This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft File: FyearRffa_ZXVlrlqT65CYU3Sjw.mft (raw, json) Hash identifier: jByArRA7+zcrTQxmTNbKywuTcIZ5DJlLl2zFk2C0UG8= Subject key identifier: 3D:95:29:B1:33:D1:57:2D:FD:A8:E2:87:B9:04:29:F9:AF:B5:C6:EB Authority key identifier: 17:27:9A:AD:17:DF:6B:F6:57:56:5A:E5:A9:3E:B9:09:85:37:4A:3C Certificate issuer: /CN=17279aad17df6bf657565ae5a93eb90985374a3c Certificate serial: 019B631E905DB66A4DBCCD603ED595430199 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft Manifest number: 172C Signing time: Sun 28 Dec 2025 04:01:45 +0000 Manifest this update: Sun 28 Dec 2025 04:01:45 +0000 Manifest next update: Mon 29 Dec 2025 04:01:45 +0000 Files and hashes: 1: FyearRffa_ZXVlrlqT65CYU3Sjw.crl (hash: l/Uf4hCgD35cV3gIBL5F347RMKV2LcH4VdrkO0cpjaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1e:90:5d:b6:6a:4d:bc:cd:60:3e:d5:95:43:01:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17279aad17df6bf657565ae5a93eb90985374a3c Validity Not Before: Dec 28 04:01:45 2025 GMT Not After : Dec 29 04:01:45 2025 GMT Subject: CN=3d9529b133d1572dfda8e287b90429f9afb5c6eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:83:64:8f:d9:4b:30:b3:ea:f5:ed:48:3a:e4: 9d:90:6a:19:25:cb:3a:d9:63:80:a4:a7:1d:0c:bf: 8b:87:d2:fb:58:8b:a1:71:d2:52:24:71:88:3f:24: 76:60:7c:fd:8a:ad:87:a6:a6:d5:b4:6e:35:73:58: a4:df:78:3c:55:d2:1d:4e:d6:93:42:7b:8f:c9:96: 3c:fd:06:7f:9d:c3:29:4a:48:7c:88:56:8e:7d:18: f0:7e:c6:8c:64:b3:97:b4:88:43:0c:59:10:a2:fd: 88:68:cd:63:88:df:6c:cf:f2:57:39:4e:0a:08:86: 03:3c:00:fd:8e:f9:9d:b0:44:c7:44:11:0e:70:98: 13:0b:fa:05:7c:4e:ed:74:58:06:a7:9d:66:61:bf: e4:27:9a:21:3f:b5:c7:3a:c3:9a:88:2f:37:1a:9b: f6:45:c0:70:96:f8:48:48:c8:2e:2e:3e:d3:ba:28: dc:a1:02:8c:93:88:9f:b6:86:e8:0d:74:b1:cf:9b: 1d:a4:0f:f5:52:2a:c8:3b:4a:da:74:2f:99:a1:4f: d9:df:00:ef:c6:6b:2b:d4:7e:c0:a2:7f:02:0f:aa: 10:f1:62:4c:d8:c7:db:c1:28:95:cc:dc:55:c1:0e: d1:6c:a1:d4:38:5b:47:88:ea:fe:23:84:6e:aa:67: 2f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:95:29:B1:33:D1:57:2D:FD:A8:E2:87:B9:04:29:F9:AF:B5:C6:EB X509v3 Authority Key Identifier: keyid:17:27:9A:AD:17:DF:6B:F6:57:56:5A:E5:A9:3E:B9:09:85:37:4A:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:1c:c8:82:2c:cc:50:0e:1f:37:f1:6f:02:3b:62:c3:b7:83: 7c:aa:57:2a:f6:eb:f5:6a:26:82:d0:89:86:5a:5d:25:40:27: 