This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft File: FycWA_qPBq-kSoeCBl81-WWcft0.mft (raw, json) Hash identifier: S66QTc4Y2qJP0zQaQrQGrOrtrg7aVYkuXa/GbXBUdnk= Subject key identifier: 9A:BF:C4:B1:75:8D:2D:92:99:E9:EC:1A:A2:4A:29:21:C8:EC:BA:D9 Authority key identifier: 17:27:16:03:FA:8F:06:AF:A4:4A:87:82:06:5F:35:F9:65:9C:7E:DD Certificate issuer: /CN=17271603fa8f06afa44a8782065f35f9659c7edd Certificate serial: 019B33B280DD0647331082E9ED4381C379AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FycWA_qPBq-kSoeCBl81-WWcft0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft Manifest number: 031F Signing time: Thu 18 Dec 2025 23:01:34 +0000 Manifest this update: Thu 18 Dec 2025 23:01:34 +0000 Manifest next update: Fri 19 Dec 2025 23:01:34 +0000 Files and hashes: 1: FycWA_qPBq-kSoeCBl81-WWcft0.crl (hash: SjUoU3IfT6l4FhwoAdevGt7m64A9qNF1dx5YsbbGlD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft rsync://rpki.ripe.net/repository/DEFAULT/FycWA_qPBq-kSoeCBl81-WWcft0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:80:dd:06:47:33:10:82:e9:ed:43:81:c3:79:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17271603fa8f06afa44a8782065f35f9659c7edd Validity Not Before: Dec 18 23:01:34 2025 GMT Not After : Dec 19 23:01:34 2025 GMT Subject: CN=9abfc4b1758d2d9299e9ec1aa24a2921c8ecbad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f0:9f:fd:b4:c8:56:fc:3e:a9:ea:e2:74:69: c3:ad:80:86:d4:67:2e:85:a6:e0:6d:d0:77:8c:bc: e5:5e:1a:1b:27:89:3e:a7:a1:32:73:b7:26:37:38: 4b:ef:cc:72:43:c9:00:d2:42:62:e2:6b:46:9c:7f: 78:80:c2:50:c7:a8:44:0a:eb:32:a3:60:06:36:57: fd:55:af:31:e9:7b:fd:14:04:5c:60:7b:98:cf:a4: 21:5c:2d:94:b6:8e:d0:58:52:83:bf:78:60:d5:fd: b8:f9:b7:ad:14:88:a9:22:c8:f1:e1:03:93:f1:5b: 2f:d5:f6:d5:d1:92:ba:c0:d7:95:76:3f:b8:cf:b2: ae:a4:e2:67:60:37:77:8b:89:2a:fc:56:80:1b:f9: ba:7a:a6:1f:7b:7c:35:89:5e:66:e3:7b:37:c1:a2: d4:22:25:ca:ea:76:91:ee:61:34:b8:ad:78:1f:98: 98:10:55:19:2b:cf:ee:63:dd:6f:3a:9e:7d:1a:d7: ce:c0:57:95:3e:26:44:80:e5:27:3c:01:75:a2:35: 24:60:b0:92:92:4f:ee:b9:f2:61:47:11:20:62:64: e1:d5:46:16:40:09:9a:cf:27:1b:4c:eb:70:83:5f: 16:9c:82:44:44:e7:8b:78:98:8d:f4:90:ef:2a:52: f1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BF:C4:B1:75:8D:2D:92:99:E9:EC:1A:A2:4A:29:21:C8:EC:BA:D9 X509v3 Authority Key Identifier: keyid:17:27:16:03:FA:8F:06:AF:A4:4A:87:82:06:5F:35:F9:65:9C:7E:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FycWA_qPBq-kSoeCBl81-WWcft0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:0c:32:57:65:83:92:f7:96:b7:e0:dc:ec:53:40:f0:95:0e: 