This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
File:                     SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json)
Hash identifier:          1uSq/Gz1ifKMOsKhAib8uzOJbUyxvEh32NzV28Ndq2Q=
Subject key identifier:   C2:9F:05:E0:51:39:81:13:BA:17:23:15:24:5B:17:E5:29:72:AA:A4
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Certificate issuer:       /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial:       019B0F37363B07A35D043C85B4A38B5501FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
Manifest number:          0E57
Signing time:             Thu 11 Dec 2025 21:00:35 +0000
Manifest this update:     Thu 11 Dec 2025 21:00:35 +0000
Manifest next update:     Fri 12 Dec 2025 21:00:35 +0000
Files and hashes:         1: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: UAejjSiyGgReXxbEoNTR8tcld1jCbTU6BJXA0lOqBuw=)
                          2: bTKBc42tXDi_zX0dMq0HddtScgI.roa (hash: lEi06vaib9NpWsrvDpoqTavKihSNsj4G7hhaYfH95VQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0f:37:36:3b:07:a3:5d:04:3c:85:b4:a3:8b:55:01:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
        Validity
            Not Before: Dec 11 21:00:35 2025 GMT
            Not After : Dec 12 21:00:35 2025 GMT
        Subject: CN=c29f05e051398113ba172315245b17e52972aaa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:aa:2c:ef:ee:f3:8d:4a:2a:25:da:a1:1c:f4:
                    85:8b:cc:4f:84:10:89:c3:37:14:7e:37:c2:98:70:
                    e9:ce:4c:58:db:26:b8:32:50:41:1a:0a:bf:4e:ae:
                    74:27:be:a7:da:f0:25:a2:bf:1b:90:ca:cf:2e:8c:
                    f5:1c:da:12:18:d2:4f:ad:ae:e1:61:9a:29:72:8e:
                    3c:b4:dc:10:18:8f:e8:d2:0c:66:c1:72:72:13:60:
                    38:22:af:bb:3b:3f:a3:e6:f5:b6:b7:ed:cd:d9:e9:
                    95:a5:fe:0a:63:db:4d:cd:b4:c7:60:90:1a:e2:75:
                    84:46:ae:37:f8:dc:51:de:d0:2e:64:54:d8:bb:02:
                    3d:df:7e:c6:ae:62:47:cc:55:70:28:bd:49:54:f8:
                    d8:42:73:40:b7:51:c9:ab:43:94:a8:1a:ca:94:08:
                    c1:da:26:a6:a2:9a:67:e7:33:b2:56:26:98:1c:38:
                    70:2b:89:b4:e0:57:00:39:dc:1a:5f:c4:50:e2:e9:
                    42:b0:d4:4a:a3:56:93:a9:16:d3:2e:bf:55:ad:f2:
                    89:b0:7d:4b:6c:e3:82:27:02:ac:3e:81:e3:2f:67:
                    bc:48:20:40:cb:54:cb:ab:c6:e2:a3:b4:ca:47:26:
                    b2:37:94:17:e0:1e:38:f1:66:ed:46:f7:5d:f0:fe:
                    7d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9F:05:E0:51:39:81:13:BA:17:23:15:24:5B:17:E5:29:72:AA:A4
            X509v3 Authority Key Identifier:
                keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:56:69:ad:a8:3c:73:1f:7e:37:87:a2:e4:95:8c:a4:10:91:
         f4:54:08:2e:96:d9:7d:5e:38:af:6e:ca:90:f9:af:5e:48:bb:
         3a:6c:39:61:70:5d:0d:67:8a:cf:be:a0:be:fc:c5:fc:c9:45:
         bd:07:62:7c:0b:51:e6:c5:78:6a:7f:89:b6:66:82:95:65:48:
         76:85:7c:48:f7:6b:2c:70:4e:3e:ad:86:86:ec:06:07:c0:e4:
         42:7f:85:7e:db:98:9c:b6:a0:95:8f:ca:5e:47:16:c8:3c:0c:
         83:02:56:c2:5c:21:6b:8c:9d:a8:70:08:0b:eb:6a:d7:62:72:
         ee:ff:fb:c1:67:bc:50:f2:27:8d:61:b7:1c:71:f6:ff:e7:fb:
         dc:2e:0b:38:58:74:26:99:e5:8f:17:e9:7b:8a:af:36:61:dd:
         e5:f1:3a:92:53:40:1e:bf:5e:e0:48:d4:0c:af:b7:a2:fb:ce:
         e6:c3:01:1f:55:18:b4:0b:47:51:f3:bb:af:26:c9:ae:d8:3c:
         d6:93:0c:e5:70:4f:eb:4d:94:e8:a6:c0:cd:e5:59:a4:ea:b4:
         b4:b8:7c:40:34:7d:77:5c:30:e5:62:e7:e8:22:ee:d0:1d:66:
         28:8e:8a:01:e8:aa:8b:a9:c7:16:10:41:c9:95:d8:c5:f5:fb:
         9a:39:a3:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsPNzY7B6NdBDyFtKOLVQH8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OGY1NTUzNGUzOGVhYzJjMzI3YTk0MWUxYTI2YjljNDAz
MWJlMTgwHhcNMjUxMjExMjEwMDM1WhcNMjUxMjEyMjEwMDM1WjAzMTEwLwYDVQQD
EyhjMjlmMDVlMDUxMzk4MTEzYmExNzIzMTUyNDViMTdlNTI5NzJhYWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaos7+7zjUoqJdqhHPSFi8xPhBCJ
wzcUfjfCmHDpzkxY2ya4MlBBGgq/Tq50J76n2vAlor8bkMrPLoz1HNoSGNJPra7h
YZopco48tNwQGI/o0gxmwXJyE2A4Iq+7Oz+j5vW2t+3N2emVpf4KY9tNzbTHYJAa
4nWERq43+NxR3tAuZFTYuwI9337GrmJHzFVwKL1JVPjYQnNAt1HJq0OUqBrKlAjB
2iamoppn5zOyViaYHDhwK4m04FcAOdwaX8RQ4ulCsNRKo1aTqRbTLr9VrfKJsH1L
bOOCJwKsPoHjL2e8SCBAy1TLq8bio7TKRyayN5QX4B448WbtRvdd8P59rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKfBeBROYETuhcjFSRbF+UpcqqkMB8GA1UdIwQY
MBaAFEmPVVNOOOrCwyepQeGia5xAMb4YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1k5VlUwNDQ2c0xESjZsQjRhSnJuRUF4dmhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yNWIzN2YtM2I2OC00ODRlLWIyOWYt
M2VlNjM2MmVhMzdiLzEvU1k5VlUwNDQ2c0xESjZsQjRhSnJuRUF4dmhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yNWIzN2YtM2I2OC00ODRlLWIyOWYtM2VlNjM2MmVhMzdi
LzEvU1k5VlUwNDQ2c0xESjZsQjRhSnJuRUF4dmhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVZprag8
cx9+N4ei5JWMpBCR9FQILpbZfV44r27KkPmvXki7Omw5YXBdDWeKz76gvvzF/MlF
vQdifAtR5sV4an+JtmaClWVIdoV8SPdrLHBOPq2GhuwGB8DkQn+FftuYnLaglY/K
XkcWyDwMgwJWwlwha4ydqHAIC+tq12Jy7v/7wWe8UPInjWG3HHH2/+f73C4LOFh0
Jpnljxfpe4qvNmHd5fE6klNAHr9e4EjUDK+3ovvO5sMBH1UYtAtHUfO7rybJrtg8
1pMM5XBP602U6KbAzeVZpOq0tLh8QDR9d1ww5WLn6CLu0B1mKI6KAeiqi6nHFhBB
yZXYxfX7mjmjxQ==
-----END CERTIFICATE-----
Generated at Fri Dec 12 00:28:18 2025 by rpki-client