This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft File: FycuwT2kL1s2HxB0xnUcw1RZPn8.mft (raw, json) Hash identifier: FAt1D75H4oBERT4Vi9cVNV14EodEaOWDzxEsTJT+QWk= Subject key identifier: ED:2A:09:6B:67:F3:A4:4F:1A:5C:2C:65:4A:33:88:9B:D9:A0:00:AA Authority key identifier: 17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F Certificate issuer: /CN=17272ec13da42f5b361f1074c6751cc354593e7f Certificate serial: 019B3F48562AF4DBB8B5BC9AFA18AC070D56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft Manifest number: 1680 Signing time: Sun 21 Dec 2025 05:01:03 +0000 Manifest this update: Sun 21 Dec 2025 05:01:03 +0000 Manifest next update: Mon 22 Dec 2025 05:01:03 +0000 Files and hashes: 1: FycuwT2kL1s2HxB0xnUcw1RZPn8.crl (hash: 8vc2DP296SIfvJchzyFu/aODJlb6bHmXYwkSo2CSAjw=) 2: hni5Zm6l0tWgRkMPSWNQcz9bJXs.roa (hash: 5m+4OOvVIAL5ATC+IriCV/aH5fa2JcS0703gOVQtJWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:56:2a:f4:db:b8:b5:bc:9a:fa:18:ac:07:0d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17272ec13da42f5b361f1074c6751cc354593e7f Validity Not Before: Dec 21 05:01:03 2025 GMT Not After : Dec 22 05:01:03 2025 GMT Subject: CN=ed2a096b67f3a44f1a5c2c654a33889bd9a000aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fa:1a:bf:2f:22:c1:58:c8:4e:96:19:d0:b2: 3f:5f:d3:89:9b:f1:cd:d7:61:00:37:7c:9a:0e:38: d6:21:7c:90:99:cf:ba:cc:60:b9:55:4b:6d:b8:1f: 07:fe:3e:53:2a:38:7b:fd:b4:09:8a:a9:af:8f:5d: 08:59:58:d9:85:82:f7:1e:f5:7d:04:14:fa:7a:87: ba:ec:0b:e1:d4:37:4c:4d:39:19:7f:32:d1:8b:02: 21:49:8c:bd:fe:ed:5a:3d:ba:3c:75:96:61:10:88: dd:3b:04:80:6d:d3:94:25:78:78:b5:b8:cc:0f:5c: bc:38:07:7a:17:25:01:bc:5a:fa:0f:14:c0:18:60: 7b:42:54:2f:8e:a0:d6:41:67:e0:e5:87:06:61:7d: 59:fb:92:cc:2b:da:22:58:eb:91:88:9e:15:86:96: 33:3b:aa:ce:46:98:16:14:8e:25:6f:02:6e:d2:83: 51:8e:53:d7:70:62:54:80:4d:55:9f:29:ba:b8:9a: 3c:9b:8b:61:0f:3e:ec:27:6a:75:b1:81:f3:35:5b: c4:bb:b2:a8:da:87:d7:af:7a:cb:91:86:88:f0:8f: 44:6c:5f:14:34:af:e4:c3:52:5f:90:b5:fd:e8:d4: 86:a7:22:c4:09:1c:2e:a4:81:7a:e5:2a:9a:e8:fb: 48:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2A:09:6B:67:F3:A4:4F:1A:5C:2C:65:4A:33:88:9B:D9:A0:00:AA X509v3 Authority Key Identifier: keyid:17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:be:84:4a:71:97:5a:66:09:8a:c5:bb:1d:31:75:9b:52:aa: 7e:0d:ec:ce:fb:4c:80:e6:8e:46:b2:81:b9:3f:9f:da:7d:68: 