This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft File: flyFKPgXh8SJxUqZODkmn1prH5Q.mft (raw, json) Hash identifier: xGhxHVnSQ8IKdsSiOp8IIQJRjTX1whcpnhoP9lrmV+I= Subject key identifier: 20:9C:0C:1A:22:FA:72:51:B4:B0:E9:FF:12:3F:68:2A:21:73:87:16 Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94 Certificate issuer: /CN=7e5c8528f81787c489c54a993839269f5a6b1f94 Certificate serial: 019B73A3C48AE5440E01D7DFAE7D868C5D60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft Manifest number: 17A7 Signing time: Wed 31 Dec 2025 09:01:10 +0000 Manifest this update: Wed 31 Dec 2025 09:01:10 +0000 Manifest next update: Thu 01 Jan 2026 09:01:10 +0000 Files and hashes: 1: flyFKPgXh8SJxUqZODkmn1prH5Q.crl (hash: LGg1RVWzPRFkC5Yp+9TLzp+7CSzteUrQP9iSCsKGtis=) 2: hfVNxhpqjhtY0Y5pPH1kyqqYbyE.roa (hash: aFX0mNsdzdwNbH9dkbmbgQ2YlhtWRYm/NSgRF7fVXw4=) 3: qlFHFeROOID5WaWVEHwvwxWAzLw.roa (hash: //F8owzBylzzc3mWkvQYIjr2mTOF+4WmUYspBcjO8y4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 08:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:a3:c4:8a:e5:44:0e:01:d7:df:ae:7d:86:8c:5d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94 Validity Not Before: Dec 31 09:01:10 2025 GMT Not After : Jan 1 09:01:10 2026 GMT Subject: CN=209c0c1a22fa7251b4b0e9ff123f682a21738716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b2:48:25:a6:9d:fa:0c:d4:cb:0a:a6:0a:61: 1e:b3:50:91:7b:d7:d7:05:4b:75:b9:6c:56:19:e3: 3b:93:4b:46:98:a4:80:65:5c:ff:d4:56:68:5e:e9: e2:82:05:35:4d:61:06:34:d4:ba:4e:15:dd:49:be: 4a:6f:ed:5a:30:b2:62:00:f0:af:3a:c4:77:c2:9f: 71:2f:ba:70:96:a4:4f:f3:75:e3:a0:bf:e1:41:43: 58:1d:0d:39:ba:35:7d:0f:b6:2c:b5:d4:3e:92:ca: 00:9d:3e:b4:4a:2e:1b:03:78:45:ea:31:8f:01:cb: e8:da:ae:dd:f0:45:c1:9b:66:d9:d0:e8:56:7b:e6: 74:70:4a:35:de:b8:74:77:d5:f8:e9:71:ad:aa:e7: b1:8e:31:a5:7c:8b:4d:1e:63:3a:38:85:61:29:f3: 84:36:4b:04:85:68:85:5d:26:fe:ec:bb:4c:5c:6e: 03:47:bd:17:fe:c4:21:03:3a:09:cf:07:5a:cc:ba: 2a:eb:8e:66:7d:be:8d:70:25:4e:be:a4:39:e7:2b: 81:3f:83:c3:77:39:c6:44:15:9b:c0:83:b8:ad:a6: 63:84:12:c1:a6:f2:2f:ee:c8:0c:10:02:2d:fc:ef: fe:f6:e4:5e:88:84:90:51:17:7a:d3:c6:21:08:0d: cf:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9C:0C:1A:22:FA:72:51:B4:B0:E9:FF:12:3F:68:2A:21:73:87:16 X509v3 Authority Key Identifier: keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:1b:bd:00:e1:44:c9:77:90:0a:2f:75:98:b0:7b:d9:85:07: