This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft File: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json) Hash identifier: cNNKU9BBf8ky1U7pcnYr2pBMei0fZFHEKikAX5VCkU0= Subject key identifier: CE:39:48:47:AC:3B:92:81:9A:52:61:9D:0E:C5:71:04:F7:53:C0:39 Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8 Certificate issuer: /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8 Certificate serial: 019B3C7F85D60757E4BE4E5F55D9141DF84C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft Manifest number: 1718 Signing time: Sat 20 Dec 2025 16:02:28 +0000 Manifest this update: Sat 20 Dec 2025 16:02:28 +0000 Manifest next update: Sun 21 Dec 2025 16:02:28 +0000 Files and hashes: 1: T65vqqQCj0Js7DJ85sBppVKxPcU.roa (hash: FL22UNhyCGLfnbVMSxPZxrBCfuIiaLb00z7Ca3ye/lo=) 2: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: VqRMugqeAQwcHx15T8GMcC5YYFZbzYma9lFBhws1AQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:85:d6:07:57:e4:be:4e:5f:55:d9:14:1d:f8:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8 Validity Not Before: Dec 20 16:02:28 2025 GMT Not After : Dec 21 16:02:28 2025 GMT Subject: CN=ce394847ac3b92819a52619d0ec57104f753c039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ce:04:fc:4a:ce:55:c0:b9:d5:fd:b3:35:b7: 4a:38:a4:f3:b9:6b:8b:c0:eb:13:21:cd:ae:63:a8: e1:b5:ff:43:65:36:32:65:ca:98:17:22:57:ff:da: 6b:89:a1:30:d0:e6:b2:b2:ac:10:85:75:53:37:45: e2:ba:02:b4:f1:de:fd:60:de:2f:f3:3a:23:42:9c: ec:2e:b2:3f:64:33:89:30:f6:ab:67:9b:cf:37:9c: e3:5a:d2:89:46:3f:7c:54:36:d6:dd:90:db:20:ed: d5:9a:5f:d0:1b:05:cc:cb:69:ed:04:e6:b3:d8:24: 2f:6f:93:45:31:38:34:f2:11:06:30:17:de:1c:31: db:92:0c:41:50:b0:d6:1c:a2:fb:67:dd:ef:a7:8a: 31:76:e1:7e:d0:59:42:06:09:db:54:6c:2e:ca:cb: 41:0b:5a:02:00:f9:ee:81:d9:d3:65:16:f0:51:45: 2f:53:42:fd:04:b9:43:7e:b0:ce:e3:91:57:12:f8: 6b:31:75:83:a7:4d:3a:20:7b:80:26:07:8d:89:1c: 45:98:8f:15:10:41:2c:67:65:ff:84:10:0b:23:17: f4:27:43:b7:63:8c:86:3c:8e:77:ab:66:d4:25:e4: ae:82:d7:82:5d:10:1c:f6:51:e6:4b:46:1c:78:38: 84:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:39:48:47:AC:3B:92:81:9A:52:61:9D:0E:C5:71:04:F7:53:C0:39 X509v3 Authority Key Identifier: keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:b7:ff:c1:86:6d:cf:0f:2c:37:3d:d4:9d:90:c7:e0:06:e8: 27:a1:96:76:ae:a2:56:68:0d:7b:27:0a:37:cd:2f:4b:ac:9d: 98:91:c2:d2:1f:4a:3e:2d:db:e3:25:26:8c:68:c6:f0:76:41: 73:48:59:51:9b:21:89:b5:aa:a8:0c:09:a3:b6:ba:b3:4c:c0: e5:ce:ca:48:ed:70:35:91:4b:cf:4a:63:4d:31:be:5a:c9:f9: 1f:9e:5f:dd:cc:98:ed:2f:5c:21:f0:d9:1e:c0:2f:2d:8d:72: c9:e2:ab:09:df:60:7a:7e:24:5f:7e:0c:44:1e:70:42:59:35: 88:dc:30:99:25:6c:a9:e4:41:42:8c:52:4b:85:8a:62:bf:30: 72:ad:99:5d:54:07:89:55:ed:b2:99:ff:ac:33:6c:a8:d7:ff: 72:2d:50:cf:d5:fc:75:56:fb:72:05:76:a9:dd:ec:91:ed:24: ae:26:79:f1:35:6a:61:d0:3a:3e:1d:27:06:d3:f8:92:b8:6f: 77:71:d4:24:8b:36:ad:6c:9f:6e:51:f0:da:17:53:0f:0c:e9: 4a:2f:23:50:eb:e6:0e:38:9e:09:7c:eb:69:0c:14:6f:67:79: e5:16:f3:2d:5b:e7:79:b3:5f:83:df:05:77:74:99:47:6a:56: 6d:b2:68:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f4XWB1fkvk5fVdkUHfhMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYjNhMzRlM2RkMGE3MWQ0ZDllYWYzNThlYjQzZDhiNjhl NWUwZTgwHhcNMjUxMjIwMTYwMjI4WhcNMjUxMjIxMTYwMjI4WjAzMTEwLwYDVQQD EyhjZTM5NDg0N2FjM2I5MjgxOWE1MjYxOWQwZWM1NzEwNGY3NTNjMDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc4E/ErOVcC51f2zNbdKOKTzuWuL wOsTIc2uY6jhtf9DZTYyZcqYFyJX/9priaEw0OaysqwQhXVTN0XiugK08d79YN4v 8zojQpzsLrI/ZDOJMParZ5vPN5zjWtKJRj98VDbW3ZDbIO3Vml/QGwXMy2ntBOaz 2CQvb5NFMTg08hEGMBfeHDHbkgxBULDWHKL7Z93vp4oxduF+0FlCBgnbVGwuystB C1oCAPnugdnTZRbwUUUvU0L9BLlDfrDO45FXEvhrMXWDp006IHuAJgeNiRxFmI8V EEEsZ2X/hBALIxf0J0O3Y4yGPI53q2bUJeSugteCXRAc9lHmS0YceDiEtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM45SEesO5KBmlJhnQ7FcQT3U8A5MB8GA1UdIwQY MBaAFHyzo0490KcdTZ6vNY60PYto5eDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZjVkYzUtNjVlYi00YzA4LWFjNGQt ZjQ2YjVkNTdhNjg1LzEvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8yZjVkYzUtNjVlYi00YzA4LWFjNGQtZjQ2YjVkNTdhNjg1 LzEvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANrf/wYZt zw8sNz3UnZDH4AboJ6GWdq6iVmgNeycKN80vS6ydmJHC0h9KPi3b4yUmjGjG8HZB c0hZUZshibWqqAwJo7a6s0zA5c7KSO1wNZFLz0pjTTG+Wsn5H55f3cyY7S9cIfDZ HsAvLY1yyeKrCd9gen4kX34MRB5wQlk1iNwwmSVsqeRBQoxSS4WKYr8wcq2ZXVQH iVXtspn/rDNsqNf/ci1Qz9X8dVb7cgV2qd3ske0kriZ58TVqYdA6Ph0nBtP4krhv d3HUJIs2rWyfblHw2hdTDwzpSi8jUOvmDjieCXzraQwUb2d55RbzLVvnebNfg98F d3SZR2pWbbJo1Q== -----END CERTIFICATE-----Generated at Sat Dec 20 22:12:59 2025 by rpki-client