This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft File: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft (raw, json) Hash identifier: QS9LPCBL2zFDDJSVrBmzFQxmWEcf7NcHZ+3omvi65wM= Subject key identifier: 88:61:4D:D1:D4:B1:D6:CF:57:B2:AB:2E:D9:0B:88:44:0A:1B:25:53 Authority key identifier: 49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B Certificate issuer: /CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b Certificate serial: 019B3343BC9ED7357A2E12C49B8CF643CC48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft Manifest number: 111A Signing time: Thu 18 Dec 2025 21:00:35 +0000 Manifest this update: Thu 18 Dec 2025 21:00:35 +0000 Manifest next update: Fri 19 Dec 2025 21:00:35 +0000 Files and hashes: 1: Exo16zEYgO3PueRCaRsMKkkEhy0.roa (hash: kH5z+KdUp6OrMDZjKD02kQC0jLALZ4m/6if0eLS0ZaE=) 2: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl (hash: TMtvl58cU5VY0HoEg5uKDMKRRhi+LKks/06O61i/sPw=) 3: eNexU45z9hsg8uDVbcM1xgFPzmA.roa (hash: lxTKbrWjdwK3UVl5lIUje+cFbf9AlxZL9yRVio/psAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:bc:9e:d7:35:7a:2e:12:c4:9b:8c:f6:43:cc:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b Validity Not Before: Dec 18 21:00:35 2025 GMT Not After : Dec 19 21:00:35 2025 GMT Subject: CN=88614dd1d4b1d6cf57b2ab2ed90b88440a1b2553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c8:a9:62:cc:33:41:9e:16:81:17:36:5d:73: 8d:f1:6f:c9:ef:82:91:4d:73:be:ba:64:9a:e2:6f: e1:50:42:c0:d7:0f:c3:af:97:dd:d8:04:e1:63:f8: 8b:19:6d:f3:6d:53:ef:62:eb:fc:1b:3d:43:85:7d: 1b:09:47:0a:ec:f8:86:09:c2:e5:48:64:a0:a2:53: a7:36:17:70:2a:c2:58:97:6f:d7:7d:6f:3a:91:80: 69:79:e3:8f:76:bc:0a:7c:c8:cd:9d:4c:0c:6b:00: 60:7f:7f:d0:72:24:32:89:50:2d:0f:c3:0e:b9:3b: 84:92:c3:6e:f0:45:d8:95:1b:2d:e5:90:12:dc:5b: 0c:4d:48:57:d6:5e:94:56:82:52:93:69:02:76:60: 49:0d:18:4a:69:2c:ae:a7:11:2f:0a:a3:b8:32:10: 8f:ed:75:5e:89:a2:a8:87:6a:dc:74:7d:c4:a0:b2: 1e:e3:70:f9:fb:23:b9:b3:e8:40:30:d0:3d:e0:74: 46:03:de:01:bc:52:ab:f4:b6:32:41:46:26:b4:93: 70:ba:b9:93:a1:40:ec:5d:4e:71:89:db:65:f2:69: 46:31:46:f3:64:e6:25:ad:0c:b3:c3:7f:db:8d:80: cc:a2:72:7b:f2:e4:83:04:61:db:0b:dd:3f:79:d5: 2b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:61:4D:D1:D4:B1:D6:CF:57:B2:AB:2E:D9:0B:88:44:0A:1B:25:53 X509v3 Authority Key Identifier: keyid:49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:99:a0:9a:d4:1e:40:37:24:82:93:7c:33:46:fe:b8:bf:a6: