This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json) Hash identifier: /BR/cJkohjswelDimCj6xMvEb762GScvd40JYqs61LY= Subject key identifier: 2C:8E:F8:B6:EA:A8:AE:BE:E0:41:16:C3:01:AB:0D:9A:42:77:99:82 Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df Certificate serial: 019B3E6D819C6457DC53EE386AB09BCB69DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft Manifest number: 15F2 Signing time: Sun 21 Dec 2025 01:02:02 +0000 Manifest this update: Sun 21 Dec 2025 01:02:02 +0000 Manifest next update: Mon 22 Dec 2025 01:02:02 +0000 Files and hashes: 1: 8-v-Z7Xa6lfqMbl7evIHp25t1sA.roa (hash: BWcCx1HwRpdJveviEQtt8WgW8hrEfngJob3ia7RrZwQ=) 2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: LFhvKu9rwCfJCT7RXDPoRHZ0mKjo5cG0yIZyVk03sLU=) 3: cFc0gNIOK5WxBeuSF5eiQkXoOKE.roa (hash: GkH9aMuKOzi/6cYcKbTikX2OvYkhD9zkPc0LnUJCl1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:81:9c:64:57:dc:53:ee:38:6a:b0:9b:cb:69:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df Validity Not Before: Dec 21 01:02:02 2025 GMT Not After : Dec 22 01:02:02 2025 GMT Subject: CN=2c8ef8b6eaa8aebee04116c301ab0d9a42779982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:91:be:69:90:df:60:18:c8:4c:ca:d1:31:8b: 05:3f:cf:78:d4:70:87:38:f3:c5:96:c4:d9:97:72: 89:6d:4d:4b:d4:d3:d2:5d:de:3c:ae:3a:11:2c:3a: 9c:3f:4e:c0:95:94:55:d3:55:86:1d:89:f7:a4:94: e7:60:2f:d3:59:f1:94:ba:8a:25:24:d9:52:d5:1d: d6:83:e4:a8:8f:5a:98:f7:07:bc:c3:86:28:18:27: f0:03:10:32:02:ea:fb:7d:c4:1f:ec:6a:8a:e7:61: a4:ee:14:35:a7:24:6c:28:d2:8d:91:61:b3:82:e2: a3:a4:f0:86:db:b3:49:c1:79:07:eb:03:4f:f9:27: 0a:83:b5:92:dd:34:9c:35:59:a9:27:f3:0d:aa:a3: f5:f1:35:90:e5:20:35:3e:52:14:98:40:d2:31:e9: 61:39:2f:e1:00:a6:60:ed:1c:f1:85:34:f2:14:24: 50:7a:e9:3a:6a:4a:68:a3:32:c3:11:70:8a:7c:51: db:fb:54:20:8f:b4:0b:26:ba:d0:d7:91:ad:cd:09: cd:de:a6:74:a0:f0:46:91:a8:9f:ea:97:17:68:8d: dd:ca:e6:e2:72:78:92:fe:c6:31:41:bd:e8:dd:64: 3a:b9:4a:6c:cb:3e:d7:ae:0a:bf:3b:b9:05:bf:50: ef:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8E:F8:B6:EA:A8:AE:BE:E0:41:16:C3:01:AB:0D:9A:42:77:99:82 X509v3 Authority Key Identifier: keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:41:8d:0b:97:af:91:a5:79:ec:85:c2:f6:0c:4a:33:83:83: 04:f8:07:63:8f:ec:27:b0:b8:5e:93:ea:30:8a:8e:89:cb:3b: 1d:8e:8f:2a:ac:d0:d4:89:bb:da:b4:d7:0d:f1:55:12:27:85: 1d:ee:77:26:ae:0e:c8:43:91:81:91:3d:5b:c5:e8:dc:30:4c: 20:70:9d:1d:d3:18:9e:9a:bb:1e:1b:bc:48:38:a9:20:cc:58: 97:01:8a:47:de:0d:a6:7b:53:10:3a:bc:52:8e:20:a8:4b:94: 61:a1:f9:d3:b4:39:65:d6:07:f8:ee:41:dd:07:4f:6a:f0:f7: dc:a3:90:6a:dc:d0:12:73:24:c2:e6:39:2f:d5:cb:2c:e2:fd: 8d:b6:21:ff:66:06:00:d4:17:ef:1a:7e:30:d9:3c:38:b2:ce: de:e6:9d:10:fb:5a:c3:61:80:5a:87:70:a1:e6:d5:db:b8:c2: 5b:ae:db:93:3d:27:9a:e3:3b:a2:80:28:53:84:ab:2f:cb:1a: 50:5a:59:c0:99:72:47:94:5c:15:c5:ac:63:14:49:e2:d7:df: 15:0c:b6:b6:65:a5:82:11:6d:09:5f:1d:47:09:ea:3d:92:dc: 6f:b0:eb:25:e0:b7:84:94:8d:fb:fe:38:61:67:fa:1b:6d:89: 4d:fe:79:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bYGcZFfcU+44arCby2ndMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NTllYjYwNDAxOTNkZjA2ODEzNTA5MDVlNjM5ZDBlNThk NWY5ZGYwHhcNMjUxMjIxMDEwMjAyWhcNMjUxMjIyMDEwMjAyWjAzMTEwLwYDVQQD EygyYzhlZjhiNmVhYThhZWJlZTA0MTE2YzMwMWFiMGQ5YTQyNzc5OTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5G+aZDfYBjITMrRMYsFP8941HCH OPPFlsTZl3KJbU1L1NPSXd48rjoRLDqcP07AlZRV01WGHYn3pJTnYC/TWfGUuool JNlS1R3Wg+Soj1qY9we8w4YoGCfwAxAyAur7fcQf7GqK52Gk7hQ1pyRsKNKNkWGz guKjpPCG27NJwXkH6wNP+ScKg7WS3TScNVmpJ/MNqqP18TWQ5SA1PlIUmEDSMelh OS/hAKZg7RzxhTTyFCRQeuk6akpoozLDEXCKfFHb+1Qgj7QLJrrQ15GtzQnN3qZ0 oPBGkaif6pcXaI3dyubicniS/sYxQb3o3WQ6uUpsyz7Xrgq/O7kFv1DvkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyO+LbqqK6+4EEWwwGrDZpCd5mCMB8GA1UdIwQY MBaAFBZZ62BAGT3waBNQkF5jnQ5Y1fnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2Qt NTQ0ODU1Y2M0ZjU3LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2QtNTQ0ODU1Y2M0ZjU3 LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkGNC5ev kaV57IXC9gxKM4ODBPgHY4/sJ7C4XpPqMIqOics7HY6PKqzQ1Im72rTXDfFVEieF He53Jq4OyEORgZE9W8Xo3DBMIHCdHdMYnpq7Hhu8SDipIMxYlwGKR94NpntTEDq8 Uo4gqEuUYaH507Q5ZdYH+O5B3QdPavD33KOQatzQEnMkwuY5L9XLLOL9jbYh/2YG ANQX7xp+MNk8OLLO3uadEPtaw2GAWodwoebV27jCW67bkz0nmuM7ooAoU4SrL8sa UFpZwJlyR5RcFcWsYxRJ4tffFQy2tmWlghFtCV8dRwnqPZLcb7DrJeC3hJSN+/44 YWf6G22JTf551A== -----END CERTIFICATE-----Generated at Sun Dec 21 03:56:49 2025 by rpki-client