This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft File: fLi4cwN1yShTuZrjr1eXwSPdFQc.mft (raw, json) Hash identifier: SMGk5/9Gkgn498lWBO6ZRUnMu63YxCQEHPQFPbR+q8g= Subject key identifier: 21:3F:B6:16:04:A2:3A:AE:47:8D:D3:F2:B0:1E:8E:D6:7C:39:A4:FC Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07 Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507 Certificate serial: 019B3DC7CB7800ABE1C519435EE379242E52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft Manifest number: 11B0 Signing time: Sat 20 Dec 2025 22:01:02 +0000 Manifest this update: Sat 20 Dec 2025 22:01:02 +0000 Manifest next update: Sun 21 Dec 2025 22:01:02 +0000 Files and hashes: 1: f-4yu6sDyBHuoUp0ijzfgQJpE8U.roa (hash: I5XhYKmiwTTC0KZ/h+71MELDdEucvcsXapf63tq8JL0=) 2: fLi4cwN1yShTuZrjr1eXwSPdFQc.crl (hash: giCYq8aSOGjfV9Qh9NMpmGJX79hNerFSdJwR3a72Y2o=) 3: xNMYEYWeSRysGA1egNd5UYXQ2iE.roa (hash: mNuWxiNJNgSqM1Q6Fj113QLftCPa1zUr2fYNqR8cc3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:cb:78:00:ab:e1:c5:19:43:5e:e3:79:24:2e:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507 Validity Not Before: Dec 20 22:01:02 2025 GMT Not After : Dec 21 22:01:02 2025 GMT Subject: CN=213fb61604a23aae478dd3f2b01e8ed67c39a4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:99:63:03:28:55:43:61:24:fb:51:cd:be:1e: d7:fc:fb:65:28:5b:80:68:c2:36:83:f7:12:ac:df: ff:9c:16:be:85:6a:f7:0b:2e:31:51:83:6a:97:a4: 13:05:5d:2e:38:c4:2a:51:9b:61:83:52:eb:03:fe: 01:84:a3:56:88:73:31:ea:ba:7b:28:08:91:d3:dd: b7:f5:22:bc:5c:ec:b7:bb:a6:3b:40:8e:81:78:34: e2:93:48:75:a2:4c:ef:17:66:3c:b6:46:53:fe:9c: 2a:a1:c8:50:7d:2c:98:56:f4:d0:01:4d:4d:80:50: 53:fb:cf:05:7d:03:07:69:b9:3f:4f:ae:d9:ed:da: 2a:59:0a:69:00:5d:13:9f:5f:94:dd:7a:bd:e0:51: f0:9e:59:52:77:bf:15:30:35:7a:22:72:fe:c7:64: cd:69:cb:d1:90:de:15:ee:a6:f0:a3:7b:95:da:73: d3:8a:a1:d5:4c:45:13:20:99:90:f8:b7:55:c1:b4: 2e:1e:31:c7:1a:3f:77:3c:f6:c6:11:ba:ca:db:2d: 02:85:6b:0e:2b:74:a9:41:0b:20:06:01:25:f4:5a: 7d:9b:05:71:88:ac:c7:4c:75:11:93:82:0d:48:48: f1:d1:fe:44:19:c5:af:e5:cb:a5:60:ab:1a:c0:df: 85:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3F:B6:16:04:A2:3A:AE:47:8D:D3:F2:B0:1E:8E:D6:7C:39:A4:FC X509v3 Authority Key Identifier: keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:df:e5:06:a5:51:87:96:f8:67:34:74:66:4c:96:b5:55:26: b7:91:97:ab:fb:6e:c7:4c:5e:2d:f9:9f:bd:56:ba:d1:35:d8: