This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft File: SYN20qIgPYbnmm1ESVq_xIkDFGU.mft (raw, json) Hash identifier: hhDJjStoW1AW5whjgm3EpQSpg8Z3qe40XZKgKntYr+g= Subject key identifier: 6B:BF:9F:A1:69:5A:97:F5:71:9A:3F:4C:DF:2A:B6:E6:75:4E:77:39 Authority key identifier: 49:83:76:D2:A2:20:3D:86:E7:9A:6D:44:49:5A:BF:C4:89:03:14:65 Certificate issuer: /CN=498376d2a2203d86e79a6d44495abfc489031465 Certificate serial: 019B57F4F991FD45E38B88656E825A781925 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYN20qIgPYbnmm1ESVq_xIkDFGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft Manifest number: 0E7B Signing time: Fri 26 Dec 2025 00:00:30 +0000 Manifest this update: Fri 26 Dec 2025 00:00:30 +0000 Manifest next update: Sat 27 Dec 2025 00:00:30 +0000 Files and hashes: 1: SYN20qIgPYbnmm1ESVq_xIkDFGU.crl (hash: LKX4MxSMZ8jS68Sb72TFUH9WRdTsH+ItfF4YliMgC28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.crl rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft rsync://rpki.ripe.net/repository/DEFAULT/SYN20qIgPYbnmm1ESVq_xIkDFGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:f4:f9:91:fd:45:e3:8b:88:65:6e:82:5a:78:19:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498376d2a2203d86e79a6d44495abfc489031465 Validity Not Before: Dec 26 00:00:30 2025 GMT Not After : Dec 27 00:00:30 2025 GMT Subject: CN=6bbf9fa1695a97f5719a3f4cdf2ab6e6754e7739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a6:fb:09:27:73:d8:ce:14:f9:af:e5:9f:0b: 59:99:6a:05:11:e6:9e:f8:81:9a:cd:55:6f:d4:7e: fa:c6:10:75:3a:e0:ad:44:a1:6a:d3:88:47:db:5d: a1:1d:1e:82:c1:d0:c3:87:0b:e8:cf:e2:e9:e8:ed: 19:e4:e9:19:f2:78:58:06:0a:93:43:93:c5:e1:a9: 7d:c4:8d:4e:8f:8f:cb:8c:60:12:17:68:3c:d4:1c: c5:b3:17:ac:c6:5f:fe:8c:ea:c2:70:6d:fd:12:10: db:ae:12:28:73:c9:e5:6d:9f:2e:88:f8:61:57:66: 23:3d:b0:b9:b4:07:9e:fc:b3:d2:18:1d:cd:e1:86: e6:35:f3:c6:37:cd:0e:30:94:06:b6:83:05:90:ba: fe:52:41:ae:52:79:34:97:f1:53:7e:d2:b7:14:94: 7b:75:ee:45:e8:56:f3:3a:67:86:47:1e:33:ed:e7: 10:9d:e0:e3:e6:1d:4f:f5:e1:6d:3e:a3:a5:4c:cd: d6:f8:e1:be:46:79:2d:36:1e:5e:ad:60:23:fe:27: 50:d8:fe:3b:84:11:c8:48:86:83:fa:15:dd:20:10: 74:07:b6:ae:fb:27:e8:26:09:8f:6c:a9:bd:10:8d: df:ec:50:6a:d8:4a:ab:9c:6d:35:cb:cd:af:00:c6: e9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BF:9F:A1:69:5A:97:F5:71:9A:3F:4C:DF:2A:B6:E6:75:4E:77:39 X509v3 Authority Key Identifier: keyid:49:83:76:D2:A2:20:3D:86:E7:9A:6D:44:49:5A:BF:C4:89:03:14:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYN20qIgPYbnmm1ESVq_xIkDFGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:84:c3:3a:d8:b8:80:6b:d2:5a:1b:e6:18:4f:d1:ea:5f:7b: 