75:a5:87:f2:e4:61:f8:28:ba:3e:78:e9:96:c5:5c:8c:aa:8e: 5c:62:2f:67:b5:ec:ef:d7:e8:10:ee:bf:43:00:73:7b:4a:d0: 71:45:65:83:01:1e:d8:4d:be:4e:6d:c2:c4:3f:56:ae:91:4b: 2a:ac:e2:a7:53:f8:77:54:36:f4:89:f5:7b:50:79:d6:28:c7: 0d:13:87:44:5c:a8:17:35:1a:a6:79:2a:c2:0e:31:12:ec:5c: 92:28:fb:66:32:ee:03:be:20:a7:c3:e3:9b:28:79:06:68:10: fb:c7:07:3b:1c:32:c2:47:68:4a:99:7b:47:bd:36:f5:fa:9a: 6b:ef:ec:10:ba:68:b3:f9:cf:92:4c:a4:d8:b3:24:bb:03:13: 46:88:b4:eb:4f:0b:e7:1e:55:aa:81:2f:66:be:78:32:72:b2: 1d:73:b0:98:f4:5e:7c:b6:54:c5:cd:3d:e9:e5:0f:22:73:f7: f3:8b:20:98:c9:3e:3d:8b:34:08:f5:dd:a3:b3:1c:23:56:ca: 6e:45:a6:43:1a:e6:5f:3f:ec:76:75:8d:e5:14:a9:ab:72:88: 23:1c:4a:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SFYq9Nu4tbya+hisBw1WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MjcyZWMxM2RhNDJmNWIzNjFmMTA3NGM2NzUxY2MzNTQ1 OTNlN2YwHhcNMjUxMjIxMDUwMTAzWhcNMjUxMjIyMDUwMTAzWjAzMTEwLwYDVQQD EyhlZDJhMDk2YjY3ZjNhNDRmMWE1YzJjNjU0YTMzODg5YmQ5YTAwMGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvoavy8iwVjITpYZ0LI/X9OJm/HN 12EAN3yaDjjWIXyQmc+6zGC5VUttuB8H/j5TKjh7/bQJiqmvj10IWVjZhYL3HvV9 BBT6eoe67Avh1DdMTTkZfzLRiwIhSYy9/u1aPbo8dZZhEIjdOwSAbdOUJXh4tbjM D1y8OAd6FyUBvFr6DxTAGGB7QlQvjqDWQWfg5YcGYX1Z+5LMK9oiWOuRiJ4VhpYz O6rORpgWFI4lbwJu0oNRjlPXcGJUgE1Vnym6uJo8m4thDz7sJ2p1sYHzNVvEu7Ko 2ofXr3rLkYaI8I9EbF8UNK/kw1JfkLX96NSGpyLECRwupIF65Sqa6PtIIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0qCWtn86RPGlwsZUoziJvZoACqMB8GA1UdIwQY MBaAFBcnLsE9pC9bNh8QdMZ1HMNUWT5/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnljdXdUMmtMMXMySHhCMHhuVWN3MVJaUG44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81YjVjMTYtYzExZS00NTJkLTk4YjIt ZWIxNWUzOGJiZDE1LzEvRnljdXdUMmtMMXMySHhCMHhuVWN3MVJaUG44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS81YjVjMTYtYzExZS00NTJkLTk4YjItZWIxNWUzOGJiZDE1 LzEvRnljdXdUMmtMMXMySHhCMHhuVWN3MVJaUG44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkb6ESnGX WmYJisW7HTF1m1Kqfg3szvtMgOaORrKBuT+f2n1odaWH8uRh+Ci6PnjplsVcjKqO XGIvZ7Xs79foEO6/QwBze0rQcUVlgwEe2E2+Tm3CxD9WrpFLKqzip1P4d1Q29In1 e1B51ijHDROHRFyoFzUapnkqwg4xEuxckij7ZjLuA74gp8Pjmyh5BmgQ+8cHOxwy wkdoSpl7R7029fqaa+/sELpos/nPkkyk2LMkuwMTRoi0608L5x5VqoEvZr54MnKy HXOwmPRefLZUxc096eUPInP384sgmMk+PYs0CPXdo7McI1bKbkWmQxrmXz/sdnWN 5RSpq3KIIxxK1A== -----END CERTIFICATE-----Generated at Sun Dec 21 08:14:39 2025 by rpki-client