This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft File: FyROqUT-mGNME2MDjuMdVDVpkmE.mft (raw, json) Hash identifier: bOPk5Y1xkqrwa5vAfwjH88CBLMAAdzfv3muSiy8Ntvk= Subject key identifier: 62:FF:18:B4:58:6F:E1:62:FE:00:49:90:34:02:41:9D:BA:EE:97:D7 Authority key identifier: 17:24:4E:A9:44:FE:98:63:4C:13:63:03:8E:E3:1D:54:35:69:92:61 Certificate issuer: /CN=17244ea944fe98634c1363038ee31d5435699261 Certificate serial: 019B5A88980731183F12E699A0D1CB9CD705 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft Manifest number: 038B Signing time: Fri 26 Dec 2025 12:00:59 +0000 Manifest this update: Fri 26 Dec 2025 12:00:59 +0000 Manifest next update: Sat 27 Dec 2025 12:00:59 +0000 Files and hashes: 1: FyROqUT-mGNME2MDjuMdVDVpkmE.crl (hash: wg38ZkbseSjkNNhGIyeVb53c2FsTmwKg+qZvAXiywGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:98:07:31:18:3f:12:e6:99:a0:d1:cb:9c:d7:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17244ea944fe98634c1363038ee31d5435699261 Validity Not Before: Dec 26 12:00:59 2025 GMT Not After : Dec 27 12:00:59 2025 GMT Subject: CN=62ff18b4586fe162fe0049903402419dbaee97d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f1:bb:9d:69:8c:9c:ca:57:6b:25:9d:a7:d9: c6:34:31:7a:b3:4b:9a:86:59:37:d3:e0:f3:06:c8: e8:11:7e:29:14:aa:45:22:74:00:24:c5:28:5b:96: e0:0a:22:95:ee:4f:6d:bc:0e:54:f4:6d:7d:de:32: 22:7b:01:c4:08:28:9b:11:f6:d5:fe:f2:19:67:61: 2a:8b:c5:61:29:b4:0b:23:56:16:35:68:40:13:54: 19:25:14:18:a7:c7:3f:a2:81:43:f7:32:4b:6f:9c: c7:4b:8f:5e:71:87:6f:46:b1:d1:e9:89:ed:9a:b5: 05:37:b4:55:bf:d8:61:38:30:74:16:a9:74:a4:93: 9b:62:34:e5:95:fa:2c:69:fc:b1:fa:35:bb:1b:3a: 31:7d:0b:dc:3e:22:40:d8:ff:d2:c9:cf:bd:f4:c5: 73:9f:31:fb:be:ef:03:6e:cd:a1:4f:de:14:d8:e0: f2:00:ed:b4:f7:14:5e:7f:55:a5:4c:8b:d2:2f:c9: 3c:9a:25:ee:5e:82:64:23:57:26:4b:ef:8b:7c:c9: 72:59:e3:a1:c8:db:5f:fe:bf:8c:61:aa:99:c4:c5: 54:6d:00:1d:3f:6e:21:8e:c5:a0:60:df:de:4b:44: 2c:f2:5c:9c:ae:70:b1:a1:35:e9:b7:1a:31:5e:ef: 90:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FF:18:B4:58:6F:E1:62:FE:00:49:90:34:02:41:9D:BA:EE:97:D7 X509v3 Authority Key Identifier: keyid:17:24:4E:A9:44:FE:98:63:4C:13:63:03:8E:E3:1D:54:35:69:92:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:02:54:8e:01:dc:ab:7d:0e:ce:1c:24:f5:39:e7:fd:4a:0a: d6:77:75:d0:b6:ed:85:ac:c0:9d:69:12:3d:17:60:f9:1a:f0: