This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft File: fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft (raw, json) Hash identifier: amrbqgCMbxq6rA4a23kkMug5xw6+gI/1ZzoLSjWasXw= Subject key identifier: A7:64:0A:EA:6D:CE:00:A0:47:F8:5F:8E:5D:2E:1E:87:9A:9B:25:AB Authority key identifier: 7F:2A:32:BA:42:19:68:0D:CD:D5:8F:61:01:E5:C7:AE:C1:54:0A:73 Certificate issuer: /CN=7f2a32ba4219680dcdd58f6101e5c7aec1540a73 Certificate serial: 019B405B6798D5D1598D2485267CC188316C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 10:01:30 +0000 Manifest this update: Sun 21 Dec 2025 10:01:30 +0000 Manifest next update: Mon 22 Dec 2025 10:01:30 +0000 Files and hashes: 1: SpkdakB2OdIuVE348-y165owlz0.roa (hash: BnmPz2hkeMhPxWlEoJOTembsWZqO80f/J+3uznzMlq8=) 2: fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl (hash: yMV0vSDEmDdaQ/aN7E03c4vs1ejJj/jxzrNmqJGa6Gc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:67:98:d5:d1:59:8d:24:85:26:7c:c1:88:31:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f2a32ba4219680dcdd58f6101e5c7aec1540a73 Validity Not Before: Dec 21 10:01:30 2025 GMT Not After : Dec 22 10:01:30 2025 GMT Subject: CN=a7640aea6dce00a047f85f8e5d2e1e879a9b25ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:7e:8b:50:19:97:0d:69:43:2a:aa:71:83:36: ee:b7:b5:81:d3:65:9c:f5:a0:72:80:bc:c4:50:f7: 51:85:fd:d5:bd:90:37:b6:45:e5:2d:51:f3:0c:b1: 24:5a:59:eb:bf:ad:17:ee:a1:9a:36:09:0e:d8:7d: 29:ec:43:da:9c:26:a0:6d:97:6e:73:5d:4b:04:49: 71:77:97:cf:b4:dd:dc:bd:ae:f8:c8:d9:ef:7d:1f: 5c:e9:ce:c6:6f:94:b5:01:6d:08:41:29:22:38:fa: d7:cb:ce:44:ce:28:da:59:6c:ff:59:29:f1:0f:d4: 8e:5f:30:f7:55:b4:d8:67:b0:75:f5:29:01:1b:5d: 2d:c0:f6:5e:b9:6c:91:16:ab:0c:f9:50:bf:c5:04: 5f:87:34:b9:c9:1e:4b:93:9a:c0:9c:08:c6:e9:f2: 1a:6c:48:36:4b:d9:fc:27:28:9c:85:2a:cd:b5:53: df:42:e2:5b:75:d0:76:4f:0c:7a:12:7f:7c:b6:8c: 5b:61:97:39:52:79:d3:40:b1:3c:54:64:e6:83:1f: 8b:41:eb:40:a7:9e:d1:fc:08:b5:98:3d:75:3f:48: fc:43:e1:8a:0f:c1:9a:ae:c3:38:39:4c:d5:37:97: 93:93:77:29:fa:d1:28:11:cf:d6:c2:b3:f3:89:40: e3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:64:0A:EA:6D:CE:00:A0:47:F8:5F:8E:5D:2E:1E:87:9A:9B:25:AB X509v3 Authority Key Identifier: keyid:7F:2A:32:BA:42:19:68:0D:CD:D5:8F:61:01:E5:C7:AE:C1:54:0A:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:4e:a5:bf:46:3b:bd:72:a3:a0:d8:ab:2c:e1:b1:4a:4b:9d: b9:df:85:26:a1:91:f8:6b:bc:51:27:15:a5:05:f9:0d:16:c2: 2e:4c:9e:b9:fb:ac:d9:99:88:17:01:c9:03:88:81:2f:3d:06: d2:65:c4:df:05:be:6b:25:36:35:e2:11:2d:30:eb:1d:e7:f9: 03:13:09:74:5a:bd:69:87:48:fb:a1:b0:00:a0:42:2d:4b:f3: 28:06:a0:5f:e8:31:19:1d:60:53:9c:99:15:28:61:c5:25:c7: 5d:d7:28:ee:2a:83:c8:02:71:4a:37:9d:65:8b:56:f8:4b:b5: aa:5e:5c:13:5e:c6:49:33:2b:28:f3:a9:5e:a4:98:5c:80:1d: 02:19:98:5a:35:e1:81:d4:23:de:eb:27:47:22:e2:86:87:43: 65:a3:39:bd:e4:75:a4:77:37:fb:f9:b1:a4:9c:ea:95:87:bb: 7e:83:85:48:dc:2f:0d:f6:86:be:94:f1:81:28:3f:a8:e6:dd: 72:94:8f:33:21:89:b2:6f:f7:a3:d0:84:de:41:c4:03:ad:31: 10:db:ae:c7:9b:18:18:c4:1b:b7:21:91:7e:33:b3:d2:ba:42: 87:0f:a2:b2:33:a7:17:8e:1b:24:d5:cb:fc:69:bb:b6:4b:87: 61:65:3c:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW2eY1dFZjSSFJnzBiDFsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMmEzMmJhNDIxOTY4MGRjZGQ1OGY2MTAxZTVjN2FlYzE1 NDBhNzMwHhcNMjUxMjIxMTAwMTMwWhcNMjUxMjIyMTAwMTMwWjAzMTEwLwYDVQQD EyhhNzY0MGFlYTZkY2UwMGEwNDdmODVmOGU1ZDJlMWU4NzlhOWIyNWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8H6LUBmXDWlDKqpxgzbut7WB02Wc 9aBygLzEUPdRhf3VvZA3tkXlLVHzDLEkWlnrv60X7qGaNgkO2H0p7EPanCagbZdu c11LBElxd5fPtN3cva74yNnvfR9c6c7Gb5S1AW0IQSkiOPrXy85EzijaWWz/WSnx D9SOXzD3VbTYZ7B19SkBG10twPZeuWyRFqsM+VC/xQRfhzS5yR5Lk5rAnAjG6fIa bEg2S9n8JyichSrNtVPfQuJbddB2Twx6En98toxbYZc5UnnTQLE8VGTmgx+LQetA p57R/Ai1mD11P0j8Q+GKD8GarsM4OUzVN5eTk3cp+tEoEc/WwrPziUDjiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdkCuptzgCgR/hfjl0uHoeamyWrMB8GA1UdIwQY MBaAFH8qMrpCGWgNzdWPYQHlx67BVApzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnlveXVrSVphQTNOMVk5aEFlWEhyc0ZVQ25NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xNDNlOWUtOTZlNi00NzRlLWFkMmMt MjJlNmRmNDU4NGFmLzEvZnlveXVrSVphQTNOMVk5aEFlWEhyc0ZVQ25NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xNDNlOWUtOTZlNi00NzRlLWFkMmMtMjJlNmRmNDU4NGFm LzEvZnlveXVrSVphQTNOMVk5aEFlWEhyc0ZVQ25NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWE6lv0Y7 vXKjoNirLOGxSkudud+FJqGR+Gu8UScVpQX5DRbCLkyeufus2ZmIFwHJA4iBLz0G 0mXE3wW+ayU2NeIRLTDrHef5AxMJdFq9aYdI+6GwAKBCLUvzKAagX+gxGR1gU5yZ FShhxSXHXdco7iqDyAJxSjedZYtW+Eu1ql5cE17GSTMrKPOpXqSYXIAdAhmYWjXh gdQj3usnRyLihodDZaM5veR1pHc3+/mxpJzqlYe7foOFSNwvDfaGvpTxgSg/qObd cpSPMyGJsm/3o9CE3kHEA60xENuux5sYGMQbtyGRfjOz0rpChw+isjOnF44bJNXL /Gm7tkuHYWU8OA== -----END CERTIFICATE-----Generated at Sun Dec 21 17:27:06 2025 by rpki-client