This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft File: FLcYAN3cSX9g-e23gzyUlzq33Bw.mft (raw, json) Hash identifier: RPQCuN0+qqvSFsTtJHeJ6RKDPkuOesHz78cKHyX/GLU= Subject key identifier: FA:4C:FC:BE:2A:44:40:E3:BE:DE:6A:71:8F:94:F1:76:B5:4F:45:59 Authority key identifier: 14:B7:18:00:DD:DC:49:7F:60:F9:ED:B7:83:3C:94:97:3A:B7:DC:1C Certificate issuer: /CN=14b71800dddc497f60f9edb7833c94973ab7dc1c Certificate serial: 019B55CFDE3A1283B2428E45881682B3F85B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft Manifest number: 1681 Signing time: Thu 25 Dec 2025 14:00:44 +0000 Manifest this update: Thu 25 Dec 2025 14:00:44 +0000 Manifest next update: Fri 26 Dec 2025 14:00:44 +0000 Files and hashes: 1: FLcYAN3cSX9g-e23gzyUlzq33Bw.crl (hash: SrqtnOzunY4dUYDgm+hNPXDgX2HEDJIo5h9RQBoLQ68=) 2: jh-TOxpxIUBWeRHqyE_TsQ3xZPw.roa (hash: h4140lmsN13+jNtLubDuYn8kTL6T4/sAQ4MD0yMdaVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:cf:de:3a:12:83:b2:42:8e:45:88:16:82:b3:f8:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14b71800dddc497f60f9edb7833c94973ab7dc1c Validity Not Before: Dec 25 14:00:44 2025 GMT Not After : Dec 26 14:00:44 2025 GMT Subject: CN=fa4cfcbe2a4440e3bede6a718f94f176b54f4559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:76:79:91:d0:e2:ca:25:65:ec:b0:86:c1:94: 8e:10:17:89:bd:7a:20:8f:8d:ef:63:88:80:40:b6: c2:24:40:8a:79:f0:6c:0f:38:bc:41:5e:98:2a:68: 89:c5:ab:76:33:d1:98:0b:de:1f:54:2d:da:f4:b9: b8:6f:d2:fa:b3:f3:5d:84:b7:44:ab:f6:f9:2e:40: 2b:c2:d4:f8:a0:ec:89:b4:ef:b8:df:0c:04:ab:b2: e8:03:64:47:ae:98:60:c4:52:cc:ff:7e:bf:31:bb: c4:db:d3:92:6e:92:05:6a:79:53:3b:2e:2c:8d:07: 0c:28:7c:39:cf:20:5b:9d:bd:d2:0c:50:6d:35:cb: bd:53:cd:30:71:9f:91:30:f4:fb:89:86:c1:be:c8: 48:f0:2d:15:d5:e3:d9:58:40:54:53:36:d5:e9:ae: 84:1d:38:d7:a3:c9:25:d1:8f:1b:f5:11:c9:3e:69: ef:09:80:fc:c4:2e:e4:7a:df:35:c1:bb:72:27:7c: 7b:bd:b3:72:72:f9:43:59:b7:bb:94:2a:08:02:6d: cc:d9:ca:8a:cd:c4:f0:38:5a:1f:64:5f:c8:5d:04: 79:fa:11:c5:10:73:41:6f:37:7c:78:1f:da:33:bf: a6:11:41:98:22:0f:2d:cc:cc:65:9e:a5:74:2c:71: a1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4C:FC:BE:2A:44:40:E3:BE:DE:6A:71:8F:94:F1:76:B5:4F:45:59 X509v3 Authority Key Identifier: keyid:14:B7:18:00:DD:DC:49:7F:60:F9:ED:B7:83:3C:94:97:3A:B7:DC:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:be:d9:59:b8:71:43:8d:af:bd:a7:4b:8a:ab:aa:45:54:d4: f6:2e:19:72:77:27:20:0b:63:3f:0f:08:e6:36:e0:61:f3:31: 63:03:a2:64:b3:97:23:55:85:77:73:6f:94:6e:16:73:91:ef: bf:28:aa:4f:a6:1b:5d:64:3f:ad:27:f6:00:e9:a6:0a:74:60: 23:8d:4d:f4:fc:d2:32:d4:c1:12:d3:80:37:69:00:83:5d:05: 4c:83:08:55:5a:14:d7:36:0a:2e:f6:b6:f0:c0:48:0d:7d:bd: 01:19:77:54:8d:57:6a:5d:1d:48:6a:a6:5f:92:5b:99:87:c6: c4:65:c4:ef:00:71:5c:53:c2:1a:d2:53:05:e0:b1:01:c1:df: 05:2a:c6:db:a6:c2:f0:d8:2b:26:cb:d0:19:a9:2b:81:ff:f4: c5:20:f3:96:06:a2:e5:a8:90:5a:74:0c:e0:a6:8b:94:59:60: 53:3e:26:65:db:e5:ed:2f:9e:32:da:98:b7:b5:3a:cb:7c:d5: c2:36:8f:68:04:36:fc:bf:77:79:5e:3d:b1:42:fe:a0:85:59: f7:a6:b3:b4:c7:1b:55:24:3c:65:32:70:18:7d:d8:4d:cc:4e: d8:7e:4c:bd:14:c6:6d:5a:bb:f0:35:e1:e9:5a:1c:e0:57:fe: 65:a4:94:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVz946EoOyQo5FiBaCs/hbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YjcxODAwZGRkYzQ5N2Y2MGY5ZWRiNzgzM2M5NDk3M2Fi N2RjMWMwHhcNMjUxMjI1MTQwMDQ0WhcNMjUxMjI2MTQwMDQ0WjAzMTEwLwYDVQQD EyhmYTRjZmNiZTJhNDQ0MGUzYmVkZTZhNzE4Zjk0ZjE3NmI1NGY0NTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHZ5kdDiyiVl7LCGwZSOEBeJvXog j43vY4iAQLbCJECKefBsDzi8QV6YKmiJxat2M9GYC94fVC3a9Lm4b9L6s/NdhLdE q/b5LkArwtT4oOyJtO+43wwEq7LoA2RHrphgxFLM/36/MbvE29OSbpIFanlTOy4s jQcMKHw5zyBbnb3SDFBtNcu9U80wcZ+RMPT7iYbBvshI8C0V1ePZWEBUUzbV6a6E HTjXo8kl0Y8b9RHJPmnvCYD8xC7ket81wbtyJ3x7vbNycvlDWbe7lCoIAm3M2cqK zcTwOFofZF/IXQR5+hHFEHNBbzd8eB/aM7+mEUGYIg8tzMxlnqV0LHGh1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpM/L4qREDjvt5qcY+U8Xa1T0VZMB8GA1UdIwQY MBaAFBS3GADd3El/YPntt4M8lJc6t9wcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkxjWUFOM2NTWDlnLWUyM2d6eVVsenEzM0J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80MTVkNGItZjdhNi00OWQ2LWE3YWQt ZGRmMGI4YjA5NjE2LzEvRkxjWUFOM2NTWDlnLWUyM2d6eVVsenEzM0J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy80MTVkNGItZjdhNi00OWQ2LWE3YWQtZGRmMGI4YjA5NjE2 LzEvRkxjWUFOM2NTWDlnLWUyM2d6eVVsenEzM0J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAub7ZWbhx Q42vvadLiquqRVTU9i4ZcncnIAtjPw8I5jbgYfMxYwOiZLOXI1WFd3NvlG4Wc5Hv vyiqT6YbXWQ/rSf2AOmmCnRgI41N9PzSMtTBEtOAN2kAg10FTIMIVVoU1zYKLva2 8MBIDX29ARl3VI1Xal0dSGqmX5JbmYfGxGXE7wBxXFPCGtJTBeCxAcHfBSrG26bC 8NgrJsvQGakrgf/0xSDzlgai5aiQWnQM4KaLlFlgUz4mZdvl7S+eMtqYt7U6y3zV wjaPaAQ2/L93eV49sUL+oIVZ96aztMcbVSQ8ZTJwGH3YTcxO2H5MvRTGbVq78DXh 6Voc4Ff+ZaSUhA== -----END CERTIFICATE-----Generated at Thu Dec 25 22:15:49 2025 by rpki-client