This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft File: SY8T56W69q6fUdJp9Z9k1GhJZB4.mft (raw, json) Hash identifier: 8Yzfu4IRSqEHauZ9pu91krcjWM2edmH8A7QekAi3Md8= Subject key identifier: 0A:F4:29:B6:27:21:D7:D9:92:BC:CC:F4:0C:DE:89:7C:EB:DD:88:D6 Authority key identifier: 49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E Certificate issuer: /CN=498f13e7a5baf6ae9f51d269f59f64d46849641e Certificate serial: 019AF19B96F9B0CDB6307A91BD6FC687D19A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft Manifest number: 0E41 Signing time: Sat 06 Dec 2025 03:01:36 +0000 Manifest this update: Sat 06 Dec 2025 03:01:36 +0000 Manifest next update: Sun 07 Dec 2025 03:01:36 +0000 Files and hashes: 1: SY8T56W69q6fUdJp9Z9k1GhJZB4.crl (hash: ENupG8HC5yDz/Wc3mW1drkB3CztvrUgJBGKeb/HLNeI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:96:f9:b0:cd:b6:30:7a:91:bd:6f:c6:87:d1:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498f13e7a5baf6ae9f51d269f59f64d46849641e Validity Not Before: Dec 6 03:01:36 2025 GMT Not After : Dec 7 03:01:36 2025 GMT Subject: CN=0af429b62721d7d992bcccf40cde897cebdd88d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:eb:d9:1a:b4:87:ea:48:79:90:d2:e8:fe:1a: 09:0f:05:66:d3:84:be:f6:6c:0d:85:de:b4:28:90: 3a:5e:c0:07:35:36:60:aa:a6:1f:4f:f2:d8:8a:bd: 9e:d8:22:93:3c:7b:3e:a1:33:69:64:ce:64:9e:69: 6e:18:1b:5d:02:c0:90:01:df:f7:7c:87:6d:d9:a5: eb:c1:de:b0:85:32:2e:5b:97:8b:18:1b:07:b5:15: 67:95:1c:5f:4d:25:92:fc:7a:22:88:d9:c3:45:9e: 3c:54:80:41:bf:6f:4c:ce:ce:18:2a:32:c1:46:7f: 0e:e8:30:da:de:c7:cb:dd:2a:8d:ea:a3:8d:c8:6a: 39:14:45:d2:91:a2:2b:90:c6:4b:4f:eb:94:11:dd: 91:f7:6f:60:12:66:8e:6c:fd:24:9a:e6:d8:5f:29: 73:1d:97:c3:d1:d3:43:3f:7e:bd:1a:fe:e6:e9:9b: c9:6a:a1:38:a5:49:75:48:c2:ad:43:da:35:22:c3: fa:3b:e1:f2:c2:94:ae:d5:be:74:d7:70:4a:36:5a: 94:7c:be:bb:84:5d:f8:49:83:3e:18:76:14:ab:c0: 46:cb:c0:80:73:fb:9b:62:da:46:ee:1b:96:fd:1e: ef:93:2d:43:32:64:5f:31:f7:af:90:89:a5:09:fc: 9b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F4:29:B6:27:21:D7:D9:92:BC:CC:F4:0C:DE:89:7C:EB:DD:88:D6 X509v3 Authority Key Identifier: keyid:49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:d3:91:e4:0f:23:05:8c:c2:78:ee:5d:53:11:32:7e:06:4a: 2b:fd:ef:fb:80:49:19:68:b3:46:9e:21:09:28:6e:31:96:75: 7c:62:6d:ba:8b:ff:ab:06:a1:26:49:46:ed:7a:0c:42:81:6b: 