This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft File: FyesE93M6XjmP3r186adq0mS1kU.mft (raw, json) Hash identifier: 0HOl6izDnwC/bsCB4EXtmisJ5gNnwFMVqOf14s/yZBw= Subject key identifier: 21:C1:83:99:6E:BB:FF:14:1E:E7:87:56:61:39:E2:18:A8:1E:48:86 Authority key identifier: 17:27:AC:13:DD:CC:E9:78:E6:3F:7A:F5:F3:A6:9D:AB:49:92:D6:45 Certificate issuer: /CN=1727ac13ddcce978e63f7af5f3a69dab4992d645 Certificate serial: 019B397D1D56EAB5D13CB1BFC779AE5DCE1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft Manifest number: 0AE5 Signing time: Sat 20 Dec 2025 02:00:59 +0000 Manifest this update: Sat 20 Dec 2025 02:00:59 +0000 Manifest next update: Sun 21 Dec 2025 02:00:59 +0000 Files and hashes: 1: FyesE93M6XjmP3r186adq0mS1kU.crl (hash: n0CeUZMIeMvJlUzH7goem9odIQdgA9Kai8JTLWE4D08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:1d:56:ea:b5:d1:3c:b1:bf:c7:79:ae:5d:ce:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1727ac13ddcce978e63f7af5f3a69dab4992d645 Validity Not Before: Dec 20 02:00:59 2025 GMT Not After : Dec 21 02:00:59 2025 GMT Subject: CN=21c183996ebbff141ee787566139e218a81e4886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c1:69:7e:28:8c:45:6a:a8:60:d5:9b:bb:11: 07:05:ff:07:94:6c:10:a1:59:7a:4d:9d:50:ce:f8: dc:a8:4c:39:e4:3d:86:35:dc:ca:10:12:a0:30:c1: a8:e1:b8:1f:88:d5:5f:78:f5:b8:e1:34:9e:c6:af: b6:7c:4d:54:72:2e:ee:3f:f2:55:cd:fc:de:2d:84: 19:15:77:b2:e7:38:44:1c:6c:84:f3:01:b9:c2:85: 26:11:e1:56:30:37:33:30:77:92:51:6e:e7:e2:ee: 87:76:98:79:0f:0b:ed:ab:ab:a8:28:b5:f0:db:53: 8d:ee:1f:35:4a:41:6b:7b:a0:9b:82:d4:80:46:b8: 57:e3:d8:49:bd:47:f5:2b:91:e3:49:be:42:4d:45: d8:bd:44:a3:30:e1:5b:97:fe:35:46:ff:8f:a7:0c: 35:5c:c8:28:7b:4c:8e:76:6c:d0:28:70:ea:f9:cb: 2f:8f:7d:98:3d:a3:11:1e:11:45:b5:b2:7a:59:7c: 56:41:f9:c1:79:59:47:46:13:55:4e:80:71:05:47: 5e:08:7d:3b:37:26:d0:ee:b5:46:61:b6:26:79:10: 1d:87:77:16:a6:4f:27:9f:2f:b8:a2:47:0d:e8:97: e6:73:59:6a:be:c5:55:5e:90:f4:19:81:7e:51:0a: ee:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C1:83:99:6E:BB:FF:14:1E:E7:87:56:61:39:E2:18:A8:1E:48:86 X509v3 Authority Key Identifier: keyid:17:27:AC:13:DD:CC:E9:78:E6:3F:7A:F5:F3:A6:9D:AB:49:92:D6:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:d4:d2:bc:de:fb:e7:a0:e8:f5:13:2d:5c:4d:e6:c4:c8:2a: d6:3d:37:66:e3:24:fc:c3:a7:d7:51:4f:b7:f0:8d:13:1a:31: 