This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft File: SYeUHnTBwD56ujuHhTAJXrb6h04.mft (raw, json) Hash identifier: x1eh4+C8jkq9LE2t3lwnXh/Y/fTElzxAd20y3cefsTs= Subject key identifier: 41:C9:F3:0C:C3:8F:5E:BF:6B:38:6D:C3:F1:D1:0E:AF:C9:FE:A2:E3 Authority key identifier: 49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E Certificate issuer: /CN=4987941e74c1c03e7aba3b878530095eb6fa874e Certificate serial: 019B3AC6D513AD2F2DB8AE766910302FA794 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft Manifest number: 0BE2 Signing time: Sat 20 Dec 2025 08:01:07 +0000 Manifest this update: Sat 20 Dec 2025 08:01:07 +0000 Manifest next update: Sun 21 Dec 2025 08:01:07 +0000 Files and hashes: 1: SYeUHnTBwD56ujuHhTAJXrb6h04.crl (hash: fmNJsLQQEEt0ThH0A3+RAzdkZgPn5GljMi5iNPiyb0g=) 2: kGUp47WG5G_Wel7cs85ecDXJxm4.roa (hash: FarWEvOJ/JgOa5f9B3LnYP5C2r/V9zA4q1xgJVraMqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:d5:13:ad:2f:2d:b8:ae:76:69:10:30:2f:a7:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4987941e74c1c03e7aba3b878530095eb6fa874e Validity Not Before: Dec 20 08:01:07 2025 GMT Not After : Dec 21 08:01:07 2025 GMT Subject: CN=41c9f30cc38f5ebf6b386dc3f1d10eafc9fea2e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8c:25:41:e4:b0:0c:ed:78:32:cc:f0:9a:15: 9d:93:e7:f5:bb:20:aa:f3:95:1e:dd:a0:d8:ef:63: 09:b1:79:b7:3a:b3:07:20:c9:b1:19:bc:db:13:24: fb:25:a9:18:2d:41:b0:8d:aa:80:a9:bb:42:25:83: 12:ed:dd:77:46:70:ab:13:bb:8a:6b:b0:e6:22:08: f8:13:1d:43:49:9e:4e:82:bc:b3:bf:bf:f0:8b:45: 9e:23:7b:94:46:34:d5:d1:e7:e2:62:07:31:86:b2: b4:5e:4d:e3:c5:ea:65:d4:3a:17:75:77:bc:b2:d4: aa:c0:9a:ce:0e:e9:34:05:66:75:97:84:6f:10:50: 37:50:25:5b:45:a9:72:ac:a6:f5:a0:62:80:8a:ca: 5d:ce:73:53:60:f3:61:d1:55:dc:86:67:b3:4e:88: 98:80:8f:fb:71:28:86:cc:6e:3a:f7:f1:15:d8:f1: a9:5b:c2:b9:ad:69:08:a7:4d:d0:77:0c:9f:06:a2: 3b:8a:bd:12:8e:c4:9d:cf:a3:df:be:be:f2:df:20: bb:55:02:91:48:63:fe:6c:aa:c9:c5:1c:63:75:74: 2b:e9:30:fa:5f:09:c4:e8:31:39:5e:1e:cf:5a:27: 17:95:aa:c7:70:f1:cc:53:80:64:cc:84:5f:7f:bf: b7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C9:F3:0C:C3:8F:5E:BF:6B:38:6D:C3:F1:D1:0E:AF:C9:FE:A2:E3 X509v3 Authority Key Identifier: keyid:49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:63:99:b9:9a:5c:84:0e:ff:8a:89:34:80:20:dd:2a:35:62: 