This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft File: FL85E5txDE9yN-39iFGGVa85wyM.mft (raw, json) Hash identifier: sCrE6g6JAfq1cXwcBgwuJ8jTRQxjwJ3rFmkhOTMgN0g= Subject key identifier: D9:B2:91:AF:8F:1F:3D:5E:FE:15:8B:F3:20:97:1C:8C:62:BE:08:3B Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23 Certificate issuer: /CN=14bf39139b710c4f7237edfd88518655af39c323 Certificate serial: 019B397DA4781B515DBB646E68EE1DA145FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft Manifest number: 0D7D Signing time: Sat 20 Dec 2025 02:01:33 +0000 Manifest this update: Sat 20 Dec 2025 02:01:33 +0000 Manifest next update: Sun 21 Dec 2025 02:01:33 +0000 Files and hashes: 1: FL85E5txDE9yN-39iFGGVa85wyM.crl (hash: Efm5hG3LetuqRR8VwOzHxuds14UW+0WN5g2M4DDYMJ0=) 2: T8jVRfNtgOkoesNchTYMyWBMejA.roa (hash: odUOdpKN+tr75AiaB4U/yYO30gvxGiZ+PPW0U2k0wWk=) 3: _oI5hyBnCt55tCVsP54xRvG07cg.roa (hash: siBfTW9OHIW7tDQ3Efjyi7KuTusgOUvikxuMwP5Dkrs=) 4: h09V_pfLhbG06t0gQbFrPM7mXKs.roa (hash: 5yQRSQYWk0Fc992YjmOb7t6zzDvUZZ6yh9Kn/c45gMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:a4:78:1b:51:5d:bb:64:6e:68:ee:1d:a1:45:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323 Validity Not Before: Dec 20 02:01:33 2025 GMT Not After : Dec 21 02:01:33 2025 GMT Subject: CN=d9b291af8f1f3d5efe158bf320971c8c62be083b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b9:01:8f:9f:72:6a:3b:8e:00:fb:c2:89:63: 19:72:63:96:ad:fb:ad:d9:4d:ba:c5:47:0b:7c:69: de:d6:19:d0:9f:26:ab:5e:9b:77:0c:99:bf:be:8c: 00:4d:72:34:11:6c:44:37:05:dc:ad:df:af:9c:15: 08:c0:5f:db:db:13:74:a9:77:58:f6:60:65:38:58: 01:bc:10:08:17:ec:57:49:24:9c:74:e4:5c:3e:83: a0:76:24:72:48:bd:1d:b9:24:01:47:55:28:0d:c2: bf:62:01:b4:7a:2f:c1:3f:bf:b8:ec:9c:f2:56:07: 6d:56:7d:ab:1d:1f:82:17:2b:11:33:8f:b2:be:52: f0:9f:5e:1e:e4:ea:5e:c1:d8:d5:e8:e9:0b:67:2c: fb:b4:cb:34:dd:f7:6b:d0:1e:fe:5e:15:ce:8e:81: 20:6d:94:26:82:3d:87:dc:7d:cc:0b:59:5d:d6:d7: fa:80:a2:e6:5d:c9:7b:fb:26:ae:e0:1f:3b:5f:8e: 11:80:60:bb:ab:55:7a:19:0e:d8:b3:08:8f:d7:67: a9:3b:01:5c:b8:ae:f0:2e:c9:c8:1e:e3:ee:ea:ab: 22:b6:26:b0:d1:1a:73:9e:70:2f:84:cb:b1:1c:2a: 0d:8e:d3:76:04:6b:e5:11:b8:64:26:cb:b6:3b:24: 04:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B2:91:AF:8F:1F:3D:5E:FE:15:8B:F3:20:97:1C:8C:62:BE:08:3B X509v3 Authority Key Identifier: keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:9a:58:73:1a:fb:3e:58:b6:08:19:aa:b3:ee:a0:e9:2f:fb: