This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft File: SYKxcZtP7HCLpmsper4NsI-tDh4.mft (raw, json) Hash identifier: 0Ahk28UsEV/O52ovW//6yNkoofvOR2O/kT8FdCubjjg= Subject key identifier: 1A:21:A8:C6:5C:C4:90:D6:39:A2:EB:8F:78:37:1B:C1:2E:16:EB:F9 Authority key identifier: 49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E Certificate issuer: /CN=4982b1719b4fec708ba66b297abe0db08fad0e1e Certificate serial: 019B378ED7A420AD93668C2003FB7EC60931 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft Manifest number: 1557 Signing time: Fri 19 Dec 2025 17:01:06 +0000 Manifest this update: Fri 19 Dec 2025 17:01:06 +0000 Manifest next update: Sat 20 Dec 2025 17:01:06 +0000 Files and hashes: 1: 0KNJIwezZb-3FaFJUpqxhGPSa2k.roa (hash: A4j/zF7WMM+1P8qhcyYitAkcAPo5hxRepqaqzU+Jk9c=) 2: CLHhdOeMNXgExKSCdON9sy75K9Y.roa (hash: 38I9hpL0OwteLRFzo32bZbguPasIk9LP7nDY3tAu3zY=) 3: Mz_0oopSyUD8tIkNMNqzhKplVuM.roa (hash: DOtqb1hTDcb0EkPiiKGPxHU95felEP0mxUFdKqkLpas=) 4: SYKxcZtP7HCLpmsper4NsI-tDh4.crl (hash: A8J54l1ydo7XAhc1CCtvtaSJDBYm9GFhvmkyP+AljXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:d7:a4:20:ad:93:66:8c:20:03:fb:7e:c6:09:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4982b1719b4fec708ba66b297abe0db08fad0e1e Validity Not Before: Dec 19 17:01:06 2025 GMT Not After : Dec 20 17:01:06 2025 GMT Subject: CN=1a21a8c65cc490d639a2eb8f78371bc12e16ebf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0b:7f:a2:1a:dc:72:7d:0b:b4:63:53:73:dc: fe:8f:75:42:06:a3:13:69:36:86:8b:09:76:6e:7e: 7c:b4:e2:76:61:35:af:aa:77:03:ef:ce:30:b5:07: ba:a0:2e:d4:63:69:90:d6:b6:5a:78:cf:1b:e9:f3: c8:50:65:f1:4c:03:cc:13:91:56:7e:e4:83:64:88: 55:71:11:bc:3b:70:b1:a2:e7:e0:65:f6:03:31:74: b4:bd:96:1a:a9:9b:72:07:9d:b2:bf:f9:8c:97:c1: 27:81:96:6b:f6:53:46:3e:f9:45:2b:58:97:61:35: fa:90:f5:52:7c:2b:80:4d:40:32:80:9a:ba:83:7c: 21:d8:17:02:69:74:9f:0a:8a:1b:7d:9b:e8:f8:cd: f9:b4:13:7d:e2:7a:33:28:30:97:31:fc:72:ab:9a: 72:06:95:61:68:19:fa:04:ce:30:92:9d:64:23:0b: 8d:7a:2c:b1:a4:67:4c:d5:aa:b7:ce:e6:b2:4d:a9: 5f:fa:6f:2c:a2:7c:8f:3d:ff:bb:5f:7c:4d:d1:d5: 67:e9:2f:37:86:16:c7:d6:a2:70:51:9c:6b:cb:30: 8f:b7:df:3d:e1:a5:76:af:7f:8b:99:f3:16:65:1a: 27:3b:f6:76:02:7e:c2:79:e4:13:a9:72:f4:25:67: ce:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:21:A8:C6:5C:C4:90:D6:39:A2:EB:8F:78:37:1B:C1:2E:16:EB:F9 X509v3 Authority Key Identifier: keyid:49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:7a:ee:b7:ef:23:36:e3:bd:8b:b2:3f:6f:25:7a:22:f7:b5: 