This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft File: FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft (raw, json) Hash identifier: obrn+8WRe67IHDGDUXVYyqTZw0JiHMlU2JKi5ru5T5g= Subject key identifier: 18:17:BC:79:E7:6B:3C:EF:E3:C5:9D:2B:0B:26:68:C3:52:49:1C:E1 Authority key identifier: 15:8D:2A:5F:52:CD:FF:15:AE:96:AC:5F:4C:97:61:0E:44:4B:62:B4 Certificate issuer: /CN=158d2a5f52cdff15ae96ac5f4c97610e444b62b4 Certificate serial: 019AF12EC565743E8B3B66F0E883B41F693F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft Manifest number: 36 Signing time: Sat 06 Dec 2025 01:02:45 +0000 Manifest this update: Sat 06 Dec 2025 01:02:45 +0000 Manifest next update: Sun 07 Dec 2025 01:02:45 +0000 Files and hashes: 1: 9TfeR_30HdflGM3xsr3vdtt0wxc.roa (hash: I0ktpU2S4wkVyCed3envFEYM53nS3HQyZq29EYOjDpg=) 2: FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl (hash: 1wLgY0k5gbSDRq2Wk1xYzLhGtXuf4nKjJ7b0j7Mqr60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:c5:65:74:3e:8b:3b:66:f0:e8:83:b4:1f:69:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d2a5f52cdff15ae96ac5f4c97610e444b62b4 Validity Not Before: Dec 6 01:02:45 2025 GMT Not After : Dec 7 01:02:45 2025 GMT Subject: CN=1817bc79e76b3cefe3c59d2b0b2668c352491ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c6:35:d9:57:52:26:62:2c:e2:33:dd:90:af: c6:82:88:99:a7:70:7e:0a:59:68:d0:69:2c:95:f1: 30:06:1e:86:e2:44:6e:ba:dd:ee:92:f2:a8:ff:bf: 37:83:65:4b:0b:18:7e:57:ed:35:15:6e:ae:45:0a: 0f:b5:7f:26:30:eb:6a:b1:02:2b:0b:de:54:f4:42: 47:c4:f2:f2:24:4f:bc:f3:5b:5e:07:dc:90:05:f2: 4b:46:6b:89:33:af:2f:af:81:b0:2f:af:16:7e:d5: b0:aa:bd:4b:01:55:c8:0e:f4:c1:47:34:0e:07:0f: 80:90:68:34:f3:e6:29:fb:7f:7a:d2:56:1a:16:31: fd:4b:82:8b:d2:99:19:15:7c:9d:e2:f1:90:5b:49: f2:51:0f:67:12:a9:1e:35:04:a6:6b:e5:75:80:f1: 92:62:79:c8:ef:b6:8e:29:59:c4:22:b1:8a:37:b1: e3:b6:cf:47:7d:55:57:8c:a8:bd:a4:fb:4b:a4:d6: b8:ee:98:1b:a9:e3:d2:fa:57:79:65:42:e7:17:e7: 7d:93:12:f1:56:eb:d7:67:e6:32:7d:96:65:f8:82: 5e:59:38:3c:2b:57:23:53:79:05:5e:e6:f8:92:30: bf:e5:e7:5e:d0:ed:d4:ff:77:13:b3:41:a3:02:f3: b3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:17:BC:79:E7:6B:3C:EF:E3:C5:9D:2B:0B:26:68:C3:52:49:1C:E1 X509v3 Authority Key Identifier: keyid:15:8D:2A:5F:52:CD:FF:15:AE:96:AC:5F:4C:97:61:0E:44:4B:62:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:47:e5:2f:ab:bb:b4:31:d1:42:a9:7b:e4:4f:64:35:49:77: 