This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft File: FAyGl-PS6UuFRiU9zyZJymAGKmg.mft (raw, json) Hash identifier: /7ZrcpvVuUJyV3d2xHva2TKg14/I3rk6/BdaVpKLmcE= Subject key identifier: C6:5C:41:CA:A4:3B:A2:5D:9F:07:1B:11:AA:C1:DB:E4:DE:19:5A:CC Authority key identifier: 14:0C:86:97:E3:D2:E9:4B:85:46:25:3D:CF:26:49:CA:60:06:2A:68 Certificate issuer: /CN=140c8697e3d2e94b8546253dcf2649ca60062a68 Certificate serial: 019AF23F9CFD67B723416206D449E1A165A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 06:00:46 +0000 Manifest this update: Sat 06 Dec 2025 06:00:46 +0000 Manifest next update: Sun 07 Dec 2025 06:00:46 +0000 Files and hashes: 1: FAyGl-PS6UuFRiU9zyZJymAGKmg.crl (hash: 3MAGG3rMj0J4PKjnGfGBmoED3Z3g/KBM8wZw9V/vd1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:9c:fd:67:b7:23:41:62:06:d4:49:e1:a1:65:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=140c8697e3d2e94b8546253dcf2649ca60062a68 Validity Not Before: Dec 6 06:00:46 2025 GMT Not After : Dec 7 06:00:46 2025 GMT Subject: CN=c65c41caa43ba25d9f071b11aac1dbe4de195acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4f:47:ba:10:ce:51:39:04:e5:8e:64:a9:28: 0c:09:23:b7:69:1f:51:4a:64:dd:52:6f:1f:50:f2: a2:f6:0e:a9:11:53:9e:81:b3:cc:77:d7:ec:74:ba: bf:3b:20:70:d1:a5:97:5e:bf:67:ba:6d:25:ad:69: 18:1a:7e:f3:36:9f:85:aa:e9:60:cb:20:93:ac:43: 16:bf:32:61:bc:23:f7:8b:1c:bd:66:f1:e2:6a:1e: 5a:82:77:29:23:15:6c:0a:12:a5:0f:25:0a:42:38: 94:8e:62:68:74:ca:3e:ce:63:8d:23:25:95:94:f1: c4:b0:b0:ae:b6:9a:53:d6:31:a6:ff:0d:30:06:ae: a2:a5:e6:37:50:83:17:c7:15:db:5a:f2:8b:a7:9c: 2c:74:13:16:88:0c:0b:16:56:f1:94:23:c4:a7:55: 2e:f1:a1:d3:90:66:6e:72:66:20:cd:01:63:14:85: e3:04:d5:27:3c:d2:80:5e:e6:82:96:bc:43:b6:4d: 1d:03:2c:69:4a:3e:49:12:78:2a:2d:c5:63:7a:0f: 39:77:a4:73:14:89:8b:68:ac:72:6b:7a:d4:11:c9: 84:d6:46:80:2a:ef:0f:8c:43:9e:a3:5b:b7:4b:27: f4:f3:2a:b1:0f:a8:29:76:56:28:a3:11:c2:ce:97: bd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:5C:41:CA:A4:3B:A2:5D:9F:07:1B:11:AA:C1:DB:E4:DE:19:5A:CC X509v3 Authority Key Identifier: keyid:14:0C:86:97:E3:D2:E9:4B:85:46:25:3D:CF:26:49:CA:60:06:2A:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:02:74:96:d1:98:02:0b:d2:b7:e7:f5:b2:f7:e7:a4:dd:ac: ad:f1:57:3e:ef:69:ba:93:0b:ab:5b:19:ae:f4:69:01:4a:1c: 3c:d5:40:1c:63:e1:b3:8d:14:1b:8a:ca:17:be:c4:b4:aa:1f: 