This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft File: FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft (raw, json) Hash identifier: +waPFwiKSqtc1i6PVUbT1TMccQyP8yc2i0YKwktcUfE= Subject key identifier: 44:76:DB:1B:19:72:4A:86:25:EF:A8:8A:BA:54:B0:27:30:F4:E1:57 Authority key identifier: 17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59 Certificate issuer: /CN=1721b760b60f722951b92527a82ffd3a5ea38459 Certificate serial: 019B5AF66BFE55C3F7B480B3AD1437D747BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft Manifest number: 24 Signing time: Fri 26 Dec 2025 14:00:57 +0000 Manifest this update: Fri 26 Dec 2025 14:00:57 +0000 Manifest next update: Sat 27 Dec 2025 14:00:57 +0000 Files and hashes: 1: FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl (hash: IfsBv8Guucq9tzKLEUKAyOJqil5koXz79ZCrN7eeapQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:6b:fe:55:c3:f7:b4:80:b3:ad:14:37:d7:47:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1721b760b60f722951b92527a82ffd3a5ea38459 Validity Not Before: Dec 26 14:00:57 2025 GMT Not After : Dec 27 14:00:57 2025 GMT Subject: CN=4476db1b19724a8625efa88aba54b02730f4e157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a8:12:f0:49:50:15:f5:66:44:1d:b9:9d:be: 78:a4:52:86:38:00:da:17:8a:3a:09:a2:a9:18:c9: ff:cd:a7:9e:4f:63:c9:95:6a:db:7b:03:7c:e6:a3: d9:fe:e2:27:91:e0:2c:23:84:94:e9:65:c0:56:77: 17:2e:39:0e:e8:2b:67:3d:90:9f:1d:2b:36:71:ae: b5:ad:0a:1b:ee:55:74:bd:d2:80:20:d9:8f:48:54: dc:fc:b4:91:98:0c:d6:6c:41:24:15:52:16:53:9e: 2d:a3:db:ba:5e:fd:09:76:62:ac:e0:d6:39:b4:2a: c6:a6:a2:06:a6:14:c3:ef:90:7a:5a:e8:e4:23:bb: b8:a0:b9:50:5a:9c:4e:a3:38:58:30:d2:d4:75:fb: 4c:c0:f1:48:42:15:aa:59:2e:6a:2b:eb:fd:bd:c2: f6:60:e5:11:2d:20:36:23:12:75:0d:4b:60:ca:29: 84:54:9d:a7:8f:f5:12:06:a1:e0:7f:d3:76:e6:c3: 43:c1:2d:b3:99:89:a5:6c:67:bf:5c:4c:b9:06:2c: 05:68:0f:59:25:b7:5f:22:b3:c3:b1:3d:13:a7:ed: db:fb:30:7a:30:01:cf:79:2b:51:c7:97:52:cc:a0: 2f:f7:fd:15:df:05:17:e9:61:77:c8:26:ba:bf:85: 78:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:76:DB:1B:19:72:4A:86:25:EF:A8:8A:BA:54:B0:27:30:F4:E1:57 X509v3 Authority Key Identifier: keyid:17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:31:87:70:cf:22:ee:78:86:00:7f:ed:58:9a:49:e5:ba:c2: 01:82:2f:4b:dc:76:2f:32:c4:8e:26:a6:83:fa:9b:bb:69:51: c8:f4:58:52:21:97:82:c4:d7:25:14:67:dc:9d:58:33:30:cf: c0:d1:f4:4e:d4:c4:7f:3e:07:c1:99:68:e7:06:a9:bc:88:b7: be:bd:9c:5a:45:93:e8:7e:3e:19:f0:0a:79:74:b5:5d:98:fe: 9f:f2:7f:20:67:df:49:e8:42:01:a8:67:3d:d6:9e:93:c5:47: 67:2c:5a:e4:82:a9:e8:0e:c9:b7:70:83:dd:77:dc:97:25:ce: d7:1c:55:ba:ff:f7:d4:53:bf:0d:d2:fb:37:e3:9b:c5:10:e9: 9c:6e:5a:b1:35:07:38:0c:77:fe:b4:f3:dc:29:eb:f9:d4:85: bd:d8:be:ca:9e:3e:3b:8d:e0:57:b3:37:37:a1:f7:78:99:85: b9:3e:6f:f7:1a:9a:58:8c:9e:19:63:14:d8:25:60:aa:33:df: 34:f1:0e:fb:db:64:9d:81:4e:64:13:70:af:75:35:e3:d8:bd: b8:75:3b:26:13:e4:72:38:90:4a:ad:0b:8d:58:09:6c:1a:a0: 8b:43:ef:c3:7c:c6:07:ec:45:69:b8:83:96:47:01:45:1a:86: 02:8c:7a:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9mv+VcP3tICzrRQ310e9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MjFiNzYwYjYwZjcyMjk1MWI5MjUyN2E4MmZmZDNhNWVh Mzg0NTkwHhcNMjUxMjI2MTQwMDU3WhcNMjUxMjI3MTQwMDU3WjAzMTEwLwYDVQQD Eyg0NDc2ZGIxYjE5NzI0YTg2MjVlZmE4OGFiYTU0YjAyNzMwZjRlMTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxagS8ElQFfVmRB25nb54pFKGOADa F4o6CaKpGMn/zaeeT2PJlWrbewN85qPZ/uInkeAsI4SU6WXAVncXLjkO6CtnPZCf HSs2ca61rQob7lV0vdKAINmPSFTc/LSRmAzWbEEkFVIWU54to9u6Xv0JdmKs4NY5 tCrGpqIGphTD75B6WujkI7u4oLlQWpxOozhYMNLUdftMwPFIQhWqWS5qK+v9vcL2 YOURLSA2IxJ1DUtgyimEVJ2nj/USBqHgf9N25sNDwS2zmYmlbGe/XEy5BiwFaA9Z JbdfIrPDsT0Tp+3b+zB6MAHPeStRx5dSzKAv9/0V3wUX6WF3yCa6v4V4uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFER22xsZckqGJe+oirpUsCcw9OFXMB8GA1UdIwQY MBaAFBcht2C2D3IpUbklJ6gv/Tpeo4RZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnlHM1lMWVBjaWxSdVNVbnFDXzlPbDZqaEZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC80NGY0YjYtOTlhNS00YWFkLTk3MTUt YTY1YTY3MjA3YTU0LzEvRnlHM1lMWVBjaWxSdVNVbnFDXzlPbDZqaEZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC80NGY0YjYtOTlhNS00YWFkLTk3MTUtYTY1YTY3MjA3YTU0 LzEvRnlHM1lMWVBjaWxSdVNVbnFDXzlPbDZqaEZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODGHcM8i 7niGAH/tWJpJ5brCAYIvS9x2LzLEjiamg/qbu2lRyPRYUiGXgsTXJRRn3J1YMzDP wNH0TtTEfz4HwZlo5wapvIi3vr2cWkWT6H4+GfAKeXS1XZj+n/J/IGffSehCAahn Pdaek8VHZyxa5IKp6A7Jt3CD3XfclyXO1xxVuv/31FO/DdL7N+ObxRDpnG5asTUH OAx3/rTz3Cnr+dSFvdi+yp4+O43gV7M3N6H3eJmFuT5v9xqaWIyeGWMU2CVgqjPf NPEO+9tknYFOZBNwr3U149i9uHU7JhPkcjiQSq0LjVgJbBqgi0Pvw3zGB+xFabiD lkcBRRqGAox6lA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:15 2025 by rpki-client