e3:3a:b9:84:75:6e:cf:91:34:c0:f4:e3:a7:e0:6f:c6:d6:7f: c4:2c:51:a0:25:7f:f1:82:64:31:4f:d4:8a:07:f3:0f:3a:24: 9d:61:0d:89:5d:0f:aa:07:2f:0b:7f:10:a8:ea:57:59:4d:c3: 63:6e:ef:1b:ce:99:19:81:3b:ba:a1:ee:39:11:c8:31:fb:ca: 9e:97:90:1e:df:60:79:0c:5b:e1:6c:62:6d:c5:a6:ea:13:f3: d5:44:a6:83:28:35:1d:f8:23:e5:d5:01:a6:27:7d:2f:cc:25: f8:9c:58:1f:2a:7f:77:00:5c:dc:dc:ae:0c:3c:de:f1:51:59: 8d:71:df:d0:d2:e1:ba:0b:48:d2:82:92:82:05:cc:13:ac:63: cc:7d:26:2a:f5:7d:1e:4b:92:0d:e8:cf:d5:58:fe:64:5f:ea: 22:17:2e:a9:98:96:9d:24:47:92:fc:2f:2d:99:e0:17:6b:01: a4:e3:dd:80:86:6d:c4:87:19:29:29:a3:6b:06:55:93:74:f4: 7d:35:ba:96:83:c3:0c:8b:52:2d:5c:bb:5d:90:ec:97:73:f2: 8f:b1:fb:4b:e0:44:d4:f8:61:7d:82:e7:09:fd:76:d2:f0:ec: c5:bc:d6:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtzo8SK5UQOAdffrn2GjF1gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNWM4NTI4ZjgxNzg3YzQ4OWM1NGE5OTM4MzkyNjlmNWE2 YjFmOTQwHhcNMjUxMjMxMDkwMTEwWhcNMjYwMTAxMDkwMTEwWjAzMTEwLwYDVQQD EygyMDljMGMxYTIyZmE3MjUxYjRiMGU5ZmYxMjNmNjgyYTIxNzM4NzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7JIJaad+gzUywqmCmEes1CRe9fX BUt1uWxWGeM7k0tGmKSAZVz/1FZoXuniggU1TWEGNNS6ThXdSb5Kb+1aMLJiAPCv OsR3wp9xL7pwlqRP83XjoL/hQUNYHQ05ujV9D7YstdQ+ksoAnT60Si4bA3hF6jGP Acvo2q7d8EXBm2bZ0OhWe+Z0cEo13rh0d9X46XGtquexjjGlfItNHmM6OIVhKfOE NksEhWiFXSb+7LtMXG4DR70X/sQhAzoJzwdazLoq645mfb6NcCVOvqQ55yuBP4PD dznGRBWbwIO4raZjhBLBpvIv7sgMEAIt/O/+9uReiISQURd608YhCA3POQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCcDBoi+nJRtLDp/xI/aCohc4cWMB8GA1UdIwQY MBaAFH5chSj4F4fEicVKmTg5Jp9aax+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmx5RktQZ1hoOFNKeFVxWk9Ea21uMXBySDVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYTEwYjUtMjFmNi00NmI5LWFhZDYt M2Y3YTNlMDI1ZThiLzEvZmx5RktQZ1hoOFNKeFVxWk9Ea21uMXBySDVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lYTEwYjUtMjFmNi00NmI5LWFhZDYtM2Y3YTNlMDI1ZThi LzEvZmx5RktQZ1hoOFNKeFVxWk9Ea21uMXBySDVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixu9AOFE yXeQCi91mLB72YUH4zq5hHVuz5E0wPTjp+BvxtZ/xCxRoCV/8YJkMU/UigfzDzok nWENiV0PqgcvC38QqOpXWU3DY27vG86ZGYE7uqHuORHIMfvKnpeQHt9geQxb4Wxi bcWm6hPz1USmgyg1Hfgj5dUBpid9L8wl+JxYHyp/dwBc3NyuDDze8VFZjXHf0NLh ugtI0oKSggXME6xjzH0mKvV9HkuSDejP1Vj+ZF/qIhcuqZiWnSRHkvwvLZngF2sB pOPdgIZtxIcZKSmjawZVk3T0fTW6loPDDItSLVy7XZDsl3Pyj7H7S+BE1PhhfYLn Cf120vDsxbzWpg== -----END CERTIFICATE-----Generated at Wed Dec 31 11:02:41 2025 by rpki-client