This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft File: fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft (raw, json) Hash identifier: zQHpsW9lWDE6A1HzCn0SyKnOf64acQmraAFfw+XYFUI= Subject key identifier: FC:D9:5F:81:DA:C9:76:98:C5:01:C3:D3:C7:CC:42:AE:FB:17:95:E4 Authority key identifier: 7F:2A:32:BA:42:19:68:0D:CD:D5:8F:61:01:E5:C7:AE:C1:54:0A:73 Certificate issuer: /CN=7f2a32ba4219680dcdd58f6101e5c7aec1540a73 Certificate serial: 019B6AD7A87693ABE21CD2B963F69721DDE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft Manifest number: 17A0 Signing time: Mon 29 Dec 2025 16:01:16 +0000 Manifest this update: Mon 29 Dec 2025 16:01:16 +0000 Manifest next update: Tue 30 Dec 2025 16:01:16 +0000 Files and hashes: 1: SpkdakB2OdIuVE348-y165owlz0.roa (hash: BnmPz2hkeMhPxWlEoJOTembsWZqO80f/J+3uznzMlq8=) 2: fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl (hash: OegoDIK3nX6Jnbxhuy8kwyajW/VULUA33WJrLfH17iY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 16:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d7:a8:76:93:ab:e2:1c:d2:b9:63:f6:97:21:dd:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f2a32ba4219680dcdd58f6101e5c7aec1540a73 Validity Not Before: Dec 29 16:01:16 2025 GMT Not After : Dec 30 16:01:16 2025 GMT Subject: CN=fcd95f81dac97698c501c3d3c7cc42aefb1795e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ac:a3:72:99:77:64:0a:4b:ca:a3:ee:e7:e3: 6e:db:be:67:93:1b:d1:b3:10:26:6a:5d:7b:7c:39: 9b:f3:a4:d7:50:f1:e2:29:0d:58:57:c2:1f:5a:8a: ac:84:30:1b:ef:88:b7:31:23:69:62:f6:35:47:d6: 9b:59:3e:6b:d0:8d:49:a1:51:df:d3:f5:65:3e:9c: 57:c7:00:73:88:60:39:05:05:fb:8a:b4:22:9f:e2: c1:7c:b9:57:7c:65:e8:7d:42:62:a1:cf:f5:77:f6: f6:30:e7:67:c2:0b:7d:10:89:c2:34:41:f7:3b:8e: 64:b5:e8:e4:06:c8:4f:91:bb:07:85:f3:6c:ea:d7: 2c:45:2a:51:1e:5d:1e:50:4d:fb:2f:d4:24:d2:db: 09:25:74:e7:ea:30:6e:42:61:55:97:75:ba:49:c5: 23:21:47:16:9d:9c:2e:88:cd:92:38:6d:de:00:e3: 9b:04:53:45:54:ab:4d:13:d9:b8:12:97:8a:92:38: f0:67:66:2f:2d:1d:82:e1:4a:99:b8:e6:df:37:d0: 49:9f:10:38:c3:8d:73:e4:d6:24:01:72:3d:bc:0b: 20:6d:eb:2f:2c:1d:1c:4e:ea:ad:eb:08:14:bc:12: 97:33:27:35:5d:88:9a:91:fe:d0:e9:a0:bd:92:c1: 2b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D9:5F:81:DA:C9:76:98:C5:01:C3:D3:C7:CC:42:AE:FB:17:95:E4 X509v3 Authority Key Identifier: keyid:7F:2A:32:BA:42:19:68:0D:CD:D5:8F:61:01:E5:C7:AE:C1:54:0A:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:69:df:1b:87:dc:10:3d:14:ed:58:b2:1f:3d:e9:ab:55:17: a8:25:dc:3f:54:43:dd:ce:8a:c3:67:14:ac:18:b4:e6:f8:09: 27:01:fb:e0:24:ca:c9:4a:f0:5c:2d:34:24:31:01:30:06:3b: 8a:ca:8a:b7:fd:26:02:50:31:53:3c:0f:55:60:78:fc:54:3d: a3:10:14:12:0b:5f:2e:72:d5:28:73:23:0e:69:df:48:ff:e0: 1e:2d:c3:41:3f:aa:a7:88:fd:72:a0:89:1f:99:a0:81:dd:ee: b9:b5:16:4b:f1:38:f7:e3:e6:c1:12:e6:9a:54:c5:e3:cf:18: 58:e5:48:81:a7:14:c0:33:33:d8:ba:bd:34:f3:de:9a:d1:5e: 68:35:08:bc:2e:a5:7d:2c:61:68:3a:84:55:cf:3c:45:92:5e: 02:b9:b8:d6:18:a4:14:4b:e3:e8:dd:25:f9:df:36:35:18:13: 60:bb:5a:99:16:82:94:02:73:c7:fc:26:c3:8b:db:53:48:dd: eb:64:1a:25:f0:65:b4:4c:56:88:ad:46:66:90:2d:5c:90:ad: ea:8c:fd:07:c5:3d:2f:f4:5a:09:bd:bc:44:de:52:c1:b5:32: 43:de:60:14:a6:14:fc:50:0f:68:fa:bf:ab:f1:83:82:0d:6e: c5:8e:68:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq16h2k6viHNK5Y/aXId3hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMmEzMmJhNDIxOTY4MGRjZGQ1OGY2MTAxZTVjN2FlYzE1 NDBhNzMwHhcNMjUxMjI5MTYwMTE2WhcNMjUxMjMwMTYwMTE2WjAzMTEwLwYDVQQD EyhmY2Q5NWY4MWRhYzk3Njk4YzUwMWMzZDNjN2NjNDJhZWZiMTc5NWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnayjcpl3ZApLyqPu5+Nu275nkxvR sxAmal17fDmb86TXUPHiKQ1YV8IfWoqshDAb74i3MSNpYvY1R9abWT5r0I1JoVHf 0/VlPpxXxwBziGA5BQX7irQin+LBfLlXfGXofUJioc/1d/b2MOdnwgt9EInCNEH3 O45ktejkBshPkbsHhfNs6tcsRSpRHl0eUE37L9Qk0tsJJXTn6jBuQmFVl3W6ScUj IUcWnZwuiM2SOG3eAOObBFNFVKtNE9m4EpeKkjjwZ2YvLR2C4UqZuObfN9BJnxA4 w41z5NYkAXI9vAsgbesvLB0cTuqt6wgUvBKXMyc1XYiakf7Q6aC9ksErKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzZX4HayXaYxQHD08fMQq77F5XkMB8GA1UdIwQY MBaAFH8qMrpCGWgNzdWPYQHlx67BVApzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnlveXVrSVphQTNOMVk5aEFlWEhyc0ZVQ25NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xNDNlOWUtOTZlNi00NzRlLWFkMmMt MjJlNmRmNDU4NGFmLzEvZnlveXVrSVphQTNOMVk5aEFlWEhyc0ZVQ25NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xNDNlOWUtOTZlNi00NzRlLWFkMmMtMjJlNmRmNDU4NGFm LzEvZnlveXVrSVphQTNOMVk5aEFlWEhyc0ZVQ25NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWnfG4fc ED0U7ViyHz3pq1UXqCXcP1RD3c6Kw2cUrBi05vgJJwH74CTKyUrwXC00JDEBMAY7 isqKt/0mAlAxUzwPVWB4/FQ9oxAUEgtfLnLVKHMjDmnfSP/gHi3DQT+qp4j9cqCJ H5mggd3uubUWS/E49+PmwRLmmlTF488YWOVIgacUwDMz2Lq9NPPemtFeaDUIvC6l fSxhaDqEVc88RZJeArm41hikFEvj6N0l+d82NRgTYLtamRaClAJzx/wmw4vbU0jd 62QaJfBltExWiK1GZpAtXJCt6oz9B8U9L/RaCb28RN5SwbUyQ95gFKYU/FAPaPq/ q/GDgg1uxY5oBQ== -----END CERTIFICATE-----Generated at Tue Dec 30 01:31:53 2025 by rpki-client