This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft File: SY_lsoKxx9sA9nu0oT2feVIFCLc.mft (raw, json) Hash identifier: QscYkR0aayTp2z6ugAnexmQzDfDf/aExjm1ROLyDUGY= Subject key identifier: 1A:8B:17:8F:59:0A:B2:72:54:56:02:85:AD:7F:AE:44:54:1E:2C:66 Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7 Certificate issuer: /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7 Certificate serial: 019B30E8D0AFBA210F885FE6F3CCCA74D8ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft Manifest number: 0AAA Signing time: Thu 18 Dec 2025 10:02:02 +0000 Manifest this update: Thu 18 Dec 2025 10:02:02 +0000 Manifest next update: Fri 19 Dec 2025 10:02:02 +0000 Files and hashes: 1: 8K5eZmO6X2MbGoBeK8qQvKjxcoU.roa (hash: KbO6Ab2C27LaWeTnTdU2aLz+mT2b0V6KrOUj4Nm0t/k=) 2: SY_lsoKxx9sA9nu0oT2feVIFCLc.crl (hash: 8xUl5G8nH11Xmbo3uF59Uy2kEJwNiyci9z+k8QfAPcY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:d0:af:ba:21:0f:88:5f:e6:f3:cc:ca:74:d8:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7 Validity Not Before: Dec 18 10:02:02 2025 GMT Not After : Dec 19 10:02:02 2025 GMT Subject: CN=1a8b178f590ab27254560285ad7fae44541e2c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:23:3e:94:0d:ca:1e:9e:98:78:6a:54:ed:57: b7:db:bd:e2:d6:6a:1e:13:a1:c8:65:99:ea:a5:c7: a3:10:74:4d:4c:61:4a:e2:0e:b8:07:3c:6e:20:52: ea:53:e6:a4:69:6b:b6:f7:47:e6:71:08:92:02:13: d2:3a:43:8d:f4:b6:7a:06:58:72:f8:5d:1c:74:79: eb:d8:61:a3:5b:58:24:d5:ba:ec:51:13:39:a9:f3: 81:da:e9:52:83:6c:61:bf:bd:30:36:12:88:30:89: 2e:ef:10:38:75:58:7c:25:25:e9:9b:7e:e9:1c:f3: 75:4b:d7:13:1d:13:a7:db:98:e6:4b:15:20:96:2c: cf:cc:bb:3f:ed:a3:65:17:11:99:bd:c2:b8:ae:2b: 1c:8f:ae:e5:b4:65:1b:75:99:a4:a8:78:ac:ee:c1: 78:1b:43:91:2e:5b:f9:5c:f3:d8:94:19:94:02:16: a2:12:f2:db:e8:16:e0:6d:ad:2b:08:75:16:3c:49: 7f:98:02:bc:cc:c8:78:cf:3e:4f:c9:ab:ac:47:23: 77:a6:3c:e9:a9:4a:eb:eb:9e:e2:9c:b1:5e:e8:d1: 66:e5:8f:6a:12:c8:81:e2:cb:ff:83:8a:a3:d9:0e: 79:e3:dd:eb:56:cc:5c:d9:de:2c:c8:ee:8f:6c:dc: 4d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8B:17:8F:59:0A:B2:72:54:56:02:85:AD:7F:AE:44:54:1E:2C:66 X509v3 Authority Key Identifier: keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:fa:99:e4:20:c0:ee:b2:65:aa:44:32:95:67:03:f2:a5:f7: 0d:bd:b5:c0:e8:84:3a:4e:44:8c:db:ef:b9:c1:96:d1:4a:68: d2:8f:79:91:b7:71:f3:ae:57:1c:5e:e1:5a:b5:60:65:a0:8b: c2:67:85:5d:88:b3:64:dc:03:25:54:75:81:4f:15:38:09:bc: 11:57:f6:e8:40:5a:64:a7:c3:d3:17:58:b0:67:06:54:21:82: 67:a3:b1:c1:c3:01:d0:af:ad:1e:77:a1:70:35:17:d9:27:25: 6f:3b:5e:05:a3:65:65:02:5e:99:e9:96:df:33:03:96:f2:a8: c3:fd:25:0f:b6:39:06:84:f6:b5:65:3b:4e:41:88:8d:a4:61: 67:6a:cf:15:f7:d5:63:b0:9b:2d:62:ee:51:b3:13:ca:a1:c2: 20:73:c1:5b:f8:cb:62:ba:a1:02:24:96:2d:35:09:dc:9f:8b: 7c:26:72:de:11:03:90:71:9d:cb:ef:bc:80:42:aa:5a:9d:46: c6:06:ff:5a:50:b4:25:5e:c3:30:a2:bb:17:dc:dc:15:0e:87: 7d:77:3f:f4:fc:96:98:0f:29:75:06:0d:89:1a:de:32:a2:a7: c8:5c:19:7d:9f:c5:a2:af:37:a1:fd:b6:11:70:cf:64:02:6a: 25:7a:e4:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6NCvuiEPiF/m88zKdNjtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5OGZlNWIyODJiMWM3ZGIwMGY2N2JiNGExM2Q5Zjc5NTIw NTA4YjcwHhcNMjUxMjE4MTAwMjAyWhcNMjUxMjE5MTAwMjAyWjAzMTEwLwYDVQQD EygxYThiMTc4ZjU5MGFiMjcyNTQ1NjAyODVhZDdmYWU0NDU0MWUyYzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCM+lA3KHp6YeGpU7Ve3273i1moe E6HIZZnqpcejEHRNTGFK4g64BzxuIFLqU+akaWu290fmcQiSAhPSOkON9LZ6Blhy +F0cdHnr2GGjW1gk1brsURM5qfOB2ulSg2xhv70wNhKIMIku7xA4dVh8JSXpm37p HPN1S9cTHROn25jmSxUglizPzLs/7aNlFxGZvcK4riscj67ltGUbdZmkqHis7sF4 G0ORLlv5XPPYlBmUAhaiEvLb6Bbgba0rCHUWPEl/mAK8zMh4zz5PyausRyN3pjzp qUrr657inLFe6NFm5Y9qEsiB4sv/g4qj2Q55493rVsxc2d4syO6PbNxNnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqLF49ZCrJyVFYCha1/rkRUHixmMB8GA1UdIwQY MBaAFEmP5bKCscfbAPZ7tKE9n3lSBQi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWIt MDA0MDNiNjQwNTVhLzEvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWItMDA0MDNiNjQwNTVh LzEvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0vqZ5CDA 7rJlqkQylWcD8qX3Db21wOiEOk5EjNvvucGW0Upo0o95kbdx865XHF7hWrVgZaCL wmeFXYizZNwDJVR1gU8VOAm8EVf26EBaZKfD0xdYsGcGVCGCZ6OxwcMB0K+tHneh cDUX2SclbzteBaNlZQJememW3zMDlvKow/0lD7Y5BoT2tWU7TkGIjaRhZ2rPFffV Y7CbLWLuUbMTyqHCIHPBW/jLYrqhAiSWLTUJ3J+LfCZy3hEDkHGdy++8gEKqWp1G xgb/WlC0JV7DMKK7F9zcFQ6HfXc/9PyWmA8pdQYNiRreMqKnyFwZfZ/Foq83of22 EXDPZAJqJXrkvQ== -----END CERTIFICATE-----Generated at Thu Dec 18 17:15:52 2025 by rpki-client