This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft File: FYlivF2icS8gj8ixXr3CRq9Mvs8.mft (raw, json) Hash identifier: L4XBVzQTg9c3bWZv+02ll/+R9fzKc0XfqBnqZDQiC6c= Subject key identifier: 63:91:8A:E8:54:15:D5:36:34:84:E8:15:F1:42:46:E5:FA:54:34:12 Authority key identifier: 15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF Certificate issuer: /CN=158962bc5da2712f208fc8b15ebdc246af4cbecf Certificate serial: 019B35A06B69DE416E28E1C554FC43B23263 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 08:01:04 +0000 Manifest this update: Fri 19 Dec 2025 08:01:04 +0000 Manifest next update: Sat 20 Dec 2025 08:01:04 +0000 Files and hashes: 1: 7yUkmk2a1THyX00hTlndTIVmtLc.roa (hash: aTNg1uSoSZtKZaAe8w+QZyL4kY8mBpAFfSDQeH8QdZ0=) 2: FYlivF2icS8gj8ixXr3CRq9Mvs8.crl (hash: RVKH0o4+Xs5MynsDb4D3RzUwp4glEY2lns0y4WNpNSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.crl rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:6b:69:de:41:6e:28:e1:c5:54:fc:43:b2:32:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158962bc5da2712f208fc8b15ebdc246af4cbecf Validity Not Before: Dec 19 08:01:04 2025 GMT Not After : Dec 20 08:01:04 2025 GMT Subject: CN=63918ae85415d5363484e815f14246e5fa543412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fe:a6:de:3e:f7:0e:17:67:ff:b8:87:eb:67: d9:54:3b:28:3f:25:fc:86:4f:c5:9e:4a:ec:e1:4e: 8b:33:94:25:4a:ec:b4:c9:14:0b:83:a4:c3:91:de: a1:53:08:08:06:25:f2:59:d5:4c:9a:99:52:aa:ea: 0d:45:ef:86:18:65:3a:f9:d8:aa:ee:df:c2:6a:a7: f2:9f:f1:e6:10:14:50:c9:c4:ea:b3:61:68:be:c3: e7:fb:4d:e8:e0:fc:9b:25:80:54:8e:23:ac:ac:af: 81:d2:1c:eb:79:8a:bf:81:00:f0:8c:d7:69:b8:ae: d2:b8:01:7b:c8:85:cd:36:da:84:63:ae:2d:06:d3: 5d:a1:df:2b:a8:34:37:08:a6:d8:ef:a3:0a:9b:ce: 1f:b8:57:db:1c:89:17:e8:6d:28:0d:22:01:15:7c: 03:d9:19:a0:02:21:42:0a:52:b9:8b:87:4c:8c:c7: c4:61:98:84:b7:19:4e:23:c5:07:78:a3:20:79:1f: 57:7f:f7:0c:06:5d:39:68:6b:cb:af:fd:b4:2a:de: d4:b5:69:54:26:e7:5a:f9:18:2b:11:4d:99:be:2f: 58:96:53:66:98:cd:97:ee:0f:62:3f:4d:99:33:de: 2e:f4:82:e6:ea:c8:b7:ed:92:37:6b:c2:c9:93:f1: 2a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:91:8A:E8:54:15:D5:36:34:84:E8:15:F1:42:46:E5:FA:54:34:12 X509v3 Authority Key Identifier: keyid:15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:55:e4:5c:0d:5a:18:6e:69:8b:9a:5f:d9:dc:f3:80:5e:36: 80:04:53:81:f7:0d:d6:cd:61:91:e9:d2:6f:28:1d:07:db:92: fe:f3:26:91:18:46:2a:f8:63:ed:1e:83:85:d6:73:72:9f:8e: 43:51:a8:9e:f6:c6:e6:95:09:e5:88:6a:59:15:53:c7:2c:60: ad:4e:16:46:09:9b:6a:c9:f9:7d:22:75:35:47:1d:72:e3:18: b9:bf:ac:a8:1c:9a:a6:c7:0d:86:55:df:c1:6a:d6:1a:3e:92: c5:7a:2d:7c:ec:70:75:63:8d:95:48:10:37:9d:e4:d2:13:3d: 96:d4:b4:7d:d8:f9:28:b2:6a:3b:82:14:31:a9:2b:9e:bf:27: 69:83:2b:17:0e:60:33:29:f4:50:5e:21:f8:6c:92:58:ca:c0: 65:00:5b:7f:d4:57:20:09:e3:ca:b4:16:59:1e:1c:35:62:d7: b0:bc:d4:0b:d5:bc:ef:f4:65:d1:ed:a4:35:d0:4a:e3:08:5c: 88:fb:ac:a2:cc:f7:e0:e0:fd:03:81:dc:12:f3:45:e7:c8:ad: c1:fb:61:e0:52:eb:e2:b2:e1:f8:cc:b0:ed:ce:36:fc:ac:50: 71:3e:89:8f:b5:ec:15:a4:de:98:d2:2d:07:bb:50:9f:02:18: 22:b3:f3:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oGtp3kFuKOHFVPxDsjJjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ODk2MmJjNWRhMjcxMmYyMDhmYzhiMTVlYmRjMjQ2YWY0 Y2JlY2YwHhcNMjUxMjE5MDgwMTA0WhcNMjUxMjIwMDgwMTA0WjAzMTEwLwYDVQQD Eyg2MzkxOGFlODU0MTVkNTM2MzQ4NGU4MTVmMTQyNDZlNWZhNTQzNDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/6m3j73Dhdn/7iH62fZVDsoPyX8 hk/Fnkrs4U6LM5QlSuy0yRQLg6TDkd6hUwgIBiXyWdVMmplSquoNRe+GGGU6+diq 7t/Caqfyn/HmEBRQycTqs2FovsPn+03o4PybJYBUjiOsrK+B0hzreYq/gQDwjNdp uK7SuAF7yIXNNtqEY64tBtNdod8rqDQ3CKbY76MKm84fuFfbHIkX6G0oDSIBFXwD 2RmgAiFCClK5i4dMjMfEYZiEtxlOI8UHeKMgeR9Xf/cMBl05aGvLr/20Kt7UtWlU Juda+RgrEU2Zvi9YllNmmM2X7g9iP02ZM94u9ILm6si37ZI3a8LJk/EqHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGORiuhUFdU2NIToFfFCRuX6VDQSMB8GA1UdIwQY MBaAFBWJYrxdonEvII/IsV69wkavTL7PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRllsaXZGMmljUzhnajhpeFhyM0NScTlNdnM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC81MWQ5OTktZGY2Yy00N2U4LThjMzUt NWE2MDEzMTAwNGU4LzEvRllsaXZGMmljUzhnajhpeFhyM0NScTlNdnM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC81MWQ5OTktZGY2Yy00N2U4LThjMzUtNWE2MDEzMTAwNGU4 LzEvRllsaXZGMmljUzhnajhpeFhyM0NScTlNdnM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglXkXA1a GG5pi5pf2dzzgF42gARTgfcN1s1hkenSbygdB9uS/vMmkRhGKvhj7R6DhdZzcp+O Q1GonvbG5pUJ5YhqWRVTxyxgrU4WRgmbasn5fSJ1NUcdcuMYub+sqByapscNhlXf wWrWGj6SxXotfOxwdWONlUgQN53k0hM9ltS0fdj5KLJqO4IUMakrnr8naYMrFw5g Myn0UF4h+GySWMrAZQBbf9RXIAnjyrQWWR4cNWLXsLzUC9W87/Rl0e2kNdBK4whc iPusosz34OD9A4HcEvNF58itwfth4FLr4rLh+Myw7c42/KxQcT6Jj7XsFaTemNIt B7tQnwIYIrPzjg== -----END CERTIFICATE-----Generated at Fri Dec 19 11:41:36 2025 by rpki-client