This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft File: SY8T56W69q6fUdJp9Z9k1GhJZB4.mft (raw, json) Hash identifier: DAVcL4HhsCbDy1g2w5XOUVPVQoJ0CK0BK4KZuB9NppY= Subject key identifier: AB:22:7B:BE:6D:0E:A2:A5:E8:74:97:91:A8:31:BA:38:21:88:4B:D4 Authority key identifier: 49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E Certificate issuer: /CN=498f13e7a5baf6ae9f51d269f59f64d46849641e Certificate serial: 019B7E94DB385D8C18772493108FD61B1DCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft Manifest number: 0E8A Signing time: Fri 02 Jan 2026 12:00:43 +0000 Manifest this update: Fri 02 Jan 2026 12:00:43 +0000 Manifest next update: Sat 03 Jan 2026 12:00:43 +0000 Files and hashes: 1: SY8T56W69q6fUdJp9Z9k1GhJZB4.crl (hash: ya4BmhlHbtQ9VbebVooa9X4iVKRl1qX5wN5SVSBhAaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:94:db:38:5d:8c:18:77:24:93:10:8f:d6:1b:1d:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498f13e7a5baf6ae9f51d269f59f64d46849641e Validity Not Before: Jan 2 12:00:43 2026 GMT Not After : Jan 3 12:00:43 2026 GMT Subject: CN=ab227bbe6d0ea2a5e8749791a831ba3821884bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d4:7e:e0:f7:42:11:f9:41:a7:76:27:d0:4c: 1a:15:df:10:53:77:50:41:7e:0a:a4:de:ae:25:56: 59:f5:f7:1b:24:26:cd:0e:3b:8f:43:0b:fa:b6:a8: 9a:fc:93:ae:fa:6b:71:eb:0d:06:fd:1f:61:f1:b7: 8e:17:d1:07:73:6e:9d:ae:c2:e6:54:08:24:d6:f9: 7f:26:66:04:d1:9f:33:8c:e9:dd:73:70:24:b1:31: 1b:cb:15:ab:c9:9e:0b:65:a3:59:29:0f:57:8f:aa: 86:3f:bf:cb:ba:3e:f4:61:60:06:ed:f1:13:b2:e8: 52:32:e1:9c:39:a7:ff:d0:ac:be:bb:5b:b7:e1:01: 45:2f:50:bc:ba:11:ac:d5:8e:7c:45:f3:ee:92:6c: a3:28:cf:27:60:7b:b9:ae:59:54:bc:45:8f:b5:b0: 5f:0f:c3:1c:1b:66:69:2f:bf:71:dd:db:d6:f7:27: 37:1a:d3:8d:17:19:66:68:52:fc:6b:70:fb:9e:60: 0a:55:91:70:f7:e1:22:56:b1:39:9d:66:35:ee:c8: 8a:d4:79:71:0a:c6:3f:4c:8e:0a:b4:36:68:25:c4: ef:07:cc:33:17:b6:66:96:ed:1a:71:b9:b5:c5:11: fa:ad:4a:1e:52:88:c2:e2:78:fa:0d:e3:c2:55:24: 8e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:22:7B:BE:6D:0E:A2:A5:E8:74:97:91:A8:31:BA:38:21:88:4B:D4 X509v3 Authority Key Identifier: keyid:49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b0:22:22:a6:8f:9c:87:2e:f6:fa:85:e6:1a:cc:9e:bd:98: 12:62:75:fd:5b:c5:c8:cf:c6:3c:d6:59:b0:a6:b2:18:07:b2: 4b:92:48:37:1b:20:cf:36:58:cf:00:7a:43:b8:c2:5b:be:c5: 