This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft File: FyearRffa_ZXVlrlqT65CYU3Sjw.mft (raw, json) Hash identifier: wkfxH/xkWiMxJzFrkrmj7R5n0UwIYa4aPzMlYJAs5vs= Subject key identifier: B9:AA:01:40:E3:BC:AB:CC:B2:E3:AB:A4:24:6B:B1:D8:47:A2:4C:96 Authority key identifier: 17:27:9A:AD:17:DF:6B:F6:57:56:5A:E5:A9:3E:B9:09:85:37:4A:3C Certificate issuer: /CN=17279aad17df6bf657565ae5a93eb90985374a3c Certificate serial: 019B19BB6543A740E3958E7024F5A5ADD86D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft Manifest number: 1706 Signing time: Sat 13 Dec 2025 22:01:09 +0000 Manifest this update: Sat 13 Dec 2025 22:01:09 +0000 Manifest next update: Sun 14 Dec 2025 22:01:09 +0000 Files and hashes: 1: FyearRffa_ZXVlrlqT65CYU3Sjw.crl (hash: MNa2VYZTCnj6KCcNwmm4OGW4+ikgGThVty5jNt4Tur4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:65:43:a7:40:e3:95:8e:70:24:f5:a5:ad:d8:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17279aad17df6bf657565ae5a93eb90985374a3c Validity Not Before: Dec 13 22:01:09 2025 GMT Not After : Dec 14 22:01:09 2025 GMT Subject: CN=b9aa0140e3bcabccb2e3aba4246bb1d847a24c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:52:2f:dd:94:4b:e8:a9:18:3d:bb:0e:12:79: b1:86:b9:5d:fe:a5:4c:d3:73:0f:a7:4a:ff:3e:cb: fa:19:86:0b:6b:07:a5:70:b3:f0:86:de:b1:28:3d: cd:5d:56:3f:70:a6:65:63:b0:6b:a9:38:ee:f4:fa: 9e:6d:70:d1:98:ef:28:f2:09:ac:63:ad:8b:02:47: d7:c9:89:f5:c3:72:5d:f7:f7:1b:9e:62:42:ee:69: 44:ab:4b:e0:90:22:cb:a7:ca:15:60:5d:ce:37:a8: 2d:79:11:c3:45:74:38:72:e6:46:1a:6d:03:5f:a9: 1a:f0:1b:a6:3a:c1:c0:20:13:be:64:86:79:92:e2: 53:29:85:8f:e6:f1:55:59:21:0c:2b:29:37:8f:c7: 2e:5c:e7:ed:88:14:4b:65:ac:1a:3c:e2:42:be:c6: ef:f8:0e:3e:ef:cc:7c:ed:ad:30:23:b4:dc:53:d9: 22:38:02:8a:70:f9:b9:8d:4b:3e:86:9e:be:5d:18: ab:bd:6a:14:fe:fa:80:ea:71:d0:24:d8:06:14:8d: 0c:8a:10:5c:b8:08:07:3a:c3:a1:aa:4f:f1:d7:76: 88:69:7f:8c:56:ad:30:de:7a:da:19:70:1b:f3:cb: 46:95:e7:fb:2b:f6:e9:94:b5:71:3e:f5:da:91:f8: ea:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AA:01:40:E3:BC:AB:CC:B2:E3:AB:A4:24:6B:B1:D8:47:A2:4C:96 X509v3 Authority Key Identifier: keyid:17:27:9A:AD:17:DF:6B:F6:57:56:5A:E5:A9:3E:B9:09:85:37:4A:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:fd:66:80:67:44:05:01:ec:a3:65:f4:7c:36:b3:56:f4:81: 99:f9:c3:05:a4:82:18:73:4f:13:9d:45:b4:3c:5f:c9:3e:e3: 