This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft File: SYN20qIgPYbnmm1ESVq_xIkDFGU.mft (raw, json) Hash identifier: KqdNOGmrKv2oqmtI/umrZSdg1763VxXclIYPAhe6ICU= Subject key identifier: 95:E9:70:0D:16:54:29:1F:60:D8:E3:13:8C:9C:C7:5B:15:8D:BD:7A Authority key identifier: 49:83:76:D2:A2:20:3D:86:E7:9A:6D:44:49:5A:BF:C4:89:03:14:65 Certificate issuer: /CN=498376d2a2203d86e79a6d44495abfc489031465 Certificate serial: 019B4A7190CAEE6E9FABC3771028413BF3E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYN20qIgPYbnmm1ESVq_xIkDFGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft Manifest number: 0E74 Signing time: Tue 23 Dec 2025 09:01:55 +0000 Manifest this update: Tue 23 Dec 2025 09:01:55 +0000 Manifest next update: Wed 24 Dec 2025 09:01:55 +0000 Files and hashes: 1: SYN20qIgPYbnmm1ESVq_xIkDFGU.crl (hash: HnUsgSo92qYNn2GeVNELmPBgsu625lQenKlcfsAh1JU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.crl rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft rsync://rpki.ripe.net/repository/DEFAULT/SYN20qIgPYbnmm1ESVq_xIkDFGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:90:ca:ee:6e:9f:ab:c3:77:10:28:41:3b:f3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498376d2a2203d86e79a6d44495abfc489031465 Validity Not Before: Dec 23 09:01:55 2025 GMT Not After : Dec 24 09:01:55 2025 GMT Subject: CN=95e9700d1654291f60d8e3138c9cc75b158dbd7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:47:61:a3:b9:45:a1:94:f7:55:3a:12:ec:ea: b5:dd:95:b3:5e:e6:5e:9d:c6:14:8a:b7:3d:0a:07: 48:da:36:00:c4:94:e1:ba:19:f3:8f:9b:42:45:14: 4b:d6:1f:6d:45:e4:a1:a0:b8:f3:b0:3f:b7:28:3d: 51:56:80:5c:df:5f:6f:5e:d2:7e:ed:ca:41:b2:02: af:a5:8e:e5:f6:62:cd:e6:68:f4:95:85:95:76:c0: 52:ce:30:c3:ab:73:ee:45:ee:53:36:fe:8e:5f:70: 18:99:f3:e3:85:43:2f:32:8d:a7:ae:2b:91:25:ee: 11:76:38:23:9b:d1:82:1e:84:2d:aa:63:65:f0:a9: 05:57:74:f1:52:eb:b5:62:56:df:05:87:6a:e7:58: f1:a2:0b:bd:ca:6b:2e:77:03:23:38:40:b3:29:1e: dc:af:bc:2b:18:bd:f2:3d:1e:c9:bd:44:1d:6e:e4: 8e:5d:5e:92:2a:e1:10:78:c2:b1:6a:73:74:3c:e4: 57:87:17:3a:26:2e:d7:34:13:f6:e4:b9:7b:5f:77: 3e:23:96:a7:26:5b:e0:69:89:80:93:ae:c7:4a:4b: 8d:0c:ac:64:28:25:2f:90:8e:28:c5:d3:bf:5e:8a: 42:89:76:e8:ad:e8:9b:5c:29:33:17:09:84:f9:a6: 55:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E9:70:0D:16:54:29:1F:60:D8:E3:13:8C:9C:C7:5B:15:8D:BD:7A X509v3 Authority Key Identifier: keyid:49:83:76:D2:A2:20:3D:86:E7:9A:6D:44:49:5A:BF:C4:89:03:14:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYN20qIgPYbnmm1ESVq_xIkDFGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:0e:e6:69:e5:c5:68:f1:70:7e:4d:32:ee:20:0a:78:87:3e: 