This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft File: flL6ttMgbrYKMduWxy2U_CQsCgg.mft (raw, json) Hash identifier: rNtkF22RAx0f74gXh69EydCBl4PzAK5H9Dv0K9OHxKQ= Subject key identifier: 87:17:02:E0:18:82:37:A1:8F:01:00:29:35:DE:67:FC:9A:DA:B4:A5 Authority key identifier: 7E:52:FA:B6:D3:20:6E:B6:0A:31:DB:96:C7:2D:94:FC:24:2C:0A:08 Certificate issuer: /CN=7e52fab6d3206eb60a31db96c72d94fc242c0a08 Certificate serial: 019B3D230835460FB0559F4067747459B396 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 19:01:04 +0000 Manifest this update: Sat 20 Dec 2025 19:01:04 +0000 Manifest next update: Sun 21 Dec 2025 19:01:04 +0000 Files and hashes: 1: flL6ttMgbrYKMduWxy2U_CQsCgg.crl (hash: LDZ2ZwKGnGy2gqMK2QN7B9BjUGwRyBN2I5c+ytolyrg=) 2: oR70fW7uVwWXm6EKAN8uqrlQkQ4.roa (hash: 0R/vI9KhNQCuJ8a8jzLTXA2DiQsUAT+t0yjMQ7W3gak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.crl rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:08:35:46:0f:b0:55:9f:40:67:74:74:59:b3:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e52fab6d3206eb60a31db96c72d94fc242c0a08 Validity Not Before: Dec 20 19:01:04 2025 GMT Not After : Dec 21 19:01:04 2025 GMT Subject: CN=871702e0188237a18f01002935de67fc9adab4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2a:58:88:12:7f:51:dc:21:c3:52:96:69:43: 1c:9b:46:d1:88:92:6c:f6:62:ac:35:df:e3:f6:c4: db:08:be:ee:ac:0d:0e:35:38:c5:4a:5d:c2:d6:e3: 72:ff:1e:af:a6:94:30:9a:79:9b:91:cd:f1:8f:f3: 34:f2:24:5a:23:e4:0c:da:50:8c:e9:d5:5f:08:29: 5e:52:e8:b9:35:50:34:db:03:bf:44:57:c8:f4:43: 9c:81:a5:60:b4:7a:28:85:28:dd:8b:33:b8:2a:ab: 91:23:32:c1:c5:e6:da:f2:b3:22:28:85:91:9f:9a: 02:dc:2c:2a:29:bd:7a:0c:4b:68:85:77:ed:a0:aa: 25:48:b4:4b:70:7e:f8:d8:4e:20:20:43:99:c4:19: a4:56:a8:4a:cd:36:29:5c:db:0e:5f:29:eb:4c:36: 56:e1:7e:57:17:0f:28:78:e2:ea:ca:88:32:36:da: b6:ea:8e:6c:5c:96:ee:84:f4:80:42:45:17:87:84: ab:9b:28:8c:e6:1b:5d:23:80:ba:73:06:66:9d:df: 94:a8:d6:1d:6d:90:81:36:18:c4:6b:60:54:48:24: 9f:7a:ff:46:6d:8b:2d:82:e6:03:74:4e:95:b2:cb: 5a:e9:ef:0b:63:bb:4f:a5:09:16:08:2b:ea:c5:71: 97:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:17:02:E0:18:82:37:A1:8F:01:00:29:35:DE:67:FC:9A:DA:B4:A5 X509v3 Authority Key Identifier: keyid:7E:52:FA:B6:D3:20:6E:B6:0A:31:DB:96:C7:2D:94:FC:24:2C:0A:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:f1:0a:93:42:4a:b7:84:d9:ed:ba:b8:8c:30:c3:58:da:c2: 