This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json) Hash identifier: ZtKQRryAlR2jcvgSeqhvL+f0jRYGRoTZou3/5GzQnko= Subject key identifier: 8C:D3:96:EA:3F:21:9B:B8:58:B4:A7:C1:BD:55:D9:D8:4C:69:6A:23 Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df Certificate serial: 019AF50BD2DBB67845BA72CD0DC77FDD3915 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft Manifest number: 15CC Signing time: Sat 06 Dec 2025 19:03:04 +0000 Manifest this update: Sat 06 Dec 2025 19:03:04 +0000 Manifest next update: Sun 07 Dec 2025 19:03:04 +0000 Files and hashes: 1: 8-v-Z7Xa6lfqMbl7evIHp25t1sA.roa (hash: BWcCx1HwRpdJveviEQtt8WgW8hrEfngJob3ia7RrZwQ=) 2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: Qy+rcLC1/Z5d/+wIOwuwMycBDIM5Wuzst36A7kp1suI=) 3: cFc0gNIOK5WxBeuSF5eiQkXoOKE.roa (hash: GkH9aMuKOzi/6cYcKbTikX2OvYkhD9zkPc0LnUJCl1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:d2:db:b6:78:45:ba:72:cd:0d:c7:7f:dd:39:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df Validity Not Before: Dec 6 19:03:04 2025 GMT Not After : Dec 7 19:03:04 2025 GMT Subject: CN=8cd396ea3f219bb858b4a7c1bd55d9d84c696a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:ef:7a:e4:84:6b:95:e8:16:03:54:fd:6b:a1: e2:ba:bb:9e:df:a0:79:bf:e4:61:eb:22:3c:07:aa: bb:02:99:0f:42:f6:1c:56:54:a2:2d:fa:62:0f:0d: 98:35:2d:49:60:7a:ad:d6:49:03:66:a3:a3:e8:b5: 03:4f:57:db:f2:8d:29:79:3f:8f:c5:cb:b1:54:8e: d7:7b:10:f3:f1:4e:a9:e1:07:b3:57:c3:e1:70:c4: dc:ae:93:25:06:a0:36:22:86:16:8c:7b:6c:d0:56: 09:e8:57:6b:55:e7:48:7d:d0:ec:f9:4d:ca:cc:6c: bf:38:8c:10:67:fa:2c:13:3e:0d:97:30:23:cf:bd: de:38:2f:36:84:68:57:fb:f7:34:eb:5d:1b:e9:ab: 12:15:fc:25:ec:c9:6a:5a:df:fd:fa:9b:ac:d4:e8: 33:28:c4:bf:89:43:9e:76:81:e5:d9:f0:73:3d:3a: 5e:0f:0a:d0:71:dc:12:24:dd:4f:e6:ae:66:87:06: 5a:03:7c:07:79:9a:59:0d:68:cf:dc:d3:86:45:9d: 65:c0:a8:c1:47:7b:a4:da:55:01:7e:3c:41:53:9f: 00:c8:79:58:2e:ba:4e:a9:d3:b2:9e:45:45:c0:f7: 03:90:3d:4d:b0:18:0b:f5:a4:0b:13:63:52:1b:ad: c8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D3:96:EA:3F:21:9B:B8:58:B4:A7:C1:BD:55:D9:D8:4C:69:6A:23 X509v3 Authority Key Identifier: keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:49:4d:a3:8a:3a:c9:66:6e:3f:01:89:a2:dc:2e:3c:1e:40: 8d:c7:8d:8d:91:3f:c3:bd:b0:9c:e2:08:dd:47:cb:48:67:1d: 74:66:5f:44:45:03:f0:ac:7b:66:88:01:6d:6e:b3:16:2e:9a: 00:2c:3d:db:d4:c6:54:17:68:67:44:b6:c5:f0:94:cb:68:b1: ce:a1:e9:bb:d6:55:7e:38:11:43:d0:17:47:e6:ea:ea:be:ee: b4:86:85:5f:fd:fa:82:f2:45:0f:90:5e:19:1f:f6:5d:1e:c0: 40:65:5e:ff:b4:9c:a4:ea:6e:2c:2d:16:5b:21:fa:1f:3a:ad: a3:82:1a:61:e8:3d:31:39:50:57:77:54:50:6c:49:ba:79:f0: 7f:b1:0a:72:28:3e:9e:00:46:06:a6:ca:24:0a:a4:50:c9:0b: 00:1e:20:8d:b1:98:98:e6:ea:ed:8c:d8:fc:b9:6f:c2:45:f4: 22:b5:99:06:6a:ff:16:3c:be:ae:48:78:0b:32:ab:46:ee:9e: 84:19:2e:b9:cf:05:29:7f:b4:20:da:f2:29:a8:80:53:29:6f: ec:54:1b:77:df:06:47:e1:3c:6e:34:cc:31:30:44:1f:3d:04: 05:9c:51:65:5b:bb:e2:2f:7b:ac:43:1d:b8:4f:e1:b3:ba:0c: a3:1f:56:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C9LbtnhFunLNDcd/3TkVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NTllYjYwNDAxOTNkZjA2ODEzNTA5MDVlNjM5ZDBlNThk NWY5ZGYwHhcNMjUxMjA2MTkwMzA0WhcNMjUxMjA3MTkwMzA0WjAzMTEwLwYDVQQD Eyg4Y2QzOTZlYTNmMjE5YmI4NThiNGE3YzFiZDU1ZDlkODRjNjk2YTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA++965IRrlegWA1T9a6Hiurue36B5 v+Rh6yI8B6q7ApkPQvYcVlSiLfpiDw2YNS1JYHqt1kkDZqOj6LUDT1fb8o0peT+P xcuxVI7XexDz8U6p4QezV8PhcMTcrpMlBqA2IoYWjHts0FYJ6FdrVedIfdDs+U3K zGy/OIwQZ/osEz4NlzAjz73eOC82hGhX+/c0610b6asSFfwl7MlqWt/9+pus1Ogz KMS/iUOedoHl2fBzPTpeDwrQcdwSJN1P5q5mhwZaA3wHeZpZDWjP3NOGRZ1lwKjB R3uk2lUBfjxBU58AyHlYLrpOqdOynkVFwPcDkD1NsBgL9aQLE2NSG63IEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzTluo/IZu4WLSnwb1V2dhMaWojMB8GA1UdIwQY MBaAFBZZ62BAGT3waBNQkF5jnQ5Y1fnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2Qt NTQ0ODU1Y2M0ZjU3LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2QtNTQ0ODU1Y2M0ZjU3 LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUlNo4o6 yWZuPwGJotwuPB5AjceNjZE/w72wnOII3UfLSGcddGZfREUD8Kx7ZogBbW6zFi6a ACw929TGVBdoZ0S2xfCUy2ixzqHpu9ZVfjgRQ9AXR+bq6r7utIaFX/36gvJFD5Be GR/2XR7AQGVe/7ScpOpuLC0WWyH6Hzqto4IaYeg9MTlQV3dUUGxJunnwf7EKcig+ ngBGBqbKJAqkUMkLAB4gjbGYmObq7YzY/LlvwkX0IrWZBmr/Fjy+rkh4CzKrRu6e hBkuuc8FKX+0INryKaiAUylv7FQbd98GR+E8bjTMMTBEHz0EBZxRZVu74i97rEMd uE/hs7oMox9WvQ== -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:37 2025 by rpki-client