This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft File: SY8T56W69q6fUdJp9Z9k1GhJZB4.mft (raw, json) Hash identifier: qa5rn4sWG+/aMDgh8VpHuSKrGIKAw1jozKvjDexp7uY= Subject key identifier: 56:F0:FC:E1:37:94:74:C6:15:50:FC:9D:39:1B:06:C8:84:99:38:71 Authority key identifier: 49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E Certificate issuer: /CN=498f13e7a5baf6ae9f51d269f59f64d46849641e Certificate serial: 019B40C86B71453C78DA6DE8EA009D32F9FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft Manifest number: 0E6A Signing time: Sun 21 Dec 2025 12:00:35 +0000 Manifest this update: Sun 21 Dec 2025 12:00:35 +0000 Manifest next update: Mon 22 Dec 2025 12:00:35 +0000 Files and hashes: 1: SY8T56W69q6fUdJp9Z9k1GhJZB4.crl (hash: bxQpl5EkL+r65nwlrS7OHADR4Oa2oilERBs0wV0X2EQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:6b:71:45:3c:78:da:6d:e8:ea:00:9d:32:f9:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498f13e7a5baf6ae9f51d269f59f64d46849641e Validity Not Before: Dec 21 12:00:35 2025 GMT Not After : Dec 22 12:00:35 2025 GMT Subject: CN=56f0fce1379474c61550fc9d391b06c884993871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3b:ea:83:4d:bc:e9:7f:90:55:22:d5:f8:d2: ef:f4:1f:60:1e:c0:1e:fb:59:85:fb:30:7b:71:93: da:7c:83:5b:79:4a:2e:99:57:4c:fc:f2:1b:cc:50: f6:c6:07:a8:c6:43:9d:1a:c9:d3:84:6c:7d:82:81: f9:a3:ea:01:42:67:39:1b:9d:86:6a:53:ee:93:98: 80:5d:ba:0d:6e:31:79:4b:53:ab:36:42:93:b9:82: 4f:2b:62:d7:4d:f5:59:d5:73:2e:b8:d4:17:be:53: 28:57:b9:94:d2:bf:f0:12:a3:49:c6:0f:fd:6f:bb: 29:2d:ec:7a:06:22:a9:e0:91:d4:52:4a:a3:b3:ed: 75:12:ac:d3:47:1e:9f:45:b2:3a:b1:29:2c:b8:74: e9:af:8f:a4:92:98:95:0d:c3:8c:53:a4:69:27:23: d3:77:a4:b5:2b:15:b0:d5:bd:bf:0f:14:2b:30:d8: f2:77:fa:cb:27:c2:12:14:ff:6e:92:a4:42:8d:7c: c8:1f:3c:2f:27:30:7c:a7:cd:38:12:b2:01:d4:cf: c2:91:80:16:29:f3:b1:3c:75:26:75:31:6b:e4:18: c3:81:84:4d:6e:58:29:a7:e4:ae:ea:25:c8:31:16: 1b:21:e2:cf:5a:77:77:1c:04:15:10:31:ff:5e:15: 6a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F0:FC:E1:37:94:74:C6:15:50:FC:9D:39:1B:06:C8:84:99:38:71 X509v3 Authority Key Identifier: keyid:49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:3f:b1:67:df:a3:c7:4b:c4:db:cd:17:82:5b:32:86:3b:a5: b3:d1:45:7b:4f:ce:5e:c4:23:83:23:2e:a8:5c:31:a0:2e:f4: 5e:58:c5:73:2e:2f:d2:ae:3f:94:a2:d7:10:f5:da:af:b6:45: 