76:16:14:9d:c8:49:87:0b:63:56:4f:88:67:63:3f:62:af:de: 33:27:39:2d:b9:e9:6d:46:d5:17:d9:87:c5:58:9d:19:13:6b: 81:b7:9b:13:39:ae:51:0b:13:6f:d4:e8:89:1e:8b:a4:d5:9f: 14:41:c4:51:79:7e:ab:ba:1a:b1:9f:a9:1e:fb:20:ec:b1:f7: 5c:8e:a9:e5:ba:7d:34:66:c4:2b:63:76:2b:83:c4:c0:e5:1b: 2c:f4:0e:29:41:ad:2e:67:81:27:05:f9:f1:ed:2e:b0:79:ba: 0e:56:fb:3e:08:79:cd:b3:c8:22:d1:fe:b9:43:72:be:d8:36: a5:b4:e7:89:f8:f5:30:65:cc:78:12:b8:a5:42:d5:41:5a:49: ef:b5:1e:8a:90:42:31:f4:d1:14:f0:d6:32:05:12:bd:e2:b8: bb:0a:3f:21:66:8f:01:97:47:7e:91:27:9c:04:23:79:02:ab: 81:07:8f:b9:37:8b:7a:c0:00:48:26:97:38:e7:8a:c7:ca:51: bc:99:60:0b:b7:48:e6:74:ce:47:81:cc:5a:92:d6:d0:c2:77: 76:17:35:0f:62:2d:8a:77:bb:19:65:51:4c:3e:ff:a7:36:e5: f3:e7:75:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Iwg1Rg+wVZ9AZ3R0WbOWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNTJmYWI2ZDMyMDZlYjYwYTMxZGI5NmM3MmQ5NGZjMjQy YzBhMDgwHhcNMjUxMjIwMTkwMTA0WhcNMjUxMjIxMTkwMTA0WjAzMTEwLwYDVQQD Eyg4NzE3MDJlMDE4ODIzN2ExOGYwMTAwMjkzNWRlNjdmYzlhZGFiNGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSpYiBJ/Udwhw1KWaUMcm0bRiJJs 9mKsNd/j9sTbCL7urA0ONTjFSl3C1uNy/x6vppQwmnmbkc3xj/M08iRaI+QM2lCM 6dVfCCleUui5NVA02wO/RFfI9EOcgaVgtHoohSjdizO4KquRIzLBxeba8rMiKIWR n5oC3CwqKb16DEtohXftoKolSLRLcH742E4gIEOZxBmkVqhKzTYpXNsOXynrTDZW 4X5XFw8oeOLqyogyNtq26o5sXJbuhPSAQkUXh4SrmyiM5htdI4C6cwZmnd+UqNYd bZCBNhjEa2BUSCSfev9GbYstguYDdE6Vssta6e8LY7tPpQkWCCvqxXGXYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIcXAuAYgjehjwEAKTXeZ/ya2rSlMB8GA1UdIwQY MBaAFH5S+rbTIG62CjHblsctlPwkLAoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmxMNnR0TWdicllLTWR1V3h5MlVfQ1FzQ2dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9jYzQ3ZTUtNGEyMS00ZjRmLWJlMjIt YTVjOTNhN2I5ZmE1LzEvZmxMNnR0TWdicllLTWR1V3h5MlVfQ1FzQ2dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9jYzQ3ZTUtNGEyMS00ZjRmLWJlMjItYTVjOTNhN2I5ZmE1 LzEvZmxMNnR0TWdicllLTWR1V3h5MlVfQ1FzQ2dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPEKk0JK t4TZ7bq4jDDDWNrCdhYUnchJhwtjVk+IZ2M/Yq/eMyc5LbnpbUbVF9mHxVidGRNr gbebEzmuUQsTb9ToiR6LpNWfFEHEUXl+q7oasZ+pHvsg7LH3XI6p5bp9NGbEK2N2 K4PEwOUbLPQOKUGtLmeBJwX58e0usHm6Dlb7Pgh5zbPIItH+uUNyvtg2pbTnifj1 MGXMeBK4pULVQVpJ77UeipBCMfTRFPDWMgUSveK4uwo/IWaPAZdHfpEnnAQjeQKr gQePuTeLesAASCaXOOeKx8pRvJlgC7dI5nTOR4HMWpLW0MJ3dhc1D2Itine7GWVR TD7/pzbl8+d1UQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:42:13 2025 by rpki-client