This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft File: FYlivF2icS8gj8ixXr3CRq9Mvs8.mft (raw, json) Hash identifier: 3Wrs3tA5k7IdO4WiaJKpYra024LpTHw6GZvnzdqsz2I= Subject key identifier: 27:79:84:CB:F0:C4:AC:C9:4F:DA:3A:46:8E:91:FE:0C:AE:57:A7:82 Authority key identifier: 15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF Certificate issuer: /CN=158962bc5da2712f208fc8b15ebdc246af4cbecf Certificate serial: 019AF20900722F954F5E07B7B980090B7C8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:01:07 +0000 Manifest this update: Sat 06 Dec 2025 05:01:07 +0000 Manifest next update: Sun 07 Dec 2025 05:01:07 +0000 Files and hashes: 1: 7yUkmk2a1THyX00hTlndTIVmtLc.roa (hash: aTNg1uSoSZtKZaAe8w+QZyL4kY8mBpAFfSDQeH8QdZ0=) 2: FYlivF2icS8gj8ixXr3CRq9Mvs8.crl (hash: U6cmy5TFfuU+6/NEJyJEOCHhXg/QILnqEk08ep7VOVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.crl rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:00:72:2f:95:4f:5e:07:b7:b9:80:09:0b:7c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158962bc5da2712f208fc8b15ebdc246af4cbecf Validity Not Before: Dec 6 05:01:07 2025 GMT Not After : Dec 7 05:01:07 2025 GMT Subject: CN=277984cbf0c4acc94fda3a468e91fe0cae57a782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fe:68:e1:3c:e6:b4:8d:1b:17:be:68:9b:71: 9f:b2:4e:c9:34:66:82:30:11:b4:a9:d9:16:33:6f: 54:47:37:8a:9e:03:73:7e:a3:12:6e:6a:89:ab:83: cb:8c:e9:e7:63:20:c0:86:9f:aa:e8:8e:b6:2b:40: 1d:64:60:b8:ca:13:df:d5:d2:88:dc:c3:74:45:28: b8:0e:07:ab:76:72:32:43:83:40:d2:bc:b9:cc:29: ef:b0:a1:1a:b7:05:b4:e7:b1:6b:e1:68:89:c0:ae: a8:5c:c5:90:7b:6f:bd:1a:0c:50:42:a7:be:fa:9e: cd:81:20:89:93:ca:03:da:76:af:0e:90:78:12:a6: ea:de:57:85:e6:ee:09:d8:7f:c2:9c:9b:6c:63:fb: 70:e9:f4:97:7b:45:6b:b1:d7:d6:eb:e5:01:07:d3: c7:ca:61:b1:fd:01:01:d7:aa:87:e1:94:0d:e4:84: 2f:71:34:40:8e:aa:33:35:ba:47:ba:59:a7:50:33: ec:0d:63:40:1b:89:d1:67:fb:87:07:a6:8e:53:58: e1:e5:b0:2a:1f:96:cb:b4:f4:76:17:63:0e:f2:59: e3:aa:42:98:99:05:70:ee:6e:f5:1f:a2:69:9a:ce: d0:d8:88:7d:b3:a4:b9:62:91:d8:50:dd:70:13:37: 81:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:79:84:CB:F0:C4:AC:C9:4F:DA:3A:46:8E:91:FE:0C:AE:57:A7:82 X509v3 Authority Key Identifier: keyid:15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:17:73:ce:f8:40:d1:38:de:fa:ed:57:ba:4f:92:e9:25:b7: 96:1b:0f:9b:c8:ee:c1:28:06:33:79:e1:32:49:8c:af:1c:85: 