de:2d:48:54:78:d0:f8:ba:9b:9d:48:25:57:71:8b:04:6f:05: 0c:dc:39:bd:7a:c8:78:c4:6f:54:d5:76:a1:9c:96:f5:18:38: 6d:f4:4a:00:a8:aa:c6:24:42:12:44:e3:78:16:63:65:98:ff: 8c:35:e0:7f:a7:3e:7e:34:41:60:cd:fe:17:f7:fc:d2:f3:45: d2:32:08:ff:07:4a:fb:72:2c:97:9f:c1:ae:0c:37:42:02:50: 98:eb:31:48:bb:f3:24:33:f7:e0:f2:05:e3:02:1a:12:fc:4a: ff:f3:fb:f6:03:75:0f:ec:83:51:ce:6b:21:d6:60:d8:b8:35: 65:fd:4e:96:cb:c6:83:8d:57:4e:6b:62:50:bc:b4:07:4b:e8: 05:bc:13:f2:75:fa:b1:2e:18:87:50:76:dc:38:7b:f5:dd:93: a4:f9:07:82:a9:2a:4c:e4:7b:20:62:c2:50:e0:b2:1c:ca:59: 4f:07:e1:16:cb:2b:1a:fa:f7:01:46:c3:15:a1:95:08:fc:9d: a3:89:3c:de:7d:f1:79:ab:51:2f:dc:c1:f0:f7:ae:0e:44:33: 69:11:82:7a:e6:2e:d2:7a:a4:ef:fe:f9:b6:9c:09:76:1a:de: 6a:f1:c5:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ7ye1zV6LhLEm4z2Q8xIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODRkMGNjNjcwM2JmOTQyYzZkYWM4OWRmZjFhN2JmNjYz MmVhOGIwHhcNMjUxMjE4MjEwMDM1WhcNMjUxMjE5MjEwMDM1WjAzMTEwLwYDVQQD Eyg4ODYxNGRkMWQ0YjFkNmNmNTdiMmFiMmVkOTBiODg0NDBhMWIyNTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cipYswzQZ4WgRc2XXON8W/J74KR TXO+umSa4m/hUELA1w/Dr5fd2AThY/iLGW3zbVPvYuv8Gz1DhX0bCUcK7PiGCcLl SGSgolOnNhdwKsJYl2/XfW86kYBpeeOPdrwKfMjNnUwMawBgf3/QciQyiVAtD8MO uTuEksNu8EXYlRst5ZAS3FsMTUhX1l6UVoJSk2kCdmBJDRhKaSyupxEvCqO4MhCP 7XVeiaKoh2rcdH3EoLIe43D5+yO5s+hAMNA94HRGA94BvFKr9LYyQUYmtJNwurmT oUDsXU5xidtl8mlGMUbzZOYlrQyzw3/bjYDMonJ78uSDBGHbC90/edUrNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhhTdHUsdbPV7KrLtkLiEQKGyVTMB8GA1UdIwQY MBaAFEmE0MxnA7+ULG2sid/xp79mMuqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1lUUXpHY0R2NVFzYmF5SjNfR252Mll5Nm9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNTgzMTEtZTY3NC00MDVjLTk4ZjIt MTQ3MGJjY2VlYjFiLzEvU1lUUXpHY0R2NVFzYmF5SjNfR252Mll5Nm9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hNTgzMTEtZTY3NC00MDVjLTk4ZjItMTQ3MGJjY2VlYjFi LzEvU1lUUXpHY0R2NVFzYmF5SjNfR252Mll5Nm9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJmgmtQe QDckgpN8M0b+uL+m3i1IVHjQ+LqbnUglV3GLBG8FDNw5vXrIeMRvVNV2oZyW9Rg4 bfRKAKiqxiRCEkTjeBZjZZj/jDXgf6c+fjRBYM3+F/f80vNF0jII/wdK+3Isl5/B rgw3QgJQmOsxSLvzJDP34PIF4wIaEvxK//P79gN1D+yDUc5rIdZg2Lg1Zf1OlsvG g41XTmtiULy0B0voBbwT8nX6sS4Yh1B23Dh79d2TpPkHgqkqTOR7IGLCUOCyHMpZ TwfhFssrGvr3AUbDFaGVCPydo4k83n3xeatRL9zB8PeuDkQzaRGCeuYu0nqk7/75 tpwJdhreavHFYw== -----END CERTIFICATE-----Generated at Fri Dec 19 03:46:29 2025 by rpki-client