11:bf:96:dc:8a:d2:ee:d3:f6:c6:eb:7b:0b:d5:2b:b2:41:8b: e4:b7:47:e9:64:09:69:84:fd:15:61:42:60:fe:53:de:c2:eb: 50:82:e3:95:21:27:9b:fd:2a:90:d5:6e:c8:f9:a3:72:66:69: 8d:fe:61:7f:3f:be:8d:e4:be:3d:77:2b:cc:b7:4d:39:c2:dd: c0:dc:0d:38:ae:03:55:96:74:c2:ae:f1:aa:24:93:33:65:3a: 17:cd:17:8a:86:00:54:38:4e:ce:55:4c:4b:93:82:1d:68:89: 73:9c:28:10:8c:fb:e2:8d:82:9a:49:ee:bf:a3:4b:67:45:04: d2:e9:d2:e1:06:c4:29:4b:fb:e2:a1:b0:cc:85:0c:0f:56:3d: 58:f7:bd:69:1b:71:18:62:e6:41:ef:89:9e:86:d0:c4:60:a3: ab:e9:06:85:94:c5:29:96:66:90:a9:71:c8:6b:0f:83:05:12: 01:ac:5d:9c:80:80:52:9e:de:4d:aa:d2:c7:03:4e:b1:d0:5c: 3e:65:59:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt+lNs4XYwYdySTEI/WGx3OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5OGYxM2U3YTViYWY2YWU5ZjUxZDI2OWY1OWY2NGQ0Njg0 OTY0MWUwHhcNMjYwMTAyMTIwMDQzWhcNMjYwMTAzMTIwMDQzWjAzMTEwLwYDVQQD EyhhYjIyN2JiZTZkMGVhMmE1ZTg3NDk3OTFhODMxYmEzODIxODg0YmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNR+4PdCEflBp3Yn0EwaFd8QU3dQ QX4KpN6uJVZZ9fcbJCbNDjuPQwv6tqia/JOu+mtx6w0G/R9h8beOF9EHc26drsLm VAgk1vl/JmYE0Z8zjOndc3AksTEbyxWryZ4LZaNZKQ9Xj6qGP7/Luj70YWAG7fET suhSMuGcOaf/0Ky+u1u34QFFL1C8uhGs1Y58RfPukmyjKM8nYHu5rllUvEWPtbBf D8McG2ZpL79x3dvW9yc3GtONFxlmaFL8a3D7nmAKVZFw9+EiVrE5nWY17siK1Hlx CsY/TI4KtDZoJcTvB8wzF7Zmlu0acbm1xRH6rUoeUojC4nj6DePCVSSOlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsie75tDqKl6HSXkagxujghiEvUMB8GA1UdIwQY MBaAFEmPE+eluvaun1HSafWfZNRoSWQeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1k4VDU2VzY5cTZmVWRKcDlaOWsxR2hKWkI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9mOWZmNTAtNWZmZi00NzdhLTllZDYt Y2UxYjQyMjRlYzQ5LzEvU1k4VDU2VzY5cTZmVWRKcDlaOWsxR2hKWkI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9mOWZmNTAtNWZmZi00NzdhLTllZDYtY2UxYjQyMjRlYzQ5 LzEvU1k4VDU2VzY5cTZmVWRKcDlaOWsxR2hKWkI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7AiIqaP nIcu9vqF5hrMnr2YEmJ1/VvFyM/GPNZZsKayGAeyS5JINxsgzzZYzwB6Q7jCW77F Eb+W3IrS7tP2xut7C9UrskGL5LdH6WQJaYT9FWFCYP5T3sLrUILjlSEnm/0qkNVu yPmjcmZpjf5hfz++jeS+PXcrzLdNOcLdwNwNOK4DVZZ0wq7xqiSTM2U6F80XioYA VDhOzlVMS5OCHWiJc5woEIz74o2Cmknuv6NLZ0UE0unS4QbEKUv74qGwzIUMD1Y9 WPe9aRtxGGLmQe+JnobQxGCjq+kGhZTFKZZmkKlxyGsPgwUSAaxdnICAUp7eTarS xwNOsdBcPmVZHQ== -----END CERTIFICATE-----Generated at Fri Jan 2 17:02:00 2026 by rpki-client