This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft File: SiyGN2LOnZltKrq27eGSnM7ctjI.mft (raw, json) Hash identifier: cdDiWB4uUCz+qC5+u/f8nb/tBCnV0hI63Lx8b7Z1j5M= Subject key identifier: 97:22:8F:6D:CE:C6:C3:45:4B:35:1C:3F:DA:C5:A1:22:04:D0:C0:B6 Authority key identifier: 4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32 Certificate issuer: /CN=4a2c863762ce9d996d2abab6ede1929ccedcb632 Certificate serial: 019B48151E833C63605CBCADFC3053ADAC44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 22:01:42 +0000 Manifest this update: Mon 22 Dec 2025 22:01:42 +0000 Manifest next update: Tue 23 Dec 2025 22:01:42 +0000 Files and hashes: 1: HSzy_sdTpMM9eJp_2_sbD1IEYy0.roa (hash: ieQeEh5XwIx3cGbKm9ddEXjqNduJq3qUmYGe9bdZpCY=) 2: SiyGN2LOnZltKrq27eGSnM7ctjI.crl (hash: CEyXnS5phLthb7O/j/ozzTR+o1oFUTTMbIHiOtg0rlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:1e:83:3c:63:60:5c:bc:ad:fc:30:53:ad:ac:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a2c863762ce9d996d2abab6ede1929ccedcb632 Validity Not Before: Dec 22 22:01:42 2025 GMT Not After : Dec 23 22:01:42 2025 GMT Subject: CN=97228f6dcec6c3454b351c3fdac5a12204d0c0b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:01:2e:df:c6:b7:d5:f8:9c:44:4b:db:7b:bf: b8:e2:7b:e3:41:ad:d5:fe:64:36:d1:aa:36:d2:9c: 01:d1:8e:a0:6b:be:18:bd:a7:e7:4c:28:41:c7:ec: 35:9b:d9:4d:b2:1f:73:80:09:b2:d9:67:f1:33:8d: 2c:99:99:f8:54:33:fc:0e:21:43:f3:42:60:4f:41: 41:dc:c9:69:cc:b2:86:5f:3e:90:fc:c2:ff:64:dd: a2:0e:b4:c2:f2:88:e7:02:e9:f3:71:fc:26:77:02: 0d:8a:15:ec:ce:7d:79:0d:a3:dd:82:cc:8f:54:f7: 2a:fe:2a:a8:33:2f:45:e7:9e:35:13:50:72:db:9f: 07:dc:a2:56:91:97:81:7b:75:06:d7:69:ab:c5:5a: 1e:67:5a:3d:d3:22:60:f6:f4:64:05:12:2d:0c:31: 6b:f2:15:8f:b3:f6:7a:90:5e:65:16:e4:4e:1d:58: dc:0f:5c:61:25:47:06:c0:c9:49:66:15:2d:f4:17: 59:83:13:ab:41:69:ca:07:20:5d:2e:fd:00:50:0b: f5:35:40:21:62:b0:60:6b:78:25:9c:1c:36:27:51: 5a:fe:78:0d:ca:8b:66:d0:b4:02:6b:76:20:13:94: a3:b2:e3:62:73:dc:fc:5a:93:e9:a4:8b:86:f9:a0: 81:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:22:8F:6D:CE:C6:C3:45:4B:35:1C:3F:DA:C5:A1:22:04:D0:C0:B6 X509v3 Authority Key Identifier: keyid:4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:b8:cb:8e:8f:d2:fd:35:13:81:c7:72:37:c7:6c:40:65:7f: 2d:fa:ce:f8:3a:bc:2b:4e:db:bc:2a:a2:61:84:f2:29:48:e0: fb:94:52:b0:c3:b5:24:ef:0f:c1:31:56:55:37:bb:80:70:1b: e7:25:cf:38:d1:45:d8:2c:59:8d:27:b8:c6:a2:62:6a:12:79: 6f:e1:d6:28:d3:87:d2:69:70:de:c6:8c:95:e5:08:d8:70:e1: f9:1a:dc:5f:27:e2:a6:13:ca:82:05:03:ec:8c:70:83:9e:5d: 6c:15:bc:20:9f:e4:4b:07:9d:ef:ae:13:e6:77:fe:63:8b:06: 68:81:14:06:0a:e3:a1:58:ee:50:fb:5b:a2:7d:84:1a:06:be: 83:a2:f9:27:d5:d1:6a:12:8d:02:47:4f:fa:92:7c:6d:7f:62: 67:2d:e4:15:5b:74:4d:96:20:a2:ad:90:5a:bb:cb:c7:26:1b: 99:d3:53:24:13:c4:d2:e5:44:f0:7a:49:ee:aa:9f:db:f7:ba: 81:ef:cf:93:6c:96:4e:06:7e:58:f9:ea:bb:c6:86:97:46:cf: 44:67:d8:33:ed:5a:cc:ec:54:1c:39:b7:2f:8e:24:e9:18:de: 8c:77:cb:72:ea:8c:ec:7b:c8:47:1e:52:1d:bf:c3:3b:6d:52: 68:0a:81:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFR6DPGNgXLyt/DBTraxEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhMmM4NjM3NjJjZTlkOTk2ZDJhYmFiNmVkZTE5MjljY2Vk Y2I2MzIwHhcNMjUxMjIyMjIwMTQyWhcNMjUxMjIzMjIwMTQyWjAzMTEwLwYDVQQD Eyg5NzIyOGY2ZGNlYzZjMzQ1NGIzNTFjM2ZkYWM1YTEyMjA0ZDBjMGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AEu38a31ficREvbe7+44nvjQa3V /mQ20ao20pwB0Y6ga74YvafnTChBx+w1m9lNsh9zgAmy2WfxM40smZn4VDP8DiFD 80JgT0FB3MlpzLKGXz6Q/ML/ZN2iDrTC8ojnAunzcfwmdwINihXszn15DaPdgsyP VPcq/iqoMy9F5541E1By258H3KJWkZeBe3UG12mrxVoeZ1o90yJg9vRkBRItDDFr 8hWPs/Z6kF5lFuROHVjcD1xhJUcGwMlJZhUt9BdZgxOrQWnKByBdLv0AUAv1NUAh YrBga3glnBw2J1Fa/ngNyotm0LQCa3YgE5SjsuNic9z8WpPppIuG+aCB4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcij23OxsNFSzUcP9rFoSIE0MC2MB8GA1UdIwQY MBaAFEoshjdizp2ZbSq6tu3hkpzO3LYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2l5R04yTE9uWmx0S3JxMjdlR1NuTTdjdGpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83YThlM2MtY2MwMi00MjU1LTk4OTIt YzQ3MTg0ZmRhYzM5LzEvU2l5R04yTE9uWmx0S3JxMjdlR1NuTTdjdGpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC83YThlM2MtY2MwMi00MjU1LTk4OTItYzQ3MTg0ZmRhYzM5 LzEvU2l5R04yTE9uWmx0S3JxMjdlR1NuTTdjdGpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrjLjo/S /TUTgcdyN8dsQGV/LfrO+Dq8K07bvCqiYYTyKUjg+5RSsMO1JO8PwTFWVTe7gHAb 5yXPONFF2CxZjSe4xqJiahJ5b+HWKNOH0mlw3saMleUI2HDh+RrcXyfiphPKggUD 7Ixwg55dbBW8IJ/kSwed764T5nf+Y4sGaIEUBgrjoVjuUPtbon2EGga+g6L5J9XR ahKNAkdP+pJ8bX9iZy3kFVt0TZYgoq2QWrvLxyYbmdNTJBPE0uVE8HpJ7qqf2/e6 ge/Pk2yWTgZ+WPnqu8aGl0bPRGfYM+1azOxUHDm3L44k6RjejHfLcuqM7HvIRx5S Hb/DO21SaAqBAA== -----END CERTIFICATE-----Generated at Tue Dec 23 06:38:11 2025 by rpki-client