This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
File: FYLuxLNHON9xjangFDqdDpJBqFw.mft (raw, json)
Hash identifier: 3ulpfEp5SpX5VDFcGJNyV4iWvQy4MsMOx6MI37B2Two=
Subject key identifier: 33:33:49:1A:2F:A7:19:A6:6E:32:55:ED:6C:F6:6D:75:4C:7D:37:D2
Authority key identifier: 15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C
Certificate issuer: /CN=1582eec4b34738df718da9e0143a9d0e9241a85c
Certificate serial: 019AF0BF448F597AF94C860FAEBC6B43CFFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
Manifest number: 1765
Signing time: Fri 05 Dec 2025 23:00:57 +0000
Manifest this update: Fri 05 Dec 2025 23:00:57 +0000
Manifest next update: Sat 06 Dec 2025 23:00:57 +0000
Files and hashes: 1: FYLuxLNHON9xjangFDqdDpJBqFw.crl (hash: tyzXaR9lu74Uv5edfYHvPskuv+FpL3eq2kV4Pj/6poA=)
2: k5ydTa5DTriL3x0F0EbNZljZ2r0.roa (hash: p8IHnKZdftXn56jD2pkT3j17kBY8BQWmijSx2NhIyvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 23:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f0:bf:44:8f:59:7a:f9:4c:86:0f:ae:bc:6b:43:cf:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1582eec4b34738df718da9e0143a9d0e9241a85c
Validity
Not Before: Dec 5 23:00:57 2025 GMT
Not After : Dec 6 23:00:57 2025 GMT
Subject: CN=3333491a2fa719a66e3255ed6cf66d754c7d37d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:63:3c:73:6e:76:de:5d:3c:ab:b8:04:57:24:
2e:e3:38:07:70:16:ab:c4:b3:a3:87:58:b5:ee:76:
f3:3a:26:94:13:d9:80:88:0d:0a:6c:44:3a:1a:36:
ee:6e:95:5c:8c:19:49:de:1c:28:17:1c:c8:ef:32:
ea:a4:7e:b1:f1:85:7f:67:f6:6a:2c:86:10:72:64:
60:16:36:a7:19:7f:02:29:da:12:27:03:af:05:6c:
14:7c:2d:6a:9d:2b:65:ef:33:fb:69:b4:8c:4f:44:
a3:38:0a:a3:f5:fb:e9:66:8c:70:12:20:ed:b9:83:
94:47:cc:97:ef:b3:6b:83:c4:d2:7f:d5:93:54:88:
da:a8:ea:33:00:7b:1c:7b:aa:2c:2b:8b:0a:c9:a3:
c5:87:77:15:48:03:06:f3:c0:54:fb:14:3e:8a:b2:
47:15:49:91:c0:3a:53:d6:81:80:23:04:1c:da:47:
bd:5d:ac:fc:ad:61:ff:65:7d:2d:6a:24:ca:c3:f2:
94:65:69:40:6e:03:c2:34:84:85:b1:79:94:eb:f6:
f5:ea:13:45:bd:05:e6:18:8d:a7:7f:26:82:63:71:
84:e3:7d:5d:a7:dc:46:93:f8:e0:61:24:10:e0:0c:
39:50:d0:fa:a2:e7:b4:f7:75:a1:3d:f4:10:5a:bb:
06:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:33:49:1A:2F:A7:19:A6:6E:32:55:ED:6C:F6:6D:75:4C:7D:37:D2
X509v3 Authority Key Identifier:
keyid:15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9a:fd:9f:2a:d7:63:0d:47:ec:be:95:f8:10:29:92:59:5d:
2b:e6:0c:af:37:e1:53:dc:8d:9d:af:97:0a:fb:4c:2f:e4:05:
2b:fb:bc:18:09:09:c8:35:20:39:90:04:28:d9:84:14:10:3f:
5c:dc:66:2e:7b:e1:88:d2:d6:71:98:b2:c9:92:0e:ba:67:15:
c9:a5:84:00:81:ff:aa:c8:28:e7:b9:d9:e8:f9:d9:ad:69:2c:
3e:74:b5:01:99:33:70:0e:6d:e9:cc:24:f8:41:2d:bf:e9:b1:
98:f9:09:b5:53:73:55:4f:34:39:b2:cb:a6:95:a6:48:94:0b:
7f:aa:2f:98:ca:38:f4:92:2a:91:ac:bd:08:53:81:73:fe:23:
2f:5c:83:e4:aa:2d:91:2c:39:1f:e7:91:63:61:57:51:45:50:
8c:c7:bc:ca:09:49:18:ea:3e:be:70:c7:b6:b3:70:16:b0:d0:
b5:fe:ff:7e:cc:b7:eb:27:25:05:1d:2e:c1:fe:a2:10:02:fa:
a9:b6:cd:e4:c1:a9:d7:88:1f:97:4b:0d:b9:52:84:52:20:f5:
15:16:58:f3:16:2d:b4:c0:11:e3:62:72:c2:9c:2f:6b:c5:fb:
88:26:52:35:95:63:7d:f9:bb:43:f5:ac:d4:b7:cb:01:a9:02:
cd:18:7f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:22:59 2025 by rpki-client