This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft File: FyU3YBoxaXQEki2VfnRFD1qcvnM.mft (raw, json) Hash identifier: PQRGSp/WS9JDPwoDRHzeEJHdj4+2Jx3DqwBZuZ81wA4= Subject key identifier: 25:5B:D2:49:3D:30:63:C1:CF:89:20:87:F0:CD:67:7A:B7:82:FD:5E Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73 Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73 Certificate serial: 019AF31C38D1ACAC58A9FE3A954CF3643E21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft Manifest number: 11DC Signing time: Sat 06 Dec 2025 10:01:44 +0000 Manifest this update: Sat 06 Dec 2025 10:01:44 +0000 Manifest next update: Sun 07 Dec 2025 10:01:44 +0000 Files and hashes: 1: 4kg4y74yKFBoKL19EAnoggmnyVU.roa (hash: KOLvfzWJXbHmd9fxVRUIYFEHdRGKTleOpLyOLjIZHVY=) 2: FyU3YBoxaXQEki2VfnRFD1qcvnM.crl (hash: On8gExbfBNU4+ri0ELm9IBFvVuNCZzSTjh2Upt/NWJI=) 3: Lc76ATmh3N2WmZPDYJ9rzhql95s.roa (hash: u40vTHuUL4j8mKfluquxQoMV2MtHuQDBqovqP0w+ck4=) 4: T7TBRzeJX6tbdWoccYUlzQavEvE.roa (hash: GbQhCrhDJnuTs6aD5dp/vwgXjm1RN1g0gqgdS90d0Rg=) 5: hyQNNpjW95By6SH0X4WUwzxeoxY.roa (hash: oNbxynrjBjA1wygEmG+ILxTB5lS8dgDRIesXXnDM0Aw=) 6: vkmUdjCWN1ZeVuWp7Z6DgVm4SGk.roa (hash: 1vheYcmcnb4TdJ7xu17GBmTQ7bM9CvRsfJ3QRM8fYsc=) 7: wT_wbXD63kRspn66-sCHN9HX56k.roa (hash: giCV77XuxHEuebQnQQQbW4oA8w7bEamDw12AkczJQ2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:38:d1:ac:ac:58:a9:fe:3a:95:4c:f3:64:3e:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=172537601a31697404922d957e74450f5a9cbe73 Validity Not Before: Dec 6 10:01:44 2025 GMT Not After : Dec 7 10:01:44 2025 GMT Subject: CN=255bd2493d3063c1cf892087f0cd677ab782fd5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:21:fc:05:57:cd:a2:cf:7c:f9:08:5f:72:38: 53:d7:c0:43:d5:6b:0e:73:ed:12:3e:7d:04:10:26: 71:d5:71:f3:95:a1:b9:84:f5:1e:10:68:83:81:fa: 20:57:fc:27:e9:90:a7:a1:ed:a3:bd:ac:6a:92:bb: 94:00:b7:8b:d0:bb:28:f1:c1:75:55:27:85:97:28: 5c:04:24:84:a8:76:f0:3b:20:39:7a:43:e5:ea:62: 22:00:7f:65:42:dc:8e:e6:a5:06:52:78:5f:53:32: dd:d9:ec:3a:3a:f0:76:b6:8d:55:65:35:8e:cb:8a: fb:fc:6e:85:5b:85:b7:9f:d7:79:68:2b:73:3a:be: 37:63:b4:d2:33:61:96:c3:db:74:83:05:e7:6f:0b: ca:69:54:61:c7:bf:4d:cc:44:06:a5:f9:0d:47:76: 16:13:89:7c:4b:c6:ad:a2:9a:36:cc:b4:f4:26:42: 66:77:01:70:66:c3:6f:37:00:c4:6a:78:a2:28:72: 20:8d:d1:a4:ed:0b:b4:da:cb:49:a8:ab:a6:a9:0f: 09:63:a8:af:d9:3d:ad:89:c9:7f:6b:f2:37:d1:4f: 68:f6:aa:d6:93:b9:0f:94:61:dd:28:4b:3c:05:b6: 62:93:41:0d:05:54:30:d8:e3:16:79:e0:2a:50:ad: 3b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:5B:D2:49:3D:30:63:C1:CF:89:20:87:F0:CD:67:7A:B7:82:FD:5E