This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft File: FYLuxLNHON9xjangFDqdDpJBqFw.mft (raw, json) Hash identifier: J+RDyOS/OwNgKkPgfidjmKSJvgekPDl0oj78vQFPI4M= Subject key identifier: 8C:6D:A5:CF:01:22:42:81:15:3F:16:5A:97:32:77:CF:AC:C2:9C:D6 Authority key identifier: 15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C Certificate issuer: /CN=1582eec4b34738df718da9e0143a9d0e9241a85c Certificate serial: 019B1B3BE6B0783A35B414E27114E8D5E425 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft Manifest number: 177B Signing time: Sun 14 Dec 2025 05:01:09 +0000 Manifest this update: Sun 14 Dec 2025 05:01:09 +0000 Manifest next update: Mon 15 Dec 2025 05:01:09 +0000 Files and hashes: 1: FYLuxLNHON9xjangFDqdDpJBqFw.crl (hash: 060+SSMPMMbkxhj5WLzTf6KffsWld+c6zrXDw3qeIFc=) 2: k5ydTa5DTriL3x0F0EbNZljZ2r0.roa (hash: p8IHnKZdftXn56jD2pkT3j17kBY8BQWmijSx2NhIyvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:e6:b0:78:3a:35:b4:14:e2:71:14:e8:d5:e4:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1582eec4b34738df718da9e0143a9d0e9241a85c Validity Not Before: Dec 14 05:01:09 2025 GMT Not After : Dec 15 05:01:09 2025 GMT Subject: CN=8c6da5cf01224281153f165a973277cfacc29cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:35:0b:ce:61:95:d1:7d:bf:71:f6:e7:02:7a: 6d:5d:3d:f8:68:a6:07:f1:36:d3:ac:81:14:1d:59: c8:3b:e1:bc:53:84:5a:13:cc:c8:2c:e4:97:40:98: 59:00:53:25:8c:76:e6:02:e5:fa:6b:d7:86:f6:84: a2:e6:5a:a5:2a:62:20:e6:3b:16:2c:f8:c0:01:2a: a1:63:9f:10:85:24:08:e9:33:95:61:1c:48:29:ea: 18:da:ef:4b:5a:54:9f:82:0b:5f:ab:ae:e8:1f:b7: f1:7c:46:76:f0:04:d6:a5:b9:e5:86:23:95:d6:f3: 8c:8d:a9:01:a9:14:2c:3b:de:6e:7f:28:55:35:8d: d7:45:61:21:51:e1:07:d4:91:29:bd:4a:7a:06:5e: 0a:d1:59:cf:bd:aa:36:96:45:f6:52:08:c6:c4:07: 39:8a:c8:f7:d9:30:4c:91:50:3c:cb:e7:ef:de:99: 74:ce:63:47:17:38:0f:07:06:d6:c5:47:65:42:68: 44:b1:5b:b9:e3:fa:31:97:c7:35:27:6e:d6:53:2a: cc:c5:16:82:82:a5:3f:ac:6e:d1:39:7a:06:2b:74: 82:1f:8c:98:6e:d7:f4:68:cd:d3:30:55:72:b4:b1: 76:24:0f:52:8c:41:d3:eb:3e:ff:04:b7:08:fc:34: 05:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:6D:A5:CF:01:22:42:81:15:3F:16:5A:97:32:77:CF:AC:C2:9C:D6 X509v3 Authority Key Identifier: keyid:15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:56:f2:a3:a9:42:a5:91:01:23:4c:cf:2b:99:31:51:ed:86: 01:d4:41:52:31:8a:f2:e8:ee:44:56:a4:5c:58:95:c6:ff:b2: 