This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft File: syznolxromOxucmrdrjS3DoNaAY.mft (raw, json) Hash identifier: 2BQpjC3aEzAjxB1jJmkdlVAprZmYvenG6M09GLRoWdg= Subject key identifier: E4:60:4A:4D:85:AA:61:52:3B:7D:92:90:3D:8F:05:74:58:EF:C7:28 Authority key identifier: B3:2C:E7:A2:5C:6B:A2:63:B1:B9:C9:AB:76:B8:D2:DC:3A:0D:68:06 Certificate issuer: /CN=b32ce7a25c6ba263b1b9c9ab76b8d2dc3a0d6806 Certificate serial: 019AF12DC090DECB2FCDF73BAAB6EAAAF54F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syznolxromOxucmrdrjS3DoNaAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft Manifest number: 0612 Signing time: Sat 06 Dec 2025 01:01:38 +0000 Manifest this update: Sat 06 Dec 2025 01:01:38 +0000 Manifest next update: Sun 07 Dec 2025 01:01:38 +0000 Files and hashes: 1: syznolxromOxucmrdrjS3DoNaAY.crl (hash: aPmBUY7RrC0PC6d1jOt4/GOvjX08/HKYeanFBX5+KPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft rsync://rpki.ripe.net/repository/DEFAULT/syznolxromOxucmrdrjS3DoNaAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:c0:90:de:cb:2f:cd:f7:3b:aa:b6:ea:aa:f5:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32ce7a25c6ba263b1b9c9ab76b8d2dc3a0d6806 Validity Not Before: Dec 6 01:01:38 2025 GMT Not After : Dec 7 01:01:38 2025 GMT Subject: CN=e4604a4d85aa61523b7d92903d8f057458efc728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b2:7e:04:0a:21:a8:8b:8b:ef:3b:47:ff:16: 22:21:f6:54:bd:4f:3b:5f:7d:ad:66:78:71:a9:54: 37:38:92:0d:f2:4e:83:8e:4a:1f:e3:2e:c6:58:69: ad:36:78:cc:64:b2:ca:b3:fd:8c:a1:d5:60:b6:d5: b4:c8:8c:f1:04:ad:db:2f:66:a8:6f:fc:7d:ee:8c: 0e:33:7e:98:0e:74:53:26:b1:19:1d:ab:e1:64:26: a1:50:c7:d7:87:4b:19:7e:f6:40:5e:0e:b3:67:0c: 6b:d9:6a:e9:0b:70:83:b5:22:74:f0:46:39:7b:b8: 69:eb:12:cd:a6:df:31:9d:25:25:d9:65:8f:0b:35: 54:6d:f7:8b:0c:aa:7d:97:45:15:ae:b1:0f:98:36: 92:7f:30:1a:23:72:64:da:c4:63:82:a7:b3:b4:53: f1:e0:aa:ce:d2:12:f3:f9:2a:1b:84:e0:ef:82:8b: cc:d4:19:74:27:05:3b:60:af:a0:3a:7d:ee:74:c8: 8f:83:d1:15:c9:50:94:79:fb:9f:d7:a5:84:9e:11: e8:68:28:bc:ae:3c:1b:c8:1c:fa:45:c0:e5:62:53: 36:d1:3b:5c:66:1a:6a:30:67:bc:2d:60:1e:ad:df: cf:31:52:1f:b0:45:42:0e:65:03:4b:00:fd:29:c1: c0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:60:4A:4D:85:AA:61:52:3B:7D:92:90:3D:8F:05:74:58:EF:C7:28 X509v3 Authority Key Identifier: keyid:B3:2C:E7:A2:5C:6B:A2:63:B1:B9:C9:AB:76:B8:D2:DC:3A:0D:68:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syznolxromOxucmrdrjS3DoNaAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:d5:ab:74:a3:f9:2f:cc:7f:f0:1b:ab:98:a1:44:5d:dc:a4: 