b5:bd:1c:18:29:d9:b4:bf:81:a1:7a:9e:36:c1:f3:7f:bf:2a: 8a:b0:48:e4:da:22:0d:06:2f:b6:74:a9:0d:da:f9:ca:be:eb: 4f:48:cb:f2:24:ba:87:5a:1b:dd:15:21:be:82:14:23:88:44: 2b:8a:e2:47:21:a3:ec:7c:4a:57:e7:88:ef:de:f6:01:d3:f8: ed:e5:02:4c:66:88:a4:da:24:29:5f:f4:c1:a4:de:ad:d3:9e: 23:e5:10:4d:ef:fc:1b:96:4c:aa:8b:e7:76:d9:ad:75:7e:8e: 74:8a:da:47:e9:3f:e0:12:35:c5:a5:f0:89:f9:84:12:75:7b: 09:c8:65:64:50:2b:ec:ae:58:84:24:67:75:8d:5a:93:6d:7e: b2:b7:9f:4c:d5:0b:53:d8:f2:6e:bd:63:ea:f1:e4:08:48:ca: 74:da:0b:1b:30:bd:d6:bf:ef:29:c5:56:f2:5d:97:aa:d9:81: 11:7f:e8:94:5e:86:9e:3b:06:26:80:d9:c3:f2:18:98:b3:bf: ea:92:0a:0e:57:6d:cb:c4:49:7e:2e:65:d5:e6:2e:53:f0:98: e7:42:d3:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x8t4AKvhxRlDXuN5JC5SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYjhiODczMDM3NWM5Mjg1M2I5OWFlM2FmNTc5N2MxMjNk ZDE1MDcwHhcNMjUxMjIwMjIwMTAyWhcNMjUxMjIxMjIwMTAyWjAzMTEwLwYDVQQD EygyMTNmYjYxNjA0YTIzYWFlNDc4ZGQzZjJiMDFlOGVkNjdjMzlhNGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZljAyhVQ2Ek+1HNvh7X/PtlKFuA aMI2g/cSrN//nBa+hWr3Cy4xUYNql6QTBV0uOMQqUZthg1LrA/4BhKNWiHMx6rp7 KAiR09239SK8XOy3u6Y7QI6BeDTik0h1okzvF2Y8tkZT/pwqochQfSyYVvTQAU1N gFBT+88FfQMHabk/T67Z7doqWQppAF0Tn1+U3Xq94FHwnllSd78VMDV6InL+x2TN acvRkN4V7qbwo3uV2nPTiqHVTEUTIJmQ+LdVwbQuHjHHGj93PPbGEbrK2y0ChWsO K3SpQQsgBgEl9Fp9mwVxiKzHTHURk4INSEjx0f5EGcWv5culYKsawN+FCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCE/thYEojquR43T8rAejtZ8OaT8MB8GA1UdIwQY MBaAFHy4uHMDdckoU7ma469Xl8Ej3RUHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkxpNGN3TjF5U2hUdVpyanIxZVh3U1BkRlFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hOWNlZDItM2ZhNC00NmVkLTg4ZTAt Mzg0MTFhMzEyZDg2LzEvZkxpNGN3TjF5U2hUdVpyanIxZVh3U1BkRlFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9hOWNlZDItM2ZhNC00NmVkLTg4ZTAtMzg0MTFhMzEyZDg2 LzEvZkxpNGN3TjF5U2hUdVpyanIxZVh3U1BkRlFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAt/lBqVR h5b4ZzR0ZkyWtVUmt5GXq/tux0xeLfmfvVa60TXYtb0cGCnZtL+BoXqeNsHzf78q irBI5NoiDQYvtnSpDdr5yr7rT0jL8iS6h1ob3RUhvoIUI4hEK4riRyGj7HxKV+eI 7972AdP47eUCTGaIpNokKV/0waTerdOeI+UQTe/8G5ZMqovndtmtdX6OdIraR+k/ 4BI1xaXwifmEEnV7CchlZFAr7K5YhCRndY1ak21+srefTNULU9jybr1j6vHkCEjK dNoLGzC91r/vKcVW8l2XqtmBEX/olF6GnjsGJoDZw/IYmLO/6pIKDldty8RJfi5l 1eYuU/CY50LTsw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:41:59 2025 by rpki-client