This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft File: SY_lsoKxx9sA9nu0oT2feVIFCLc.mft (raw, json) Hash identifier: aGML6PkN8Fp+z+BWKMl8JpIdiWYjoMVW5FOcoAPDBjo= Subject key identifier: 42:99:81:87:24:C1:F4:1C:78:F7:82:15:01:82:82:0C:61:D0:79:E9 Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7 Certificate issuer: /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7 Certificate serial: 019B34C52908CADFB59629E88E258C7283CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft Manifest number: 0AAC Signing time: Fri 19 Dec 2025 04:01:34 +0000 Manifest this update: Fri 19 Dec 2025 04:01:34 +0000 Manifest next update: Sat 20 Dec 2025 04:01:34 +0000 Files and hashes: 1: 8K5eZmO6X2MbGoBeK8qQvKjxcoU.roa (hash: KbO6Ab2C27LaWeTnTdU2aLz+mT2b0V6KrOUj4Nm0t/k=) 2: SY_lsoKxx9sA9nu0oT2feVIFCLc.crl (hash: j2Qtzxuerx0BaRbLUKxaVQlEcUs9hNjHdVafGLsl0qA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:29:08:ca:df:b5:96:29:e8:8e:25:8c:72:83:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7 Validity Not Before: Dec 19 04:01:34 2025 GMT Not After : Dec 20 04:01:34 2025 GMT Subject: CN=4299818724c1f41c78f782150182820c61d079e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ce:74:d0:57:b2:cc:b3:6d:76:ae:c2:71:0d: 34:55:5e:df:54:28:f7:00:6f:c6:97:29:55:9a:bb: 69:ff:d0:a3:88:6e:ff:91:93:17:4f:21:15:d8:30: 5e:f8:50:25:ef:7a:78:36:a9:42:7e:b3:03:52:47: 02:4b:3f:0c:f6:02:7e:75:c2:04:0d:56:0a:32:3a: 68:ef:aa:19:e0:c9:c0:71:ab:e7:ef:41:30:24:10: d2:42:d7:11:a7:1a:d1:62:d6:ff:ed:45:7b:81:9d: 42:e3:26:7a:2f:5d:9c:8c:b1:68:78:30:93:b4:b9: ea:7a:84:fc:f3:89:5d:80:d4:7e:38:13:aa:41:c0: e8:ae:5b:fa:70:ae:dc:79:82:dc:0c:6b:c7:11:da: d9:3e:43:76:9c:e0:2a:d1:9e:dc:68:0e:8c:a5:ce: 46:a7:36:b1:81:3e:77:ed:cb:fe:9f:ee:4a:fa:27: dc:7a:43:7e:3c:89:05:7a:c7:06:bf:27:94:c9:f1: 38:2e:5d:d8:2a:35:20:85:04:71:f3:65:70:e3:87: 72:4b:c4:e2:27:1a:6c:ce:bb:3f:bf:ca:6c:dc:a2: 60:97:ac:81:03:69:74:b6:b0:93:c3:78:d6:16:22: 40:8d:bf:97:60:96:cd:22:e8:ad:4e:8e:1d:38:a9: ce:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:99:81:87:24:C1:F4:1C:78:F7:82:15:01:82:82:0C:61:D0:79:E9 X509v3 Authority Key Identifier: keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:94:2a:0b:b6:e6:d1:62:81:20:f1:ff:36:fa:52:12:bf:41: c9:3a:fa:e2:e9:2b:b8:23:97:ee:ad:cb:da:5b:50:ef:d9:c6: 77:bd:12:b0:6e:1d:c9:73:b5:00:09:d6:59:43:32:ce:91:22: 95:31:05:68:c4:25:af:ba:aa:04:71:32:3f:a0:d9:3a:21:37: e9:f6:73:8c:a3:6f:3e:75:b2:e2:b7:d0:67:03:90:a6:6f:8c: 9d:48:97:02:62:28:4e:e6:ed:3d:a1:85:6b:89:06:a3:08:9f: 1a:de:7b:bf:31:93:d4:de:1a:66:ec:b1:aa:91:1c:4c:b2:6e: 23:d8:95:a0:26:5c:4c:c0:50:5a:5f:dc:95:43:63:4c:78:0c: d2:1b:2a:46:57:04:d2:be:6a:56:23:51:60:c4:e6:88:53:82: 2c:ce:2e:8d:ef:9f:96:d1:b7:91:bc:f9:b9:3d:36:5a:1b:d6: 3f:f4:e9:b4:87:90:98:b7:9f:db:17:c2:41:94:c0:86:b2:8c: 15:fd:25:ed:7b:de:ac:3b:6b:14:2f:33:b7:00:87:3f:39:f8: a3:c3:2d:73:9c:de:06:18:69:ed:2c:61:98:ee:4f:dd:15:b5: 3a:60:40:65:d9:93:66:ae:0a:d3:e2:50:9f:b0:56:5b:8f:1e: e0:f9:9e:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xSkIyt+1linojiWMcoPKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5OGZlNWIyODJiMWM3ZGIwMGY2N2JiNGExM2Q5Zjc5NTIw NTA4YjcwHhcNMjUxMjE5MDQwMTM0WhcNMjUxMjIwMDQwMTM0WjAzMTEwLwYDVQQD Eyg0Mjk5ODE4NzI0YzFmNDFjNzhmNzgyMTUwMTgyODIwYzYxZDA3OWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss500FeyzLNtdq7CcQ00VV7fVCj3 AG/GlylVmrtp/9CjiG7/kZMXTyEV2DBe+FAl73p4NqlCfrMDUkcCSz8M9gJ+dcIE DVYKMjpo76oZ4MnAcavn70EwJBDSQtcRpxrRYtb/7UV7gZ1C4yZ6L12cjLFoeDCT tLnqeoT884ldgNR+OBOqQcDorlv6cK7ceYLcDGvHEdrZPkN2nOAq0Z7caA6Mpc5G pzaxgT537cv+n+5K+ifcekN+PIkFescGvyeUyfE4Ll3YKjUghQRx82Vw44dyS8Ti Jxpszrs/v8ps3KJgl6yBA2l0trCTw3jWFiJAjb+XYJbNIuitTo4dOKnORwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKZgYckwfQcePeCFQGCggxh0HnpMB8GA1UdIwQY MBaAFEmP5bKCscfbAPZ7tKE9n3lSBQi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWIt MDA0MDNiNjQwNTVhLzEvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWItMDA0MDNiNjQwNTVh LzEvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJQqC7bm 0WKBIPH/NvpSEr9ByTr64ukruCOX7q3L2ltQ79nGd70SsG4dyXO1AAnWWUMyzpEi lTEFaMQlr7qqBHEyP6DZOiE36fZzjKNvPnWy4rfQZwOQpm+MnUiXAmIoTubtPaGF a4kGowifGt57vzGT1N4aZuyxqpEcTLJuI9iVoCZcTMBQWl/clUNjTHgM0hsqRlcE 0r5qViNRYMTmiFOCLM4uje+fltG3kbz5uT02WhvWP/TptIeQmLef2xfCQZTAhrKM Ff0l7XverDtrFC8ztwCHPzn4o8Mtc5zeBhhp7SxhmO5P3RW1OmBAZdmTZq4K0+JQ n7BWW48e4PmeeA== -----END CERTIFICATE-----Generated at Fri Dec 19 07:50:54 2025 by rpki-client