X509v3 Authority Key Identifier: keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:b4:db:c8:dc:2f:80:f3:a1:95:4d:69:8e:7f:51:55:77:f6: 28:7e:e5:6f:42:82:6c:23:b2:78:91:ee:66:a4:5e:c9:d9:51: fb:18:f5:1f:87:6e:8b:95:90:84:18:a4:d3:02:8d:21:c6:c6: 07:e6:5b:cc:3b:68:1a:29:3d:33:30:2f:e4:3a:d9:a4:c0:32: 50:3f:19:07:0b:fa:b3:30:f9:db:10:3c:7c:66:dd:88:4d:a8: 3f:c9:92:2d:59:c8:9f:8f:da:d2:46:3d:c3:4f:05:02:90:3c: 49:bf:36:3a:db:6d:6f:04:66:28:8e:64:56:da:da:bc:57:6f: 32:2d:ae:ae:8b:df:3f:0c:1b:0c:9e:6a:e9:e5:91:0d:ef:2a: d6:ed:ea:71:f3:09:3e:8d:ed:c0:30:2b:12:99:12:4d:17:a6: c7:ea:b4:4e:4c:e8:90:bc:82:d4:3e:49:d1:c4:23:1a:bf:77: 18:b9:2f:79:64:78:b2:12:f8:ed:64:33:b4:f4:d8:e6:d1:bc: 6c:2b:aa:0b:e3:b9:a1:f5:8e:ef:02:af:8e:56:45:11:eb:63: 5d:4a:c7:59:66:a7:09:53:d9:71:f4:24:05:03:cd:23:bb:42: 21:0c:f3:47:2c:c0:d8:fa:02:c5:87:6b:81:fa:cc:9a:ff:12: 78:46:95:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHDjRrKxYqf46lUzzZD4hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MjUzNzYwMWEzMTY5NzQwNDkyMmQ5NTdlNzQ0NTBmNWE5 Y2JlNzMwHhcNMjUxMjA2MTAwMTQ0WhcNMjUxMjA3MTAwMTQ0WjAzMTEwLwYDVQQD EygyNTViZDI0OTNkMzA2M2MxY2Y4OTIwODdmMGNkNjc3YWI3ODJmZDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCH8BVfNos98+QhfcjhT18BD1WsO c+0SPn0EECZx1XHzlaG5hPUeEGiDgfogV/wn6ZCnoe2jvaxqkruUALeL0Lso8cF1 VSeFlyhcBCSEqHbwOyA5ekPl6mIiAH9lQtyO5qUGUnhfUzLd2ew6OvB2to1VZTWO y4r7/G6FW4W3n9d5aCtzOr43Y7TSM2GWw9t0gwXnbwvKaVRhx79NzEQGpfkNR3YW E4l8S8atopo2zLT0JkJmdwFwZsNvNwDEaniiKHIgjdGk7Qu02stJqKumqQ8JY6iv 2T2ticl/a/I30U9o9qrWk7kPlGHdKEs8BbZik0ENBVQw2OMWeeAqUK07AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVb0kk9MGPBz4kgh/DNZ3q3gv1eMB8GA1UdIwQY MBaAFBclN2AaMWl0BJItlX50RQ9anL5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnlVM1lCb3hhWFFFa2kyVmZuUkZEMXFjdm5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yMTljYWUtMjY0ZC00NmE3LTllNjQt ZTYwNGI2MWJlMGVhLzEvRnlVM1lCb3hhWFFFa2kyVmZuUkZEMXFjdm5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8yMTljYWUtMjY0ZC00NmE3LTllNjQtZTYwNGI2MWJlMGVh LzEvRnlVM1lCb3hhWFFFa2kyVmZuUkZEMXFjdm5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7TbyNwv gPOhlU1pjn9RVXf2KH7lb0KCbCOyeJHuZqReydlR+xj1H4dui5WQhBik0wKNIcbG B+ZbzDtoGik9MzAv5DrZpMAyUD8ZBwv6szD52xA8fGbdiE2oP8mSLVnIn4/a0kY9 w08FApA8Sb82OtttbwRmKI5kVtravFdvMi2urovfPwwbDJ5q6eWRDe8q1u3qcfMJ Po3twDArEpkSTRemx+q0TkzokLyC1D5J0cQjGr93GLkveWR4shL47WQztPTY5tG8 bCuqC+O5ofWO7wKvjlZFEetjXUrHWWanCVPZcfQkBQPNI7tCIQzzRyzA2PoCxYdr gfrMmv8SeEaVGg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:17:36 2025 by rpki-client