27:3f:04:39:e1:0b:22:46:4a:d1:f8:e8:a9:75:6b:cf:97:1a: ee:78:eb:7d:85:ba:55:6c:a0:69:2f:ef:48:c4:5d:fa:27:6c: 08:86:b7:d1:e6:d0:69:70:89:9f:7e:08:30:7d:67:61:2c:4e: c3:c1:70:1e:cf:a9:1c:93:a7:fa:6b:e9:9b:3f:d6:ff:1e:63: c1:00:d6:bb:90:9b:51:f0:07:1a:27:89:30:74:18:89:03:66: f7:1f:b5:9c:25:f8:83:78:26:6d:77:7e:ba:37:c1:64:0c:44: 0a:21:2a:09:68:da:a7:f4:64:0f:43:e0:23:c3:f3:de:cf:20: 3f:d5:4d:76:d9:b1:88:36:b1:7c:d4:b3:a8:ca:c2:ea:ce:30: 19:25:54:8a:02:59:0e:cb:1d:72:7b:8c:bf:ca:68:0c:16:18: fa:5c:91:64:e8:fa:4e:20:ce:1a:ef:8c:54:af:74:90:7e:a8: 25:41:56:d9:e0:4f:c2:08:81:14:5e:79:02:41:67:27:dc:58: 2b:8a:d1:8a:96:47:2c:24:31:a9:8d:ae:3f:ad:52:be:4c:6c: 55:47:95:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu2VDp0DjlY5wJPWlrdhtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3Mjc5YWFkMTdkZjZiZjY1NzU2NWFlNWE5M2ViOTA5ODUz NzRhM2MwHhcNMjUxMjEzMjIwMTA5WhcNMjUxMjE0MjIwMTA5WjAzMTEwLwYDVQQD EyhiOWFhMDE0MGUzYmNhYmNjYjJlM2FiYTQyNDZiYjFkODQ3YTI0Yzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31Iv3ZRL6KkYPbsOEnmxhrld/qVM 03MPp0r/Psv6GYYLawelcLPwht6xKD3NXVY/cKZlY7BrqTju9PqebXDRmO8o8gms Y62LAkfXyYn1w3Jd9/cbnmJC7mlEq0vgkCLLp8oVYF3ON6gteRHDRXQ4cuZGGm0D X6ka8BumOsHAIBO+ZIZ5kuJTKYWP5vFVWSEMKyk3j8cuXOftiBRLZawaPOJCvsbv +A4+78x87a0wI7TcU9kiOAKKcPm5jUs+hp6+XRirvWoU/vqA6nHQJNgGFI0MihBc uAgHOsOhqk/x13aIaX+MVq0w3nraGXAb88tGlef7K/bplLVxPvXakfjqDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmqAUDjvKvMsuOrpCRrsdhHokyWMB8GA1UdIwQY MBaAFBcnmq0X32v2V1Za5ak+uQmFN0o8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnllYXJSZmZhX1pYVmxybHFUNjVDWVUzU2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81NGQ2Y2YtY2E4Yy00MmUwLWJkZmUt MWFlZWYzOWMyYjVjLzEvRnllYXJSZmZhX1pYVmxybHFUNjVDWVUzU2p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS81NGQ2Y2YtY2E4Yy00MmUwLWJkZmUtMWFlZWYzOWMyYjVj LzEvRnllYXJSZmZhX1pYVmxybHFUNjVDWVUzU2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvP1mgGdE BQHso2X0fDazVvSBmfnDBaSCGHNPE51FtDxfyT7jJz8EOeELIkZK0fjoqXVrz5ca 7njrfYW6VWygaS/vSMRd+idsCIa30ebQaXCJn34IMH1nYSxOw8FwHs+pHJOn+mvp mz/W/x5jwQDWu5CbUfAHGieJMHQYiQNm9x+1nCX4g3gmbXd+ujfBZAxECiEqCWja p/RkD0PgI8Pz3s8gP9VNdtmxiDaxfNSzqMrC6s4wGSVUigJZDssdcnuMv8poDBYY +lyRZOj6TiDOGu+MVK90kH6oJUFW2eBPwgiBFF55AkFnJ9xYK4rRipZHLCQxqY2u P61SvkxsVUeVmA== -----END CERTIFICATE-----Generated at Sun Dec 14 00:04:34 2025 by rpki-client