This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft File: syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft (raw, json) Hash identifier: Qz8d1bDQs+cOg+THaIuduoxGSGr+7lf0BSozbpa/s6w= Subject key identifier: E4:5C:CD:77:6C:6A:1B:CE:B3:A0:BF:35:D3:6D:9D:1B:24:DA:72:47 Authority key identifier: B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7 Certificate issuer: /CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7 Certificate serial: 019AF31B4A4F07C8C5B715D9B46B19204DEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft Manifest number: 046B Signing time: Sat 06 Dec 2025 10:00:43 +0000 Manifest this update: Sat 06 Dec 2025 10:00:43 +0000 Manifest next update: Sun 07 Dec 2025 10:00:43 +0000 Files and hashes: 1: syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl (hash: 04dBiYfMLqsfMYaeOEAFXH+w7o77BNaVjDS2trnV+IE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:4a:4f:07:c8:c5:b7:15:d9:b4:6b:19:20:4d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7 Validity Not Before: Dec 6 10:00:43 2025 GMT Not After : Dec 7 10:00:43 2025 GMT Subject: CN=e45ccd776c6a1bceb3a0bf35d36d9d1b24da7247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ee:2c:3f:70:7d:d3:96:d9:42:e4:df:ee:c2: b6:bc:f2:fa:e8:f7:05:55:f9:8a:4b:66:e4:43:a1: 55:58:ba:40:48:ef:f6:28:26:fe:42:40:36:3d:4f: e1:37:dc:ae:50:8b:5c:c3:8e:91:20:7f:cd:41:9d: c6:4e:c8:5f:c2:5b:07:94:03:4c:cc:38:51:07:fd: 7c:0f:f2:47:b3:91:b6:ca:a3:4b:0d:43:6b:55:d4: 6f:9a:eb:9a:b8:8d:c1:ad:1b:aa:98:c6:16:2a:f8: 57:df:f0:bf:e4:ec:8b:6a:f0:bb:64:11:14:63:78: 73:fa:ed:94:27:b9:41:db:74:cc:27:50:f4:be:99: c7:0c:a9:02:0c:7b:8e:fe:d2:68:cd:e0:bf:14:be: 31:d8:2f:15:ed:d9:ce:6c:2c:b6:02:dc:43:45:46: cf:47:9b:08:d0:fc:05:26:de:fc:d1:c6:5c:54:f3: 10:86:eb:61:fc:a5:5d:6a:8f:8d:f9:91:b6:a4:65: 22:24:16:9d:c2:78:9c:89:63:d9:16:c5:e2:46:27: ea:d6:53:f5:d5:85:87:a5:41:47:a7:a0:b5:48:85: d8:4e:4c:81:45:e0:cb:be:85:c7:73:18:7f:38:9b: 14:31:d8:1a:84:38:6e:e6:10:1b:69:98:8c:3a:e9: cf:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5C:CD:77:6C:6A:1B:CE:B3:A0:BF:35:D3:6D:9D:1B:24:DA:72:47 X509v3 Authority Key Identifier: keyid:B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:35:f8:50:bb:67:a5:94:d8:dc:af:8d:6d:ba:95:b1:ff:6a: a0:28:74:ad:12:03:95:0e:48:c7:10:d8:fb:bc:01:c2:dc:25: 6e:c9:80:aa:fb:b8:f9:f6:24:c7:b4:6e:02:0f:82:d8:51:0d: a5:30:28:67:73:f6:06:e4:05:f8:45:2c:5b:cc:38:25:a8:f1: 7c:6c:f5:7a:9c:94:6e:7d:1b:2a:7e:f5:a8:27:ce:d3:cb:c6: 82:af:a2:e4:1a:2c:de:db:49:53:f7:5f:9c:1c:68:ec:2c:f9: 4a:ff:47:f6:14:88:e4:35:a1:0b:27:97:8c:6d:cb:73:b5:92: c2:75:a5:4f:20:3d:1e:cd:ac:dd:1e:62:ce:c7:a3:20:e5:61: 7c:2a:75:37:3c:a9:81:b1:9b:1f:3d:9e:81:03:7b:cc:0f:12: 3e:ed:0d:ef:7e:06:09:c2:03:16:8d:83:80:55:4c:28:39:6a: 72:9c:1c:10:a0:67:c5:77:41:43:48:38:a1:12:76:de:ae:ab: c6:b4:34:76:d0:86:ce:c8:16:6e:45:62:2c:f1:ea:00:bf:92: c9:36:80:09:79:bd:67:b9:77:40:ce:fd:55:a4:eb:b2:5b:ae: 0f:93:61:c2:af:e9:e7:f7:0c:7b:db:82:87:7c:b0:55:c1:4c: e3:46:aa:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG0pPB8jFtxXZtGsZIE3qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMjI5NGEzOTAxYmVjZmYyYWZlODBlYjkzM2UyYjkxZmRk N2U4ZjcwHhcNMjUxMjA2MTAwMDQzWhcNMjUxMjA3MTAwMDQzWjAzMTEwLwYDVQQD EyhlNDVjY2Q3NzZjNmExYmNlYjNhMGJmMzVkMzZkOWQxYjI0ZGE3MjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre4sP3B905bZQuTf7sK2vPL66PcF VfmKS2bkQ6FVWLpASO/2KCb+QkA2PU/hN9yuUItcw46RIH/NQZ3GTshfwlsHlANM zDhRB/18D/JHs5G2yqNLDUNrVdRvmuuauI3BrRuqmMYWKvhX3/C/5OyLavC7ZBEU Y3hz+u2UJ7lB23TMJ1D0vpnHDKkCDHuO/tJozeC/FL4x2C8V7dnObCy2AtxDRUbP R5sI0PwFJt780cZcVPMQhuth/KVdao+N+ZG2pGUiJBadwniciWPZFsXiRifq1lP1 1YWHpUFHp6C1SIXYTkyBReDLvoXHcxh/OJsUMdgahDhu5hAbaZiMOunPewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORczXdsahvOs6C/NdNtnRsk2nJHMB8GA1UdIwQY MBaAFLMilKOQG+z/Kv6A65M+K5H91+j3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3lLVW81QWI3UDhxX29Ecmt6NHJrZjNYNlBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mY2U4OGEtMGZhOC00MmEzLWIwNmEt MDE5NDhkNGFjNzA1LzEvc3lLVW81QWI3UDhxX29Ecmt6NHJrZjNYNlBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9mY2U4OGEtMGZhOC00MmEzLWIwNmEtMDE5NDhkNGFjNzA1 LzEvc3lLVW81QWI3UDhxX29Ecmt6NHJrZjNYNlBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGzX4ULtn pZTY3K+NbbqVsf9qoCh0rRIDlQ5IxxDY+7wBwtwlbsmAqvu4+fYkx7RuAg+C2FEN pTAoZ3P2BuQF+EUsW8w4JajxfGz1epyUbn0bKn71qCfO08vGgq+i5Bos3ttJU/df nBxo7Cz5Sv9H9hSI5DWhCyeXjG3Lc7WSwnWlTyA9Hs2s3R5izsejIOVhfCp1Nzyp gbGbHz2egQN7zA8SPu0N734GCcIDFo2DgFVMKDlqcpwcEKBnxXdBQ0g4oRJ23q6r xrQ0dtCGzsgWbkViLPHqAL+SyTaACXm9Z7l3QM79VaTrsluuD5Nhwq/p5/cMe9uC h3ywVcFM40aq2g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:05:50 2025 by rpki-client