This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json) Hash identifier: GUVxA8uVsci/JJzJyybz39S/vt2s3W4kgu9j4fVmuwI= Subject key identifier: BA:91:E1:33:70:61:98:21:4D:B4:C5:FB:A1:95:D0:6E:B5:9B:69:2A Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec Certificate serial: 019B5CADAF21ECC473BB020CB415E1D8709C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft Manifest number: 17A9 Signing time: Fri 26 Dec 2025 22:00:44 +0000 Manifest this update: Fri 26 Dec 2025 22:00:44 +0000 Manifest next update: Sat 27 Dec 2025 22:00:44 +0000 Files and hashes: 1: UJPW0acNcxjVpnidxLVQuiuOXGQ.roa (hash: a2O5xdupJ9/xqQl/Fb0t3DFJlemLpiFP2p64rJERpP8=) 2: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: AQKfe8SjPLOG8EcYhq+b0cfwAQyXgFxArgDwRYxjsU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:ad:af:21:ec:c4:73:bb:02:0c:b4:15:e1:d8:70:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec Validity Not Before: Dec 26 22:00:44 2025 GMT Not After : Dec 27 22:00:44 2025 GMT Subject: CN=ba91e133706198214db4c5fba195d06eb59b692a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9a:ca:18:ef:05:99:01:dc:80:87:78:df:9a: 7f:d6:d2:ab:24:6c:2d:0d:4c:7e:2a:f4:de:a1:16: 3c:ea:33:64:9c:60:e5:c2:c0:cc:53:46:bd:43:1c: e7:06:fd:e1:23:04:34:f3:30:65:6d:6a:69:d5:86: 27:14:21:63:2b:8e:9d:ac:0d:eb:b8:49:ba:39:c9: 41:e8:a2:9f:a2:63:35:0f:5e:cc:0a:72:67:b6:2e: c7:82:11:ab:c7:f5:a5:c5:b2:3d:90:ce:5f:5f:45: 8a:74:ed:27:23:81:33:dd:dc:d2:e4:a2:d7:a1:7a: 24:a2:a0:d3:8c:55:e8:12:bd:52:54:eb:00:d1:dc: 4e:e7:06:f3:2c:b9:2b:b1:49:8f:0c:bf:47:cd:13: 91:bc:f2:f1:48:ff:ad:c7:91:45:06:f8:84:b8:d6: 7b:28:9b:6a:18:3a:a7:6e:cc:14:f9:67:66:8f:e3: a5:df:24:67:6c:51:b4:95:52:3a:8b:4d:2c:c7:18: 32:d6:9c:2e:a7:12:16:7b:c3:51:4a:6e:9e:46:b3: ad:df:31:b7:c3:bf:47:b4:d1:22:60:35:21:42:95: 74:b9:e2:6c:a3:d9:6f:bc:1b:4a:b8:d8:85:71:c7: a5:c1:e8:2a:af:5f:0c:3d:7c:6b:f3:2a:7b:9e:33: 7b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:91:E1:33:70:61:98:21:4D:B4:C5:FB:A1:95:D0:6E:B5:9B:69:2A X509v3 Authority Key Identifier: keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:fa:96:c4:12:86:16:c6:a3:06:89:71:31:64:b7:f3:3c:1d: 0e:5c:53:c6:83:46:bc:b7:48:e3:5e:b4:9d:ac:a8:29:0c:8f: 8d:43:4f:2d:3c:9c:6e:68:86:f8:15:ce:ba:d2:36:e3:cb:f8: 12:05:9f:2e:f0:2f:52:f6:fd:60:14:ff:c2:f1:6d:a2:12:00: 4c:c5:75:12:35:10:2e:2b:8f:c1:c5:3c:2e:f5:d4:e5:3e:60: 1b:c9:59:50:02:17:88:63:e5:62:bd:18:4b:4c:b6:a5:ba:08: 79:e8:c0:d0:04:dc:e6:e5:a9:31:64:48:55:e8:dc:99:6a:95: 70:82:22:a6:a9:8b:87:97:7e:11:69:8e:0c:f7:41:88:ec:f2: 20:76:b4:40:fc:67:dc:05:7d:ab:9e:f4:28:44:6f:06:db:e0: 5d:fd:7b:82:59:d5:be:ad:8f:50:08:6d:e2:51:73:60:ba:24: a8:10:81:c0:15:c2:5c:b9:56:b2:4b:b6:e7:d2:4a:a3:87:5b: 45:e9:31:c5:3c:36:22:be:87:4d:c9:07:4e:62:29:6d:ac:83: 81:6f:b1:d0:d5:f9:93:40:1e:f5:b6:08:a9:8b:e5:3c:8e:b9: 51:6d:31:61:ba:9e:f3:71:e5:49:c8:36:07:51:04:4d:cd:b9: 72:4c:ac:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcra8h7MRzuwIMtBXh2HCcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMmVlMmIzOTcxMjM3N2I0YmZlYzllNjZhYzdlNmU5MDhl ZmNlZWMwHhcNMjUxMjI2MjIwMDQ0WhcNMjUxMjI3MjIwMDQ0WjAzMTEwLwYDVQQD EyhiYTkxZTEzMzcwNjE5ODIxNGRiNGM1ZmJhMTk1ZDA2ZWI1OWI2OTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5rKGO8FmQHcgId435p/1tKrJGwt DUx+KvTeoRY86jNknGDlwsDMU0a9QxznBv3hIwQ08zBlbWpp1YYnFCFjK46drA3r uEm6OclB6KKfomM1D17MCnJnti7HghGrx/WlxbI9kM5fX0WKdO0nI4Ez3dzS5KLX oXokoqDTjFXoEr1SVOsA0dxO5wbzLLkrsUmPDL9HzRORvPLxSP+tx5FFBviEuNZ7 KJtqGDqnbswU+Wdmj+Ol3yRnbFG0lVI6i00sxxgy1pwupxIWe8NRSm6eRrOt3zG3 w79HtNEiYDUhQpV0ueJso9lvvBtKuNiFccelwegqr18MPXxr8yp7njN7DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqR4TNwYZghTbTF+6GV0G61m2kqMB8GA1UdIwQY MBaAFLMu4rOXEjd7S/7J5mrH5ukI787sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3k3aXM1Y1NOM3RMX3NubWFzZm02UWp2enV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kZmE1MWItNDZhYS00MDg0LWEzNDMt ZjAxNmNhNWRhMjE5LzEvc3k3aXM1Y1NOM3RMX3NubWFzZm02UWp2enV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9kZmE1MWItNDZhYS00MDg0LWEzNDMtZjAxNmNhNWRhMjE5 LzEvc3k3aXM1Y1NOM3RMX3NubWFzZm02UWp2enV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/qWxBKG FsajBolxMWS38zwdDlxTxoNGvLdI4160nayoKQyPjUNPLTycbmiG+BXOutI248v4 EgWfLvAvUvb9YBT/wvFtohIATMV1EjUQLiuPwcU8LvXU5T5gG8lZUAIXiGPlYr0Y S0y2pboIeejA0ATc5uWpMWRIVejcmWqVcIIipqmLh5d+EWmODPdBiOzyIHa0QPxn 3AV9q570KERvBtvgXf17glnVvq2PUAht4lFzYLokqBCBwBXCXLlWsku259JKo4db RekxxTw2Ir6HTckHTmIpbayDgW+x0NX5k0Ae9bYIqYvlPI65UW0xYbqe83HlScg2 B1EETc25ckysJA== -----END CERTIFICATE-----Generated at Sat Dec 27 00:16:45 2025 by rpki-client