This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft File: FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft (raw, json) Hash identifier: Xj2TiNRmWFi7zTTRiwv3p4Un7VJTNfYU3ONVwH1c1+8= Subject key identifier: 3C:84:2C:2E:CB:DA:3F:E2:9C:2D:A9:9E:82:3E:CB:01:73:BD:AB:9A Authority key identifier: 17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B Certificate issuer: /CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b Certificate serial: 019B33E88BC1B2B876E3EC8C40C4DE0E704B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft Manifest number: 0FF7 Signing time: Fri 19 Dec 2025 00:00:36 +0000 Manifest this update: Fri 19 Dec 2025 00:00:36 +0000 Manifest next update: Sat 20 Dec 2025 00:00:36 +0000 Files and hashes: 1: FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl (hash: 8daR/LSd6f73Rn/OSNTTIHuR5g6Ewvy4gwdNIFMZWTo=) 2: f0fm_m6mqyncGFPg2zPkibsoBcI.roa (hash: R5AqcJr/crlHYVpexq/9b2IVn+Dod1jCAKFqkiICDJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:8b:c1:b2:b8:76:e3:ec:8c:40:c4:de:0e:70:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b Validity Not Before: Dec 19 00:00:36 2025 GMT Not After : Dec 20 00:00:36 2025 GMT Subject: CN=3c842c2ecbda3fe29c2da99e823ecb0173bdab9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:82:be:d5:de:85:4e:64:22:13:24:b4:91:ec: a6:c9:e5:4a:4b:9c:d6:0e:22:6a:c0:3a:2e:2c:0c: cb:98:26:f9:6d:0f:85:fd:28:92:9e:c0:9a:a2:29: c6:e0:a8:ae:1a:96:4d:41:81:ee:b7:82:22:4b:fd: 5a:21:d7:0b:6f:c0:33:b4:5f:16:68:ac:96:8d:4c: e3:29:96:71:2b:6b:29:63:b1:5b:a5:44:ad:fd:7c: d4:67:e6:5a:8d:44:fb:0e:15:6c:e2:41:2c:a5:6c: 60:58:ae:54:4e:6c:0b:43:23:e1:78:ec:06:5c:ec: 12:b2:9c:72:90:79:7a:d9:c6:12:e4:b0:3c:81:81: 8b:91:ee:83:7e:d0:f0:7b:56:51:6a:47:36:90:94: 1b:b4:3d:ef:77:47:8a:2b:a7:de:76:e5:d8:0c:74: ee:5f:87:cb:b8:9d:47:8d:84:d3:60:6d:57:ea:95: 3d:26:53:1f:ad:7c:fb:a9:5c:1d:09:f0:bc:89:f0: e3:4b:e9:80:2b:03:92:51:fb:1f:17:b2:73:b6:3a: 35:8b:1e:ed:14:de:7f:26:6e:8b:d0:57:1b:9a:34: 18:a0:cf:c1:52:44:8f:4a:a3:4f:57:b3:4f:37:fd: 74:18:92:1a:70:b8:58:e6:83:20:fc:78:2c:bd:eb: 93:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:84:2C:2E:CB:DA:3F:E2:9C:2D:A9:9E:82:3E:CB:01:73:BD:AB:9A X509v3 Authority Key Identifier: keyid:17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:43:43:f5:13:43:f9:67:49:74:40:c3:ab:09:26:b2:37:83: 8d:00:3d:ad:83:9f:4a:4a:75:82:bb:58:a1:9a:35:93:2d:7b: