This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft File: f_yCWF32m3yUsWphky_8i24zUVY.mft (raw, json) Hash identifier: 5P1Wd6ZNhQhCflrFtY+qj2z8tdpa0bxDE6UcuHA5N7g= Subject key identifier: 43:77:CB:39:A6:A4:66:AE:5C:2C:D6:D3:F6:D8:A2:02:B7:67:0B:3C Authority key identifier: 7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56 Certificate issuer: /CN=7ffc82585df69b7c94b16a61932ffc8b6e335156 Certificate serial: 019AF12EAEBF4CF42A9F5ED124C41C61CE78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft Manifest number: 1338 Signing time: Sat 06 Dec 2025 01:02:39 +0000 Manifest this update: Sat 06 Dec 2025 01:02:39 +0000 Manifest next update: Sun 07 Dec 2025 01:02:39 +0000 Files and hashes: 1: bycUBAAoDdbd3Ywhozb1CxrNJmI.roa (hash: gkAbagnCg3V8VsJYqOkif+2HaGxRFUxkzvPVmQ5dGYs=) 2: f_yCWF32m3yUsWphky_8i24zUVY.crl (hash: u4dk3b7+tbWwhJh0hoooKT63G7t2zk5M3WaEpndmTwI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ae:bf:4c:f4:2a:9f:5e:d1:24:c4:1c:61:ce:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ffc82585df69b7c94b16a61932ffc8b6e335156 Validity Not Before: Dec 6 01:02:39 2025 GMT Not After : Dec 7 01:02:39 2025 GMT Subject: CN=4377cb39a6a466ae5c2cd6d3f6d8a202b7670b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a5:a0:2e:fc:cb:24:d4:0f:88:d1:c9:d7:55: af:03:ff:ac:c3:3f:88:28:7e:d9:1c:99:9b:f0:d6: 4f:cf:32:b9:5b:c2:64:d5:fb:53:bf:04:fc:21:ff: fd:96:4e:a7:8a:47:9d:f9:4a:72:b6:15:4f:c3:0f: ad:92:08:cc:0d:30:05:52:92:af:83:ea:e3:1a:a2: 6a:17:d8:46:1a:6d:cb:7f:1a:93:a5:7b:52:1f:96: e9:61:2c:43:8e:4f:32:6c:43:a6:64:c3:fb:b7:a0: 42:13:f9:43:38:93:68:cf:4e:23:f1:1e:de:70:ca: f3:ed:63:fe:54:ff:22:d9:09:dd:d4:3b:e5:95:77: 17:19:20:8f:79:c0:b6:ac:33:df:58:cd:75:c0:ab: 65:82:eb:22:8c:82:74:b5:57:d9:84:2f:fd:93:e7: 4a:aa:c6:f5:ae:76:8c:02:4f:2c:d3:e2:cd:f5:dc: b0:c0:3f:9d:8a:0c:90:d3:8d:9f:96:02:0b:3a:ac: 9c:2f:23:5e:88:ec:e5:6d:4d:24:10:13:d6:fd:2a: 71:5c:40:2d:ec:87:8b:8f:23:14:bc:47:a8:8b:ec: 8e:1b:1b:30:1f:ec:ab:9b:6f:1e:8c:46:c7:7f:bf: 07:04:5c:a0:f6:63:f7:4a:25:2c:3f:49:2d:25:cf: b0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:77:CB:39:A6:A4:66:AE:5C:2C:D6:D3:F6:D8:A2:02:B7:67:0B:3C X509v3 Authority Key Identifier: keyid:7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:2b:bf:2b:6e:d2:68:2c:23:1d:17:6d:51:5e:6c:50:58:39: f0:bf:68:2b:a9:3b:b6:04:c6:22:04:f2:f0:58:1a:b8:10:19: a6:dc:14:ff:a2:79:97:62:e2:71:dc:32:5d:5a:15:41:35:8b: 2b:55:c9:96:04:b4:0a:5d:61:6d:ef:b7:c7:ee:44:98:d1:19: 96:b9:cd:dc:9c:fb:dc:4d:e3:03:22:48:6a:ee:6f:de:b3:76: 84:91:f7:99:9c:99:80:57:79:ec:f1:1c:78:66:33:77:38:32: a4:8d:c4:aa:f8:99:80:08:6b:25:2b:2e:fa:7c:f9:c2:71:c3: bb:e7:32:cc:88:9e:20:d2:33:28:53:e8:be:1f:64:dd:d4:2d: f6:9f:00:31:72:c0:d4:2a:b9:df:24:6a:fc:f7:5c:ef:73:18: 76:c2:24:95:6c:61:71:cb:00:d3:5e:2f:58:9f:4d:48:82:d6: 2d:73:4b:e4:c6:45:8e:90:08:c5:6a:2e:4e:97:b0:44:75:9d: 61:a6:68:08:70:54:ae:67:25:08:6b:7f:5e:a7:c2:0a:2c:07: 71:7a:fb:27:01:fb:b6:ec:bb:61:ae:ee:d1:03:4d:6c:b2:95: 52:6b:e6:ae:c2:04:b8:ea:74:94:04:3c:b4:7b:44:b5:4c:3a: 5f:f7:0e:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLq6/TPQqn17RJMQcYc54MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZmM4MjU4NWRmNjliN2M5NGIxNmE2MTkzMmZmYzhiNmUz MzUxNTYwHhcNMjUxMjA2MDEwMjM5WhcNMjUxMjA3MDEwMjM5WjAzMTEwLwYDVQQD Eyg0Mzc3Y2IzOWE2YTQ2NmFlNWMyY2Q2ZDNmNmQ4YTIwMmI3NjcwYjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaWgLvzLJNQPiNHJ11WvA/+swz+I KH7ZHJmb8NZPzzK5W8Jk1ftTvwT8If/9lk6niked+UpythVPww+tkgjMDTAFUpKv g+rjGqJqF9hGGm3LfxqTpXtSH5bpYSxDjk8ybEOmZMP7t6BCE/lDOJNoz04j8R7e cMrz7WP+VP8i2Qnd1DvllXcXGSCPecC2rDPfWM11wKtlgusijIJ0tVfZhC/9k+dK qsb1rnaMAk8s0+LN9dywwD+digyQ042flgILOqycLyNeiOzlbU0kEBPW/SpxXEAt 7IeLjyMUvEeoi+yOGxswH+yrm28ejEbHf78HBFyg9mP3SiUsP0ktJc+wDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEN3yzmmpGauXCzW0/bYogK3Zws8MB8GA1UdIwQY MBaAFH/8glhd9pt8lLFqYZMv/ItuM1FWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZl95Q1dGMzJtM3lVc1dwaGt5XzhpMjR6VVZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC81MzFkMmItZTE3MC00OWE1LTg0MDQt OTJmNzNmNTZmYzYyLzEvZl95Q1dGMzJtM3lVc1dwaGt5XzhpMjR6VVZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC81MzFkMmItZTE3MC00OWE1LTg0MDQtOTJmNzNmNTZmYzYy LzEvZl95Q1dGMzJtM3lVc1dwaGt5XzhpMjR6VVZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMiu/K27S aCwjHRdtUV5sUFg58L9oK6k7tgTGIgTy8FgauBAZptwU/6J5l2LicdwyXVoVQTWL K1XJlgS0Cl1hbe+3x+5EmNEZlrnN3Jz73E3jAyJIau5v3rN2hJH3mZyZgFd57PEc eGYzdzgypI3EqviZgAhrJSsu+nz5wnHDu+cyzIieINIzKFPovh9k3dQt9p8AMXLA 1Cq53yRq/Pdc73MYdsIklWxhccsA014vWJ9NSILWLXNL5MZFjpAIxWouTpewRHWd YaZoCHBUrmclCGt/XqfCCiwHcXr7JwH7tuy7Ya7u0QNNbLKVUmvmrsIEuOp0lAQ8 tHtEtUw6X/cOZA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:05 2025 by rpki-client