This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft File: FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft (raw, json) Hash identifier: 9MZ6booWYtx+2dXbc284Rk5tajWiRcq0+nh2Do7nEhY= Subject key identifier: C6:8B:92:C1:C9:1B:C1:75:47:2D:90:3C:BE:03:5C:4C:9B:88:FB:0D Authority key identifier: 15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40 Certificate issuer: /CN=15894575555cde14c770cbb183da5535d144b540 Certificate serial: 019B59E36A4CB8D95F509250421EEBB3C03E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft Manifest number: 1781 Signing time: Fri 26 Dec 2025 09:00:34 +0000 Manifest this update: Fri 26 Dec 2025 09:00:34 +0000 Manifest next update: Sat 27 Dec 2025 09:00:34 +0000 Files and hashes: 1: FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl (hash: viA+a0AfN5emQYUjD8KuJD8uTIyAnDwiOw/SG/W+4Fk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:6a:4c:b8:d9:5f:50:92:50:42:1e:eb:b3:c0:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15894575555cde14c770cbb183da5535d144b540 Validity Not Before: Dec 26 09:00:34 2025 GMT Not After : Dec 27 09:00:34 2025 GMT Subject: CN=c68b92c1c91bc175472d903cbe035c4c9b88fb0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b0:88:91:ee:6c:b9:5e:ac:02:3d:19:d4:55: cc:6c:60:a4:43:74:60:4f:fc:24:d0:ce:fc:51:bb: db:5b:50:99:8e:d5:e4:21:9b:14:b8:18:3a:4c:59: 4b:00:0e:cd:10:63:74:97:9a:e6:75:5b:37:67:ad: f9:c3:d1:9e:c5:34:3f:88:3e:c6:a7:fe:75:4c:64: ef:2f:8b:b5:37:67:af:05:8f:04:9d:ef:cd:b8:25: 6b:40:c9:dc:38:e7:81:fe:c9:29:d0:09:ea:7a:a3: ce:1e:a0:50:85:44:25:15:62:67:7f:1d:ca:de:13: da:33:e2:31:72:5c:8c:4d:36:d0:52:87:ba:97:ca: 03:fa:58:dd:2d:e0:60:70:fe:c9:50:3c:e8:08:9d: ec:6e:96:d8:80:03:36:53:f9:aa:07:00:e4:36:a0: 96:76:b3:f3:03:03:81:c3:cc:01:58:51:1c:13:29: c3:e1:9b:80:a8:1a:07:1f:95:df:81:a0:92:d3:58: 61:25:e9:5c:0c:0e:ee:cb:b5:60:49:1a:12:bf:7b: 64:68:0f:ea:5c:c8:ba:e3:29:72:c6:c4:d7:84:e6: 3a:a9:dc:93:d9:90:87:fb:33:02:5b:33:62:fc:f9: 73:42:40:47:7d:6e:35:76:21:1d:d7:09:4b:af:91: 4f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8B:92:C1:C9:1B:C1:75:47:2D:90:3C:BE:03:5C:4C:9B:88:FB:0D X509v3 Authority Key Identifier: keyid:15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:84:cd:ee:b2:7c:70:ff:3d:37:5d:28:af:2f:2d:4d:18:9c: 07:41:4d:f6:f9:8e:f6:c2:41:4e:f3:14:be:0c:2d:70:51:17: 05:6c:c6:67:c4:40:11:ad:dd:32:b1:5b:21:9d:cd:97:c9:49: fd:a6:b3:ff:dd:86:ef:e9:ef:2f:eb:3d:08:7b:d8:61:2d:61: 16:14:82:84:6f:07:70:a5:51:8c:f9:b6:d6:dc:d5:ed:ab:ba: 52:73:09:41:09:ae:a7:59:0d:33:4b:ca:9f:62:3f:32:f0:4e: 28:71:5f:12:d1:24:f9:bb:42:f3:c6:60:78:41:73:46:dc:b7: e6:47:bd:f5:80:b7:8a:82:dc:69:5c:1a:74:16:b3:99:5b:65: e9:ce:7a:ce:d8:08:53:32:2c:f5:74:c0:58:b9:a6:fb:7e:a8: 78:01:f1:0d:f6:19:76:47:0a:21:6e:28:ba:26:2d:6f:37:4e: 65:f9:40:23:20:bd:df:0f:f6:45:7e:ef:3a:17:e0:0e:cb:4e: 25:11:23:89:fd:95:1d:3f:14:83:3b:d4:cc:15:9f:2a:81:98: 66:1d:bf:c3:e4:f3:20:20:47:f9:64:56:99:e4:ee:d8:5d:a0: 32:e4:dc:06:64:81:1b:db:3e:8e:f9:9a:33:6e:2e:89:c2:48: 8f:85:f2:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ42pMuNlfUJJQQh7rs8A+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ODk0NTc1NTU1Y2RlMTRjNzcwY2JiMTgzZGE1NTM1ZDE0 NGI1NDAwHhcNMjUxMjI2MDkwMDM0WhcNMjUxMjI3MDkwMDM0WjAzMTEwLwYDVQQD EyhjNjhiOTJjMWM5MWJjMTc1NDcyZDkwM2NiZTAzNWM0YzliODhmYjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7CIke5suV6sAj0Z1FXMbGCkQ3Rg T/wk0M78UbvbW1CZjtXkIZsUuBg6TFlLAA7NEGN0l5rmdVs3Z635w9GexTQ/iD7G p/51TGTvL4u1N2evBY8Ene/NuCVrQMncOOeB/skp0AnqeqPOHqBQhUQlFWJnfx3K 3hPaM+IxclyMTTbQUoe6l8oD+ljdLeBgcP7JUDzoCJ3sbpbYgAM2U/mqBwDkNqCW drPzAwOBw8wBWFEcEynD4ZuAqBoHH5XfgaCS01hhJelcDA7uy7VgSRoSv3tkaA/q XMi64ylyxsTXhOY6qdyT2ZCH+zMCWzNi/PlzQkBHfW41diEd1wlLr5FP5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaLksHJG8F1Ry2QPL4DXEybiPsNMB8GA1UdIwQY MBaAFBWJRXVVXN4Ux3DLsYPaVTXRRLVAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRllsRmRWVmMzaFRIY011eGc5cFZOZEZFdFVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82ODI3MjItMDRiZS00NjNiLTkyMmIt NGEwMzEyZmIxYTc1LzEvRllsRmRWVmMzaFRIY011eGc5cFZOZEZFdFVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS82ODI3MjItMDRiZS00NjNiLTkyMmItNGEwMzEyZmIxYTc1 LzEvRllsRmRWVmMzaFRIY011eGc5cFZOZEZFdFVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYTN7rJ8 cP89N10ory8tTRicB0FN9vmO9sJBTvMUvgwtcFEXBWzGZ8RAEa3dMrFbIZ3Nl8lJ /aaz/92G7+nvL+s9CHvYYS1hFhSChG8HcKVRjPm21tzV7au6UnMJQQmup1kNM0vK n2I/MvBOKHFfEtEk+btC88ZgeEFzRty35ke99YC3ioLcaVwadBazmVtl6c56ztgI UzIs9XTAWLmm+36oeAHxDfYZdkcKIW4ouiYtbzdOZflAIyC93w/2RX7vOhfgDstO JREjif2VHT8UgzvUzBWfKoGYZh2/w+TzICBH+WRWmeTu2F2gMuTcBmSBG9s+jvma M24uicJIj4XyXQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:37 2025 by rpki-client