6c:47:d5:27:83:2c:98:0d:0f:a0:3a:9d:3c:ba:42:14:07:e9: 6e:d3:55:a6:87:78:04:f9:3e:76:83:cd:59:32:b1:9e:f5:1d: 75:c6:59:af:dc:1a:a8:2f:84:8e:43:cc:34:a2:78:2d:69:57: c0:b5:3f:72:4f:cf:1a:ac:89:62:a1:28:c5:ee:12:c6:8a:2c: 4d:63:32:f3:e2:9f:70:96:85:d3:c9:24:77:05:db:4e:30:79: c3:f3:24:44:12:b1:f8:d6:4f:c1:ce:83:48:4b:7b:d6:b6:49: 7e:90:b0:f4:b6:b3:65:50:36:34:6d:4c:08:86:06:90:d8:7f: f9:27:7b:38:fd:ae:96:d9:36:2b:4b:cf:99:83:d3:bb:60:99: 21:f2:0d:c3:d2:87:c2:23:6f:c4:23:db:e4:f9:e6:3e:86:53: 2b:d2:85:2c:fa:e3:f3:d4:a9:11:19:b2:04:69:c8:d8:74:28: bc:c6:da:c0:21:59:e3:c7:7d:65:87:16:0b:7e:3f:17:1a:f7: 8a:9c:71:8a:a6:9a:77:25:cd:54:0d:b6:34:16:ce:75:f0:85: 1d:45:7c:1c:ec:7b:5d:66:f0:3c:13:33:b1:1e:0a:af:39:2a: 00:ff:1d:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLcCQ3ssvzfc7qrbqqvVPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMmNlN2EyNWM2YmEyNjNiMWI5YzlhYjc2YjhkMmRjM2Ew ZDY4MDYwHhcNMjUxMjA2MDEwMTM4WhcNMjUxMjA3MDEwMTM4WjAzMTEwLwYDVQQD EyhlNDYwNGE0ZDg1YWE2MTUyM2I3ZDkyOTAzZDhmMDU3NDU4ZWZjNzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47J+BAohqIuL7ztH/xYiIfZUvU87 X32tZnhxqVQ3OJIN8k6Djkof4y7GWGmtNnjMZLLKs/2ModVgttW0yIzxBK3bL2ao b/x97owOM36YDnRTJrEZHavhZCahUMfXh0sZfvZAXg6zZwxr2WrpC3CDtSJ08EY5 e7hp6xLNpt8xnSUl2WWPCzVUbfeLDKp9l0UVrrEPmDaSfzAaI3Jk2sRjgqeztFPx 4KrO0hLz+SobhODvgovM1Bl0JwU7YK+gOn3udMiPg9EVyVCUefuf16WEnhHoaCi8 rjwbyBz6RcDlYlM20TtcZhpqMGe8LWAerd/PMVIfsEVCDmUDSwD9KcHAwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORgSk2FqmFSO32SkD2PBXRY78coMB8GA1UdIwQY MBaAFLMs56Jca6JjsbnJq3a40tw6DWgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3l6bm9seHJvbU94dWNtcmRyalMzRG9OYUFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hM2E2NTMtYWVmYS00OGNkLWFhYzct MzQwM2E4NDI5N2IxLzEvc3l6bm9seHJvbU94dWNtcmRyalMzRG9OYUFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9hM2E2NTMtYWVmYS00OGNkLWFhYzctMzQwM2E4NDI5N2Ix LzEvc3l6bm9seHJvbU94dWNtcmRyalMzRG9OYUFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNWrdKP5 L8x/8BurmKFEXdykbEfVJ4MsmA0PoDqdPLpCFAfpbtNVpod4BPk+doPNWTKxnvUd dcZZr9waqC+EjkPMNKJ4LWlXwLU/ck/PGqyJYqEoxe4SxoosTWMy8+KfcJaF08kk dwXbTjB5w/MkRBKx+NZPwc6DSEt71rZJfpCw9LazZVA2NG1MCIYGkNh/+Sd7OP2u ltk2K0vPmYPTu2CZIfINw9KHwiNvxCPb5PnmPoZTK9KFLPrj89SpERmyBGnI2HQo vMbawCFZ48d9ZYcWC34/Fxr3ipxxiqaadyXNVA22NBbOdfCFHUV8HOx7XWbwPBMz sR4KrzkqAP8daA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:27 2025 by rpki-client