51:a2:33:9f:24:93:b6:5e:9c:b0:b9:5a:e3:c9:b5:a8:c3:7c: 0c:15:ff:4e:05:81:0d:fe:8c:3a:84:a0:b0:0a:33:ab:4e:10: 45:de:c6:d2:65:bd:4d:a6:89:e8:4e:69:49:b4:d5:f1:cb:e9: 7b:e6:3a:be:69:a3:9b:08:a4:90:bd:ea:77:e8:35:53:e6:9a: 8d:da:df:02:7f:7a:70:3e:7f:16:10:02:d4:3a:45:fc:44:45: bc:d7:0b:45:a3:5d:43:a7:b6:86:c7:61:8d:85:8b:c6:61:19: 73:0f:f5:fb:5a:0f:0f:b2:fa:f4:40:8e:9d:b6:f5:cd:69:04: 88:15:6a:7b:3f:d3:e2:a7:e4:5f:66:f6:fc:d5:28:a2:53:7b: f0:85:8e:f5:9e:8e:87:58:19:b5:65:c2:a4:f5:0a:81:22:8c: 37:d1:24:b1:b3:f3:b6:ad:7b:aa:04:17:b4:38:0b:ef:7f:e4: 04:33:68:ed:97:12:bb:21:6b:f0:11:f9:1d:72:53:c9:ef:e7: f7:8e:14:60:33:96:dc:57:f3:92:7b:e3:73:35:56:e8:c0:ad: 5f:95:24:d9:2b:05:41:0c:09:53:f2:e0:4a:ff:65:aa:1b:36: 2d:27:cb:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xtUTrS8tuK52aRAwL6eUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODc5NDFlNzRjMWMwM2U3YWJhM2I4Nzg1MzAwOTVlYjZm YTg3NGUwHhcNMjUxMjIwMDgwMTA3WhcNMjUxMjIxMDgwMTA3WjAzMTEwLwYDVQQD Eyg0MWM5ZjMwY2MzOGY1ZWJmNmIzODZkYzNmMWQxMGVhZmM5ZmVhMmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YwlQeSwDO14MszwmhWdk+f1uyCq 85Ue3aDY72MJsXm3OrMHIMmxGbzbEyT7JakYLUGwjaqAqbtCJYMS7d13RnCrE7uK a7DmIgj4Ex1DSZ5Ogryzv7/wi0WeI3uURjTV0efiYgcxhrK0Xk3jxepl1DoXdXe8 stSqwJrODuk0BWZ1l4RvEFA3UCVbRalyrKb1oGKAispdznNTYPNh0VXchmezToiY gI/7cSiGzG469/EV2PGpW8K5rWkIp03QdwyfBqI7ir0SjsSdz6Pfvr7y3yC7VQKR SGP+bKrJxRxjdXQr6TD6XwnE6DE5Xh7PWicXlarHcPHMU4BkzIRff7+3/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHJ8wzDj16/azhtw/HRDq/J/qLjMB8GA1UdIwQY MBaAFEmHlB50wcA+ero7h4UwCV62+odOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83MDc3N2ItNjhiMC00MmE4LTllOWQt ZThhZGE1MWVlOGZmLzEvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83MDc3N2ItNjhiMC00MmE4LTllOWQtZThhZGE1MWVlOGZm LzEvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGOZuZpc hA7/iok0gCDdKjViUaIznySTtl6csLla48m1qMN8DBX/TgWBDf6MOoSgsAozq04Q Rd7G0mW9TaaJ6E5pSbTV8cvpe+Y6vmmjmwikkL3qd+g1U+aajdrfAn96cD5/FhAC 1DpF/ERFvNcLRaNdQ6e2hsdhjYWLxmEZcw/1+1oPD7L69ECOnbb1zWkEiBVqez/T 4qfkX2b2/NUoolN78IWO9Z6Oh1gZtWXCpPUKgSKMN9EksbPztq17qgQXtDgL73/k BDNo7ZcSuyFr8BH5HXJTye/n944UYDOW3FfzknvjczVW6MCtX5Uk2SsFQQwJU/Lg Sv9lqhs2LSfLdg== -----END CERTIFICATE-----Generated at Sat Dec 20 14:13:59 2025 by rpki-client