4a:65:c0:01:c5:14:64:58:d2:9a:94:53:ab:61:b2:55:16:a3: 81:c4:51:db:b9:76:2f:2a:2a:68:cb:24:bb:cf:26:38:ee:72: 0c:22:cb:e3:2a:59:3d:2a:d4:c5:b2:ea:d8:4e:ba:9e:db:b8: 90:38:db:49:13:86:91:62:6b:24:54:d3:6e:53:cc:b3:ce:05: 25:a0:a8:e3:bb:ef:8b:8a:71:47:b8:a8:5c:82:ef:5d:6c:6e: 51:60:61:ab:a4:58:58:c9:51:26:b4:5f:6b:89:70:8f:d7:bc: d0:bf:8a:b6:3e:74:27:a0:d1:98:8f:66:a5:58:06:4c:e0:23: 68:b4:4a:bc:d3:32:a6:94:c0:3e:3a:2d:0d:58:9e:65:d1:3c: cf:c9:a0:52:84:05:5b:9d:35:3d:d8:be:29:06:80:83:64:0d: f6:c4:80:34:f2:e9:58:1e:f2:5c:2c:41:39:d8:9c:36:31:7d: b9:62:ce:1e:02:b1:2f:6c:2a:52:46:a0:61:3d:3e:80:db:23: ba:67:1a:9e:97:72:d2:15:0e:52:1f:ec:c9:0f:24:76:5a:92: e8:bb:ac:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbO+aweDo1tBTicRTo1eQlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ODJlZWM0YjM0NzM4ZGY3MThkYTllMDE0M2E5ZDBlOTI0 MWE4NWMwHhcNMjUxMjE0MDUwMTA5WhcNMjUxMjE1MDUwMTA5WjAzMTEwLwYDVQQD Eyg4YzZkYTVjZjAxMjI0MjgxMTUzZjE2NWE5NzMyNzdjZmFjYzI5Y2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjULzmGV0X2/cfbnAnptXT34aKYH 8TbTrIEUHVnIO+G8U4RaE8zILOSXQJhZAFMljHbmAuX6a9eG9oSi5lqlKmIg5jsW LPjAASqhY58QhSQI6TOVYRxIKeoY2u9LWlSfggtfq67oH7fxfEZ28ATWpbnlhiOV 1vOMjakBqRQsO95ufyhVNY3XRWEhUeEH1JEpvUp6Bl4K0VnPvao2lkX2UgjGxAc5 isj32TBMkVA8y+fv3pl0zmNHFzgPBwbWxUdlQmhEsVu54/oxl8c1J27WUyrMxRaC gqU/rG7ROXoGK3SCH4yYbtf0aM3TMFVytLF2JA9SjEHT6z7/BLcI/DQF+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxtpc8BIkKBFT8WWpcyd8+swpzWMB8GA1UdIwQY MBaAFBWC7sSzRzjfcY2p4BQ6nQ6SQahcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRllMdXhMTkhPTjl4amFuZ0ZEcWREcEpCcUZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83NzE5YzktNWQwOC00YjBlLWFmZGYt MWQwZTZlOTgxMTc4LzEvRllMdXhMTkhPTjl4amFuZ0ZEcWREcEpCcUZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS83NzE5YzktNWQwOC00YjBlLWFmZGYtMWQwZTZlOTgxMTc4 LzEvRllMdXhMTkhPTjl4amFuZ0ZEcWREcEpCcUZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1byo6lC pZEBI0zPK5kxUe2GAdRBUjGK8ujuRFakXFiVxv+ySmXAAcUUZFjSmpRTq2GyVRaj gcRR27l2LyoqaMsku88mOO5yDCLL4ypZPSrUxbLq2E66ntu4kDjbSROGkWJrJFTT blPMs84FJaCo47vvi4pxR7ioXILvXWxuUWBhq6RYWMlRJrRfa4lwj9e80L+Ktj50 J6DRmI9mpVgGTOAjaLRKvNMyppTAPjotDVieZdE8z8mgUoQFW501Pdi+KQaAg2QN 9sSANPLpWB7yXCxBOdicNjF9uWLOHgKxL2wqUkagYT0+gNsjumcanpdy0hUOUh/s yQ8kdlqS6Luscw== -----END CERTIFICATE-----Generated at Sun Dec 14 15:04:31 2025 by rpki-client