45:d1:a4:be:55:e5:3a:94:a2:d5:9c:a4:83:a3:fe:18:b7:72: c4:60:58:84:84:98:63:38:8a:33:cb:ee:6e:5a:ae:b4:6d:bc: 5a:54:a8:81:4d:2d:a4:72:09:43:e6:43:e4:99:ba:a1:76:16: 40:e0:8b:e7:76:cf:48:05:0e:67:fb:66:c6:92:f9:c2:61:2d: 3c:7e:80:c5:df:ee:56:f3:0e:8d:e9:7a:05:d6:58:24:1e:65: 89:46:65:84:86:91:84:de:04:0d:62:14:19:23:ce:51:cc:3d: a6:53:f4:17:6b:1c:d5:08:0f:4b:10:74:e8:14:af:6c:8f:83: 55:34:54:15:01:7e:45:d1:3d:6e:74:20:95:1c:97:6e:6a:9d: e7:fa:74:bc:89:b8:65:c7:1e:9f:ca:8b:cb:cd:c1:5a:11:ca: a2:02:36:3d:1a:43:90:d4:12:5b:d5:27:20:44:db:da:c0:d2: 5f:f7:5d:cf:93:6b:cc:4f:3b:da:ff:d5:a9:a4:94:6d:5e:1d: 43:23:4d:67:02:9c:30:60:c3:c9:54:3d:90:5b:02:bc:95:1e: e9:67:66:bb:78:74:21:6b:ba:98:67:e2:b2:29:32:b5:a3:94: 21:53:23:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcZDK7m6fq8N3EChBO/PgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODM3NmQyYTIyMDNkODZlNzlhNmQ0NDQ5NWFiZmM0ODkw MzE0NjUwHhcNMjUxMjIzMDkwMTU1WhcNMjUxMjI0MDkwMTU1WjAzMTEwLwYDVQQD Eyg5NWU5NzAwZDE2NTQyOTFmNjBkOGUzMTM4YzljYzc1YjE1OGRiZDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Udho7lFoZT3VToS7Oq13ZWzXuZe ncYUirc9CgdI2jYAxJThuhnzj5tCRRRL1h9tReShoLjzsD+3KD1RVoBc319vXtJ+ 7cpBsgKvpY7l9mLN5mj0lYWVdsBSzjDDq3PuRe5TNv6OX3AYmfPjhUMvMo2nriuR Je4Rdjgjm9GCHoQtqmNl8KkFV3TxUuu1YlbfBYdq51jxogu9ymsudwMjOECzKR7c r7wrGL3yPR7JvUQdbuSOXV6SKuEQeMKxanN0PORXhxc6Ji7XNBP25Ll7X3c+I5an JlvgaYmAk67HSkuNDKxkKCUvkI4oxdO/XopCiXboreibXCkzFwmE+aZVswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXpcA0WVCkfYNjjE4ycx1sVjb16MB8GA1UdIwQY MBaAFEmDdtKiID2G55ptRElav8SJAxRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1lOMjBxSWdQWWJubW0xRVNWcV94SWtERkdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85MjU1YmQtOGI3Zi00NmQyLTk3NzMt ZjUwYTJhMDA2NDE0LzEvU1lOMjBxSWdQWWJubW0xRVNWcV94SWtERkdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85MjU1YmQtOGI3Zi00NmQyLTk3NzMtZjUwYTJhMDA2NDE0 LzEvU1lOMjBxSWdQWWJubW0xRVNWcV94SWtERkdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANw7maeXF aPFwfk0y7iAKeIc+RdGkvlXlOpSi1Zykg6P+GLdyxGBYhISYYziKM8vublqutG28 WlSogU0tpHIJQ+ZD5Jm6oXYWQOCL53bPSAUOZ/tmxpL5wmEtPH6Axd/uVvMOjel6 BdZYJB5liUZlhIaRhN4EDWIUGSPOUcw9plP0F2sc1QgPSxB06BSvbI+DVTRUFQF+ RdE9bnQglRyXbmqd5/p0vIm4Zccen8qLy83BWhHKogI2PRpDkNQSW9UnIETb2sDS X/ddz5NrzE872v/VqaSUbV4dQyNNZwKcMGDDyVQ9kFsCvJUe6Wdmu3h0IWu6mGfi sikytaOUIVMjqw== -----END CERTIFICATE-----Generated at Tue Dec 23 11:06:31 2025 by rpki-client