This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft File: FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft (raw, json) Hash identifier: FxGH7GSf+UO8kPOaqtsL4x22uSd63gKGIBU3r4Yi1AI= Subject key identifier: D9:DA:FD:E4:4B:3B:5E:BA:15:92:11:31:C7:12:1C:CA:C8:81:7B:FC Authority key identifier: 17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B Certificate issuer: /CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b Certificate serial: 019AF23F73E57524D3EAC4C1F834DFD183A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft Manifest number: 0FD5 Signing time: Sat 06 Dec 2025 06:00:35 +0000 Manifest this update: Sat 06 Dec 2025 06:00:35 +0000 Manifest next update: Sun 07 Dec 2025 06:00:35 +0000 Files and hashes: 1: FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl (hash: W/s4DshaYbpyO2ILfJCnZfQoEq/TqjdjnyrE+bT3MvA=) 2: f0fm_m6mqyncGFPg2zPkibsoBcI.roa (hash: R5AqcJr/crlHYVpexq/9b2IVn+Dod1jCAKFqkiICDJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:73:e5:75:24:d3:ea:c4:c1:f8:34:df:d1:83:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b Validity Not Before: Dec 6 06:00:35 2025 GMT Not After : Dec 7 06:00:35 2025 GMT Subject: CN=d9dafde44b3b5eba15921131c7121ccac8817bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:86:61:44:40:92:74:4e:b7:52:55:ce:72:a4: ff:dd:a2:b4:b6:1f:c5:da:76:3e:e6:fb:98:9b:8f: e5:78:bf:af:b1:c2:4d:34:e8:48:a0:cc:38:23:bc: 29:fd:03:22:d2:95:c8:61:04:5a:33:eb:da:b5:f3: a5:ed:6c:a7:3d:ae:41:cc:e1:c1:25:b0:5c:ef:da: 44:59:ca:14:2e:5b:69:73:38:86:5a:35:2a:f8:a4: 42:80:c3:81:5f:3c:05:c1:c6:7e:29:a6:b0:2a:67: a3:39:9d:82:f3:ef:70:58:f9:0b:c7:ed:64:fc:87: 03:fb:b4:f2:54:96:4a:79:1c:97:40:4a:97:01:aa: 82:7f:5b:99:93:b5:1d:c3:1e:37:00:09:fc:c4:de: 82:21:b9:e4:d1:55:1d:1c:a0:ae:c6:cb:72:e5:ed: f6:2c:75:8b:e5:02:2c:81:7c:67:ca:3e:cf:de:d5: 90:a7:19:b5:dd:aa:2b:e3:8a:ee:de:7e:76:3e:29: 9c:f0:c9:12:ae:3f:70:9a:f6:56:78:cc:1b:6e:d9: 11:90:bf:7f:9a:a1:9d:0c:bc:75:dc:0b:bf:28:1b: b1:48:33:21:a9:b2:57:61:5e:53:02:57:b8:b9:f5: 5d:62:15:73:e8:d9:44:c6:84:89:7c:dc:99:11:6c: ca:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DA:FD:E4:4B:3B:5E:BA:15:92:11:31:C7:12:1C:CA:C8:81:7B:FC X509v3 Authority Key Identifier: keyid:17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:e8:d4:59:ae:ed:9a:71:1e:5c:7d:b1:da:56:ad:29:d9:87: c0:b7:0c:6d:ab:d8:9f:4b:7d:14:8f:ea:de:29:a0:25:23:22: 55:82:1e:12:7f:1e:ca:1c:5a:2b:ba:93:06:7d:02:f1:cf:57: 04:b1:aa:0b:f2:3c:dc:0b:db:0c:f1:e4:06:86:a9:e8:56:69: fc:5d:6c:58:c9:7b:eb:e1:94:53:0f:ff:58:91:0d:26:49:99: 65:4f:3d:d0:05:48:fa:52:74:99:14:06:4a:69:fe:13:94:48: ac:0e:dd:89:e0:1e:49:5d:e9:48:9d:ba:de:a4:26:9e:28:5f: ba:bc:77:33:b7:b8:91:d5:e2:97:00:20:36:af:0d:7d:0c:53: d7:9d:a2:54:97:a5:c5:77:34:b5:7c:4c:35:13:f6:f2:a3:7c: ae:29:a1:6e:40:72:33:0f:a8:ea:82:c7:58:06:01:6e:8a:f3: d9:fb:4d:bf:f8:18:25:9a:7b:16:57:94:e0:70:aa:fe:7b:04: 6f:c3:c7:51:93:8d:dc:c9:72:1a:83:41:1d:39:a7:93:79:27: fc:62:c2:56:50:4e:f1:f7:f2:9a:ea:4d:db:32:5f:93:67:e5: 05:19:78:a8:de:f9:10:87:e2:aa:7f:8d:c7:a0:19:a4:94:9c: 5c:63:02:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3PldSTT6sTB+DTf0YOnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MjJlOTY3OGZiMGQ0MTRkMmRkZmJkMjQyMGM0Yzc0ODI2 M2YzNGIwHhcNMjUxMjA2MDYwMDM1WhcNMjUxMjA3MDYwMDM1WjAzMTEwLwYDVQQD EyhkOWRhZmRlNDRiM2I1ZWJhMTU5MjExMzFjNzEyMWNjYWM4ODE3YmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIZhRECSdE63UlXOcqT/3aK0th/F 2nY+5vuYm4/leL+vscJNNOhIoMw4I7wp/QMi0pXIYQRaM+vatfOl7WynPa5BzOHB JbBc79pEWcoULltpcziGWjUq+KRCgMOBXzwFwcZ+KaawKmejOZ2C8+9wWPkLx+1k /IcD+7TyVJZKeRyXQEqXAaqCf1uZk7Udwx43AAn8xN6CIbnk0VUdHKCuxsty5e32 LHWL5QIsgXxnyj7P3tWQpxm13aor44ru3n52Pimc8MkSrj9wmvZWeMwbbtkRkL9/ mqGdDLx13Au/KBuxSDMhqbJXYV5TAle4ufVdYhVz6NlExoSJfNyZEWzKPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNna/eRLO166FZIRMccSHMrIgXv8MB8GA1UdIwQY MBaAFBci6WePsNQU0t370kIMTHSCY/NLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnlMcFo0LXcxQlRTM2Z2U1FneE1kSUpqODBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hNmUxYjUtZTc4MS00MDE4LTk2MGIt ODhjOTUxY2VlNzg0LzEvRnlMcFo0LXcxQlRTM2Z2U1FneE1kSUpqODBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9hNmUxYjUtZTc4MS00MDE4LTk2MGItODhjOTUxY2VlNzg0 LzEvRnlMcFo0LXcxQlRTM2Z2U1FneE1kSUpqODBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFujUWa7t mnEeXH2x2latKdmHwLcMbavYn0t9FI/q3imgJSMiVYIeEn8eyhxaK7qTBn0C8c9X BLGqC/I83AvbDPHkBoap6FZp/F1sWMl76+GUUw//WJENJkmZZU890AVI+lJ0mRQG Smn+E5RIrA7dieAeSV3pSJ263qQmnihfurx3M7e4kdXilwAgNq8NfQxT152iVJel xXc0tXxMNRP28qN8rimhbkByMw+o6oLHWAYBborz2ftNv/gYJZp7FleU4HCq/nsE b8PHUZON3MlyGoNBHTmnk3kn/GLCVlBO8ffymupN2zJfk2flBRl4qN75EIfiqn+N x6AZpJScXGMCDw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:11 2025 by rpki-client