This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft File: syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft (raw, json) Hash identifier: jbMrJPK79CB77Rtq0T7qSYAP4yXL836CbOXbJWL/+uE= Subject key identifier: 65:10:99:F1:2B:3D:43:BF:F6:04:48:45:B6:A7:A3:FC:61:DF:86:10 Authority key identifier: B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7 Certificate issuer: /CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7 Certificate serial: 019B785C54515E06208A65640E941F81D937 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft Manifest number: 04B0 Signing time: Thu 01 Jan 2026 07:01:15 +0000 Manifest this update: Thu 01 Jan 2026 07:01:15 +0000 Manifest next update: Fri 02 Jan 2026 07:01:15 +0000 Files and hashes: 1: syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl (hash: hSDLbyUFu0/IvcDpTzF4bQPEi388ZXf8fjuURQSzVHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 07:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:5c:54:51:5e:06:20:8a:65:64:0e:94:1f:81:d9:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7 Validity Not Before: Jan 1 07:01:15 2026 GMT Not After : Jan 2 07:01:15 2026 GMT Subject: CN=651099f12b3d43bff6044845b6a7a3fc61df8610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e2:4c:c4:07:bf:a2:07:65:6f:1e:3a:84:8b: 32:1d:24:6c:79:e7:c4:0b:b1:0d:25:59:55:95:03: 07:6a:1f:51:91:3e:18:3e:95:bd:6c:a8:98:21:17: 9e:16:30:e6:08:fd:23:f4:65:6a:93:44:31:46:8e: c3:54:16:a2:c0:7d:1b:fd:5a:95:04:6e:0f:d9:c7: ef:80:26:2e:34:c5:bc:9b:33:ce:23:ee:1f:75:91: 62:44:5c:7e:58:97:65:13:3d:c0:4d:09:a6:78:95: 94:d8:ea:34:35:b3:3f:90:06:c7:ec:c3:e5:0a:8f: 17:6c:77:eb:8c:f1:e0:58:21:a5:4c:3d:1b:95:3e: 79:37:08:1c:56:ad:29:bb:a4:ea:e8:af:62:8d:b3: 2f:bb:8b:f0:57:32:a3:60:c1:77:20:50:d4:4c:16: f7:23:df:de:ea:59:23:c2:c6:ea:ad:72:62:ec:18: 7c:5e:b2:ef:c5:3a:3e:dd:83:1b:a7:09:25:cc:a1: 42:5d:d2:c9:bf:54:c7:91:b7:8e:37:31:1c:a3:41: 00:3d:13:4f:68:ce:fb:af:e6:5e:5b:80:fa:e2:52: 7e:f9:a0:db:0a:87:5d:fa:74:41:3c:76:0f:c3:cd: a5:d6:7e:6d:3b:4f:81:ef:f5:f7:80:58:a0:c9:fc: c3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:10:99:F1:2B:3D:43:BF:F6:04:48:45:B6:A7:A3:FC:61:DF:86:10 X509v3 Authority Key Identifier: keyid:B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:7f:e0:41:4c:f8:9f:ce:4b:ae:b7:61:45:a1:c9:b9:d4:32: 92:a0:cb:dc:25:7d:38:dd:e3:f6:f4:a7:5a:3e:ec:99:b0:c1: 24:de:b5:5e:2f:d8:97:93:c0:e3:55:3b:78:ec:61:36:86:14: a6:10:ed:5f:13:7b:c7:0f:4e:05:b1:c6:af:25:95:73:27:12: 0f:5d:e9:57:5b:dc:c8:fd:98:04:c7:a1:72:5b:b5:de:7f:55: 2c:d1:93:bd:d7:05:3d:8b:25:a8:10:9f:7b:fb:1e:88:d9:f6: 64:95:bc:52:6f:58:b7:ab:83:6d:1b:53:b9:23:ee:71:a7:30: 83:09:40:cb:1a:3b:7b:4d:11:89:e8:99:67:2c:96:6e:c7:33: e0:a5:1c:64:7d:48:65:73:72:44:2f:82:0c:8e:1e:38:ae:0f: c9:84:9d:ed:80:61:e5:94:96:fd:31:73:70:bc:ec:cf:6a:c0: a7:3d:05:26:86:19:08:42:24:3f:5d:b0:c3:5d:57:81:20:b0: be:50:dd:e9:56:67:44:b3:d9:8b:0c:87:35:96:f8:db:58:81: 87:61:37:6a:ec:0b:62:f5:dc:bb:61:b8:96:14:8d:11:14:78: 98:68:9b:41:92:83:69:f3:8e:55:92:79:32:cb:6a:31:0c:e8: b2:a9:67:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4XFRRXgYgimVkDpQfgdk3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMjI5NGEzOTAxYmVjZmYyYWZlODBlYjkzM2UyYjkxZmRk N2U4ZjcwHhcNMjYwMTAxMDcwMTE1WhcNMjYwMTAyMDcwMTE1WjAzMTEwLwYDVQQD Eyg2NTEwOTlmMTJiM2Q0M2JmZjYwNDQ4NDViNmE3YTNmYzYxZGY4NjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteJMxAe/ogdlbx46hIsyHSRseefE C7ENJVlVlQMHah9RkT4YPpW9bKiYIReeFjDmCP0j9GVqk0QxRo7DVBaiwH0b/VqV BG4P2cfvgCYuNMW8mzPOI+4fdZFiRFx+WJdlEz3ATQmmeJWU2Oo0NbM/kAbH7MPl Co8XbHfrjPHgWCGlTD0blT55NwgcVq0pu6Tq6K9ijbMvu4vwVzKjYMF3IFDUTBb3 I9/e6lkjwsbqrXJi7Bh8XrLvxTo+3YMbpwklzKFCXdLJv1THkbeONzEco0EAPRNP aM77r+ZeW4D64lJ++aDbCodd+nRBPHYPw82l1n5tO0+B7/X3gFigyfzDzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUQmfErPUO/9gRIRbano/xh34YQMB8GA1UdIwQY MBaAFLMilKOQG+z/Kv6A65M+K5H91+j3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3lLVW81QWI3UDhxX29Ecmt6NHJrZjNYNlBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mY2U4OGEtMGZhOC00MmEzLWIwNmEt MDE5NDhkNGFjNzA1LzEvc3lLVW81QWI3UDhxX29Ecmt6NHJrZjNYNlBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9mY2U4OGEtMGZhOC00MmEzLWIwNmEtMDE5NDhkNGFjNzA1 LzEvc3lLVW81QWI3UDhxX29Ecmt6NHJrZjNYNlBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAun/gQUz4 n85LrrdhRaHJudQykqDL3CV9ON3j9vSnWj7smbDBJN61Xi/Yl5PA41U7eOxhNoYU phDtXxN7xw9OBbHGryWVcycSD13pV1vcyP2YBMehclu13n9VLNGTvdcFPYslqBCf e/seiNn2ZJW8Um9Yt6uDbRtTuSPucacwgwlAyxo7e00RieiZZyyWbscz4KUcZH1I ZXNyRC+CDI4eOK4PyYSd7YBh5ZSW/TFzcLzsz2rApz0FJoYZCEIkP12ww11XgSCw vlDd6VZnRLPZiwyHNZb421iBh2E3auwLYvXcu2G4lhSNERR4mGibQZKDafOOVZJ5 MstqMQzosqlngA== -----END CERTIFICATE-----Generated at Thu Jan 1 12:32:18 2026 by rpki-client