This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft File: FyROqUT-mGNME2MDjuMdVDVpkmE.mft (raw, json) Hash identifier: eozjBXvwJJ/rm9vD4hScxFwu1ziNmlDn2qgIvXSqHA0= Subject key identifier: 2F:5D:9E:0A:0D:93:05:28:DC:A0:5B:B2:AE:3B:B8:C3:E1:0F:2F:9F Authority key identifier: 17:24:4E:A9:44:FE:98:63:4C:13:63:03:8E:E3:1D:54:35:69:92:61 Certificate issuer: /CN=17244ea944fe98634c1363038ee31d5435699261 Certificate serial: 019AF23F6FD56552CC481F33DE53D58B5741 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft Manifest number: 0355 Signing time: Sat 06 Dec 2025 06:00:34 +0000 Manifest this update: Sat 06 Dec 2025 06:00:34 +0000 Manifest next update: Sun 07 Dec 2025 06:00:34 +0000 Files and hashes: 1: FyROqUT-mGNME2MDjuMdVDVpkmE.crl (hash: cVkmrcLWzcyt924c+nAoRBjvuHHA8T5LPgfaUpgYK5w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:6f:d5:65:52:cc:48:1f:33:de:53:d5:8b:57:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17244ea944fe98634c1363038ee31d5435699261 Validity Not Before: Dec 6 06:00:34 2025 GMT Not After : Dec 7 06:00:34 2025 GMT Subject: CN=2f5d9e0a0d930528dca05bb2ae3bb8c3e10f2f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:53:e1:be:2b:fd:ba:38:5b:f5:87:d9:eb:bd: 71:b2:46:a6:61:a0:6b:25:c7:80:41:65:7f:76:29: 46:a8:67:74:56:09:8a:39:85:55:8a:9c:f0:af:27: 90:84:c6:f1:66:5a:b4:70:fe:5b:8c:3a:e6:24:e3: a0:c0:c5:a8:3f:01:9f:02:64:a4:3c:91:36:e8:76: ee:9c:12:a2:73:8a:91:51:04:7d:b1:54:ad:c2:02: 18:3b:d9:c3:e4:2f:df:83:78:4a:cf:45:ce:bf:ba: 7f:20:67:62:ab:b8:5f:dd:3e:07:7e:de:78:ee:b4: 8e:0d:38:76:15:73:c6:7e:d1:3b:dc:35:ef:e9:5c: 23:3c:8d:1d:db:6d:a6:8c:cb:e0:b8:38:19:78:1a: 1f:a5:23:7e:dd:1b:e9:b3:97:93:28:cc:21:c7:ee: e2:9d:cb:6f:bf:85:ae:fe:78:97:88:b8:b0:fc:a7: e7:b2:18:99:bd:4f:5c:e5:7a:62:84:8e:14:57:c5: 63:f6:74:da:92:e9:41:13:7d:89:48:a1:a6:28:be: ac:29:0a:98:eb:d6:c7:b8:67:67:ac:00:c6:66:ef: 7e:dc:be:b6:45:8d:16:5e:6e:d2:fb:b2:4a:02:e7: 55:97:5a:cb:59:e5:b7:d9:cf:09:17:f6:16:78:c9: 6e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:5D:9E:0A:0D:93:05:28:DC:A0:5B:B2:AE:3B:B8:C3:E1:0F:2F:9F X509v3 Authority Key Identifier: keyid:17:24:4E:A9:44:FE:98:63:4C:13:63:03:8E:E3:1D:54:35:69:92:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:58:f5:09:c9:89:82:c5:96:66:c6:ec:ad:db:46:ac:d0:67: 0d:db:c8:c7:40:33:13:9f:ab:8d:c5:7d:6c:b6:f7:0a:2b:87: aa:23:93:67:42:73:3b:69:af:f0:42:49:20:2c:62:ae:91:dd: ac:0c:97:8b:87:50:b6:8d:57:fa:e7:c8:15:fc:03:dc:d0:37: 01:7b:a9:b0:3e:5a:40:e8:36:fa:45:71:97:c4:05:f8:ee:2d: 3f:ff:7e:61:84:fb:c9:5f:60:35:bf:60:bb:b7:d5:06:8e:5d: 33:6b:72:3c:35:40:fc:ee:0e:79:21:c2:b0:07:45:0c:7f:73: de:c5:42:8b:93:b0:57:61:ce:00:c2:1f:e3:26:5f:d4:ec:9a: c7:e7:a3:03:99:a9:a0:c7:06:87:a2:da:6b:77:5b:bb:7b:7e: 6d:70:c9:98:37:9f:4c:7b:3e:29:f7:08:cc:20:86:54:d4:01: 41:d3:da:5e:c8:d5:fc:f0:8f:9c:72:c4:64:ab:31:ea:ce:a3: c5:58:aa:84:76:08:e3:3d:1b:0e:f8:24:f5:f1:de:8c:5d:43: 83:df:97:5b:0c:2a:9f:fc:ae:c0:f2:f9:5d:05:6b:ff:54:24: f7:1b:01:5b:a7:c9:80:09:a2:4e:f4:53:52:85:f0:73:6e:e1: fc:2a:ee:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2/VZVLMSB8z3lPVi1dBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MjQ0ZWE5NDRmZTk4NjM0YzEzNjMwMzhlZTMxZDU0MzU2 OTkyNjEwHhcNMjUxMjA2MDYwMDM0WhcNMjUxMjA3MDYwMDM0WjAzMTEwLwYDVQQD EygyZjVkOWUwYTBkOTMwNTI4ZGNhMDViYjJhZTNiYjhjM2UxMGYyZjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VPhviv9ujhb9YfZ671xskamYaBr JceAQWV/dilGqGd0VgmKOYVVipzwryeQhMbxZlq0cP5bjDrmJOOgwMWoPwGfAmSk PJE26HbunBKic4qRUQR9sVStwgIYO9nD5C/fg3hKz0XOv7p/IGdiq7hf3T4Hft54 7rSODTh2FXPGftE73DXv6VwjPI0d222mjMvguDgZeBofpSN+3Rvps5eTKMwhx+7i nctvv4Wu/niXiLiw/KfnshiZvU9c5XpihI4UV8Vj9nTakulBE32JSKGmKL6sKQqY 69bHuGdnrADGZu9+3L62RY0WXm7S+7JKAudVl1rLWeW32c8JF/YWeMluywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9dngoNkwUo3KBbsq47uMPhDy+fMB8GA1UdIwQY MBaAFBckTqlE/phjTBNjA47jHVQ1aZJhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnlST3FVVC1tR05NRTJNRGp1TWRWRFZwa21FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS84NzJhNDQtMTMyYS00ZTk3LTgyMjkt ZTI2ZGViM2JiZGMyLzEvRnlST3FVVC1tR05NRTJNRGp1TWRWRFZwa21FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS84NzJhNDQtMTMyYS00ZTk3LTgyMjktZTI2ZGViM2JiZGMy LzEvRnlST3FVVC1tR05NRTJNRGp1TWRWRFZwa21FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVj1CcmJ gsWWZsbsrdtGrNBnDdvIx0AzE5+rjcV9bLb3CiuHqiOTZ0JzO2mv8EJJICxirpHd rAyXi4dQto1X+ufIFfwD3NA3AXupsD5aQOg2+kVxl8QF+O4tP/9+YYT7yV9gNb9g u7fVBo5dM2tyPDVA/O4OeSHCsAdFDH9z3sVCi5OwV2HOAMIf4yZf1Oyax+ejA5mp oMcGh6Laa3dbu3t+bXDJmDefTHs+KfcIzCCGVNQBQdPaXsjV/PCPnHLEZKsx6s6j xViqhHYI4z0bDvgk9fHejF1Dg9+XWwwqn/yuwPL5XQVr/1Qk9xsBW6fJgAmiTvRT UoXwc27h/CrumQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:08 2025 by rpki-client