This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft File: FyearRffa_ZXVlrlqT65CYU3Sjw.mft (raw, json) Hash identifier: DXMy/U5zG+W/fzunH4CJRG2y/XezAEPMBKpPHD/fib8= Subject key identifier: CE:1B:6B:25:5A:84:36:AE:46:6C:D5:14:CC:2D:5E:F5:9A:79:C6:F3 Authority key identifier: 17:27:9A:AD:17:DF:6B:F6:57:56:5A:E5:A9:3E:B9:09:85:37:4A:3C Certificate issuer: /CN=17279aad17df6bf657565ae5a93eb90985374a3c Certificate serial: 019AF31C4B9A51DE5D9145E505B8321D6226 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 10:01:49 +0000 Manifest this update: Sat 06 Dec 2025 10:01:49 +0000 Manifest next update: Sun 07 Dec 2025 10:01:49 +0000 Files and hashes: 1: FyearRffa_ZXVlrlqT65CYU3Sjw.crl (hash: X3fUShah8IlYuewV2i+O2T6q2QIXkXibDdGF2VisvrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:4b:9a:51:de:5d:91:45:e5:05:b8:32:1d:62:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17279aad17df6bf657565ae5a93eb90985374a3c Validity Not Before: Dec 6 10:01:49 2025 GMT Not After : Dec 7 10:01:49 2025 GMT Subject: CN=ce1b6b255a8436ae466cd514cc2d5ef59a79c6f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:15:81:db:17:59:97:ce:90:a0:18:37:24:e0: d6:e3:0b:11:f0:c7:57:68:9d:96:47:88:79:d0:50: 3c:f9:4a:e6:78:ca:fa:36:68:c8:b0:96:e4:3e:1a: 0b:bf:fa:04:77:3e:a4:f3:4f:cb:ba:e9:3f:38:0a: c9:a4:bd:27:dc:00:08:18:2a:c3:0f:87:36:89:98: 67:04:85:4d:6c:80:e5:d9:59:e5:82:e6:31:9a:db: 84:1f:e1:af:61:c1:ea:b5:76:c6:71:08:27:33:3b: 91:77:c9:49:b9:89:ca:39:aa:b6:f6:db:57:df:3d: 56:07:34:23:5b:57:44:93:68:d8:78:b5:bb:78:1b: 25:e7:6a:e2:7c:c8:52:43:8f:e0:ad:2c:22:1e:71: 1a:4c:37:b4:6d:22:c9:3b:c1:09:cc:51:11:6c:2f: 90:1d:2f:37:39:64:8a:06:ca:a6:92:d2:a9:35:42: e9:b0:d3:23:b6:4c:db:9b:2e:4b:52:2f:4f:1a:64: 2d:53:a6:c3:6a:5b:53:f9:a4:26:ef:0d:17:3b:0c: 48:a2:5a:c7:58:a2:17:22:2f:5c:ae:45:4e:b8:72: 9f:31:29:59:54:6c:84:00:db:51:cf:c6:96:a8:8c: 7f:91:4f:34:51:a6:61:a4:75:a1:30:eb:6c:50:76: 0c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:1B:6B:25:5A:84:36:AE:46:6C:D5:14:CC:2D:5E:F5:9A:79:C6:F3 X509v3 Authority Key Identifier: keyid:17:27:9A:AD:17:DF:6B:F6:57:56:5A:E5:A9:3E:B9:09:85:37:4A:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:d7:18:ec:0f:8f:ac:dc:5f:db:08:d7:e7:9b:b2:af:ff:e8: 61:c4:80:f9:39:d7:f6:53:9e:f7:a0:ed:71:e3:f7:60:44:11: b9:ed:ed:d2:24:77:d6:6b:cf:b3:32:e1:a3:a8:4c:f3:e5:ab: 