This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft File: flNU4TNHCPGAASuyN6lfn6x6Tlw.mft (raw, json) Hash identifier: hPTqipm2cRY6DIRaff3mIwu8Ncv9Mb4AeetMrD2qbew= Subject key identifier: 6E:CA:EC:AD:79:6F:76:6E:68:37:21:3E:45:97:7F:FB:05:9E:32:9B Authority key identifier: 7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C Certificate issuer: /CN=7e5354e1334708f180012bb237a95f9fac7a4e5c Certificate serial: 019B39EB0A717BE5DC8C991FA9E90F70756F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft Manifest number: 0A8F Signing time: Sat 20 Dec 2025 04:01:03 +0000 Manifest this update: Sat 20 Dec 2025 04:01:03 +0000 Manifest next update: Sun 21 Dec 2025 04:01:03 +0000 Files and hashes: 1: 7NZ3oQkMOQoPZU36C6qwxb2VoVE.roa (hash: 47N6P40TbSFw4GF5u3qAezQZQpvVncE6hSSscr+AiT4=) 2: flNU4TNHCPGAASuyN6lfn6x6Tlw.crl (hash: yHCVir+iamp97hz3FF77Cznj2MHyndzcLFaroBxyg3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.crl rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:0a:71:7b:e5:dc:8c:99:1f:a9:e9:0f:70:75:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e5354e1334708f180012bb237a95f9fac7a4e5c Validity Not Before: Dec 20 04:01:03 2025 GMT Not After : Dec 21 04:01:03 2025 GMT Subject: CN=6ecaecad796f766e6837213e45977ffb059e329b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:42:cf:d5:1b:81:4d:db:8e:38:e6:b7:5a:8f: 63:5c:9d:cc:1d:84:8b:37:ce:ed:cf:06:3d:a7:db: cc:a9:6e:ef:6e:ec:25:26:f7:29:63:e0:e6:f7:02: 44:11:6a:c1:90:27:02:3c:8b:8d:35:1f:3d:40:05: d1:22:48:75:0b:96:27:e4:ce:b2:4e:53:7b:b7:da: 0c:31:9c:15:d5:f9:b6:1b:43:fe:f0:2d:d3:c9:3f: ef:2a:36:6c:b9:18:7c:fa:ec:56:28:68:92:55:f7: e2:75:ab:b0:d1:3a:7a:92:52:bd:70:95:01:39:7a: 5f:d3:72:a7:27:4f:72:85:4f:9e:0e:58:56:a5:3f: 5b:49:f4:14:f0:25:96:65:76:f8:61:be:94:d7:4d: d3:ef:65:93:d2:52:ab:3e:f5:53:47:f5:2b:ec:62: c5:15:9d:16:38:97:62:fb:a1:15:96:5d:48:83:f9: 25:d7:6f:bf:c5:6b:5f:d9:00:fd:fc:7a:ee:f9:8b: 8a:25:9c:99:df:1f:2d:eb:01:14:72:14:a0:0b:a4: 9c:72:bc:e3:a9:c2:aa:e3:6b:02:94:eb:8d:c5:cc: c6:5c:b8:69:1b:95:7f:b8:8e:ee:71:e2:09:28:58: b5:8a:1e:48:f0:2f:bf:63:95:17:5c:82:17:9a:45: 5d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:CA:EC:AD:79:6F:76:6E:68:37:21:3E:45:97:7F:FB:05:9E:32:9B X509v3 Authority Key Identifier: keyid:7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:1d:2e:35:55:84:1a:41:72:78:2c:78:4b:cd:ea:c1:ab:60: d0:3f:66:23:3d:93:8d:81:ee:04:ac:70:32:14:1f:75:27:24: 70:99:ff:1c:e7:e8:5c:cb:0f:76:90:33:9f:54:46:65:b9:ea: 03:d6:5b:a2:9d:ff:3b:dd:50:74:d6:97:72:25:5e:c8:e6:8e: ad:32:72:c0:58:fa:a0:1e:cd:c4:dc:b0:90:58:d0:f4:63:fd: 8e:36:cf:60:53:63:64:c9:c5:d7:a4:ba:b7:d5:35:5f:63:73: 54:7e:cf:cd:46:0f:e4:2c:ec:8d:c2:96:1d:ac:5b:4d:3d:a6: 8f:c1:3e:81:dd:73:c7:00:af:50:a7:b3:37:c1:f9:e9:c6:2f: 89:7f:d3:60:e5:3b:c1:af:8c:d4:68:2d:a1:74:b4:df:28:91: 98:c2:49:5c:64:e8:42:2d:9c:86:9a:79:d6:91:b6:d6:5a:d8: 01:4f:95:01:cc:8e:56:71:0a:b7:08:64:b9:1a:c2:04:64:d4: a2:fb:17:0c:0b:ea:c1:83:9e:b1:f5:67:7f:1d:7c:ab:53:b4: 8f:9f:06:22:87:5e:ad:59:9a:a7:03:d8:56:86:89:29:66:19: a9:c4:35:1f:cb:3d:4b:b5:f6:b6:29:b9:f4:a1:ff:71:de:f5: a4:53:73:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56wpxe+XcjJkfqekPcHVvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNTM1NGUxMzM0NzA4ZjE4MDAxMmJiMjM3YTk1ZjlmYWM3 YTRlNWMwHhcNMjUxMjIwMDQwMTAzWhcNMjUxMjIxMDQwMTAzWjAzMTEwLwYDVQQD Eyg2ZWNhZWNhZDc5NmY3NjZlNjgzNzIxM2U0NTk3N2ZmYjA1OWUzMjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuELP1RuBTduOOOa3Wo9jXJ3MHYSL N87tzwY9p9vMqW7vbuwlJvcpY+Dm9wJEEWrBkCcCPIuNNR89QAXRIkh1C5Yn5M6y TlN7t9oMMZwV1fm2G0P+8C3TyT/vKjZsuRh8+uxWKGiSVffidauw0Tp6klK9cJUB OXpf03KnJ09yhU+eDlhWpT9bSfQU8CWWZXb4Yb6U103T72WT0lKrPvVTR/Ur7GLF FZ0WOJdi+6EVll1Ig/kl12+/xWtf2QD9/Hru+YuKJZyZ3x8t6wEUchSgC6Sccrzj qcKq42sClOuNxczGXLhpG5V/uI7uceIJKFi1ih5I8C+/Y5UXXIIXmkVduwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7K7K15b3ZuaDchPkWXf/sFnjKbMB8GA1UdIwQY MBaAFH5TVOEzRwjxgAErsjepX5+sek5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmxOVTRUTkhDUEdBQVN1eU42bGZuNng2VGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yMTQ0M2YtZTY4Zi00OWU2LWFiYzkt NjA4MzM5M2NmNDZlLzEvZmxOVTRUTkhDUEdBQVN1eU42bGZuNng2VGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yMTQ0M2YtZTY4Zi00OWU2LWFiYzktNjA4MzM5M2NmNDZl LzEvZmxOVTRUTkhDUEdBQVN1eU42bGZuNng2VGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAx0uNVWE GkFyeCx4S83qwatg0D9mIz2TjYHuBKxwMhQfdSckcJn/HOfoXMsPdpAzn1RGZbnq A9Zbop3/O91QdNaXciVeyOaOrTJywFj6oB7NxNywkFjQ9GP9jjbPYFNjZMnF16S6 t9U1X2NzVH7PzUYP5CzsjcKWHaxbTT2mj8E+gd1zxwCvUKezN8H56cYviX/TYOU7 wa+M1GgtoXS03yiRmMJJXGToQi2chpp51pG21lrYAU+VAcyOVnEKtwhkuRrCBGTU ovsXDAvqwYOesfVnfx18q1O0j58GIoderVmapwPYVoaJKWYZqcQ1H8s9S7X2tim5 9KH/cd71pFNzRw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:55:39 2025 by rpki-client