This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft File: SROyYa2_ee42pqOt-mh6fsZYIQs.mft (raw, json) Hash identifier: oKOt0F/WvYkdIAreqW41dTAlk/k2AiQbFNQG8V5Jb0M= Subject key identifier: F8:F0:E5:CB:55:07:16:D9:F3:B5:56:6C:4E:FD:67:BF:B9:18:98:7E Authority key identifier: 49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B Certificate issuer: /CN=4913b261adbf79ee36a6a3adfa687a7ec658210b Certificate serial: 019B2AAEDE5178079DC4D03229FA78C144C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft Manifest number: 0E7E Signing time: Wed 17 Dec 2025 05:01:01 +0000 Manifest this update: Wed 17 Dec 2025 05:01:01 +0000 Manifest next update: Thu 18 Dec 2025 05:01:01 +0000 Files and hashes: 1: 9VMEesSV6a-x_SjygxcaosIGoNs.roa (hash: j886WgvsxRYSzK/QB3dbJNQTgLbqJaUrZ8NkjBVnb/g=) 2: SROyYa2_ee42pqOt-mh6fsZYIQs.crl (hash: m813DqghXrb7LKzTAQQHu/WkTqqyuDRkDOtfTOyXu5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:ae:de:51:78:07:9d:c4:d0:32:29:fa:78:c1:44:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4913b261adbf79ee36a6a3adfa687a7ec658210b Validity Not Before: Dec 17 05:01:01 2025 GMT Not After : Dec 18 05:01:01 2025 GMT Subject: CN=f8f0e5cb550716d9f3b5566c4efd67bfb918987e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c3:03:7d:9c:05:03:29:45:91:7e:a1:98:82: c5:9e:5b:31:3d:48:a3:ef:0e:8e:36:9b:f7:33:d8: bb:ef:87:ee:3c:cd:d8:29:2d:b4:cb:76:17:eb:d3: 10:96:80:eb:6c:a7:b9:44:38:12:35:6e:f9:9e:26: 3f:74:cd:3d:84:61:ed:14:9e:95:c4:7f:ad:a2:af: 5c:6c:f7:a8:a8:74:f0:22:28:96:3b:4a:12:75:1e: ad:64:8f:46:47:e7:df:5b:5f:fa:55:25:e1:2d:dc: b6:78:33:8b:40:67:6c:db:fc:f4:6d:d8:72:ab:b6: be:d9:92:ae:02:7b:5f:1a:d4:65:c1:4c:93:28:25: 36:9b:a9:81:e6:27:19:92:fc:7b:7d:fe:b9:6f:0e: 75:05:4d:e7:a5:bc:9e:fc:3f:d8:d8:ec:c7:36:4e: fc:d2:a1:db:b5:99:e8:1a:bb:a7:b8:47:e9:66:12: a6:12:b9:97:34:5b:11:55:65:e0:e1:d6:64:d3:0c: db:2b:cc:78:db:e3:f4:dd:66:da:6c:c7:86:8e:30: b4:68:b4:c3:34:c9:21:61:99:01:a0:c5:0d:68:62: 1e:34:b4:3a:36:7d:3c:8d:dd:99:80:62:cf:36:25: 21:78:e3:c2:a9:8c:94:3d:12:68:d1:7f:ad:ef:e8: 82:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F0:E5:CB:55:07:16:D9:F3:B5:56:6C:4E:FD:67:BF:B9:18:98:7E X509v3 Authority Key Identifier: keyid:49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:47:c1:79:51:ec:fc:40:9f:a2:f5:3c:40:b0:b5:2f:2a:a6: b3:6d:34:1c:8c:85:4a:82:f9:50:4f:e7:3b:44:c6:ff:2d:eb: 