This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json) Hash identifier: LPIWIIkdkpYn7Y0cvD20qd5DY3id9j5i7SM12hQOTgQ= Subject key identifier: 86:70:C4:2D:8B:AC:BD:6E:E5:82:A4:0A:16:F2:92:25:DE:5F:03:6C Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df Certificate serial: 019B650D3C04A2F2F128A087F43964C302B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft Manifest number: 1606 Signing time: Sun 28 Dec 2025 13:02:04 +0000 Manifest this update: Sun 28 Dec 2025 13:02:04 +0000 Manifest next update: Mon 29 Dec 2025 13:02:04 +0000 Files and hashes: 1: 8-v-Z7Xa6lfqMbl7evIHp25t1sA.roa (hash: BWcCx1HwRpdJveviEQtt8WgW8hrEfngJob3ia7RrZwQ=) 2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: dm2IfPZg9VrYd0lj324JR3O5YU2m32BuvciSUqRZPz0=) 3: cFc0gNIOK5WxBeuSF5eiQkXoOKE.roa (hash: GkH9aMuKOzi/6cYcKbTikX2OvYkhD9zkPc0LnUJCl1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0d:3c:04:a2:f2:f1:28:a0:87:f4:39:64:c3:02:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df Validity Not Before: Dec 28 13:02:04 2025 GMT Not After : Dec 29 13:02:04 2025 GMT Subject: CN=8670c42d8bacbd6ee582a40a16f29225de5f036c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2f:90:84:91:5e:48:40:89:52:ae:05:9f:89: 2d:f1:02:2f:f9:cc:88:f7:10:c2:e8:6d:56:da:5f: 0f:98:a6:98:7b:1e:df:19:d6:c4:78:06:3d:00:68: f1:82:c7:e3:81:af:19:c0:c2:0b:05:c4:8d:0c:f7: bb:5f:fe:bb:66:af:60:a2:8e:b5:98:1f:11:89:cd: 04:3d:3a:3a:3f:e5:2b:14:ab:a0:d8:f8:d1:0d:11: 08:5c:a8:15:ab:1a:cb:95:3c:32:fe:cf:41:d4:33: 42:f9:de:3f:8a:1b:fc:c7:39:99:b3:62:16:8d:ea: 82:1a:b2:f5:5a:8d:b0:6f:24:47:2f:f6:03:24:24: a4:78:d3:16:96:52:e2:95:f7:5f:5b:85:0c:20:c0: 94:c1:ed:3d:8b:9e:3b:a1:72:49:db:36:6e:e0:9e: b4:a2:53:d4:51:d4:95:6f:46:e7:b0:53:88:b3:c1: cf:ad:c4:49:96:8f:6e:8a:30:8e:c7:55:7e:ff:67: da:c6:cf:9b:a5:d7:8e:02:68:44:ee:07:b5:be:06: 0b:b2:76:ac:06:78:b9:71:da:4d:de:5b:9b:5f:7f: 0b:f1:74:24:dd:64:05:fa:15:21:01:87:db:b4:3b: ca:a4:6f:f0:ee:e9:cd:dd:aa:7c:5a:02:30:d3:ba: 93:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:70:C4:2D:8B:AC:BD:6E:E5:82:A4:0A:16:F2:92:25:DE:5F:03:6C X509v3 Authority Key Identifier: keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:8a:c0:1d:4a:7f:9a:dd:f7:ed:c0:1b:13:df:7e:3b:5d:77: 03:27:bd:f5:f4:5b:4c:97:f5:31:eb:f5:72:ab:b2:be:ba:e2: 8d:5c:4f:f6:bf:fd:e2:36:c5:8a:c9:82:c9:45:cf:6b:35:41: 5b:16:46:74:08:dd:f5:96:be:d6:ce:84:46:42:ba:0b:a6:20: 77:61:80:57:ab:ca:e6:45:77:b0:ad:68:87:c6:a3:e0:fc:72: 71:6a:3c:57:6d:cc:e8:ed:61:82:4b:08:31:00:93:b2:26:b4: 99:e8:20:ee:16:74:d0:a8:51:2a:95:f1:52:a9:47:5a:93:5f: 66:69:9b:e0:22:34:fc:57:d1:69:6c:f6:1f:90:23:98:d1:fe: 38:1e:43:d8:9c:bf:03:dd:3f:91:a2:df:5d:3d:90:a8:b9:fe: b1:1e:04:7b:3f:31:6d:c6:4f:a7:40:87:5a:db:b4:fc:6e:bd: b5:83:49:91:02:07:97:78:7a:79:88:9e:c5:66:2d:6e:1c:2e: f2:50:d2:1f:bd:8c:6d:60:c5:8e:42:6e:7a:89:49:9a:93:12: 56:96:9c:43:57:2b:1a:cd:d1:28:7f:85:1b:a0:73:ba:9f:c8: e0:b8:fb:61:6c:75:0c:7c:3c:b7:2f:33:79:a0:f3:cd:6b:5d: 26:a2:9a:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlDTwEovLxKKCH9DlkwwK4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NTllYjYwNDAxOTNkZjA2ODEzNTA5MDVlNjM5ZDBlNThk NWY5ZGYwHhcNMjUxMjI4MTMwMjA0WhcNMjUxMjI5MTMwMjA0WjAzMTEwLwYDVQQD Eyg4NjcwYzQyZDhiYWNiZDZlZTU4MmE0MGExNmYyOTIyNWRlNWYwMzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri+QhJFeSECJUq4Fn4kt8QIv+cyI 9xDC6G1W2l8PmKaYex7fGdbEeAY9AGjxgsfjga8ZwMILBcSNDPe7X/67Zq9goo61 mB8Ric0EPTo6P+UrFKug2PjRDREIXKgVqxrLlTwy/s9B1DNC+d4/ihv8xzmZs2IW jeqCGrL1Wo2wbyRHL/YDJCSkeNMWllLilfdfW4UMIMCUwe09i547oXJJ2zZu4J60 olPUUdSVb0bnsFOIs8HPrcRJlo9uijCOx1V+/2faxs+bpdeOAmhE7ge1vgYLsnas Bni5cdpN3lubX38L8XQk3WQF+hUhAYfbtDvKpG/w7unN3ap8WgIw07qTlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZwxC2LrL1u5YKkChbykiXeXwNsMB8GA1UdIwQY MBaAFBZZ62BAGT3waBNQkF5jnQ5Y1fnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2Qt NTQ0ODU1Y2M0ZjU3LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2QtNTQ0ODU1Y2M0ZjU3 LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARIrAHUp/ mt337cAbE99+O113Aye99fRbTJf1Mev1cquyvrrijVxP9r/94jbFismCyUXPazVB WxZGdAjd9Za+1s6ERkK6C6Ygd2GAV6vK5kV3sK1oh8aj4PxycWo8V23M6O1hgksI MQCTsia0megg7hZ00KhRKpXxUqlHWpNfZmmb4CI0/FfRaWz2H5AjmNH+OB5D2Jy/ A90/kaLfXT2QqLn+sR4Eez8xbcZPp0CHWtu0/G69tYNJkQIHl3h6eYiexWYtbhwu 8lDSH72MbWDFjkJueolJmpMSVpacQ1crGs3RKH+FG6Bzup/I4Lj7YWx1DHw8ty8z eaDzzWtdJqKakw== -----END CERTIFICATE-----Generated at Sun Dec 28 20:12:34 2025 by rpki-client