This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft File: SY8T56W69q6fUdJp9Z9k1GhJZB4.mft (raw, json) Hash identifier: 9FngdYM8fNKVRZjlp6/NxAZQf83ALqYJYOl3HoQ723E= Subject key identifier: E3:6C:AE:C0:BE:8F:4A:F2:68:96:31:57:67:A3:F0:53:D5:46:BE:02 Authority key identifier: 49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E Certificate issuer: /CN=498f13e7a5baf6ae9f51d269f59f64d46849641e Certificate serial: 019B48831C6E44416808B71994025789E9C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft Manifest number: 0E6E Signing time: Tue 23 Dec 2025 00:01:50 +0000 Manifest this update: Tue 23 Dec 2025 00:01:50 +0000 Manifest next update: Wed 24 Dec 2025 00:01:50 +0000 Files and hashes: 1: SY8T56W69q6fUdJp9Z9k1GhJZB4.crl (hash: XPKNeNkJ8rSMeDK/L7kN2Ue9MDEKy9DqW3RfTfNu7EI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:83:1c:6e:44:41:68:08:b7:19:94:02:57:89:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498f13e7a5baf6ae9f51d269f59f64d46849641e Validity Not Before: Dec 23 00:01:50 2025 GMT Not After : Dec 24 00:01:50 2025 GMT Subject: CN=e36caec0be8f4af26896315767a3f053d546be02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:62:a3:6b:52:78:73:37:7f:30:1d:5a:30:af: cc:1e:2a:71:26:51:29:8f:44:38:b1:ea:87:bf:d8: 76:c0:b8:0d:fe:2a:8b:11:02:4e:a6:55:e7:39:e1: e5:a1:17:df:4a:91:e2:01:f6:06:0f:3a:ea:a1:b5: 7f:fd:8d:b1:16:d8:af:d9:54:64:57:7e:45:d6:d2: 97:34:05:64:8d:eb:d0:de:1a:1d:15:e1:4f:eb:03: ba:76:46:a0:1b:89:7c:dc:c0:76:a9:ef:3e:89:c1: 4f:92:4b:d4:dc:23:2e:60:7b:38:cc:70:ec:d9:af: 5b:b4:68:e2:69:c4:6c:5d:26:2d:ee:ab:3d:79:da: e9:d0:31:90:45:57:97:c7:0c:3e:cb:89:b6:a0:14: ee:55:08:75:c4:2b:b6:a9:1e:29:32:d6:a6:77:70: 3a:6a:3a:ad:a1:ad:d3:ed:5d:1a:20:1d:bc:df:17: f9:0e:eb:db:43:bc:27:6a:8c:0f:82:dc:1a:a3:6f: 54:c5:0a:c1:97:8d:30:6a:30:d9:aa:20:94:1b:86: 79:2b:96:96:de:c2:43:dc:0c:02:81:a6:10:3d:cc: 26:3b:57:47:72:45:fa:94:e8:b8:7f:cb:d6:fc:45: 53:74:8d:a2:9d:60:92:75:29:d3:3a:98:00:57:14: ad:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:6C:AE:C0:BE:8F:4A:F2:68:96:31:57:67:A3:F0:53:D5:46:BE:02 X509v3 Authority Key Identifier: keyid:49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:5f:51:14:61:39:c8:85:49:d7:24:e7:ed:45:3f:b0:62:c2: 7b:19:d0:44:77:7a:66:4e:2e:68:2a:d3:8f:2b:7a:41:d5:40: 2e:29:0d:a7:d4:32:14:84:1b:7a:81:0a:b9:ab:f5:7d:78:9e: f2:4e:5f:29:39:b0:8c:57:5e:cd:2f:ef:e0:25:5e:5e:e8:7e: 49:f8:b1:f7:81:bd:a3:98:b2:04:0c:e4:a6:58:ab:34:97:29: b8:cf:f3:3c:9f:ec:0e:ea:ce:34:b3:ed:2a:1b:2b:51:42:2b: 50:b9:e5:49:ff:be:bd:b9:b1:21:f7:7c:11:a8:68:f1:14:c9: bb:f7:4c:05:a2:ec:fc:1c:61:66:51:1f:f6:5a:53:6f:e1:fd: 7f:d1:01:05:06:fc:9a:47:a4:72:7b:80:bc:7e:96:f3:b6:41: d7:78:0e:88:bd:6f:b1:5d:69:f7:7e:77:79:1a:29:76:a2:6d: 96:e0:4b:76:d2:e6:f2:d3:14:69:00:3e:6c:76:54:27:54:69: b8:f9:40:e4:62:6a:34:5e:95:9a:20:ca:98:23:d2:21:b1:55: 10:35:eb:20:92:62:1a:d9:73:f6:2b:cd:1b:29:8a:9d:9f:91: d4:1a:2f:a1:19:dd:ab:0f:02:ff:ab:0c:85:f8:b8:f3:d9:44: 82:61:2f:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgxxuREFoCLcZlAJXienAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5OGYxM2U3YTViYWY2YWU5ZjUxZDI2OWY1OWY2NGQ0Njg0 OTY0MWUwHhcNMjUxMjIzMDAwMTUwWhcNMjUxMjI0MDAwMTUwWjAzMTEwLwYDVQQD EyhlMzZjYWVjMGJlOGY0YWYyNjg5NjMxNTc2N2EzZjA1M2Q1NDZiZTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mKja1J4czd/MB1aMK/MHipxJlEp j0Q4seqHv9h2wLgN/iqLEQJOplXnOeHloRffSpHiAfYGDzrqobV//Y2xFtiv2VRk V35F1tKXNAVkjevQ3hodFeFP6wO6dkagG4l83MB2qe8+icFPkkvU3CMuYHs4zHDs 2a9btGjiacRsXSYt7qs9edrp0DGQRVeXxww+y4m2oBTuVQh1xCu2qR4pMtamd3A6 ajqtoa3T7V0aIB283xf5DuvbQ7wnaowPgtwao29UxQrBl40wajDZqiCUG4Z5K5aW 3sJD3AwCgaYQPcwmO1dHckX6lOi4f8vW/EVTdI2inWCSdSnTOpgAVxStNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONsrsC+j0ryaJYxV2ej8FPVRr4CMB8GA1UdIwQY MBaAFEmPE+eluvaun1HSafWfZNRoSWQeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1k4VDU2VzY5cTZmVWRKcDlaOWsxR2hKWkI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9mOWZmNTAtNWZmZi00NzdhLTllZDYt Y2UxYjQyMjRlYzQ5LzEvU1k4VDU2VzY5cTZmVWRKcDlaOWsxR2hKWkI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9mOWZmNTAtNWZmZi00NzdhLTllZDYtY2UxYjQyMjRlYzQ5 LzEvU1k4VDU2VzY5cTZmVWRKcDlaOWsxR2hKWkI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgV9RFGE5 yIVJ1yTn7UU/sGLCexnQRHd6Zk4uaCrTjyt6QdVALikNp9QyFIQbeoEKuav1fXie 8k5fKTmwjFdezS/v4CVeXuh+Sfix94G9o5iyBAzkplirNJcpuM/zPJ/sDurONLPt KhsrUUIrULnlSf++vbmxIfd8Eaho8RTJu/dMBaLs/BxhZlEf9lpTb+H9f9EBBQb8 mkekcnuAvH6W87ZB13gOiL1vsV1p9353eRopdqJtluBLdtLm8tMUaQA+bHZUJ1Rp uPlA5GJqNF6VmiDKmCPSIbFVEDXrIJJiGtlz9ivNGymKnZ+R1BovoRndqw8C/6sM hfi489lEgmEvlQ== -----END CERTIFICATE-----Generated at Tue Dec 23 09:41:46 2025 by rpki-client