7a:45:de:b8:59:cb:26:e6:d1:37:93:a9:e0:3c:6c:74:6b:99: 80:d6:b4:35:d4:95:04:3d:f2:63:4a:53:d9:63:80:07:67:cb: c2:94:da:3b:42:ac:c2:f7:53:16:9d:39:52:56:cd:8d:81:03: 31:14:d3:02:0c:c3:a6:98:7b:70:57:60:02:fd:5c:04:7a:91: 95:f7:3e:82:97:36:63:36:17:40:c5:ae:c3:85:a1:54:71:33: 5f:a7:d4:dc:e8:66:81:ec:1a:c0:1a:d3:12:80:55:f8:1c:40: 7c:f1:dc:5c:0c:0f:44:87:3c:db:fe:d4:4a:9d:e2:5e:aa:69: 45:87:63:10:36:96:a7:28:0b:48:0e:c0:d9:dc:d4:fa:c2:db: 1d:96:9b:3e:97:7f:d0:fb:f5:1e:ea:47:c7:e4:27:e9:9c:3d: b7:ee:23:c4:ac:7a:e1:a7:0f:5d:42:71:04:eb:47:e9:33:e2: 12:24:d3:d9:90:c6:67:5d:78:33:74:e0:bc:ed:79:d9:85:ae: d6:33:41:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHEuaUd5dkUXlBbgyHWImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3Mjc5YWFkMTdkZjZiZjY1NzU2NWFlNWE5M2ViOTA5ODUz NzRhM2MwHhcNMjUxMjA2MTAwMTQ5WhcNMjUxMjA3MTAwMTQ5WjAzMTEwLwYDVQQD EyhjZTFiNmIyNTVhODQzNmFlNDY2Y2Q1MTRjYzJkNWVmNTlhNzljNmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBWB2xdZl86QoBg3JODW4wsR8MdX aJ2WR4h50FA8+UrmeMr6NmjIsJbkPhoLv/oEdz6k80/Luuk/OArJpL0n3AAIGCrD D4c2iZhnBIVNbIDl2VnlguYxmtuEH+GvYcHqtXbGcQgnMzuRd8lJuYnKOaq29ttX 3z1WBzQjW1dEk2jYeLW7eBsl52rifMhSQ4/grSwiHnEaTDe0bSLJO8EJzFERbC+Q HS83OWSKBsqmktKpNULpsNMjtkzbmy5LUi9PGmQtU6bDaltT+aQm7w0XOwxIolrH WKIXIi9crkVOuHKfMSlZVGyEANtRz8aWqIx/kU80UaZhpHWhMOtsUHYMwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4bayVahDauRmzVFMwtXvWaecbzMB8GA1UdIwQY MBaAFBcnmq0X32v2V1Za5ak+uQmFN0o8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnllYXJSZmZhX1pYVmxybHFUNjVDWVUzU2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81NGQ2Y2YtY2E4Yy00MmUwLWJkZmUt MWFlZWYzOWMyYjVjLzEvRnllYXJSZmZhX1pYVmxybHFUNjVDWVUzU2p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS81NGQ2Y2YtY2E4Yy00MmUwLWJkZmUtMWFlZWYzOWMyYjVj LzEvRnllYXJSZmZhX1pYVmxybHFUNjVDWVUzU2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo9cY7A+P rNxf2wjX55uyr//oYcSA+TnX9lOe96DtceP3YEQRue3t0iR31mvPszLho6hM8+Wr ekXeuFnLJubRN5Op4DxsdGuZgNa0NdSVBD3yY0pT2WOAB2fLwpTaO0KswvdTFp05 UlbNjYEDMRTTAgzDpph7cFdgAv1cBHqRlfc+gpc2YzYXQMWuw4WhVHEzX6fU3Ohm gewawBrTEoBV+BxAfPHcXAwPRIc82/7USp3iXqppRYdjEDaWpygLSA7A2dzU+sLb HZabPpd/0Pv1HupHx+Qn6Zw9t+4jxKx64acPXUJxBOtH6TPiEiTT2ZDGZ114M3Tg vO152YWu1jNBUg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:21 2025 by rpki-client