This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft File: FL8A3_gGMjG9mWdomeq-q6M7xdk.mft (raw, json) Hash identifier: 4efGAlkplclrlLc9KuPzVzeOLqmjBbIqPmA7prvjqhQ= Subject key identifier: 58:3F:4A:1F:1B:83:A2:46:55:7A:38:CD:F9:0E:34:5C:79:30:08:E8 Authority key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9 Certificate issuer: /CN=14bf00dff8063231bd99676899eabeaba33bc5d9 Certificate serial: 019AF2770A052E8D139528FC5556C35786BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 07:01:18 +0000 Manifest this update: Sat 06 Dec 2025 07:01:18 +0000 Manifest next update: Sun 07 Dec 2025 07:01:18 +0000 Files and hashes: 1: Csk6MxobRULFjoV8vwBDWTrNIjY.roa (hash: /qSTaCee19sT1splpe2clgwA+iPwSFp3O0YpahxqTpY=) 2: FL8A3_gGMjG9mWdomeq-q6M7xdk.crl (hash: 9zapfV7FsQt3BB6mybFP7KLXE7GipWv9cUgLFaCyHR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:0a:05:2e:8d:13:95:28:fc:55:56:c3:57:86:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bf00dff8063231bd99676899eabeaba33bc5d9 Validity Not Before: Dec 6 07:01:18 2025 GMT Not After : Dec 7 07:01:18 2025 GMT Subject: CN=583f4a1f1b83a246557a38cdf90e345c793008e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:23:77:70:c0:ad:56:fc:37:c1:6a:61:4f:3e: ec:e2:08:94:26:ae:ea:c3:a2:72:fd:3e:aa:38:de: b9:6b:18:4a:b1:55:30:c3:3a:00:3b:e8:78:88:0e: 71:0c:b5:df:a6:6a:27:8e:ff:95:fb:e7:ac:e3:cf: e3:a6:71:f1:2b:7a:ef:48:bc:5c:e0:b5:1f:5b:ab: d1:a3:17:26:62:1e:0d:0e:71:a3:b2:bc:3b:6b:a5: f2:fa:07:30:cb:33:f0:7c:68:01:96:de:e7:10:36: d7:41:7a:eb:2b:cb:db:e4:59:44:65:ee:12:79:f2: a1:5c:09:05:e0:e2:da:ed:55:a9:b6:79:72:b2:a5: 83:17:c8:7c:be:7e:ee:48:45:08:17:40:a6:4d:58: 19:da:ef:94:fa:36:c2:1f:76:97:7c:16:27:3f:e7: c5:e4:12:82:10:4a:92:95:24:60:ea:f0:dd:d6:c6: 2f:f3:c6:90:15:79:28:ea:07:0d:df:1d:40:c3:9a: 72:3d:9a:66:96:52:f2:bb:81:2d:7f:3a:bf:4d:f6: dd:b9:86:8f:79:c1:01:38:af:45:96:35:cc:75:06: 6c:af:d8:4c:0a:7e:b7:1f:27:b3:98:6e:02:01:49: 17:6f:38:f6:1f:1c:51:e1:7d:65:59:68:44:15:1f: ec:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3F:4A:1F:1B:83:A2:46:55:7A:38:CD:F9:0E:34:5C:79:30:08:E8 X509v3 Authority Key Identifier: keyid:14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:97:0b:34:6e:c2:7f:66:e2:74:81:60:5c:89:dd:11:d2:1e: 28:5a:74:fc:bd:c3:61:d4:a7:87:13:d6:a0:74:9f:ac:d9:30: 12:07:4f:b4:b7:da:13:4a:f4:01:65:ce:9d:0b:53:1a:2d:dc: ec:49:ea:45:3c:f9:b4:e1:eb:26:92:42:c0:e6:65:da:3c:73: c9:d5:b5:c6:e5:b1:68:70:f6:cd:b4:4d:b6:b4:fe:a2:45:9d: db:bd:06:42:dd:a9:5d:b9:07:74:6f:4f:e7:67:84:7d:26:9b: f8:96:44:8e:32:c5:a2:78:20:cf:b7:29:31:e9:47:e1:55:72: d6:e6:7d:c5:22:01:9c:96:ab:34:ae:87:43:97:81:95:1e:69: e7:3d:e1:13:10:21:a0:28:47:eb:fc:ee:7c:28:69:f8:ae:be: bf:46:23:3f:98:22:8b:21:ba:95:b1:a5:84:74:5c:d5:5a:b2: ef:5b:b5:76:2f:5b:1c:65:68:f0:0d:df:30:e2:04:fa:69:3d: d3:50:f7:2e:cd:98:01:7f:d0:a4:7e:f7:ce:cb:9f:ac:da:31: 51:e2:c2:59:11:01:59:8e:f7:b0:2b:cc:08:33:6a:e9:19:52: d9:81:fd:19:7d:d2:fd:5b:cb:6f:0d:31:e0:83:cd:a6:5c:4b: 6a:83:0e:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwoFLo0TlSj8VVbDV4a/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmYwMGRmZjgwNjMyMzFiZDk5Njc2ODk5ZWFiZWFiYTMz YmM1ZDkwHhcNMjUxMjA2MDcwMTE4WhcNMjUxMjA3MDcwMTE4WjAzMTEwLwYDVQQD Eyg1ODNmNGExZjFiODNhMjQ2NTU3YTM4Y2RmOTBlMzQ1Yzc5MzAwOGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SN3cMCtVvw3wWphTz7s4giUJq7q w6Jy/T6qON65axhKsVUwwzoAO+h4iA5xDLXfpmonjv+V++es48/jpnHxK3rvSLxc 4LUfW6vRoxcmYh4NDnGjsrw7a6Xy+gcwyzPwfGgBlt7nEDbXQXrrK8vb5FlEZe4S efKhXAkF4OLa7VWptnlysqWDF8h8vn7uSEUIF0CmTVgZ2u+U+jbCH3aXfBYnP+fF 5BKCEEqSlSRg6vDd1sYv88aQFXko6gcN3x1Aw5pyPZpmllLyu4Etfzq/TfbduYaP ecEBOK9FljXMdQZsr9hMCn63HyezmG4CAUkXbzj2HxxR4X1lWWhEFR/stQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFg/Sh8bg6JGVXo4zfkONFx5MAjoMB8GA1UdIwQY MBaAFBS/AN/4BjIxvZlnaJnqvqujO8XZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw4QTNfZ0dNakc5bVdkb21lcS1xNk03eGRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS85OTZjNzItYjRhOS00MDU4LWJkZjgt YmQyZTc3Y2Q0NzkzLzEvRkw4QTNfZ0dNakc5bVdkb21lcS1xNk03eGRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS85OTZjNzItYjRhOS00MDU4LWJkZjgtYmQyZTc3Y2Q0Nzkz LzEvRkw4QTNfZ0dNakc5bVdkb21lcS1xNk03eGRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACpcLNG7C f2bidIFgXIndEdIeKFp0/L3DYdSnhxPWoHSfrNkwEgdPtLfaE0r0AWXOnQtTGi3c 7EnqRTz5tOHrJpJCwOZl2jxzydW1xuWxaHD2zbRNtrT+okWd270GQt2pXbkHdG9P 52eEfSab+JZEjjLFonggz7cpMelH4VVy1uZ9xSIBnJarNK6HQ5eBlR5p5z3hExAh oChH6/zufChp+K6+v0YjP5giiyG6lbGlhHRc1Vqy71u1di9bHGVo8A3fMOIE+mk9 01D3Ls2YAX/QpH73zsufrNoxUeLCWREBWY73sCvMCDNq6RlS2YH9GX3S/VvLbw0x 4IPNplxLaoMOBw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:29:46 2025 by rpki-client