22:85:8b:55:05:00:89:21:70:01:95:ef:0e:ca:0c:6a:f0:8f: a3:d9:4a:ee:97:c1:28:f9:8d:5b:e2:fb:58:9f:c4:10:0c:36: c3:2c:a2:80:f0:df:b0:89:a0:d4:be:d0:6f:ab:09:cb:20:c8: 56:c3:91:3c:15:b6:16:3c:1b:ad:ab:2a:55:27:79:f9:b7:3d: 95:91:01:96:39:6c:f3:ea:85:cc:1c:69:82:27:87:a1:97:04: f9:ca:ca:77:5b:90:7c:ce:1e:61:78:fc:87:bb:02:8a:79:63: 37:1a:d7:1b:e6:3e:cc:65:d5:09:9b:ec:d8:6c:3b:db:91:22: 59:71:61:49:a0:f6:ae:2b:19:3d:3d:23:30:a6:33:54:b3:f4: c2:0e:5a:b4:6c:e1:a3:bf:5d:bc:55:0b:32:d5:f9:ee:a5:4a: 38:5f:66:8b:be:5c:6a:0f:33:ba:f1:c6:44:e6:1a:91:e9:f6: 31:29:b3:c1:40:a0:2f:67:8a:6d:38:23:af:76:c7:39:9e:4f: 8b:15:14:7c:34:45:68:19:5c:b5:a3:be:fb:38:61:a7:21:1e: f8:83:ce:24:e0:b2:26:0e:4a:70:f3:2e:f0:17:df:38:56:91: f7:ad:19:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtX9PmR/UXji4hlboJaeBklMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODM3NmQyYTIyMDNkODZlNzlhNmQ0NDQ5NWFiZmM0ODkw MzE0NjUwHhcNMjUxMjI2MDAwMDMwWhcNMjUxMjI3MDAwMDMwWjAzMTEwLwYDVQQD Eyg2YmJmOWZhMTY5NWE5N2Y1NzE5YTNmNGNkZjJhYjZlNjc1NGU3NzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ab7CSdz2M4U+a/lnwtZmWoFEeae +IGazVVv1H76xhB1OuCtRKFq04hH212hHR6CwdDDhwvoz+Lp6O0Z5OkZ8nhYBgqT Q5PF4al9xI1Oj4/LjGASF2g81BzFsxesxl/+jOrCcG39EhDbrhIoc8nlbZ8uiPhh V2YjPbC5tAee/LPSGB3N4YbmNfPGN80OMJQGtoMFkLr+UkGuUnk0l/FTftK3FJR7 de5F6FbzOmeGRx4z7ecQneDj5h1P9eFtPqOlTM3W+OG+RnktNh5erWAj/idQ2P47 hBHISIaD+hXdIBB0B7au+yfoJgmPbKm9EI3f7FBq2EqrnG01y82vAMbpHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGu/n6FpWpf1cZo/TN8qtuZ1Tnc5MB8GA1UdIwQY MBaAFEmDdtKiID2G55ptRElav8SJAxRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1lOMjBxSWdQWWJubW0xRVNWcV94SWtERkdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85MjU1YmQtOGI3Zi00NmQyLTk3NzMt ZjUwYTJhMDA2NDE0LzEvU1lOMjBxSWdQWWJubW0xRVNWcV94SWtERkdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85MjU1YmQtOGI3Zi00NmQyLTk3NzMtZjUwYTJhMDA2NDE0 LzEvU1lOMjBxSWdQWWJubW0xRVNWcV94SWtERkdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnITDOti4 gGvSWhvmGE/R6l97IoWLVQUAiSFwAZXvDsoMavCPo9lK7pfBKPmNW+L7WJ/EEAw2 wyyigPDfsImg1L7Qb6sJyyDIVsORPBW2FjwbrasqVSd5+bc9lZEBljls8+qFzBxp gieHoZcE+crKd1uQfM4eYXj8h7sCinljNxrXG+Y+zGXVCZvs2Gw725EiWXFhSaD2 risZPT0jMKYzVLP0wg5atGzho79dvFULMtX57qVKOF9mi75cag8zuvHGROYaken2 MSmzwUCgL2eKbTgjr3bHOZ5PixUUfDRFaBlctaO++zhhpyEe+IPOJOCyJg5KcPMu 8BffOFaR960ZGQ== -----END CERTIFICATE-----Generated at Fri Dec 26 07:50:25 2025 by rpki-client