fd:32:41:62:24:7e:64:e1:e5:1c:32:20:d7:fa:10:a6:55:3d: 0c:53:68:65:84:a7:25:66:db:29:80:4c:33:ee:37:d0:22:45: c9:7b:ae:fb:86:db:db:55:c4:a5:46:11:5c:0b:48:ac:00:9d: 9c:13:7d:c6:c4:15:3f:a1:8e:5e:d4:47:37:a7:d3:dc:2f:ee: 63:e9:c0:56:34:84:e1:34:33:d9:37:3e:b3:14:49:39:a6:5c: 9f:52:72:0c:2f:8a:4d:d2:e0:5a:87:9b:25:f5:41:7f:05:91: 49:d6:cb:e8:56:6a:ec:a7:9f:31:88:50:c4:66:22:43:87:fb: c0:fa:52:82:5a:df:ba:58:8d:84:70:da:f8:0c:67:80:9f:db: e7:af:5e:e3:5b:ba:09:87:cd:4c:2d:2d:69:58:74:50:1c:4b: b1:ad:f1:33:25:6f:a9:43:3c:9d:ce:e9:95:dd:b8:2d:e2:3c: 2d:f6:29:54:83:a4:ed:98:d7:35:12:35:39:dc:2d:76:17:07: 90:3e:e3:b5:85:e1:7c:8f:24:56:90:b0:27:c3:6d:5b:9f:25: 11:e3:b0:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiJgHMRg/EuaZoNHLnNcFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MjQ0ZWE5NDRmZTk4NjM0YzEzNjMwMzhlZTMxZDU0MzU2 OTkyNjEwHhcNMjUxMjI2MTIwMDU5WhcNMjUxMjI3MTIwMDU5WjAzMTEwLwYDVQQD Eyg2MmZmMThiNDU4NmZlMTYyZmUwMDQ5OTAzNDAyNDE5ZGJhZWU5N2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPG7nWmMnMpXayWdp9nGNDF6s0ua hlk30+DzBsjoEX4pFKpFInQAJMUoW5bgCiKV7k9tvA5U9G193jIiewHECCibEfbV /vIZZ2Eqi8VhKbQLI1YWNWhAE1QZJRQYp8c/ooFD9zJLb5zHS49ecYdvRrHR6Ynt mrUFN7RVv9hhODB0Fql0pJObYjTllfosafyx+jW7GzoxfQvcPiJA2P/Syc+99MVz nzH7vu8Dbs2hT94U2ODyAO209xRef1WlTIvSL8k8miXuXoJkI1cmS++LfMlyWeOh yNtf/r+MYaqZxMVUbQAdP24hjsWgYN/eS0Qs8lycrnCxoTXptxoxXu+Q1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGL/GLRYb+Fi/gBJkDQCQZ267pfXMB8GA1UdIwQY MBaAFBckTqlE/phjTBNjA47jHVQ1aZJhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnlST3FVVC1tR05NRTJNRGp1TWRWRFZwa21FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS84NzJhNDQtMTMyYS00ZTk3LTgyMjkt ZTI2ZGViM2JiZGMyLzEvRnlST3FVVC1tR05NRTJNRGp1TWRWRFZwa21FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS84NzJhNDQtMTMyYS00ZTk3LTgyMjktZTI2ZGViM2JiZGMy LzEvRnlST3FVVC1tR05NRTJNRGp1TWRWRFZwa21FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQJUjgHc q30Ozhwk9Tnn/UoK1nd10LbthazAnWkSPRdg+Rrw/TJBYiR+ZOHlHDIg1/oQplU9 DFNoZYSnJWbbKYBMM+430CJFyXuu+4bb21XEpUYRXAtIrACdnBN9xsQVP6GOXtRH N6fT3C/uY+nAVjSE4TQz2Tc+sxRJOaZcn1JyDC+KTdLgWoebJfVBfwWRSdbL6FZq 7KefMYhQxGYiQ4f7wPpSglrfuliNhHDa+AxngJ/b569e41u6CYfNTC0taVh0UBxL sa3xMyVvqUM8nc7pld24LeI8LfYpVIOk7ZjXNRI1OdwtdhcHkD7jtYXhfI8kVpCw J8NtW58lEeOwgQ== -----END CERTIFICATE-----Generated at Fri Dec 26 17:40:31 2025 by rpki-client