This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft File: syHLgokI9DB0nuOl8qYt5fgi99E.mft (raw, json) Hash identifier: o8LyzSHOr5vEdFs9NX8qoC9PmM6uJJhVlGqmRbXV1/s= Subject key identifier: C3:44:1D:E8:8B:0A:B8:AE:13:DA:8D:D0:87:DE:5F:4A:59:08:95:B3 Authority key identifier: B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1 Certificate issuer: /CN=b321cb828908f430749ee3a5f2a62de5f822f7d1 Certificate serial: 019B1BE0CF8E8BD34E471AD6B9A71F51A53C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft Manifest number: 12B7 Signing time: Sun 14 Dec 2025 08:01:16 +0000 Manifest this update: Sun 14 Dec 2025 08:01:16 +0000 Manifest next update: Mon 15 Dec 2025 08:01:16 +0000 Files and hashes: 1: 7Vf5R0kVboHfQe1HmwZydUmPy3w.roa (hash: CSR8lVlOICslmIH5THMhkf2ZR8pm8M7MZ0mWBD2ElFE=) 2: syHLgokI9DB0nuOl8qYt5fgi99E.crl (hash: ++Q05nyXT0Mlf4tfhqxrRXc7XYyI1yTqT9AhKOv9yZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 08:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:e0:cf:8e:8b:d3:4e:47:1a:d6:b9:a7:1f:51:a5:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b321cb828908f430749ee3a5f2a62de5f822f7d1 Validity Not Before: Dec 14 08:01:16 2025 GMT Not After : Dec 15 08:01:16 2025 GMT Subject: CN=c3441de88b0ab8ae13da8dd087de5f4a590895b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:be:61:3c:2b:5a:5c:fb:c9:16:f2:d4:a5:c0: 52:72:6a:76:18:8e:10:f5:22:1b:e9:36:83:a9:db: ff:df:89:c6:52:d9:49:cd:a1:f7:69:4e:86:1e:17: 25:13:71:99:09:48:6f:ed:b3:c0:3d:b7:ce:d8:1c: 46:36:2e:37:7f:29:03:f3:79:7e:10:e6:d1:f2:02: 77:1f:d4:51:b4:09:33:1c:18:20:f4:24:d8:14:7d: a6:fd:81:48:07:77:5f:7e:ef:28:23:8d:fd:66:30: 47:36:f2:a7:cf:39:41:6d:0d:35:61:6c:e6:aa:c2: 9e:7b:71:33:71:99:a4:a3:20:a1:f9:0c:44:73:5e: 00:5f:ea:a6:2f:4f:2f:13:23:e1:00:ac:5c:f1:df: 02:b4:8b:e0:ba:19:01:e4:61:20:5e:3c:bc:89:4d: 25:de:12:ee:8f:87:6b:bb:ad:bc:c7:e0:9c:2b:69: 1f:b2:7f:6d:16:79:62:9e:0c:be:c8:b2:fe:23:96: 88:33:f4:ef:75:26:31:4c:12:be:b8:c6:a7:7a:53: f2:7c:6a:40:08:7d:ca:2b:ee:e3:25:1f:06:fd:65: ff:0b:27:e4:2a:06:e8:b3:6b:45:42:2d:3b:fc:9e: 64:33:46:db:50:23:e3:3e:b8:a9:59:ba:65:15:14: c7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:44:1D:E8:8B:0A:B8:AE:13:DA:8D:D0:87:DE:5F:4A:59:08:95:B3 X509v3 Authority Key Identifier: keyid:B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:e0:81:f7:75:7b:a3:b1:1c:e8:a1:01:5c:b6:94:2b:3d:a1: 