This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft File: flNU4TNHCPGAASuyN6lfn6x6Tlw.mft (raw, json) Hash identifier: JMtVz4oxwBuctMhc4xNcFxrEqnZzbCsZSikYMxi2aQg= Subject key identifier: B7:3B:3C:2E:1F:D1:35:96:8F:67:62:42:AD:DE:D6:8A:55:F6:4F:E7 Authority key identifier: 7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C Certificate issuer: /CN=7e5354e1334708f180012bb237a95f9fac7a4e5c Certificate serial: 019AF46517EC0AA6DF8D9CDB6833EB22A0C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft Manifest number: 0A6B Signing time: Sat 06 Dec 2025 16:00:57 +0000 Manifest this update: Sat 06 Dec 2025 16:00:57 +0000 Manifest next update: Sun 07 Dec 2025 16:00:57 +0000 Files and hashes: 1: 7NZ3oQkMOQoPZU36C6qwxb2VoVE.roa (hash: 47N6P40TbSFw4GF5u3qAezQZQpvVncE6hSSscr+AiT4=) 2: flNU4TNHCPGAASuyN6lfn6x6Tlw.crl (hash: 7UhEtPc3X5jg2su9V9b+pVWflv1GTGsuT6zWcLQPKW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.crl rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:17:ec:0a:a6:df:8d:9c:db:68:33:eb:22:a0:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e5354e1334708f180012bb237a95f9fac7a4e5c Validity Not Before: Dec 6 16:00:57 2025 GMT Not After : Dec 7 16:00:57 2025 GMT Subject: CN=b73b3c2e1fd135968f676242added68a55f64fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c3:bd:3a:9c:df:71:55:d0:6b:a0:bc:7a:68: d8:51:0c:15:2c:8d:7e:4a:50:53:0f:37:e7:66:5b: 2f:53:ac:ac:c6:e5:64:29:06:42:cb:71:fe:11:be: 00:be:f9:52:38:a1:10:52:c5:fb:a5:fb:a1:7f:f2: ca:a5:d8:9c:f7:43:2f:9e:0a:89:28:b8:73:63:cd: d5:36:f9:4a:a5:1e:56:68:56:b6:ab:5c:5c:1f:23: 06:e9:48:e5:16:41:44:31:ed:6c:87:99:6a:cf:58: 3d:7d:60:c8:08:7c:07:86:46:18:a4:2d:12:2c:ce: 75:f2:98:78:d7:cd:3b:23:e9:20:1a:b1:e9:46:73: 1e:32:cf:38:bf:4c:91:e9:b7:f0:6d:86:4e:1b:4c: f8:76:ce:f6:d5:66:87:6d:fe:15:a0:d4:2d:60:80: da:f1:22:d5:1a:f2:9f:7c:b1:48:3d:60:12:3f:ae: 8b:8c:69:0a:71:b0:86:25:04:05:02:51:b1:24:14: c2:6f:be:de:e3:14:a7:4c:8b:a2:d8:d8:82:72:27: b9:93:49:cd:c8:90:09:fc:ec:c9:63:6e:79:6c:07: c4:d5:07:3d:e5:47:a4:3f:c1:58:a9:b3:bc:bf:3e: 34:07:9c:c3:95:fa:13:46:2c:d5:21:f3:67:f5:c1: 54:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3B:3C:2E:1F:D1:35:96:8F:67:62:42:AD:DE:D6:8A:55:F6:4F:E7 X509v3 Authority Key Identifier: keyid:7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:60:de:c6:2e:48:d2:50:30:ee:83:dc:1c:7a:b2:37:ca:c1: e5:14:cc:45:af:da:61:d6:bb:e1:02:78:44:0d:62:a4:8b:40: 47:c1:87:eb:fb:ea:17:68:96:e0:75:cf:d3:03:ef:5c:32:6e: ad:ad:3a:df:f4:dd:fe:1f:a7:43:45:2b:3b:62:83:6f:6a:15: 79:7f:15:98:8e:89:d9:e2:d9:53:e1:d1:3f:27:63:60:b1:92: 6b:91:29:cc:bb:cb:4e:da:0c:20:84:3e:6e:5e:03:74:3c:eb: 5d:1b:b9:20:dd:a1:71:ea:17:46:84:c7:57:14:88:40:b0:01: 39:f5:5a:3c:7f:29:48:9d:70:58:cd:a6:d5:6a:59:3e:b0:49: 00:b8:4a:9f:3f:8d:2d:47:32:1e:84:ac:eb:69:3a:4b:93:d6: 4e:89:b7:d6:85:43:95:7e:6e:f5:f2:19:bf:c3:1d:5f:f4:84: 0f:16:4a:0c:20:08:79:44:4a:5a:4c:a7:ee:fb:d5:96:f9:3c: 70:b3:c0:b3:fe:02:9f:3c:4b:2f:d5:6b:3a:9c:d1:53:62:11: 02:68:88:7b:1c:29:2e:eb:60:00:9d:58:b6:a9:49:4d:2c:dc: 68:14:a1:56:71:2e:d6:31:23:77:37:ed:8d:2b:93:77:6b:9f: d7:c9:34:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZRfsCqbfjZzbaDPrIqDFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNTM1NGUxMzM0NzA4ZjE4MDAxMmJiMjM3YTk1ZjlmYWM3 YTRlNWMwHhcNMjUxMjA2MTYwMDU3WhcNMjUxMjA3MTYwMDU3WjAzMTEwLwYDVQQD EyhiNzNiM2MyZTFmZDEzNTk2OGY2NzYyNDJhZGRlZDY4YTU1ZjY0ZmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8O9OpzfcVXQa6C8emjYUQwVLI1+ SlBTDzfnZlsvU6ysxuVkKQZCy3H+Eb4AvvlSOKEQUsX7pfuhf/LKpdic90MvngqJ KLhzY83VNvlKpR5WaFa2q1xcHyMG6UjlFkFEMe1sh5lqz1g9fWDICHwHhkYYpC0S LM518ph41807I+kgGrHpRnMeMs84v0yR6bfwbYZOG0z4ds721WaHbf4VoNQtYIDa 8SLVGvKffLFIPWASP66LjGkKcbCGJQQFAlGxJBTCb77e4xSnTIui2NiCcie5k0nN yJAJ/OzJY255bAfE1Qc95UekP8FYqbO8vz40B5zDlfoTRizVIfNn9cFUOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLc7PC4f0TWWj2diQq3e1opV9k/nMB8GA1UdIwQY MBaAFH5TVOEzRwjxgAErsjepX5+sek5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmxOVTRUTkhDUEdBQVN1eU42bGZuNng2VGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yMTQ0M2YtZTY4Zi00OWU2LWFiYzkt NjA4MzM5M2NmNDZlLzEvZmxOVTRUTkhDUEdBQVN1eU42bGZuNng2VGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yMTQ0M2YtZTY4Zi00OWU2LWFiYzktNjA4MzM5M2NmNDZl LzEvZmxOVTRUTkhDUEdBQVN1eU42bGZuNng2VGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtmDexi5I 0lAw7oPcHHqyN8rB5RTMRa/aYda74QJ4RA1ipItAR8GH6/vqF2iW4HXP0wPvXDJu ra063/Td/h+nQ0UrO2KDb2oVeX8VmI6J2eLZU+HRPydjYLGSa5EpzLvLTtoMIIQ+ bl4DdDzrXRu5IN2hceoXRoTHVxSIQLABOfVaPH8pSJ1wWM2m1WpZPrBJALhKnz+N LUcyHoSs62k6S5PWTom31oVDlX5u9fIZv8MdX/SEDxZKDCAIeURKWkyn7vvVlvk8 cLPAs/4CnzxLL9VrOpzRU2IRAmiIexwpLutgAJ1YtqlJTSzcaBShVnEu1jEjdzft jSuTd2uf18k0zA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:04:06 2025 by rpki-client