This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft File: SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft (raw, json) Hash identifier: 0PFgvYNG+0JJ4CbxrLNR3uLqIOxl2DXTht7rH+S3Lhc= Subject key identifier: 2D:FE:D9:CA:C2:32:89:17:F4:0B:7D:15:2E:7B:55:9B:F6:D8:2A:F7 Authority key identifier: 4B:27:F3:27:E5:28:68:9D:45:0C:1D:4A:63:46:F5:40:E7:75:40:93 Certificate issuer: /CN=4b27f327e528689d450c1d4a6346f540e7754093 Certificate serial: 019B27AD88D88B39FBA6F244B6A2E0428E7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft Manifest number: 10CF Signing time: Tue 16 Dec 2025 15:00:42 +0000 Manifest this update: Tue 16 Dec 2025 15:00:42 +0000 Manifest next update: Wed 17 Dec 2025 15:00:42 +0000 Files and hashes: 1: SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.crl (hash: vwS1r/bXEiE31m2OZbFgfVUc2t5jBzh1nArwInlVxdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.crl rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft rsync://rpki.ripe.net/repository/DEFAULT/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ad:88:d8:8b:39:fb:a6:f2:44:b6:a2:e0:42:8e:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b27f327e528689d450c1d4a6346f540e7754093 Validity Not Before: Dec 16 15:00:42 2025 GMT Not After : Dec 17 15:00:42 2025 GMT Subject: CN=2dfed9cac2328917f40b7d152e7b559bf6d82af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:af:eb:d8:7e:5a:72:70:a1:9a:43:2b:21:71: 43:be:04:cc:1a:d4:39:0e:d4:78:af:68:34:dc:f1: 36:f4:94:dd:73:86:70:ea:4b:87:ff:b2:84:58:b3: 63:b6:a0:4a:fd:12:7e:dd:ab:2f:50:7f:9e:58:dd: f1:46:ad:59:68:9d:6d:7d:cc:49:68:ad:9d:33:8b: 0c:a1:f4:16:c4:33:1e:10:80:ce:df:58:02:15:aa: 4d:46:3a:28:1f:21:39:cb:cd:05:c1:c6:df:f5:b5: 6f:52:53:e2:29:03:14:3c:25:97:43:28:6c:09:05: 2d:79:3a:46:59:34:54:d1:fc:01:cc:24:7b:29:d4: b9:64:ba:94:0e:44:c9:6d:0c:17:49:66:83:b0:96: e0:45:e9:9d:fd:86:ef:40:76:19:05:d2:06:d9:1f: c7:49:e7:04:1b:ab:1e:2a:4e:5a:1a:3b:92:88:ff: 8f:ec:63:a6:01:4c:5c:0f:9a:a2:57:22:0a:53:50: 6f:1e:64:32:a8:d1:f1:c4:96:3c:13:f0:95:3c:89: ee:34:f4:9c:a5:3b:c3:b5:4e:5b:6f:e7:23:fd:be: 8a:e7:80:57:6a:02:97:1d:a5:bd:3d:f3:af:5b:6e: d2:fd:b4:f2:e8:f2:9b:17:24:2b:4f:50:cd:e9:09: 9f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FE:D9:CA:C2:32:89:17:F4:0B:7D:15:2E:7B:55:9B:F6:D8:2A:F7 X509v3 Authority Key Identifier: keyid:4B:27:F3:27:E5:28:68:9D:45:0C:1D:4A:63:46:F5:40:E7:75:40:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:36:e3:bd:37:95:1d:9c:57:18:51:ac:67:8f:ad:72:b1:bb: