:c6:e5:84:3a:12: c8:8d:ae:aa:7c:48:f9:52:5f:79:37:f3:94:0a:3f: 85:c0:a2:ca:ff:ad:52:ac:31:ad:84:f8:8f:36:34: fb:a9:dd:07:d3:32:8e:56:0c:8c:a3:03:ce:98:7c: 25:a7:cb:94:fb:21:cb:8d:c8:69:90:a3:3b:8a:7d: 57:cc:fa:5e:ff:30:96:6a:67:96:df:0b:c6:7f:95: f7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B1:49:92:F5:FF:C2:FB:D1:59:E3:B3:27:CA:75:2C:90:75:2C:5A X509v3 Authority Key Identifier: keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:19:3b:89:42:6d:d8:e9:75:69:3c:b0:00:8c:e5:f2:9d:97: 66:2c:1e:fc:56:18:19:23:64:b2:32:c0:cb:fc:ca:1a:ff:e8: 88:24:59:c4:3f:63:58:4c:71:2a:cc:99:a2:d7:f9:f7:ce:f1: f6:97:92:ca:64:47:1a:1d:42:b7:f6:d0:d5:38:51:c8:53:3c: a3:61:03:2b:ee:bf:06:92:b3:2c:55:85:d8:18:6d:80:39:a3: 6d:50:ee:92:e6:e0:37:17:a3:75:62:f2:ca:8b:22:e5:4a:39: f9:30:68:0a:b3:e9:28:14:b2:48:6c:c5:61:ee:ae:64:af:46: ab:9f:d4:91:9e:53:d2:b2:2c:4b:04:8e:28:ee:4c:7b:5c:c6: ba:25:13:48:a3:9f:0e:02:fa:af:40:67:5f:5f:47:c0:52:7f: 13:82:b9:f4:8f:85:77:f7:2e:ea:20:be:e0:a4:2c:ed:41:74: ba:ba:27:8c:a0:12:30:38:9e:f4:42:a6:b2:83:7f:12:8e:01: 70:4d:f9:e0:47:d2:b9:74:1e:45:e7:b5:ba:d3:30:28:1e:bf: 6a:7b:82:d4:52:b2:81:a2:9f:f3:a5:06:49:80:f5:3f:e5:b2: 23:b5:50:35:ca:01:6d:43:a5:4b:16:ae:eb:51:4b:87:55:1f: 0b:10:89:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq10x05OlNGXnBtIkxqAQSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMjNiMDZkNjBlYzNlNzZiNDkyMGIyYjY0MTQxZmEzYWY2 ZTVmYmIwHhcNMjUxMjI5MTYwMDUzWhcNMjUxMjMwMTYwMDUzWjAzMTEwLwYDVQQD EygwYWIxNDk5MmY1ZmZjMmZiZDE1OWUzYjMyN2NhNzUyYzkwNzUyYzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYx+mH4d+0f7NE8DlQAQJfug9BHE DlIuFGrwFqeqHuo4iTDn7dAzpB8HG6EBku/1qqHs2KMIWdfikwJKSSKleuseohwM 5t3eDobx2iaKZtLys75sjKRhQkUAiEPcoycZsyiqx2+xZjP5HJv80xt8Fywcnqo8 SYERWHAGq46s45kb4hdFDkZmRllMnIdXNS99i0ZjK7LsTMLJDt3uzLMSmUximDCj skJ6WvoFhX/bxuWEOhLIja6qfEj5Ul95N/OUCj+FwKLK/61SrDGthPiPNjT7qd0H 0zKOVgyMowPOmHwlp8uU+yHLjchpkKM7in1XzPpe/zCWameW3wvGf5X3bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqxSZL1/8L70VnjsyfKdSyQdSxaMB8GA1UdIwQY MBaAFEsjsG1g7D52tJILK2QUH6Ovbl+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3lPd2JXRHNQbmEwa2dzclpCUWZvNjl1WDdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS81YWFjZjMtYmJjOS00M2M0LTg2ZjAt NTRmNmU1MmY1NDdiLzEvU3lPd2JXRHNQbmEwa2dzclpCUWZvNjl1WDdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS81YWFjZjMtYmJjOS00M2M0LTg2ZjAtNTRmNmU1MmY1NDdi LzEvU3lPd2JXRHNQbmEwa2dzclpCUWZvNjl1WDdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxk7iUJt 2Ol1aTywAIzl8p2XZiwe/FYYGSNksjLAy/zKGv/oiCRZxD9jWExxKsyZotf5987x 9peSymRHGh1Ct/bQ1ThRyFM8o2EDK+6/BpKzLFWF2BhtgDmjbVDukubgNxejdWLy yosi5Uo5+TBoCrPpKBSySGzFYe6uZK9Gq5/UkZ5T0rIsSwSOKO5Me1zGuiUTSKOf DgL6r0BnX19HwFJ/E4K59I+Fd/cu6iC+4KQs7UF0uronjKASMDie9EKmsoN/Eo4B cE354EfSuXQeRee1utMwKB6/anuC1FKygaKf86UGSYD1P+WyI7VQNcoBbUOlSxau 61FLh1UfCxCJVA== -----END CERTIFICATE-----Generated at Tue Dec 30 01:31:14 2025 by rpki-client