79:0b:bf:89:5f:3d:70:2a:08:d8:fa:62:01:7f:4b:79:3b:41: c6:99:77:d6:2b:86:dd:28:17:54:2b:5e:56:e1:1c:53:61:8b: e2:0f:1d:66:3a:d3:3f:88:e6:bb:f0:94:82:43:e2:ab:ef:8b: 07:f5:9a:5f:00:79:72:1c:61:9d:67:41:e8:2f:af:e5:fd:4c: 17:58:cb:b4:43:ad:21:5f:31:17:1f:54:06:e9:f5:1e:d7:d1: 0c:21:4c:37:26:3f:c3:4a:1b:70:f5:33:10:15:7a:b3:37:c0: 58:58:17:a5:5c:a5:8a:43:e6:7f:2a:f5:98:45:99:5a:8f:cf: 67:23:a2:27:6b:a9:98:96:34:0e:79:ff:4c:34:e7:65:4d:66: 08:fa:c2:83:69:39:63:26:52:0b:f5:43:59:14:22:37:86:8e: 51:d8:43:bc:c3:92:88:9b:65:19:77:9b:64:1e:2c:70:e3:16: 4b:10:88:b0:ed:8d:a4:18:1d:bd:70:9b:c8:36:5f:8e:bd:a4: 03:a2:85:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5z9Z7cjQWIG1EnhoWWkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0MGM4Njk3ZTNkMmU5NGI4NTQ2MjUzZGNmMjY0OWNhNjAw NjJhNjgwHhcNMjUxMjA2MDYwMDQ2WhcNMjUxMjA3MDYwMDQ2WjAzMTEwLwYDVQQD EyhjNjVjNDFjYWE0M2JhMjVkOWYwNzFiMTFhYWMxZGJlNGRlMTk1YWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk9HuhDOUTkE5Y5kqSgMCSO3aR9R SmTdUm8fUPKi9g6pEVOegbPMd9fsdLq/OyBw0aWXXr9num0lrWkYGn7zNp+Fqulg yyCTrEMWvzJhvCP3ixy9ZvHiah5agncpIxVsChKlDyUKQjiUjmJodMo+zmONIyWV lPHEsLCutppT1jGm/w0wBq6ipeY3UIMXxxXbWvKLp5wsdBMWiAwLFlbxlCPEp1Uu 8aHTkGZucmYgzQFjFIXjBNUnPNKAXuaClrxDtk0dAyxpSj5JEngqLcVjeg85d6Rz FImLaKxya3rUEcmE1kaAKu8PjEOeo1u3Syf08yqxD6gpdlYooxHCzpe9mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZcQcqkO6JdnwcbEarB2+TeGVrMMB8GA1UdIwQY MBaAFBQMhpfj0ulLhUYlPc8mScpgBipoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkF5R2wtUFM2VXVGUmlVOXp5Wkp5bUFHS21nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8zMDRmZTktODlhMi00ZjgzLTk5N2Yt YmZmNjRkNGNjZjk1LzEvRkF5R2wtUFM2VXVGUmlVOXp5Wkp5bUFHS21nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8zMDRmZTktODlhMi00ZjgzLTk5N2YtYmZmNjRkNGNjZjk1 LzEvRkF5R2wtUFM2VXVGUmlVOXp5Wkp5bUFHS21nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewJ0ltGY AgvSt+f1svfnpN2srfFXPu9pupMLq1sZrvRpAUocPNVAHGPhs40UG4rKF77EtKof eQu/iV89cCoI2PpiAX9LeTtBxpl31iuG3SgXVCteVuEcU2GL4g8dZjrTP4jmu/CU gkPiq++LB/WaXwB5chxhnWdB6C+v5f1MF1jLtEOtIV8xFx9UBun1HtfRDCFMNyY/ w0obcPUzEBV6szfAWFgXpVylikPmfyr1mEWZWo/PZyOiJ2upmJY0Dnn/TDTnZU1m CPrCg2k5YyZSC/VDWRQiN4aOUdhDvMOSiJtlGXebZB4scOMWSxCIsO2NpBgdvXCb yDZfjr2kA6KF0w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:26:03 2025 by rpki-client