This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft File: SYbHOZTQLZH8l9kW6YCabZgeaxc.mft (raw, json) Hash identifier: 3ywl6BH1S7fsLEdhcocLgVwjg4EUFSzolgYFdoscJHw= Subject key identifier: 7B:02:C9:B9:C7:E6:2E:E9:57:7C:04:2F:00:58:81:D5:0E:6E:2A:7F Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17 Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17 Certificate serial: 019B11940CC8667EBB557718B94A65EC49C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft Manifest number: 1803 Signing time: Fri 12 Dec 2025 08:01:13 +0000 Manifest this update: Fri 12 Dec 2025 08:01:13 +0000 Manifest next update: Sat 13 Dec 2025 08:01:13 +0000 Files and hashes: 1: 2H8bk0scnZWZCejbJpVwKzPODxU.roa (hash: hMVwt69RjByg01GyzZs8pwlz2+q4Wpy8Ui3CHMqWQVM=) 2: BhKXE6iuo9SfBVLFhVn_mkUc-7o.roa (hash: 6UQPEWEZQ8R2LqnkEpCKEGwsYAPkUMrvkndL11WKeoQ=) 3: SYbHOZTQLZH8l9kW6YCabZgeaxc.crl (hash: PhkRJgrcPEndvuX6iBCcyhavKUOIZfDIkmWuoEwkwyI=) 4: dEkWV8xPj6ZjKfgx5t3dIacQr1A.roa (hash: ZOk1wKX5K0Mx4fspQclTvx+3kOne5shTmWgvCBY9O/Q=) 5: j-RMRHJ23qu7rbAmxPP-MPbufuc.roa (hash: dJtuGeJTvCUEBM+hGg9srwzgusTpj+o/Wmaam12pfeg=) 6: jQ5qWaYZOuGFbmK6xWnSAiBZvC4.roa (hash: hOBNFEt7+n9S44ThfKSG8bjP2CvsYahZ60/Dq1Sii/s=) 7: kYpZLQ-AuudDB2VaPbw0Spka5lg.roa (hash: 5naLUifPbVvyChqmHEXOpfanoJmyL4cI6dCLv8ZRPLk=) 8: xsBxTTHCu0M91jc-x-84709M1aw.roa (hash: n7OhK3FL5HSbtyKHt6+A8Y5XXP+dcUu4LzkiF/oZmAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:94:0c:c8:66:7e:bb:55:77:18:b9:4a:65:ec:49:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17 Validity Not Before: Dec 12 08:01:13 2025 GMT Not After : Dec 13 08:01:13 2025 GMT Subject: CN=7b02c9b9c7e62ee9577c042f005881d50e6e2a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:55:d5:70:51:57:ab:d7:2f:5e:93:81:af:d6: c3:4e:e8:fe:ca:76:44:72:47:1a:17:d1:88:63:3d: e5:fa:83:c4:b7:bb:d2:c6:0f:15:22:cf:fd:91:57: 6b:d5:d3:af:f7:87:60:70:94:0c:0a:f5:6e:c8:83: ee:68:bc:6e:81:31:65:cb:be:a2:c4:51:80:b8:be: 43:d7:d1:81:39:da:8a:58:dc:78:5e:38:08:30:16: 8a:41:60:c2:05:75:a4:f2:50:94:0a:e2:9b:6b:1e: e0:99:bf:41:a2:ae:77:f5:f9:e2:ea:ed:2f:06:51: 0e:e8:70:fa:11:c2:50:2c:3b:70:75:c0:77:47:cd: 65:b9:6f:82:e7:db:f9:7f:e8:b4:75:fe:ef:63:ce: e5:38:a5:92:a8:db:3d:f1:fe:76:21:69:87:89:eb: 15:d8:0b:5c:84:ac:3e:5b:05:ae:6f:5b:01:ce:70: 3b:ca:72:2f:89:f8:b8:a1:36:9a:8d:e4:c9:b3:a4: 12:8a:2d:ca:91:c4:d1:9f:c6:33:57:80:b9:63:ba: 0b:81:0c:97:03:bc:67:ac:95:5f:7a:31:88:60:80: de:91:5e:2b:d9:23:8f:8e:ec:fe:9d:e0:82:fc:bf: 