f2:d9:3a:f9:66:a2:f6:84:d2:d5:7a:fb:9b:b9:f8:4e:7b:df: dc:ae:09:67:50:c6:77:58:a9:0d:99:69:e9:d4:24:2f:49:0f: 16:91:f2:b8:1d:6b:df:07:6a:3f:e6:a6:4c:e4:55:89:24:44: e7:18:c6:4b:bf:fc:38:c5:40:9e:e2:4f:d2:48:06:f6:df:c1: c1:ce:62:eb:8c:ae:c2:a5:3f:9b:fb:2f:b0:6d:e8:f7:22:9b: d3:7d:e5:4b:94:7c:33:1c:d6:fd:e7:00:09:d9:1c:d5:98:55: 96:b9:df:65:3a:fa:df:88:b2:30:dd:b4:ea:06:15:29:a6:98: e5:e9:68:d0:de:f2:d5:1f:8f:90:5e:5e:04:d2:a7:c1:4e:42: d9:56:cf:65:21:eb:ea:aa:18:b6:7e:13:13:aa:dd:94:59:25: e2:67:d9:b3:c5:d2:2f:42:6b:b5:c2:ea:51:8e:43:2a:63:7a: 0b:c1:54:ee:58:ad:bf:02:4a:62:41:21:93:66:70:31:d9:5f: 89:7a:0c:f5:a6:b5:cd:7a:04:7d:cf:39:2e:c5:61:76:20:d1: ef:0b:25:5d:ab:5a:35:d2:e1:aa:f2:0c:0a:04:87:c8:81:5a: 99:57:ef:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5faR4G1Fdu2RuaO4doUX6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmYzOTEzOWI3MTBjNGY3MjM3ZWRmZDg4NTE4NjU1YWYz OWMzMjMwHhcNMjUxMjIwMDIwMTMzWhcNMjUxMjIxMDIwMTMzWjAzMTEwLwYDVQQD EyhkOWIyOTFhZjhmMWYzZDVlZmUxNThiZjMyMDk3MWM4YzYyYmUwODNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7kBj59yajuOAPvCiWMZcmOWrfut 2U26xUcLfGne1hnQnyarXpt3DJm/vowATXI0EWxENwXcrd+vnBUIwF/b2xN0qXdY 9mBlOFgBvBAIF+xXSSScdORcPoOgdiRySL0duSQBR1UoDcK/YgG0ei/BP7+47Jzy VgdtVn2rHR+CFysRM4+yvlLwn14e5OpewdjV6OkLZyz7tMs03fdr0B7+XhXOjoEg bZQmgj2H3H3MC1ld1tf6gKLmXcl7+yau4B87X44RgGC7q1V6GQ7YswiP12epOwFc uK7wLsnIHuPu6qsitiaw0RpznnAvhMuxHCoNjtN2BGvlEbhkJsu2OyQE6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmyka+PHz1e/hWL8yCXHIxivgg7MB8GA1UdIwQY MBaAFBS/ORObcQxPcjft/YhRhlWvOcMjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw4NUU1dHhERTl5Ti0zOWlGR0dWYTg1d3lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iOTYyNTktMzNiOC00NTRhLThjNWYt YTg2MmI4ODU5M2EwLzEvRkw4NUU1dHhERTl5Ti0zOWlGR0dWYTg1d3lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iOTYyNTktMzNiOC00NTRhLThjNWYtYTg2MmI4ODU5M2Ew LzEvRkw4NUU1dHhERTl5Ti0zOWlGR0dWYTg1d3lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvppYcxr7 Pli2CBmqs+6g6S/78tk6+Wai9oTS1Xr7m7n4Tnvf3K4JZ1DGd1ipDZlp6dQkL0kP FpHyuB1r3wdqP+amTORViSRE5xjGS7/8OMVAnuJP0kgG9t/Bwc5i64yuwqU/m/sv sG3o9yKb033lS5R8MxzW/ecACdkc1ZhVlrnfZTr634iyMN206gYVKaaY5elo0N7y 1R+PkF5eBNKnwU5C2VbPZSHr6qoYtn4TE6rdlFkl4mfZs8XSL0JrtcLqUY5DKmN6 C8FU7litvwJKYkEhk2ZwMdlfiXoM9aa1zXoEfc85LsVhdiDR7wslXataNdLhqvIM CgSHyIFamVfvrA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:40:19 2025 by rpki-client