This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft File: _FlUn23SuDFEuIDCPwb7o7JdOYY.mft (raw, json) Hash identifier: 6zVEbSUR4TbKAwnCZXDUgEsrA6nEl4q07TQ7Adwh+fU= Subject key identifier: 33:C9:F4:2A:CA:3D:3F:EA:32:64:BC:73:51:D4:96:66:8C:4B:73:7A Authority key identifier: FC:59:54:9F:6D:D2:B8:31:44:B8:80:C2:3F:06:FB:A3:B2:5D:39:86 Certificate issuer: /CN=fc59549f6dd2b83144b880c23f06fba3b25d3986 Certificate serial: 019B405AEF4327ACA5B6658E148D5070B5B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft Manifest number: 1184 Signing time: Sun 21 Dec 2025 10:00:59 +0000 Manifest this update: Sun 21 Dec 2025 10:00:59 +0000 Manifest next update: Mon 22 Dec 2025 10:00:59 +0000 Files and hashes: 1: Z6qviYCXQTeLJoJfMAOJcgB-9Qg.roa (hash: oDapm5Z+x3QJafhm3qUyzSGeINGec4KUVgNU/i7jaZI=) 2: _FlUn23SuDFEuIDCPwb7o7JdOYY.crl (hash: 5u7jHROvkdnBGgdforhKQmZc3K8quIAHJo6EtRiPZ1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:ef:43:27:ac:a5:b6:65:8e:14:8d:50:70:b5:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc59549f6dd2b83144b880c23f06fba3b25d3986 Validity Not Before: Dec 21 10:00:59 2025 GMT Not After : Dec 22 10:00:59 2025 GMT Subject: CN=33c9f42aca3d3fea3264bc7351d496668c4b737a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ff:33:d0:c2:51:b1:f6:ec:96:39:74:c8:aa: 59:25:30:e4:b5:27:90:ad:a9:78:67:87:d2:29:13: 02:64:74:66:f8:85:97:ea:4d:e4:c9:19:95:26:8d: 12:28:23:c4:23:17:17:78:35:9e:c6:a9:a7:37:bb: 21:d3:25:5d:52:aa:ce:1b:56:5e:a8:4d:3d:9e:a1: c2:9d:42:a3:f3:dc:46:67:80:08:9e:ad:db:6a:ac: 3a:a6:d6:78:ae:c4:8a:80:36:08:81:98:3a:9f:72: 3a:6c:71:f2:9d:3c:45:d7:6e:89:0d:e2:e7:b5:a7: a5:76:fa:7f:ef:f1:7b:bf:1d:8c:75:cd:99:19:53: b2:52:82:c9:35:8e:52:34:c4:96:94:dc:b1:a4:86: df:3b:10:8d:e4:50:98:4b:69:58:5c:8a:eb:f0:01: 04:d2:c8:6a:b0:32:c5:ba:de:75:a7:f4:7e:a4:50: ba:49:65:aa:77:d9:b1:9a:30:7a:ef:4f:ae:db:1a: d0:77:4a:2e:e7:9f:3b:92:b4:db:b8:00:34:0b:2e: ec:b1:67:d6:10:40:d9:b9:e3:2d:9b:75:4c:b6:e5: 1a:09:ce:f4:59:7e:e8:c6:62:78:4d:39:a5:03:79: 70:44:9b:f0:92:3f:e7:e2:4c:e3:15:3b:dd:c3:73: b2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C9:F4:2A:CA:3D:3F:EA:32:64:BC:73:51:D4:96:66:8C:4B:73:7A X509v3 Authority Key Identifier: keyid:FC:59:54:9F:6D:D2:B8:31:44:B8:80:C2:3F:06:FB:A3:B2:5D:39:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e7:cc:d5:17:4e:32:2a:aa:f6:47:64:98:65:ac:3b:d9:90: f1:f8:90:21:66:40:bb:0d:ba:a4:6f:df:e4:5a:30:af:2d:58: a6:50:78:86:69:24:d8:ca:54:4d:34:b7:65:77:b3:5a:23:f5: 88:c1:4f:1c:25:b5:35:ff:d7:ac:78:9d:cf:ab:4b:3c:8a:d8: af:ea:cd:92:a0:e3:73:2e:9a:88:2b:04:ef:d4:75:7d:27:48: 4c:42:d0:dc:9e:fc:46:fc:ff:08:08:fa:bc:14:ea:6a:fb:3e: d9:ba:97:70:b3:b6:57:55:64:0c:62:7b:4c:ec:f0:b0:49:15: e9:6e:06:44:63:79:60:f3:f9:81:8b:e5:ce:90:0e:2a:ee:a2: db:67:61:74:93:b7:6d:e8:3a:0b:20:0c:3a:3f:07:a3:7a:94: 91:8a:e4:3d:b9:50:13:1d:9e:e9:4a:9a:54:30:fa:b9:df:fc: ee:58:4c:48:0d:02:ed:7a:55:f8:73:cb:08:70:d2:19:f9:42: 1a:87:d6:b7:c7:bd:89:bd:4a:fa:5f:8a:5c:7a:ac:99:d4:a1: 57:a7:15:c4:6a:bd:f9:63:f1:93:ab:82:8e:67:e1:a5:d8:40: 12:b3:87:d6:a4:5c:2b:b6:79:d3:f8:a5:90:a6:9d:41:b1:72: 04:59:fc:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWu9DJ6yltmWOFI1QcLWxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNTk1NDlmNmRkMmI4MzE0NGI4ODBjMjNmMDZmYmEzYjI1 ZDM5ODYwHhcNMjUxMjIxMTAwMDU5WhcNMjUxMjIyMTAwMDU5WjAzMTEwLwYDVQQD EygzM2M5ZjQyYWNhM2QzZmVhMzI2NGJjNzM1MWQ0OTY2NjhjNGI3MzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov8z0MJRsfbsljl0yKpZJTDktSeQ ral4Z4fSKRMCZHRm+IWX6k3kyRmVJo0SKCPEIxcXeDWexqmnN7sh0yVdUqrOG1Ze qE09nqHCnUKj89xGZ4AInq3baqw6ptZ4rsSKgDYIgZg6n3I6bHHynTxF126JDeLn taeldvp/7/F7vx2Mdc2ZGVOyUoLJNY5SNMSWlNyxpIbfOxCN5FCYS2lYXIrr8AEE 0shqsDLFut51p/R+pFC6SWWqd9mxmjB670+u2xrQd0ou5587krTbuAA0Cy7ssWfW EEDZueMtm3VMtuUaCc70WX7oxmJ4TTmlA3lwRJvwkj/n4kzjFTvdw3Oy9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPJ9CrKPT/qMmS8c1HUlmaMS3N6MB8GA1UdIwQY MBaAFPxZVJ9t0rgxRLiAwj8G+6OyXTmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0ZsVW4yM1N1REZFdUlEQ1B3YjdvN0pkT1lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy85NjQwMzUtMzgxYS00MWIwLTlmZGQt ZjY1ZDMzYTk5MjZiLzEvX0ZsVW4yM1N1REZFdUlEQ1B3YjdvN0pkT1lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy85NjQwMzUtMzgxYS00MWIwLTlmZGQtZjY1ZDMzYTk5MjZi LzEvX0ZsVW4yM1N1REZFdUlEQ1B3YjdvN0pkT1lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOfM1RdO Miqq9kdkmGWsO9mQ8fiQIWZAuw26pG/f5Fowry1YplB4hmkk2MpUTTS3ZXezWiP1 iMFPHCW1Nf/XrHidz6tLPIrYr+rNkqDjcy6aiCsE79R1fSdITELQ3J78Rvz/CAj6 vBTqavs+2bqXcLO2V1VkDGJ7TOzwsEkV6W4GRGN5YPP5gYvlzpAOKu6i22dhdJO3 beg6CyAMOj8Ho3qUkYrkPblQEx2e6UqaVDD6ud/87lhMSA0C7XpV+HPLCHDSGflC GofWt8e9ib1K+l+KXHqsmdShV6cVxGq9+WPxk6uCjmfhpdhAErOH1qRcK7Z50/il kKadQbFyBFn8CQ== -----END CERTIFICATE-----Generated at Sun Dec 21 17:21:50 2025 by rpki-client