35:38:9e:40:a9:df:40:94:25:f5:c2:e3:c6:05:27: 51:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:02:C9:B9:C7:E6:2E:E9:57:7C:04:2F:00:58:81:D5:0E:6E:2A:7F X509v3 Authority Key Identifier: keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:6d:a1:d5:26:0f:40:c9:9e:23:ce:f5:4b:48:79:ca:e3:28: 04:c1:3b:ae:e5:32:5f:c7:78:66:cc:94:35:52:eb:0c:d3:60: eb:98:0b:1c:10:71:6c:ad:97:a8:49:ca:f6:8b:82:b8:2c:e2: 21:31:b8:93:6d:a8:ab:f2:6f:3e:6f:db:c3:f3:15:65:ba:ca: be:29:dc:0a:86:e7:2c:e0:a7:ac:bb:25:02:f7:bc:28:93:ce: 87:e7:e3:48:81:c4:d1:50:b1:ca:6c:b3:47:77:e5:73:7b:e0: 28:51:e0:43:ae:30:a2:56:d3:36:89:45:17:40:bf:5c:9f:05: c0:92:1e:94:2f:78:6c:7f:90:0b:c6:02:9f:31:fb:d0:ff:b4: 5a:93:74:d4:40:f1:db:db:72:a5:87:77:cd:9c:4f:be:b5:2e: 47:8a:1b:6a:5b:e2:f4:29:91:f4:54:8a:b8:94:ca:52:16:6f: 52:67:52:6d:1c:1d:e2:da:42:d8:6e:61:dc:04:d0:66:e6:e3: 30:b5:65:2a:06:9e:b3:93:99:eb:75:4f:f3:25:5f:a1:00:cd: b4:79:7f:28:70:05:2b:e7:55:b5:3d:1c:42:39:1e:8d:b5:8c: 62:01:4d:b3:2f:60:b4:50:b4:a0:b4:1e:14:a7:84:62:e7:4d: 80:1e:e0:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRlAzIZn67VXcYuUpl7EnHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODZjNzM5OTRkMDJkOTFmYzk3ZDkxNmU5ODA5YTZkOTgx ZTZiMTcwHhcNMjUxMjEyMDgwMTEzWhcNMjUxMjEzMDgwMTEzWjAzMTEwLwYDVQQD Eyg3YjAyYzliOWM3ZTYyZWU5NTc3YzA0MmYwMDU4ODFkNTBlNmUyYTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVXVcFFXq9cvXpOBr9bDTuj+ynZE ckcaF9GIYz3l+oPEt7vSxg8VIs/9kVdr1dOv94dgcJQMCvVuyIPuaLxugTFly76i xFGAuL5D19GBOdqKWNx4XjgIMBaKQWDCBXWk8lCUCuKbax7gmb9Boq539fni6u0v BlEO6HD6EcJQLDtwdcB3R81luW+C59v5f+i0df7vY87lOKWSqNs98f52IWmHiesV 2AtchKw+WwWub1sBznA7ynIvifi4oTaajeTJs6QSii3KkcTRn8YzV4C5Y7oLgQyX A7xnrJVfejGIYIDekV4r2SOPjuz+neCC/L81OJ5Aqd9AlCX1wuPGBSdR/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsCybnH5i7pV3wELwBYgdUObip/MB8GA1UdIwQY MBaAFEmGxzmU0C2R/JfZFumAmm2YHmsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzIt OWU4OTVkMGVmOGQyLzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzItOWU4OTVkMGVmOGQy LzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUG2h1SYP QMmeI871S0h5yuMoBME7ruUyX8d4ZsyUNVLrDNNg65gLHBBxbK2XqEnK9ouCuCzi ITG4k22oq/JvPm/bw/MVZbrKvincCobnLOCnrLslAve8KJPOh+fjSIHE0VCxymyz R3flc3vgKFHgQ64wolbTNolFF0C/XJ8FwJIelC94bH+QC8YCnzH70P+0WpN01EDx 29typYd3zZxPvrUuR4obalvi9CmR9FSKuJTKUhZvUmdSbRwd4tpC2G5h3ATQZubj MLVlKgaes5OZ63VP8yVfoQDNtHl/KHAFK+dVtT0cQjkejbWMYgFNsy9gtFC0oLQe FKeEYudNgB7gLQ== -----END CERTIFICATE-----Generated at Fri Dec 12 09:24:31 2025 by rpki-client