This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.mft File: fylmV6-NAMJf119W7MiiizUVBXU.mft (raw, json) Hash identifier: Fk5b2E3nLphcam0YAUN1zzFOdMmc0lUcCv0pa0AAIvQ= Subject key identifier: 95:D9:51:E9:DF:1A:C5:C0:4C:9A:F8:27:3A:82:C6:4C:50:52:6D:27 Authority key identifier: 7F:29:66:57:AF:8D:00:C2:5F:D7:5F:56:EC:C8:A2:8B:35:15:05:75 Certificate issuer: /CN=7f296657af8d00c25fd75f56ecc8a28b35150575 Certificate serial: 019B202B4A5027E7315262B592D51F001C99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fylmV6-NAMJf119W7MiiizUVBXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.mft Manifest number: 10AE Signing time: Mon 15 Dec 2025 04:01:06 +0000 Manifest this update: Mon 15 Dec 2025 04:01:06 +0000 Manifest next update: Tue 16 Dec 2025 04:01:06 +0000 Files and hashes: 1: fylmV6-NAMJf119W7MiiizUVBXU.crl (hash: lqtsCrHa3aJa6KBk0C8QDb27v48JXiYO5tGGnb9AF0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.mft rsync://rpki.ripe.net/repository/DEFAULT/fylmV6-NAMJf119W7MiiizUVBXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:2b:4a:50:27:e7:31:52:62:b5:92:d5:1f:00:1c:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f296657af8d00c25fd75f56ecc8a28b35150575 Validity Not Before: Dec 15 04:01:06 2025 GMT Not After : Dec 16 04:01:06 2025 GMT Subject: CN=95d951e9df1ac5c04c9af8273a82c64c50526d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ca:da:fa:fd:4b:3b:1a:e4:1b:c5:70:2b:92: 41:c5:73:6d:f5:28:07:38:3d:b2:ec:9c:a4:ec:e3: b5:61:13:d3:52:60:69:93:54:df:c8:c2:af:73:56: 66:0c:87:d9:fb:12:11:e7:b5:66:c3:6b:ff:64:aa: ad:b8:63:98:18:d8:b9:77:8f:6a:f3:e9:d0:00:c4: 77:b0:f5:eb:42:3c:00:2b:2d:5f:33:ae:ad:72:1e: a3:e2:cc:29:d6:72:c9:5d:08:2b:a1:aa:34:2e:4c: 16:22:6a:85:47:e1:2b:74:62:32:91:2e:97:a3:15: f7:f1:de:5a:cd:12:0a:99:83:08:96:c4:b6:f2:07: 78:96:5d:40:23:2b:58:79:e1:8c:71:25:8f:9a:b4: 33:ad:e5:3f:6c:99:a1:c2:a0:b4:db:11:51:36:0f: 2d:c1:8b:98:c0:fb:10:e0:77:d6:9e:e6:33:d5:da: f4:d3:31:11:4f:71:c6:b1:cb:3c:df:35:2c:9f:e5: 92:3c:53:9e:9f:8e:bd:75:7e:00:a8:e4:59:9b:a7: 4b:da:5b:07:a7:99:bf:6e:78:5e:72:9a:41:67:53: 6c:c8:2c:2f:9c:1b:25:0c:50:66:9b:b4:f2:a7:3f: 70:ca:6e:2d:22:58:e4:fd:aa:a2:05:e2:1f:f9:36: ba:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D9:51:E9:DF:1A:C5:C0:4C:9A:F8:27:3A:82:C6:4C:50:52:6D:27 X509v3 Authority Key Identifier: keyid:7F:29:66:57:AF:8D:00:C2:5F:D7:5F:56:EC:C8:A2:8B:35:15:05:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fylmV6-NAMJf119W7MiiizUVBXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d3:b0:24:5c:d3:90:cc:ff:be:19:69:b9:aa:1c:93:10:28: b2:8b:9d:67:d6:7d:c4:b3:c7:4f:65:a5:14:95:39:2c:a1:5d: ae:3d:85:ee:f2:9c:61:40:3d:79:9e:ab:72:16:5e:24:0e:71: e3:99:30:21:59:7e:f7:30:76:dc:bd:ac:82:4b:c6:d3:ca:d1: 2d:00:c8:3b:e4:bd:00:e7:20:05:b3:21:40:71:29:d8:1d:6f: 70:7d:6d:86:28:ad:cd:ea:13:b6:cf:28:fe:63:20:f4:a2:ba: 6c:25:75:d7:43:9b:c3:57:f3:95:47:93:37:1f:aa:03:40:20: d9:1c:96:91:e7:1e:51:62:dc:03:36:31:a3:1f:b6:be:c2:c4: 2c:14:80:ac:22:ab:07:5a:62:2d:70:a7:a9:ac:3f:a0:fa:c0: c9:36:f0:c1:4d:7b:b9:88:79:ea:bf:0b:29:a9:69:ba:dd:36: e7:53:6d:76:23:62:83:fe:72:c1:67:af:73:f4:56:02:a1:ae: 12:d2:04:b6:55:1d:3a:e1:69:0c:fd:04:69:6c:ba:2c:10:40: e6:be:f4:ef:45:bd:f9:1d:15:45:e9:09:ca:c6:44:d3:22:a3: 83:d9:b6:d3:55:fb:25:d3:1b:12:7d:e5:7e:0b:24:b6:63:f4: b7:00:b6:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgK0pQJ+cxUmK1ktUfAByZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMjk2NjU3YWY4ZDAwYzI1ZmQ3NWY1NmVjYzhhMjhiMzUx NTA1NzUwHhcNMjUxMjE1MDQwMTA2WhcNMjUxMjE2MDQwMTA2WjAzMTEwLwYDVQQD Eyg5NWQ5NTFlOWRmMWFjNWMwNGM5YWY4MjczYTgyYzY0YzUwNTI2ZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsra+v1LOxrkG8VwK5JBxXNt9SgH OD2y7Jyk7OO1YRPTUmBpk1TfyMKvc1ZmDIfZ+xIR57Vmw2v/ZKqtuGOYGNi5d49q 8+nQAMR3sPXrQjwAKy1fM66tch6j4swp1nLJXQgroao0LkwWImqFR+ErdGIykS6X oxX38d5azRIKmYMIlsS28gd4ll1AIytYeeGMcSWPmrQzreU/bJmhwqC02xFRNg8t wYuYwPsQ4HfWnuYz1dr00zERT3HGscs83zUsn+WSPFOen469dX4AqORZm6dL2lsH p5m/bnhecppBZ1NsyCwvnBslDFBmm7Typz9wym4tIljk/aqiBeIf+Ta6KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXZUenfGsXATJr4JzqCxkxQUm0nMB8GA1UdIwQY MBaAFH8pZlevjQDCX9dfVuzIoos1FQV1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnlsbVY2LU5BTUpmMTE5VzdNaWlpelVWQlhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lODBiMzMtM2JlZS00NmVjLWIzNWQt YmFmOTVhNTA2ZDE5LzEvZnlsbVY2LU5BTUpmMTE5VzdNaWlpelVWQlhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9lODBiMzMtM2JlZS00NmVjLWIzNWQtYmFmOTVhNTA2ZDE5 LzEvZnlsbVY2LU5BTUpmMTE5VzdNaWlpelVWQlhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNOwJFzT kMz/vhlpuaockxAosoudZ9Z9xLPHT2WlFJU5LKFdrj2F7vKcYUA9eZ6rchZeJA5x 45kwIVl+9zB23L2sgkvG08rRLQDIO+S9AOcgBbMhQHEp2B1vcH1thiitzeoTts8o /mMg9KK6bCV110Obw1fzlUeTNx+qA0Ag2RyWkeceUWLcAzYxox+2vsLELBSArCKr B1piLXCnqaw/oPrAyTbwwU17uYh56r8LKalput0251NtdiNig/5ywWevc/RWAqGu EtIEtlUdOuFpDP0EaWy6LBBA5r7070W9+R0VRekJysZE0yKjg9m201X7JdMbEn3l fgsktmP0twC2eg== -----END CERTIFICATE-----Generated at Mon Dec 15 12:01:05 2025 by rpki-client