07:19:0c:35:f3:35:cf:8e:04:ab:59:8a:f0:5e:e0:47:77:61: 4a:21:65:9c:b3:50:52:1f:d3:2c:de:78:02:04:e2:6d:1d:a1: dd:5d:d4:8e:b1:2f:ba:bf:0e:e3:fd:c4:6b:69:31:00:9a:90: 72:f3:50:89:50:04:ce:9c:a1:2f:c3:6b:37:2f:39:6e:95:81: e7:0d:4d:7d:7e:8f:07:40:07:dc:ff:05:d3:85:35:4a:a3:19: 95:f8:48:0e:84:dd:43:ba:35:f2:9f:f7:8a:f0:ba:92:6b:1f: 9d:f7:8e:2e:4a:3f:e5:a2:34:98:8a:8b:05:bf:e8:4a:f3:89: 91:59:ea:cd:87:25:d7:e0:5e:3d:ec:46:72:ad:53:d9:a0:7b: a3:73:ba:a6:be:de:82:f5:0c:cc:f4:c8:c1:be:44:b3:5e:2d: 69:ea:45:70:76:62:ee:ec:69:9a:20:0f:56:46:0a:10:78:b7: 55:3c:05:5c:a0:37:7d:1a:82:4a:f7:b9:15:b4:da:25:57:1b: 00:77:26:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyGtxRTx42m3o6gCdMvn8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5OGYxM2U3YTViYWY2YWU5ZjUxZDI2OWY1OWY2NGQ0Njg0 OTY0MWUwHhcNMjUxMjIxMTIwMDM1WhcNMjUxMjIyMTIwMDM1WjAzMTEwLwYDVQQD Eyg1NmYwZmNlMTM3OTQ3NGM2MTU1MGZjOWQzOTFiMDZjODg0OTkzODcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjvqg0286X+QVSLV+NLv9B9gHsAe +1mF+zB7cZPafINbeUoumVdM/PIbzFD2xgeoxkOdGsnThGx9goH5o+oBQmc5G52G alPuk5iAXboNbjF5S1OrNkKTuYJPK2LXTfVZ1XMuuNQXvlMoV7mU0r/wEqNJxg/9 b7spLex6BiKp4JHUUkqjs+11EqzTRx6fRbI6sSksuHTpr4+kkpiVDcOMU6RpJyPT d6S1KxWw1b2/DxQrMNjyd/rLJ8ISFP9ukqRCjXzIHzwvJzB8p804ErIB1M/CkYAW KfOxPHUmdTFr5BjDgYRNblgpp+Su6iXIMRYbIeLPWnd3HAQVEDH/XhVqNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbw/OE3lHTGFVD8nTkbBsiEmThxMB8GA1UdIwQY MBaAFEmPE+eluvaun1HSafWfZNRoSWQeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1k4VDU2VzY5cTZmVWRKcDlaOWsxR2hKWkI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9mOWZmNTAtNWZmZi00NzdhLTllZDYt Y2UxYjQyMjRlYzQ5LzEvU1k4VDU2VzY5cTZmVWRKcDlaOWsxR2hKWkI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9mOWZmNTAtNWZmZi00NzdhLTllZDYtY2UxYjQyMjRlYzQ5 LzEvU1k4VDU2VzY5cTZmVWRKcDlaOWsxR2hKWkI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAez+xZ9+j x0vE280Xglsyhjuls9FFe0/OXsQjgyMuqFwxoC70XljFcy4v0q4/lKLXEPXar7ZF BxkMNfM1z44Eq1mK8F7gR3dhSiFlnLNQUh/TLN54AgTibR2h3V3UjrEvur8O4/3E a2kxAJqQcvNQiVAEzpyhL8NrNy85bpWB5w1NfX6PB0AH3P8F04U1SqMZlfhIDoTd Q7o18p/3ivC6kmsfnfeOLko/5aI0mIqLBb/oSvOJkVnqzYcl1+BePexGcq1T2aB7 o3O6pr7egvUMzPTIwb5Es14taepFcHZi7uxpmiAPVkYKEHi3VTwFXKA3fRqCSve5 FbTaJVcbAHcmGw== -----END CERTIFICATE-----Generated at Sun Dec 21 15:41:38 2025 by rpki-client