f9:63:eb:e0:1b:d4:06:99:68:c7:e8:e4:6b:1a:dd:b5:16:c9: 4b:83:69:c4:3e:ee:5d:bb:24:93:55:8a:8f:49:42:1a:46:62: 91:c8:7a:85:8b:ce:82:ee:d9:8d:d0:3f:7b:a6:8e:aa:55:0f: 12:c4:84:15:b3:93:9d:85:46:97:6b:e4:d4:96:2c:fb:49:15: 8e:89:ae:76:0d:f2:f6:ce:e5:61:94:d0:3a:17:3b:61:76:c4: 45:e4:c3:9e:32:4c:cd:3a:a1:14:b3:19:f3:3e:0c:e2:ef:58: 87:d4:7c:08:73:27:f4:25:3b:21:bb:d8:cf:12:15:50:50:a6: 43:07:34:9f:b1:fd:89:a5:aa:f7:7a:24:84:64:2c:1f:95:68: f3:d4:82:d8:57:e7:04:c5:88:e4:94:ad:c4:87:f2:7f:d5:ed: b3:e3:ca:05:15:ce:3c:aa:83:22:d5:da:99:bb:85:68:8a:28: 33:ec:d7:5f:cd:6d:9b:1f:02:e5:e4:d3:49:56:90:ef:49:32: a8:de:93:25:c5:ad:c1:d8:25:1e:0c:85:24:cf:3c:49:3b:17: 55:7d:b0:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6IvBsrh24+yMQMTeDnBLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MjJlOTY3OGZiMGQ0MTRkMmRkZmJkMjQyMGM0Yzc0ODI2 M2YzNGIwHhcNMjUxMjE5MDAwMDM2WhcNMjUxMjIwMDAwMDM2WjAzMTEwLwYDVQQD EygzYzg0MmMyZWNiZGEzZmUyOWMyZGE5OWU4MjNlY2IwMTczYmRhYjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoK+1d6FTmQiEyS0keymyeVKS5zW DiJqwDouLAzLmCb5bQ+F/SiSnsCaoinG4KiuGpZNQYHut4IiS/1aIdcLb8AztF8W aKyWjUzjKZZxK2spY7FbpUSt/XzUZ+ZajUT7DhVs4kEspWxgWK5UTmwLQyPheOwG XOwSspxykHl62cYS5LA8gYGLke6DftDwe1ZRakc2kJQbtD3vd0eKK6feduXYDHTu X4fLuJ1HjYTTYG1X6pU9JlMfrXz7qVwdCfC8ifDjS+mAKwOSUfsfF7Jztjo1ix7t FN5/Jm6L0FcbmjQYoM/BUkSPSqNPV7NPN/10GJIacLhY5oMg/HgsveuTCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyELC7L2j/inC2pnoI+ywFzvauaMB8GA1UdIwQY MBaAFBci6WePsNQU0t370kIMTHSCY/NLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnlMcFo0LXcxQlRTM2Z2U1FneE1kSUpqODBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hNmUxYjUtZTc4MS00MDE4LTk2MGIt ODhjOTUxY2VlNzg0LzEvRnlMcFo0LXcxQlRTM2Z2U1FneE1kSUpqODBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9hNmUxYjUtZTc4MS00MDE4LTk2MGItODhjOTUxY2VlNzg0 LzEvRnlMcFo0LXcxQlRTM2Z2U1FneE1kSUpqODBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkND9RND +WdJdEDDqwkmsjeDjQA9rYOfSkp1grtYoZo1ky17+WPr4BvUBplox+jkaxrdtRbJ S4NpxD7uXbskk1WKj0lCGkZikch6hYvOgu7ZjdA/e6aOqlUPEsSEFbOTnYVGl2vk 1JYs+0kVjomudg3y9s7lYZTQOhc7YXbEReTDnjJMzTqhFLMZ8z4M4u9Yh9R8CHMn 9CU7IbvYzxIVUFCmQwc0n7H9iaWq93okhGQsH5Vo89SC2FfnBMWI5JStxIfyf9Xt s+PKBRXOPKqDItXambuFaIooM+zXX81tmx8C5eTTSVaQ70kyqN6TJcWtwdglHgyF JM88STsXVX2wDQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:17:50 2025 by rpki-client