92:67:b6:84:b6:05:d7:04:9c:0b:8c:fd:69:b7:2b:bc:61:b7: 68:9b:20:55:6b:6a:dc:60:79:35:56:87:13:ea:1c:8c:6c:5e: cc:16:13:0f:f4:73:ab:1c:84:bd:20:00:bd:25:22:86:78:cb: d8:a6:cf:f4:e4:c5:d7:61:1b:36:8f:72:ea:18:f3:c9:a2:60: b9:1b:6d:3e:05:e9:25:35:b3:59:8c:56:f2:68:26:3a:fb:59: c9:bf:92:eb:ae:05:cf:1e:d2:81:86:cc:3e:36:e3:17:d9:4d: 53:f3:ae:cc:96:54:56:2d:3b:59:27:67:ee:79:d3:cb:49:9b: ee:3f:df:f5:45:9d:08:dd:f4:82:5d:19:26:37:3b:50:92:e2: 07:fc:40:66:de:7a:81:50:a0:8a:39:b3:f6:16:be:e1:70:13: 81:cb:e5:27:dd:36:55:90:db:4d:26:5a:26:04:ea:74:32:d7: f9:62:28:4e:8f:0d:b1:47:e1:42:cd:f4:e6:1f:18:6d:f9:55: 4e:c9:22:b0:95:99:96:fb:58:fb:98:a8:c2:fc:17:e2:d1:65: 54:47:1c:09:35:f9:d4:b2:7f:e5:a5:4b:5a:e0:b1:d0:d0:56: cc:a9:3e:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsb4M+Oi9NORxrWuacfUaU8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMjFjYjgyODkwOGY0MzA3NDllZTNhNWYyYTYyZGU1Zjgy MmY3ZDEwHhcNMjUxMjE0MDgwMTE2WhcNMjUxMjE1MDgwMTE2WjAzMTEwLwYDVQQD EyhjMzQ0MWRlODhiMGFiOGFlMTNkYThkZDA4N2RlNWY0YTU5MDg5NWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1r5hPCtaXPvJFvLUpcBScmp2GI4Q 9SIb6TaDqdv/34nGUtlJzaH3aU6GHhclE3GZCUhv7bPAPbfO2BxGNi43fykD83l+ EObR8gJ3H9RRtAkzHBgg9CTYFH2m/YFIB3dffu8oI439ZjBHNvKnzzlBbQ01YWzm qsKee3EzcZmkoyCh+QxEc14AX+qmL08vEyPhAKxc8d8CtIvguhkB5GEgXjy8iU0l 3hLuj4dru628x+CcK2kfsn9tFnlingy+yLL+I5aIM/TvdSYxTBK+uManelPyfGpA CH3KK+7jJR8G/WX/CyfkKgbos2tFQi07/J5kM0bbUCPjPripWbplFRTHDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNEHeiLCriuE9qN0IfeX0pZCJWzMB8GA1UdIwQY MBaAFLMhy4KJCPQwdJ7jpfKmLeX4IvfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3lITGdva0k5REIwbnVPbDhxWXQ1ZmdpOTlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jY2FhMWEtOWRhYS00NGI4LTllMjYt ODdmMzQxODg4NTYwLzEvc3lITGdva0k5REIwbnVPbDhxWXQ1ZmdpOTlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jY2FhMWEtOWRhYS00NGI4LTllMjYtODdmMzQxODg4NTYw LzEvc3lITGdva0k5REIwbnVPbDhxWXQ1ZmdpOTlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPuCB93V7 o7Ec6KEBXLaUKz2hkme2hLYF1wScC4z9abcrvGG3aJsgVWtq3GB5NVaHE+ocjGxe zBYTD/RzqxyEvSAAvSUihnjL2KbP9OTF12EbNo9y6hjzyaJguRttPgXpJTWzWYxW 8mgmOvtZyb+S664Fzx7SgYbMPjbjF9lNU/OuzJZUVi07WSdn7nnTy0mb7j/f9UWd CN30gl0ZJjc7UJLiB/xAZt56gVCgijmz9ha+4XATgcvlJ902VZDbTSZaJgTqdDLX +WIoTo8NsUfhQs305h8YbflVTskisJWZlvtY+5iowvwX4tFlVEccCTX51LJ/5aVL WuCx0NBWzKk+Kg== -----END CERTIFICATE-----Generated at Sun Dec 14 17:25:01 2025 by rpki-client