This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
File: SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json)
Hash identifier: 1uSq/Gz1ifKMOsKhAib8uzOJbUyxvEh32NzV28Ndq2Q=
Subject key identifier: C2:9F:05:E0:51:39:81:13:BA:17:23:15:24:5B:17:E5:29:72:AA:A4
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Certificate issuer: /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial: 019B0F37363B07A35D043C85B4A38B5501FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
Manifest number: 0E57
Signing time: Thu 11 Dec 2025 21:00:35 +0000
Manifest this update: Thu 11 Dec 2025 21:00:35 +0000
Manifest next update: Fri 12 Dec 2025 21:00:35 +0000
Files and hashes: 1: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: UAejjSiyGgReXxbEoNTR8tcld1jCbTU6BJXA0lOqBuw=)
2: bTKBc42tXDi_zX0dMq0HddtScgI.roa (hash: lEi06vaib9NpWsrvDpoqTavKihSNsj4G7hhaYfH95VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 14:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0f:37:36:3b:07:a3:5d:04:3c:85:b4:a3:8b:55:01:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
Validity
Not Before: Dec 11 21:00:35 2025 GMT
Not After : Dec 12 21:00:35 2025 GMT
Subject: CN=c29f05e051398113ba172315245b17e52972aaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:aa:2c:ef:ee:f3:8d:4a:2a:25:da:a1:1c:f4:
85:8b:cc:4f:84:10:89:c3:37:14:7e:37:c2:98:70:
e9:ce:4c:58:db:26:b8:32:50:41:1a:0a:bf:4e:ae:
74:27:be:a7:da:f0:25:a2:bf:1b:90:ca:cf:2e:8c:
f5:1c:da:12:18:d2:4f:ad:ae:e1:61:9a:29:72:8e:
3c:b4:dc:10:18:8f:e8:d2:0c:66:c1:72:72:13:60:
38:22:af:bb:3b:3f:a3:e6:f5:b6:b7:ed:cd:d9:e9:
95:a5:fe:0a:63:db:4d:cd:b4:c7:60:90:1a:e2:75:
84:46:ae:37:f8:dc:51:de:d0:2e:64:54:d8:bb:02:
3d:df:7e:c6:ae:62:47:cc:55:70:28:bd:49:54:f8:
d8:42:73:40:b7:51:c9:ab:43:94:a8:1a:ca:94:08:
c1:da:26:a6:a2:9a:67:e7:33:b2:56:26:98:1c:38:
70:2b:89:b4:e0:57:00:39:dc:1a:5f:c4:50:e2:e9:
42:b0:d4:4a:a3:56:93:a9:16:d3:2e:bf:55:ad:f2:
89:b0:7d:4b:6c:e3:82:27:02:ac:3e:81:e3:2f:67:
bc:48:20:40:cb:54:cb:ab:c6:e2:a3:b4:ca:47:26:
b2:37:94:17:e0:1e:38:f1:66:ed:46:f7:5d:f0:fe:
7d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9F:05:E0:51:39:81:13:BA:17:23:15:24:5B:17:E5:29:72:AA:A4
X509v3 Authority Key Identifier:
keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:56:69:ad:a8:3c:73:1f:7e:37:87:a2:e4:95:8c:a4:10:91:
f4:54:08:2e:96:d9:7d:5e:38:af:6e:ca:90:f9:af:5e:48:bb:
3a:6c:39:61:70:5d:0d:67:8a:cf:be:a0:be:fc:c5:fc:c9:45:
bd:07:62:7c:0b:51:e6:c5:78:6a:7f:89:b6:66:82:95:65:48:
76:85:7c:48:f7:6b:2c:70:4e:3e:ad:86:86:ec:06:07:c0:e4:
42:7f:85:7e:db:98:9c:b6:a0:95:8f:ca:5e:47:16:c8:3c:0c:
83:02:56:c2:5c:21:6b:8c:9d:a8:70:08:0b:eb:6a:d7:62:72:
ee:ff:fb:c1:67:bc:50:f2:27:8d:61:b7:1c:71:f6:ff:e7:fb:
dc:2e:0b:38:58:74:26:99:e5:8f:17:e9:7b:8a:af:36:61:dd:
e5:f1:3a:92:53:40:1e:bf:5e:e0:48:d4:0c:af:b7:a2:fb:ce:
e6:c3:01:1f:55:18:b4:0b:47:51:f3:bb:af:26:c9:ae:d8:3c:
d6:93:0c:e5:70:4f:eb:4d:94:e8:a6:c0:cd:e5:59:a4:ea:b4:
b4:b8:7c:40:34:7d:77:5c:30:e5:62:e7:e8:22:ee:d0:1d:66:
28:8e:8a:01:e8:aa:8b:a9:c7:16:10:41:c9:95:d8:c5:f5:fb:
9a:39:a3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 00:28:18 2025 by rpki-client