b5:ce:24:cd:a3:ef:09:12:0b:37:50:75:cb:fb:54:9b:19:41: 6e:ba:7b:9d:73:7f:cc:9f:00:18:30:7e:a4:c5:e9:b8:20:19: 7e:c3:f4:05:a3:a3:5e:f5:fc:90:36:93:8a:14:fb:8d:fa:98: 8d:34:cf:b5:99:e6:32:d6:06:1e:ca:ce:30:46:64:22:15:e5: 77:73:ab:c2:00:ad:b4:45:3c:ba:ae:a4:6d:24:d5:ba:94:19: 13:be:c8:bb:a5:fa:6c:51:cd:bf:9d:c3:00:6c:6d:86:29:70: f5:08:37:11:cf:62:3d:8c:c3:55:7b:24:ea:07:84:20:c1:22: b6:c1:6c:17:91:d5:c8:ff:59:4b:fb:6d:02:1c:42:40:7c:39: 8a:38:17:11:51:aa:11:c6:d4:24:e4:8d:57:b3:b4:a5:fb:87: 65:f6:e3:cd:ee:e1:8a:60:31:da:73:5c:c3:f5:dd:54:62:53: 07:8d:85:cd:11:b5:1f:81:e7:04:e8:12:0f:87:0c:f1:ab:e8: d6:fc:55:eb:7c:95:cc:0f:08:9f:75:ea:11:bf:27:3e:b5:95: a6:ba:4c:df:ea:48:72:bc:e7:ad:5d:2f:04:4b:83:07:3d:54: 4c:e4:2c:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrYjYizn7pvJEtqLgQo59MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMjdmMzI3ZTUyODY4OWQ0NTBjMWQ0YTYzNDZmNTQwZTc3 NTQwOTMwHhcNMjUxMjE2MTUwMDQyWhcNMjUxMjE3MTUwMDQyWjAzMTEwLwYDVQQD EygyZGZlZDljYWMyMzI4OTE3ZjQwYjdkMTUyZTdiNTU5YmY2ZDgyYWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq/r2H5acnChmkMrIXFDvgTMGtQ5 DtR4r2g03PE29JTdc4Zw6kuH/7KEWLNjtqBK/RJ+3asvUH+eWN3xRq1ZaJ1tfcxJ aK2dM4sMofQWxDMeEIDO31gCFapNRjooHyE5y80Fwcbf9bVvUlPiKQMUPCWXQyhs CQUteTpGWTRU0fwBzCR7KdS5ZLqUDkTJbQwXSWaDsJbgRemd/YbvQHYZBdIG2R/H SecEG6seKk5aGjuSiP+P7GOmAUxcD5qiVyIKU1BvHmQyqNHxxJY8E/CVPInuNPSc pTvDtU5bb+cj/b6K54BXagKXHaW9PfOvW27S/bTy6PKbFyQrT1DN6Qmf5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3+2crCMokX9At9FS57VZv22Cr3MB8GA1UdIwQY MBaAFEsn8yflKGidRQwdSmNG9UDndUCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3lmekotVW9hSjFGREIxS1kwYjFRT2QxUUpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lYTAyYjktZDJmMC00YjIzLTgyNzAt OWRlMWNkMWFmMzU2LzEvU3lmekotVW9hSjFGREIxS1kwYjFRT2QxUUpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9lYTAyYjktZDJmMC00YjIzLTgyNzAtOWRlMWNkMWFmMzU2 LzEvU3lmekotVW9hSjFGREIxS1kwYjFRT2QxUUpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTbjvTeV HZxXGFGsZ4+tcrG7tc4kzaPvCRILN1B1y/tUmxlBbrp7nXN/zJ8AGDB+pMXpuCAZ fsP0BaOjXvX8kDaTihT7jfqYjTTPtZnmMtYGHsrOMEZkIhXld3OrwgCttEU8uq6k bSTVupQZE77Iu6X6bFHNv53DAGxthilw9Qg3Ec9iPYzDVXsk6geEIMEitsFsF5HV yP9ZS/ttAhxCQHw5ijgXEVGqEcbUJOSNV7O0pfuHZfbjze7himAx2nNcw/XdVGJT B42FzRG1H4HnBOgSD4cM8avo1vxV63yVzA8In3XqEb8nPrWVprpM3+pIcrznrV0v BEuDBz1UTOQseA== -----END CERTIFICATE-----Generated at Tue Dec 16 19:33:32 2025 by rpki-client