42:23:22:9e:8f:9d:79:55:00:6a:b3:8e:73:a6:71:07:cc:2a: e6:4e:63:00:98:a1:8f:d6:ec:f2:95:d7:53:19:be:d4:b6:6e: 55:25:ac:d7:65:56:a3:8f:91:f4:75:8f:4c:25:9d:c8:50:2c: cf:71:52:8d:41:27:1b:98:29:fb:56:58:bd:3e:b6:cb:aa:cf: 9e:0c:5e:5b:44:b5:cf:34:d7:7c:32:81:cb:0c:d0:1c:37:e6: 01:2f:10:8d:6e:5d:fc:73:d4:d3:de:78:8a:3f:c9:8c:0c:f7: 6d:94:d0:52:94:0c:db:e8:49:33:ad:f8:03:16:f3:eb:aa:ad: 4d:c4:e6:46:c9:b8:00:fb:05:82:55:c4:3b:90:38:1c:09:6c: af:5f:e3:e9:49:d6:59:d0:b8:44:cf:17:1a:61:2b:d6:91:e1: d8:03:c9:f3:71:88:20:04:f9:32:7e:2a:0e:ef:8d:9d:4f:f2: 81:e4:8a:d2:e2:2b:30:ef:b3:1d:a8:fd:f8:1b:3f:fc:55:7b: 4c:80:c5:74:3c:92:db:bf:95:96:85:e5:6e:26:ad:4d:9d:0c: 04:38:21:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHpBdtmpNvM1gPtWVQwGZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3Mjc5YWFkMTdkZjZiZjY1NzU2NWFlNWE5M2ViOTA5ODUz NzRhM2MwHhcNMjUxMjI4MDQwMTQ1WhcNMjUxMjI5MDQwMTQ1WjAzMTEwLwYDVQQD EygzZDk1MjliMTMzZDE1NzJkZmRhOGUyODdiOTA0MjlmOWFmYjVjNmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooNkj9lLMLPq9e1IOuSdkGoZJcs6 2WOApKcdDL+Lh9L7WIuhcdJSJHGIPyR2YHz9iq2HpqbVtG41c1ik33g8VdIdTtaT QnuPyZY8/QZ/ncMpSkh8iFaOfRjwfsaMZLOXtIhDDFkQov2IaM1jiN9sz/JXOU4K CIYDPAD9jvmdsETHRBEOcJgTC/oFfE7tdFgGp51mYb/kJ5ohP7XHOsOaiC83Gpv2 RcBwlvhISMguLj7TuijcoQKMk4iftoboDXSxz5sdpA/1UirIO0radC+ZoU/Z3wDv xmsr1H7Aon8CD6oQ8WJM2MfbwSiVzNxVwQ7RbKHUOFtHiOr+I4RuqmcvHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2VKbEz0Vct/ajih7kEKfmvtcbrMB8GA1UdIwQY MBaAFBcnmq0X32v2V1Za5ak+uQmFN0o8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnllYXJSZmZhX1pYVmxybHFUNjVDWVUzU2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81NGQ2Y2YtY2E4Yy00MmUwLWJkZmUt MWFlZWYzOWMyYjVjLzEvRnllYXJSZmZhX1pYVmxybHFUNjVDWVUzU2p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS81NGQ2Y2YtY2E4Yy00MmUwLWJkZmUtMWFlZWYzOWMyYjVj LzEvRnllYXJSZmZhX1pYVmxybHFUNjVDWVUzU2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRzIgizM UA4fN/FvAjtiw7eDfKpXKvbr9WomgtCJhlpdJUAnQiMino+deVUAarOOc6ZxB8wq 5k5jAJihj9bs8pXXUxm+1LZuVSWs12VWo4+R9HWPTCWdyFAsz3FSjUEnG5gp+1ZY vT62y6rPngxeW0S1zzTXfDKBywzQHDfmAS8QjW5d/HPU0954ij/JjAz3bZTQUpQM 2+hJM634Axbz66qtTcTmRsm4APsFglXEO5A4HAlsr1/j6UnWWdC4RM8XGmEr1pHh 2APJ83GIIAT5Mn4qDu+NnU/ygeSK0uIrMO+zHaj9+Bs//FV7TIDFdDyS27+VloXl biatTZ0MBDghlw== -----END CERTIFICATE-----Generated at Sun Dec 28 04:58:41 2025 by rpki-client