73:5c:96:c4:8b:37:42:e0:3d:03:b8:35:b5:4d:56:74:96:7d: 63:9e:8c:c6:7c:86:74:00:09:df:f3:6b:e3:c8:21:68:f1:3c: 94:4f:46:42:8a:7c:42:16:2b:c5:f2:ad:8b:99:50:61:3f:e3: 6a:fa:b6:bd:04:3e:bf:64:1d:34:c8:cd:fe:9c:98:bd:33:cd: 2d:b3:60:37:f4:f2:ab:1e:c2:4f:19:69:53:33:33:bb:e0:1f: f7:53:e3:6d:8b:65:14:9f:bc:09:c3:9d:41:f5:a4:41:0e:a5: a3:b5:fe:1f:66:b6:54:15:0c:d5:10:db:42:30:a1:9e:c2:44: 11:75:71:d5:27:0c:2d:20:dd:91:03:e5:c6:cd:9d:09:8f:74: 83:13:22:5b:7f:44:51:d7:ca:e2:f0:d9:06:7a:71:ea:70:e5: 11:b5:ef:f7:b4:be:d7:c2:fb:fa:91:df:1d:b9:d7:17:72:c1: de:12:78:69:8c:e8:3b:77:14:5b:7b:5d:74:cd:7b:c3:b8:8c: 64:5e:14:07:89:29:4d:0a:f9:7f:ad:fd:43:c6:af:7b:d3:5c: 86:da:49:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQByL5VPXge3uYAJC3yNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ODk2MmJjNWRhMjcxMmYyMDhmYzhiMTVlYmRjMjQ2YWY0 Y2JlY2YwHhcNMjUxMjA2MDUwMTA3WhcNMjUxMjA3MDUwMTA3WjAzMTEwLwYDVQQD EygyNzc5ODRjYmYwYzRhY2M5NGZkYTNhNDY4ZTkxZmUwY2FlNTdhNzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3v5o4TzmtI0bF75om3Gfsk7JNGaC MBG0qdkWM29URzeKngNzfqMSbmqJq4PLjOnnYyDAhp+q6I62K0AdZGC4yhPf1dKI 3MN0RSi4DgerdnIyQ4NA0ry5zCnvsKEatwW057Fr4WiJwK6oXMWQe2+9GgxQQqe+ +p7NgSCJk8oD2navDpB4Eqbq3leF5u4J2H/CnJtsY/tw6fSXe0VrsdfW6+UBB9PH ymGx/QEB16qH4ZQN5IQvcTRAjqozNbpHulmnUDPsDWNAG4nRZ/uHB6aOU1jh5bAq H5bLtPR2F2MO8lnjqkKYmQVw7m71H6Jpms7Q2Ih9s6S5YpHYUN1wEzeBtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCd5hMvwxKzJT9o6Ro6R/gyuV6eCMB8GA1UdIwQY MBaAFBWJYrxdonEvII/IsV69wkavTL7PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRllsaXZGMmljUzhnajhpeFhyM0NScTlNdnM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC81MWQ5OTktZGY2Yy00N2U4LThjMzUt NWE2MDEzMTAwNGU4LzEvRllsaXZGMmljUzhnajhpeFhyM0NScTlNdnM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC81MWQ5OTktZGY2Yy00N2U4LThjMzUtNWE2MDEzMTAwNGU4 LzEvRllsaXZGMmljUzhnajhpeFhyM0NScTlNdnM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhdzzvhA 0Tje+u1Xuk+S6SW3lhsPm8juwSgGM3nhMkmMrxyFc1yWxIs3QuA9A7g1tU1WdJZ9 Y56MxnyGdAAJ3/Nr48ghaPE8lE9GQop8QhYrxfKti5lQYT/javq2vQQ+v2QdNMjN /pyYvTPNLbNgN/Tyqx7CTxlpUzMzu+Af91PjbYtlFJ+8CcOdQfWkQQ6lo7X+H2a2 VBUM1RDbQjChnsJEEXVx1ScMLSDdkQPlxs2dCY90gxMiW39EUdfK4vDZBnpx6nDl EbXv97S+18L7+pHfHbnXF3LB3hJ4aYzoO3cUW3tddM17w7iMZF4UB4kpTQr5f639 Q8ave9NchtpJYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:56:08 2025 by rpki-client