23:74:2c:2d:bc:bf:50:02:40:bb:ab:c3:b9:ed:c1:af:59:13: de:af:a4:43:70:fa:e5:e7:80:82:4f:8d:58:c9:d8:e8:3e:f1: d3:d3:4f:3f:1d:2a:b6:d0:68:0e:15:8c:f3:8b:1a:75:69:ef: 7a:1a:82:72:fc:43:89:3b:5c:fb:20:a0:42:04:a5:95:6f:10: 45:83:2b:53:5c:95:17:76:41:17:19:1c:a9:18:ae:93:98:de: 56:d0:61:c9:b9:3c:9c:e4:ca:2f:9b:b0:91:d6:61:35:e9:9f: f9:2f:0a:48:47:f2:73:7e:5a:f2:7e:20:e4:34:35:a4:90:04: e5:14:5e:c4:93:cb:a6:af:59:04:ec:6f:de:0f:2f:c0:0f:b9: c1:2a:47:24:a1:3b:40:bc:e6:39:69:0a:69:85:2a:e2:08:63: 3a:9e:ad:c9:62:3d:98:81:9b:89:f1:2e:17:f9:4b:7d:3a:ff: f5:4f:97:03:b1:8b:77:f0:33:fa:06:bf:13:01:6b:cb:39:80: c1:d3:02:86:72:9b:97:3f:e0:c7:15:89:d2:29:16:a8:3a:19: 2c:52:2b:81:f4:fe:d1:04:3d:a8:98:b8:e0:1a:1b:ee:14:49: fd:13:a8:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLsVldD6LO2bw6IO0H2k/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1OGQyYTVmNTJjZGZmMTVhZTk2YWM1ZjRjOTc2MTBlNDQ0 YjYyYjQwHhcNMjUxMjA2MDEwMjQ1WhcNMjUxMjA3MDEwMjQ1WjAzMTEwLwYDVQQD EygxODE3YmM3OWU3NmIzY2VmZTNjNTlkMmIwYjI2NjhjMzUyNDkxY2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMY12VdSJmIs4jPdkK/GgoiZp3B+ Cllo0GkslfEwBh6G4kRuut3ukvKo/783g2VLCxh+V+01FW6uRQoPtX8mMOtqsQIr C95U9EJHxPLyJE+881teB9yQBfJLRmuJM68vr4GwL68WftWwqr1LAVXIDvTBRzQO Bw+AkGg08+Yp+3960lYaFjH9S4KL0pkZFXyd4vGQW0nyUQ9nEqkeNQSma+V1gPGS YnnI77aOKVnEIrGKN7Hjts9HfVVXjKi9pPtLpNa47pgbqePS+ld5ZULnF+d9kxLx VuvXZ+YyfZZl+IJeWTg8K1cjU3kFXub4kjC/5ede0O3U/3cTs0GjAvOz4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgXvHnnazzv48WdKwsmaMNSSRzhMB8GA1UdIwQY MBaAFBWNKl9Szf8VrpasX0yXYQ5ES2K0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlkwcVgxTE5feFd1bHF4ZlRKZGhEa1JMWXJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wZTM2ZTYtZGZiNy00ZDAyLTgzYjAt NTYyNDk4YzY4YTc4LzEvRlkwcVgxTE5feFd1bHF4ZlRKZGhEa1JMWXJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8wZTM2ZTYtZGZiNy00ZDAyLTgzYjAtNTYyNDk4YzY4YTc4 LzEvRlkwcVgxTE5feFd1bHF4ZlRKZGhEa1JMWXJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0flL6u7 tDHRQql75E9kNUl3I3QsLby/UAJAu6vDue3Br1kT3q+kQ3D65eeAgk+NWMnY6D7x 09NPPx0qttBoDhWM84sadWnvehqCcvxDiTtc+yCgQgSllW8QRYMrU1yVF3ZBFxkc qRiuk5jeVtBhybk8nOTKL5uwkdZhNemf+S8KSEfyc35a8n4g5DQ1pJAE5RRexJPL pq9ZBOxv3g8vwA+5wSpHJKE7QLzmOWkKaYUq4ghjOp6tyWI9mIGbifEuF/lLfTr/ 9U+XA7GLd/Az+ga/EwFryzmAwdMChnKblz/gxxWJ0ikWqDoZLFIrgfT+0QQ9qJi4 4Bob7hRJ/ROoMA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:50 2025 by rpki-client