This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft File: FycWA_qPBq-kSoeCBl81-WWcft0.mft (raw, json) Hash identifier: 6FkRCyIjiPMP+JLhcpRyQtBfsI8kdnD809lkWW8FdcU= Subject key identifier: B4:41:23:8D:10:30:2B:36:78:89:05:BD:94:FE:CE:D8:1C:B8:20:F5 Authority key identifier: 17:27:16:03:FA:8F:06:AF:A4:4A:87:82:06:5F:35:F9:65:9C:7E:DD Certificate issuer: /CN=17271603fa8f06afa44a8782065f35f9659c7edd Certificate serial: 019B35A0A32741EDDBEFC67FB26C73DADD57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FycWA_qPBq-kSoeCBl81-WWcft0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft Manifest number: 0320 Signing time: Fri 19 Dec 2025 08:01:18 +0000 Manifest this update: Fri 19 Dec 2025 08:01:18 +0000 Manifest next update: Sat 20 Dec 2025 08:01:18 +0000 Files and hashes: 1: FycWA_qPBq-kSoeCBl81-WWcft0.crl (hash: C9Xt0U5sBejekLB4Kh3SmNjU7bNgNFG78hNH5lCNM3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft rsync://rpki.ripe.net/repository/DEFAULT/FycWA_qPBq-kSoeCBl81-WWcft0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:a3:27:41:ed:db:ef:c6:7f:b2:6c:73:da:dd:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17271603fa8f06afa44a8782065f35f9659c7edd Validity Not Before: Dec 19 08:01:18 2025 GMT Not After : Dec 20 08:01:18 2025 GMT Subject: CN=b441238d10302b36788905bd94feced81cb820f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:94:13:d6:d5:65:f2:5f:ee:80:50:25:16:45: 78:d7:49:b2:f3:62:e8:02:76:e8:bc:46:7b:e6:a9: 49:0d:97:2f:96:84:57:5a:29:d2:bc:27:49:5b:81: f9:c1:19:3d:68:93:ab:ee:ac:34:38:f0:74:b3:61: fa:66:86:c2:bc:cb:f9:4a:dd:73:13:b9:67:10:1e: 91:82:9f:5e:14:f5:78:83:e3:b3:0a:b8:f3:a7:19: 58:4a:fb:bb:e5:68:91:11:f9:ae:10:5f:f1:92:08: 44:23:fd:cb:de:19:28:5b:a1:d6:1b:12:d3:ce:a8: 65:4a:7b:54:c9:9e:2f:34:06:7e:1d:ad:c4:d5:f4: bb:d7:44:49:05:01:0c:6c:b3:8a:6c:27:92:51:29: 13:9e:bb:57:e1:50:24:00:f1:cf:8b:9b:c6:46:61: 49:c9:ad:e6:65:cd:b1:00:bd:f3:47:a2:9b:d1:28: ba:97:54:d0:d0:c2:e2:45:21:24:c9:ff:33:3e:2d: c5:11:81:ad:6c:e3:16:23:af:08:00:3c:46:f7:6f: 86:a5:4e:e7:e6:98:ab:a1:3f:cd:cd:97:95:4c:eb: b2:d1:74:0f:72:27:5f:a6:82:6b:ff:5c:d4:fb:23: 5f:9b:64:8b:59:25:5c:26:47:5c:da:7e:d6:6a:fd: 00:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:41:23:8D:10:30:2B:36:78:89:05:BD:94:FE:CE:D8:1C:B8:20:F5 X509v3 Authority Key Identifier: keyid:17:27:16:03:FA:8F:06:AF:A4:4A:87:82:06:5F:35:F9:65:9C:7E:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FycWA_qPBq-kSoeCBl81-WWcft0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:58:3b:05:08:4f:c4:ba:c4:54:7d:89:e3:f3:ec:87:75:4e: e1:3d:87:41:86:7a:d7:b4:c9:90:bd:c4:11:0a:dc:18:29:2b: a7:57:74:70:e4:47:73:92:cf:08:64:be:32:6b:47:7a:52:98: 8e:b8:bd:ec:b7:3d:07:8b:e9:cb:92:65:12:21:2e:6a:33:43: 12:6d:ca:6b:d3:fd:fd:56:fc:69:61:f4:67:b2:9d:e3:d6:93: db:32:8a:52:43:7e:cb:a0:5d:71:96:02:4b:d3:2d:0f:e1:e2: eb:cc:1e:dc:94:69:07:4f:08:39:8d:06:ea:ab:7f:05:69:ce: 5c:f5:a2:42:10:fc:ea:b2:3b:50:48:8e:3b:d9:b0:3f:ad:78: 19:c1:e2:79:96:22:04:18:1e:e1:69:e7:28:6f:d6:e9:5a:36: 54:c7:ed:1d:58:c7:72:c3:4e:12:2c:7f:51:d3:b3:80:7f:4a: 60:ef:43:2c:c0:9a:a7:61:0a:4b:03:ed:16:e7:7c:fd:04:af: f5:d4:ce:da:d1:fe:ae:95:cb:9f:d9:f6:e9:91:50:05:0a:d2: 1a:2a:78:54:31:2c:63:f0:3b:d5:60:ad:fb:4b:90:45:7c:27: 1e:62:a1:8f:5a:47:4d:29:0c:30:c8:12:ad:27:16:6a:01:e7: ac:07:8a:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oKMnQe3b78Z/smxz2t1XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MjcxNjAzZmE4ZjA2YWZhNDRhODc4MjA2NWYzNWY5NjU5 YzdlZGQwHhcNMjUxMjE5MDgwMTE4WhcNMjUxMjIwMDgwMTE4WjAzMTEwLwYDVQQD EyhiNDQxMjM4ZDEwMzAyYjM2Nzg4OTA1YmQ5NGZlY2VkODFjYjgyMGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5QT1tVl8l/ugFAlFkV410my82Lo AnbovEZ75qlJDZcvloRXWinSvCdJW4H5wRk9aJOr7qw0OPB0s2H6ZobCvMv5St1z E7lnEB6Rgp9eFPV4g+OzCrjzpxlYSvu75WiREfmuEF/xkghEI/3L3hkoW6HWGxLT zqhlSntUyZ4vNAZ+Ha3E1fS710RJBQEMbLOKbCeSUSkTnrtX4VAkAPHPi5vGRmFJ ya3mZc2xAL3zR6Kb0Si6l1TQ0MLiRSEkyf8zPi3FEYGtbOMWI68IADxG92+GpU7n 5piroT/NzZeVTOuy0XQPcidfpoJr/1zU+yNfm2SLWSVcJkdc2n7Wav0AuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRBI40QMCs2eIkFvZT+ztgcuCD1MB8GA1UdIwQY MBaAFBcnFgP6jwavpEqHggZfNfllnH7dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnljV0FfcVBCcS1rU29lQ0JsODEtV1djZnQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zN2U4ODQtYjk5ZS00Mjk4LTk3ODkt NTNjZTAxNjU1MzIyLzEvRnljV0FfcVBCcS1rU29lQ0JsODEtV1djZnQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zN2U4ODQtYjk5ZS00Mjk4LTk3ODktNTNjZTAxNjU1MzIy LzEvRnljV0FfcVBCcS1rU29lQ0JsODEtV1djZnQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlg7BQhP xLrEVH2J4/Psh3VO4T2HQYZ617TJkL3EEQrcGCkrp1d0cORHc5LPCGS+MmtHelKY jri97Lc9B4vpy5JlEiEuajNDEm3Ka9P9/Vb8aWH0Z7Kd49aT2zKKUkN+y6BdcZYC S9MtD+Hi68we3JRpB08IOY0G6qt/BWnOXPWiQhD86rI7UEiOO9mwP614GcHieZYi BBge4WnnKG/W6Vo2VMftHVjHcsNOEix/UdOzgH9KYO9DLMCap2EKSwPtFud8/QSv 9dTO2tH+rpXLn9n26ZFQBQrSGip4VDEsY/A71WCt+0uQRXwnHmKhj1pHTSkMMMgS rScWagHnrAeKeA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:51:42 2025 by rpki-client