This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft File: syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft (raw, json) Hash identifier: zq68vekpPtdubYEW2vIwOHcG+2b2h6WuL2agYnc2n3A= Subject key identifier: D1:71:5E:B0:5F:C3:39:1D:A3:CB:D3:80:58:71:64:D3:21:F8:AE:F2 Authority key identifier: B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7 Certificate issuer: /CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7 Certificate serial: 019B2D0BF6D5FD0839BABB85140F93A2D1DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft Manifest number: 0489 Signing time: Wed 17 Dec 2025 16:01:57 +0000 Manifest this update: Wed 17 Dec 2025 16:01:57 +0000 Manifest next update: Thu 18 Dec 2025 16:01:57 +0000 Files and hashes: 1: syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl (hash: 9kc4ceUSUOVes5NJFCMRGApBpsA6DeqAFb2I3DvqTWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:f6:d5:fd:08:39:ba:bb:85:14:0f:93:a2:d1:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7 Validity Not Before: Dec 17 16:01:57 2025 GMT Not After : Dec 18 16:01:57 2025 GMT Subject: CN=d1715eb05fc3391da3cbd380587164d321f8aef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8d:f6:2d:4a:2c:94:f4:3e:4a:59:04:3a:10: 65:54:e7:84:b7:c2:94:97:70:c8:83:8f:a8:42:23: 4a:3f:b1:3e:14:05:82:a6:52:b6:c0:a7:55:7b:fb: 79:9b:c7:37:a6:d5:e1:e7:f1:8d:df:17:f7:26:5f: 00:23:93:31:87:46:5f:10:92:88:8e:bb:6d:38:75: 5e:7f:77:c8:24:11:91:d1:fb:9b:21:fe:dc:47:0e: f7:1a:9b:3e:5d:c5:cb:d4:da:c4:ed:6e:f6:4e:59: b1:8a:39:d6:93:ed:1f:c7:39:d7:64:21:a0:8d:17: a9:96:6f:67:16:cc:c6:be:86:39:d7:13:5b:35:f6: d2:d5:be:2e:c3:06:73:a9:b4:8e:a6:69:4a:f0:6b: 2d:75:7a:cf:cd:08:af:f8:22:c2:29:d6:f1:f8:79: 8a:31:ba:16:07:53:a8:67:66:5f:f1:dc:02:50:d1: 41:34:12:e8:06:d7:9e:f4:f1:1a:dc:b7:92:eb:b3: 75:18:7c:4a:5d:a6:ef:8c:04:21:92:87:cc:97:37: 8b:c4:49:a1:25:87:24:fe:c7:f9:32:13:6c:5a:4e: 9b:94:0a:fa:75:15:dd:cf:28:c6:30:28:11:13:6e: eb:be:1d:a7:85:39:49:a6:50:82:7d:88:e2:b0:a6: 24:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:71:5E:B0:5F:C3:39:1D:A3:CB:D3:80:58:71:64:D3:21:F8:AE:F2 X509v3 Authority Key Identifier: keyid:B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:3a:f2:05:64:0c:57:db:49:a4:93:8d:f3:d8:0c:b9:28:7a: 5a:37:cf:58:e5:98:f5:1e:2d:8a:7a:9c:56:ab:e9:8f:04:63: 53:4a:c2:fa:57:d7:ab:43:fd:6e:01:49:1c:be:d4:41:5c:7c: 98:d1:39:8d:cc:74:34:f5:34:c6:02:e5:6f:62:fa:db:db:3a: ec:70:1c:ee:5a:8f:9e:2a:00:0f:61:43:76:26:a9:18:e9:2d: 26:1e:6f:fa:aa:8c:64:c0:00:94:fe:cd:9a:6c:3c:fa:79:27: ce:9a:d0:02:3c:ed:07:20:ec:b8:c5:85:48:0c:24:76:32:c6: 79:d8:a8:72:bd:8d:fa:a0:a3:ca:8c:69:1f:23:17:d8:f8:db: aa:67:b6:78:e4:d6:15:ab:71:72:c0:60:f3:7a:c3:6a:e5:f3: 4e:7f:9e:a6:db:1d:72:d3:76:5b:9c:50:ce:88:08:b3:3a:27: 1c:46:ac:dd:5d:6b:17:28:a8:76:35:9e:32:22:9b:59:5f:f8: 4d:de:2e:af:40:93:bb:91:15:5f:24:da:f7:db:ca:1c:b8:e7: 70:4c:bc:e4:84:a2:f4:96:32:4d:ba:87:a6:6a:6b:51:18:c7: 0c:9e:f8:8f:3a:17:56:36:d2:87:f8:1e:61:5c:83:d0:a8:e4: 03:bd:ed:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC/bV/Qg5uruFFA+TotHcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMjI5NGEzOTAxYmVjZmYyYWZlODBlYjkzM2UyYjkxZmRk N2U4ZjcwHhcNMjUxMjE3MTYwMTU3WhcNMjUxMjE4MTYwMTU3WjAzMTEwLwYDVQQD EyhkMTcxNWViMDVmYzMzOTFkYTNjYmQzODA1ODcxNjRkMzIxZjhhZWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI32LUoslPQ+SlkEOhBlVOeEt8KU l3DIg4+oQiNKP7E+FAWCplK2wKdVe/t5m8c3ptXh5/GN3xf3Jl8AI5Mxh0ZfEJKI jrttOHVef3fIJBGR0fubIf7cRw73Gps+XcXL1NrE7W72TlmxijnWk+0fxznXZCGg jReplm9nFszGvoY51xNbNfbS1b4uwwZzqbSOpmlK8GstdXrPzQiv+CLCKdbx+HmK MboWB1OoZ2Zf8dwCUNFBNBLoBtee9PEa3LeS67N1GHxKXabvjAQhkofMlzeLxEmh JYck/sf5MhNsWk6blAr6dRXdzyjGMCgRE27rvh2nhTlJplCCfYjisKYk5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFxXrBfwzkdo8vTgFhxZNMh+K7yMB8GA1UdIwQY MBaAFLMilKOQG+z/Kv6A65M+K5H91+j3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3lLVW81QWI3UDhxX29Ecmt6NHJrZjNYNlBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mY2U4OGEtMGZhOC00MmEzLWIwNmEt MDE5NDhkNGFjNzA1LzEvc3lLVW81QWI3UDhxX29Ecmt6NHJrZjNYNlBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9mY2U4OGEtMGZhOC00MmEzLWIwNmEtMDE5NDhkNGFjNzA1 LzEvc3lLVW81QWI3UDhxX29Ecmt6NHJrZjNYNlBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDryBWQM V9tJpJON89gMuSh6WjfPWOWY9R4tinqcVqvpjwRjU0rC+lfXq0P9bgFJHL7UQVx8 mNE5jcx0NPU0xgLlb2L629s67HAc7lqPnioAD2FDdiapGOktJh5v+qqMZMAAlP7N mmw8+nknzprQAjztByDsuMWFSAwkdjLGediocr2N+qCjyoxpHyMX2Pjbqme2eOTW FatxcsBg83rDauXzTn+eptsdctN2W5xQzogIszonHEas3V1rFyiodjWeMiKbWV/4 Td4ur0CTu5EVXyTa99vKHLjncEy85ISi9JYyTbqHpmprURjHDJ74jzoXVjbSh/ge YVyD0KjkA73tcQ== -----END CERTIFICATE-----Generated at Wed Dec 17 19:13:21 2025 by rpki-client