98:38:94:76:50:3a:eb:0d:0f:57:88:57:f0:d4:d8:55:e6:b6: 4b:c6:dd:3c:38:24:8c:f3:46:02:27:1a:45:d1:87:88:14:35: 75:e3:fb:b4:76:44:95:62:f0:9e:a5:94:8e:66:85:8e:89:65: 36:cf:f0:e2:c4:78:e0:6e:e9:42:f0:fc:29:59:ae:70:a2:ac: a5:f3:4c:2d:07:27:13:7e:35:45:ce:28:d4:f2:2b:fa:23:e6: 26:ea:89:b3:38:b0:ec:48:f7:ae:07:be:ec:f5:65:e3:04:22: 45:cb:9a:6c:39:1c:53:87:d8:a0:fa:a8:bb:bf:37:9b:79:50: d9:06:6e:d5:3f:86:7e:b7:22:29:a8:94:68:4c:26:f2:6d:d6: ce:99:43:9a:85:2a:78:f2:ce:a8:e4:fc:92:95:b5:f0:f1:bd: e2:b3:c0:65:1b:5f:ad:78:9b:48:fb:8f:c9:7e:5a:61:3e:6f: 5f:b5:62:68:6d:93:ce:a0:d6:4f:cd:7f:ba:eb:94:fc:cc:61: 81:75:90:22:df:01:de:7a:19:72:63:2c:25:47:f3:84:17:d1: 05:ad:e0:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqrt5ReAedxNAyKfp4wUTBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MTNiMjYxYWRiZjc5ZWUzNmE2YTNhZGZhNjg3YTdlYzY1 ODIxMGIwHhcNMjUxMjE3MDUwMTAxWhcNMjUxMjE4MDUwMTAxWjAzMTEwLwYDVQQD EyhmOGYwZTVjYjU1MDcxNmQ5ZjNiNTU2NmM0ZWZkNjdiZmI5MTg5ODdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMMDfZwFAylFkX6hmILFnlsxPUij 7w6ONpv3M9i774fuPM3YKS20y3YX69MQloDrbKe5RDgSNW75niY/dM09hGHtFJ6V xH+toq9cbPeoqHTwIiiWO0oSdR6tZI9GR+ffW1/6VSXhLdy2eDOLQGds2/z0bdhy q7a+2ZKuAntfGtRlwUyTKCU2m6mB5icZkvx7ff65bw51BU3npbye/D/Y2OzHNk78 0qHbtZnoGrunuEfpZhKmErmXNFsRVWXg4dZk0wzbK8x42+P03WbabMeGjjC0aLTD NMkhYZkBoMUNaGIeNLQ6Nn08jd2ZgGLPNiUheOPCqYyUPRJo0X+t7+iCOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjw5ctVBxbZ87VWbE79Z7+5GJh+MB8GA1UdIwQY MBaAFEkTsmGtv3nuNqajrfpoen7GWCELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1JPeVlhMl9lZTQycHFPdC1taDZmc1pZSVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84ODBjNDctZmE5Mi00ZWVmLWIyNzYt YThhMGU1NWY1ZTMxLzEvU1JPeVlhMl9lZTQycHFPdC1taDZmc1pZSVFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC84ODBjNDctZmE5Mi00ZWVmLWIyNzYtYThhMGU1NWY1ZTMx LzEvU1JPeVlhMl9lZTQycHFPdC1taDZmc1pZSVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu0fBeVHs /ECfovU8QLC1Lyqms200HIyFSoL5UE/nO0TG/y3rmDiUdlA66w0PV4hX8NTYVea2 S8bdPDgkjPNGAicaRdGHiBQ1deP7tHZElWLwnqWUjmaFjollNs/w4sR44G7pQvD8 KVmucKKspfNMLQcnE341Rc4o1PIr+iPmJuqJsziw7Ej3rge+7PVl4wQiRcuabDkc U4fYoPqou783m3lQ2QZu1T+GfrciKaiUaEwm8m3WzplDmoUqePLOqOT8kpW18PG9 4rPAZRtfrXibSPuPyX5aYT5vX7ViaG2TzqDWT81/uuuU/MxhgXWQIt8B3noZcmMs JUfzhBfRBa3gvQ== -----END CERTIFICATE-----Generated at Wed Dec 17 07:57:05 2025 by rpki-client