This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft File: FL8A3_gGMjG9mWdomeq-q6M7xdk.mft (raw, json) Hash identifier: zgSvnFt4+++U2d1qoSfNm/SxgHl4FEu1IxPJ8SowqXE= Subject key identifier: AE:9C:FE:61:88:F2:6E:55:4A:68:23:CD:F9:96:CB:86:DC:DC:AF:51 Authority key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9 Certificate issuer: /CN=14bf00dff8063231bd99676899eabeaba33bc5d9 Certificate serial: 019B6A32B8DDD1DC521E5F273C6D80A44F9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft Manifest number: 17A1 Signing time: Mon 29 Dec 2025 13:01:07 +0000 Manifest this update: Mon 29 Dec 2025 13:01:07 +0000 Manifest next update: Tue 30 Dec 2025 13:01:07 +0000 Files and hashes: 1: Csk6MxobRULFjoV8vwBDWTrNIjY.roa (hash: /qSTaCee19sT1splpe2clgwA+iPwSFp3O0YpahxqTpY=) 2: FL8A3_gGMjG9mWdomeq-q6M7xdk.crl (hash: orKVzK+G6ALcgjoW/Y2XmCp5ayC7NSnDhsLsjTmHuVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:32:b8:dd:d1:dc:52:1e:5f:27:3c:6d:80:a4:4f:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bf00dff8063231bd99676899eabeaba33bc5d9 Validity Not Before: Dec 29 13:01:07 2025 GMT Not After : Dec 30 13:01:07 2025 GMT Subject: CN=ae9cfe6188f26e554a6823cdf996cb86dcdcaf51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ac:f5:ca:7f:c3:59:0d:08:3e:21:21:b3:da: 3a:5c:94:cb:a4:8f:4c:b2:c3:c4:0e:06:13:c4:b1: 1b:74:fa:dd:24:31:d7:3d:ae:89:6d:cf:db:6a:50: e2:fb:2d:40:d1:fe:7f:c6:d3:47:07:b1:1c:88:d6: 84:57:b9:c4:f0:9f:eb:0f:cc:2f:ea:76:59:38:ce: 8e:29:31:a1:4a:53:63:d5:fa:3b:1d:5a:22:5e:c1: aa:ea:16:70:7e:e5:88:02:36:da:d8:d7:68:6e:a5: f5:b1:ad:3f:7d:f4:e0:1a:03:87:b7:2d:71:a1:ab: 3f:3e:5a:12:53:1d:98:4d:46:3f:7a:42:0b:15:8f: 5c:3e:39:9e:dd:20:f0:0b:5a:64:55:59:fa:30:b7: 50:7f:e8:7b:c6:08:04:04:76:47:c6:6c:31:f7:c5: 55:d4:8b:29:1a:fd:92:8a:50:99:a2:79:cf:13:1c: f2:dd:6d:85:77:7b:c3:59:e1:4c:73:6d:de:43:a3: 29:2c:1c:40:45:a6:bd:c2:4d:23:7b:68:e5:42:3c: aa:9a:f7:5a:01:b5:81:5b:84:f1:98:6b:11:67:28: 39:82:95:69:d3:63:1d:29:f7:91:01:b0:5c:51:19: 74:cc:fb:27:86:4b:b9:4e:ee:27:6c:4a:fa:df:a3: 7e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9C:FE:61:88:F2:6E:55:4A:68:23:CD:F9:96:CB:86:DC:DC:AF:51 X509v3 Authority Key Identifier: keyid:14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:78:e6:0c:cc:4d:d8:b9:3e:d3:f9:fa:c0:0f:e6:5f:da:67: 62:80:ce:99:2f:70:c0:61:9f:ef:b8:b1:b5:3d:9a:e9:72:79: 