3a:ef:7a:8b:b4:86:8b:05:d4:4f:10:9f:c2:4a:8a:2b:76:29: 2f:f9:c4:93:32:83:f0:c7:7d:69:21:01:7b:a9:43:75:c2:3f: bb:3e:bc:ea:36:46:85:d1:4d:31:c1:2d:46:ba:7f:9b:24:85: 82:21:6a:09:1c:66:f2:d9:2e:d0:3c:82:94:b1:eb:eb:72:c4: 63:9c:04:e8:a1:17:14:e5:58:2a:0d:39:c5:d7:fe:9d:5c:6c: 07:75:b8:75:18:16:62:3f:bf:cf:a8:25:77:28:17:bc:1d:be: 5f:ee:95:59:74:78:ce:97:cb:10:13:c0:88:9a:33:75:54:5f: 1d:7b:a8:df:36:a4:ea:ee:aa:55:0a:a8:eb:a5:23:c3:99:aa: 73:a9:af:56:69:35:d0:43:3c:63:99:ab:2d:cb:a8:99:36:8e: e1:68:7e:f1:9a:6a:e4:19:91:4a:d0:56:e1:be:21:06:62:dc: 6c:1d:71:a4:60:9c:8f:f1:c6:d1:4b:75:a7:40:82:3c:d1:83: 50:9e:61:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5b5sM22MHqRvW/Gh9GaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5OGYxM2U3YTViYWY2YWU5ZjUxZDI2OWY1OWY2NGQ0Njg0 OTY0MWUwHhcNMjUxMjA2MDMwMTM2WhcNMjUxMjA3MDMwMTM2WjAzMTEwLwYDVQQD EygwYWY0MjliNjI3MjFkN2Q5OTJiY2NjZjQwY2RlODk3Y2ViZGQ4OGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOvZGrSH6kh5kNLo/hoJDwVm04S+ 9mwNhd60KJA6XsAHNTZgqqYfT/LYir2e2CKTPHs+oTNpZM5knmluGBtdAsCQAd/3 fIdt2aXrwd6whTIuW5eLGBsHtRVnlRxfTSWS/HoiiNnDRZ48VIBBv29Mzs4YKjLB Rn8O6DDa3sfL3SqN6qONyGo5FEXSkaIrkMZLT+uUEd2R929gEmaObP0kmubYXylz HZfD0dNDP369Gv7m6ZvJaqE4pUl1SMKtQ9o1IsP6O+HywpSu1b5013BKNlqUfL67 hF34SYM+GHYUq8BGy8CAc/ubYtpG7huW/R7vky1DMmRfMfevkImlCfyb2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAr0KbYnIdfZkrzM9AzeiXzr3YjWMB8GA1UdIwQY MBaAFEmPE+eluvaun1HSafWfZNRoSWQeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1k4VDU2VzY5cTZmVWRKcDlaOWsxR2hKWkI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9mOWZmNTAtNWZmZi00NzdhLTllZDYt Y2UxYjQyMjRlYzQ5LzEvU1k4VDU2VzY5cTZmVWRKcDlaOWsxR2hKWkI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9mOWZmNTAtNWZmZi00NzdhLTllZDYtY2UxYjQyMjRlYzQ5 LzEvU1k4VDU2VzY5cTZmVWRKcDlaOWsxR2hKWkI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9OR5A8j BYzCeO5dUxEyfgZKK/3v+4BJGWizRp4hCShuMZZ1fGJtuov/qwahJklG7XoMQoFr Ou96i7SGiwXUTxCfwkqKK3YpL/nEkzKD8Md9aSEBe6lDdcI/uz686jZGhdFNMcEt Rrp/mySFgiFqCRxm8tku0DyClLHr63LEY5wE6KEXFOVYKg05xdf+nVxsB3W4dRgW Yj+/z6gldygXvB2+X+6VWXR4zpfLEBPAiJozdVRfHXuo3zak6u6qVQqo66Ujw5mq c6mvVmk10EM8Y5mrLcuomTaO4Wh+8Zpq5BmRStBW4b4hBmLcbB1xpGCcj/HG0Ut1 p0CCPNGDUJ5hEg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:42:57 2025 by rpki-client