0d:97:4e:ad:ce:89:83:03:46:f8:fd:e7:54:7e:46:0d:1f:05: f7:17:1d:fc:82:69:83:42:bf:91:31:97:8c:07:31:96:85:e9: 40:04:05:b8:24:eb:3e:9c:2e:27:d8:3a:5c:c8:b4:e1:78:c1: bf:f8:a5:e8:6b:00:15:fe:57:4c:98:ce:84:30:cb:b3:3e:62: 72:63:6c:f8:1e:4d:e5:84:d4:a1:d5:b5:f9:fe:68:79:c0:b9: 59:f3:13:95:65:9b:39:91:92:e6:df:4e:f9:1f:0e:56:aa:da: 06:c8:12:cb:d3:cd:61:87:65:01:60:51:83:72:e9:bf:08:56: 89:82:f9:f5:98:92:d1:cd:9f:38:17:69:0f:f5:34:c5:22:52: 43:e4:12:1f:99:5c:be:eb:59:ca:a5:fb:66:d6:2c:c8:b8:08: 97:ee:74:1c:04:37:b1:b7:e7:d2:8a:a9:e5:69:f7:cd:fc:1d: 77:00:1f:f0:52:7f:a7:da:cc:c5:b8:6f:5a:bf:3c:50:f9:bf: b9:68:67:fb:27:50:3f:70:42:da:e6:84:ca:d6:65:83:86:1c: 40:05:8e:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fR1W6rXRPLG/x3muXc4bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MjdhYzEzZGRjY2U5NzhlNjNmN2FmNWYzYTY5ZGFiNDk5 MmQ2NDUwHhcNMjUxMjIwMDIwMDU5WhcNMjUxMjIxMDIwMDU5WjAzMTEwLwYDVQQD EygyMWMxODM5OTZlYmJmZjE0MWVlNzg3NTY2MTM5ZTIxOGE4MWU0ODg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsFpfiiMRWqoYNWbuxEHBf8HlGwQ oVl6TZ1QzvjcqEw55D2GNdzKEBKgMMGo4bgfiNVfePW44TSexq+2fE1Uci7uP/JV zfzeLYQZFXey5zhEHGyE8wG5woUmEeFWMDczMHeSUW7n4u6Hdph5Dwvtq6uoKLXw 21ON7h81SkFre6CbgtSARrhX49hJvUf1K5HjSb5CTUXYvUSjMOFbl/41Rv+Ppww1 XMgoe0yOdmzQKHDq+csvj32YPaMRHhFFtbJ6WXxWQfnBeVlHRhNVToBxBUdeCH07 NybQ7rVGYbYmeRAdh3cWpk8nny+4okcN6Jfmc1lqvsVVXpD0GYF+UQruGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHBg5luu/8UHueHVmE54hioHkiGMB8GA1UdIwQY MBaAFBcnrBPdzOl45j969fOmnatJktZFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnllc0U5M002WGptUDNyMTg2YWRxMG1TMWtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9hNzU3M2ItN2ZlNC00ZGU4LTg4ODIt NDNiY2RiNzQwMzIzLzEvRnllc0U5M002WGptUDNyMTg2YWRxMG1TMWtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9hNzU3M2ItN2ZlNC00ZGU4LTg4ODItNDNiY2RiNzQwMzIz LzEvRnllc0U5M002WGptUDNyMTg2YWRxMG1TMWtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNTSvN77 56Do9RMtXE3mxMgq1j03ZuMk/MOn11FPt/CNExoxDZdOrc6JgwNG+P3nVH5GDR8F 9xcd/IJpg0K/kTGXjAcxloXpQAQFuCTrPpwuJ9g6XMi04XjBv/il6GsAFf5XTJjO hDDLsz5icmNs+B5N5YTUodW1+f5oecC5WfMTlWWbOZGS5t9O+R8OVqraBsgSy9PN YYdlAWBRg3LpvwhWiYL59ZiS0c2fOBdpD/U0xSJSQ+QSH5lcvutZyqX7ZtYsyLgI l+50HAQ3sbfn0oqp5Wn3zfwddwAf8FJ/p9rMxbhvWr88UPm/uWhn+ydQP3BC2uaE ytZlg4YcQAWO+g== -----END CERTIFICATE-----Generated at Sat Dec 20 05:31:12 2025 by rpki-client