29:61:28:c7:25:d5:5d:27:ff:34:0c:4c:19:ef:fb:16:f7:0c: 94:9c:74:39:3a:82:78:44:13:3b:d3:95:f3:ad:96:dc:24:ee: c7:9e:14:d0:90:15:80:54:f4:b7:26:ef:5f:b3:df:fe:64:78: db:08:3d:7b:c9:44:49:a6:f7:09:1b:bc:89:c6:a0:51:a3:ec: 69:70:8e:04:f9:34:b4:86:93:3a:17:49:50:a3:7a:c6:28:2a: 8f:31:d5:1a:be:4a:06:2c:21:57:8f:77:8e:56:1d:0e:67:3f: 98:26:34:c5:1e:2a:0d:11:73:da:b5:bb:80:7b:d9:04:44:0e: 2f:a8:39:34:12:e6:ac:da:d6:37:d2:ad:4b:d6:2e:0b:47:e6: 47:36:e5:a3:2c:f0:3b:7d:a9:76:a8:e3:48:17:af:c0:6e:16: ff:a1:08:03:d9:09:89:d7:ae:5b:ca:48:0a:02:4c:73:d9:42: 0c:03:21:1e:74:c7:6f:05:82:48:49:f5:22:1c:5f:04:4b:8d: 1a:fc:1d:e4:38:05:f8:5f:ff:85:9a:81:9c:8c:6d:11:45:73: dc:83:5f:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqMrjd0dxSHl8nPG2ApE+fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmYwMGRmZjgwNjMyMzFiZDk5Njc2ODk5ZWFiZWFiYTMz YmM1ZDkwHhcNMjUxMjI5MTMwMTA3WhcNMjUxMjMwMTMwMTA3WjAzMTEwLwYDVQQD EyhhZTljZmU2MTg4ZjI2ZTU1NGE2ODIzY2RmOTk2Y2I4NmRjZGNhZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0az1yn/DWQ0IPiEhs9o6XJTLpI9M ssPEDgYTxLEbdPrdJDHXPa6Jbc/balDi+y1A0f5/xtNHB7EciNaEV7nE8J/rD8wv 6nZZOM6OKTGhSlNj1fo7HVoiXsGq6hZwfuWIAjba2NdobqX1sa0/ffTgGgOHty1x oas/PloSUx2YTUY/ekILFY9cPjme3SDwC1pkVVn6MLdQf+h7xggEBHZHxmwx98VV 1IspGv2SilCZonnPExzy3W2Fd3vDWeFMc23eQ6MpLBxARaa9wk0je2jlQjyqmvda AbWBW4TxmGsRZyg5gpVp02MdKfeRAbBcURl0zPsnhku5Tu4nbEr636N+DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6c/mGI8m5VSmgjzfmWy4bc3K9RMB8GA1UdIwQY MBaAFBS/AN/4BjIxvZlnaJnqvqujO8XZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw4QTNfZ0dNakc5bVdkb21lcS1xNk03eGRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS85OTZjNzItYjRhOS00MDU4LWJkZjgt YmQyZTc3Y2Q0NzkzLzEvRkw4QTNfZ0dNakc5bVdkb21lcS1xNk03eGRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS85OTZjNzItYjRhOS00MDU4LWJkZjgtYmQyZTc3Y2Q0Nzkz LzEvRkw4QTNfZ0dNakc5bVdkb21lcS1xNk03eGRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVnjmDMxN 2Lk+0/n6wA/mX9pnYoDOmS9wwGGf77ixtT2a6XJ5KWEoxyXVXSf/NAxMGe/7FvcM lJx0OTqCeEQTO9OV862W3CTux54U0JAVgFT0tybvX7Pf/mR42wg9e8lESab3CRu8 icagUaPsaXCOBPk0tIaTOhdJUKN6xigqjzHVGr5KBiwhV493jlYdDmc/mCY0xR4q DRFz2rW7gHvZBEQOL6g5NBLmrNrWN9KtS9YuC0fmRzbloyzwO32pdqjjSBevwG4W /6EIA9kJideuW8pICgJMc9lCDAMhHnTHbwWCSEn1IhxfBEuNGvwd5DgF+F//hZqB nIxtEUVz3INfWQ== -----END CERTIFICATE-----Generated at Mon Dec 29 22:39:17 2025 by rpki-client