70:1f:01:cd:99:df:75:55:cc:45:36:b9:46:60:41:3d:20:32: 45:55:ad:92:dc:f9:10:0c:8d:d0:44:85:dd:14:7c:57:ff:e6: 8d:10:7c:51:97:50:73:af:d4:73:e3:0f:c6:51:86:4f:69:b2: 68:fc:2b:da:28:99:a3:ab:fd:fb:ad:51:1d:31:c9:00:c2:51: 4b:db:35:d5:16:20:f5:e0:53:4b:32:43:2d:6d:1b:6d:46:34: 46:8d:61:3a:86:ce:7b:2b:8f:c9:3d:f5:15:ef:a4:f0:b6:1f: 88:9e:9a:6b:e8:b2:d4:64:09:dc:d8:7e:50:66:df:43:d3:e8: 49:dd:f3:62:88:02:11:30:cb:f8:0a:d8:98:39:38:3f:f3:f7: b4:a1:a1:b7:74:7c:59:f7:0b:00:fa:e1:a6:f1:93:bb:af:3a: 10:1f:82:3a:80:15:b6:77:93:ac:92:9b:8c:c7:19:83:73:e9: 07:48:3a:63:4d:1d:35:16:84:23:79:ff:dd:a4:ca:42:00:ed: c0:ef:2d:c1:ef:3d:31:d6:1f:37:00:ea:26:fe:0d:32:3e:c8: a4:e9:df:b3:1a:4c:ac:fc:72:20:a1:81:31:90:f3:a5:32:91: b5:60:1a:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsoDdBkczEILp7UOBw3muMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MjcxNjAzZmE4ZjA2YWZhNDRhODc4MjA2NWYzNWY5NjU5 YzdlZGQwHhcNMjUxMjE4MjMwMTM0WhcNMjUxMjE5MjMwMTM0WjAzMTEwLwYDVQQD Eyg5YWJmYzRiMTc1OGQyZDkyOTllOWVjMWFhMjRhMjkyMWM4ZWNiYWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/Cf/bTIVvw+qeridGnDrYCG1Gcu habgbdB3jLzlXhobJ4k+p6Eyc7cmNzhL78xyQ8kA0kJi4mtGnH94gMJQx6hECusy o2AGNlf9Va8x6Xv9FARcYHuYz6QhXC2Uto7QWFKDv3hg1f24+betFIipIsjx4QOT 8Vsv1fbV0ZK6wNeVdj+4z7KupOJnYDd3i4kq/FaAG/m6eqYfe3w1iV5m43s3waLU IiXK6naR7mE0uK14H5iYEFUZK8/uY91vOp59GtfOwFeVPiZEgOUnPAF1ojUkYLCS kk/uufJhRxEgYmTh1UYWQAmazycbTOtwg18WnIJEROeLeJiN9JDvKlLxNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJq/xLF1jS2SmensGqJKKSHI7LrZMB8GA1UdIwQY MBaAFBcnFgP6jwavpEqHggZfNfllnH7dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnljV0FfcVBCcS1rU29lQ0JsODEtV1djZnQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zN2U4ODQtYjk5ZS00Mjk4LTk3ODkt NTNjZTAxNjU1MzIyLzEvRnljV0FfcVBCcS1rU29lQ0JsODEtV1djZnQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zN2U4ODQtYjk5ZS00Mjk4LTk3ODktNTNjZTAxNjU1MzIy LzEvRnljV0FfcVBCcS1rU29lQ0JsODEtV1djZnQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdAwyV2WD kveWt+Dc7FNA8JUOcB8BzZnfdVXMRTa5RmBBPSAyRVWtktz5EAyN0ESF3RR8V//m jRB8UZdQc6/Uc+MPxlGGT2myaPwr2iiZo6v9+61RHTHJAMJRS9s11RYg9eBTSzJD LW0bbUY0Ro1hOobOeyuPyT31Fe+k8LYfiJ6aa+iy1GQJ3Nh+UGbfQ9PoSd3zYogC ETDL+ArYmDk4P/P3tKGht3R8WfcLAPrhpvGTu686EB+COoAVtneTrJKbjMcZg3Pp B0g6Y00dNRaEI3n/3aTKQgDtwO8twe89MdYfNwDqJv4NMj7IpOnfsxpMrPxyIKGB MZDzpTKRtWAaNw== -----END CERTIFICATE-----Generated at Fri Dec 19 04:49:03 2025 by rpki-client