7e:bf:08:ea:70:d5:4d:58:b2:cd:36:e7:ba:c2:0b:33:44:05: db:0c:55:91:aa:0a:8f:6e:8a:54:47:cf:bb:f6:0a:15:4e:9d: 97:30:82:38:52:cb:9b:a1:5d:b7:37:27:77:be:1d:ed:05:91: 2c:c6:4d:e6:bf:d0:6e:0b:b8:94:a2:e5:e7:d9:93:ee:1a:3b: 07:73:d2:45:fc:40:07:a8:5f:b2:89:c6:e6:45:b8:f5:a5:e0: 00:c8:4f:bb:01:ba:1a:72:ed:68:52:2c:f3:af:7b:28:b1:f0: 2f:40:9f:53:27:8e:8e:af:99:06:77:3e:04:83:de:f2:83:a9: 12:60:35:ba:cb:e8:d5:3a:03:d0:ad:fc:dd:82:66:8d:bc:a0: 79:a3:3b:2b:2f:fd:6a:e1:50:ad:81:27:85:05:d0:4e:4d:42: 17:25:f2:cd:81:7b:cb:78:3a:f0:2a:fa:8b:55:d7:ea:fb:b8: 0c:06:53:ac:94:39:aa:ab:00:61:75:68:fe:14:0d:d3:cd:b2: e5:26:f9:9f:37:e1:4a:84:00:54:48:49:48:4e:f1:72:a4:93: 90:66:33:e7:24:ee:74:47:fa:22:af:83:bc:32:59:1b:c1:7f: c6:52:ec:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jtekIK2TZowgA/t+xgkxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODJiMTcxOWI0ZmVjNzA4YmE2NmIyOTdhYmUwZGIwOGZh ZDBlMWUwHhcNMjUxMjE5MTcwMTA2WhcNMjUxMjIwMTcwMTA2WjAzMTEwLwYDVQQD EygxYTIxYThjNjVjYzQ5MGQ2MzlhMmViOGY3ODM3MWJjMTJlMTZlYmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgt/ohrccn0LtGNTc9z+j3VCBqMT aTaGiwl2bn58tOJ2YTWvqncD784wtQe6oC7UY2mQ1rZaeM8b6fPIUGXxTAPME5FW fuSDZIhVcRG8O3CxoufgZfYDMXS0vZYaqZtyB52yv/mMl8EngZZr9lNGPvlFK1iX YTX6kPVSfCuATUAygJq6g3wh2BcCaXSfCoobfZvo+M35tBN94nozKDCXMfxyq5py BpVhaBn6BM4wkp1kIwuNeiyxpGdM1aq3zuayTalf+m8sonyPPf+7X3xN0dVn6S83 hhbH1qJwUZxryzCPt9894aV2r3+LmfMWZRonO/Z2An7CeeQTqXL0JWfObQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBohqMZcxJDWOaLrj3g3G8EuFuv5MB8GA1UdIwQY MBaAFEmCsXGbT+xwi6ZrKXq+DbCPrQ4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1lLeGNadFA3SENMcG1zcGVyNE5zSS10RGg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kOGYxNDUtMWUwZC00NzFkLTg1MzYt YWU2Yjg0YzI4MTk1LzEvU1lLeGNadFA3SENMcG1zcGVyNE5zSS10RGg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9kOGYxNDUtMWUwZC00NzFkLTg1MzYtYWU2Yjg0YzI4MTk1 LzEvU1lLeGNadFA3SENMcG1zcGVyNE5zSS10RGg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHrut+8j NuO9i7I/byV6Ive1fr8I6nDVTViyzTbnusILM0QF2wxVkaoKj26KVEfPu/YKFU6d lzCCOFLLm6Fdtzcnd74d7QWRLMZN5r/Qbgu4lKLl59mT7ho7B3PSRfxAB6hfsonG 5kW49aXgAMhPuwG6GnLtaFIs8697KLHwL0CfUyeOjq+ZBnc+BIPe8oOpEmA1usvo 1ToD0K383YJmjbygeaM7Ky/9auFQrYEnhQXQTk1CFyXyzYF7y3g68Cr6i1XX6vu4 DAZTrJQ5qqsAYXVo/hQN082y5Sb5nzfhSoQAVEhJSE7xcqSTkGYz5yTudEf6Iq+D vDJZG8F/xlLsrA== -----END CERTIFICATE-----Generated at Sat Dec 20 00:17:17 2025 by rpki-client