This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft File: fLi4cwN1yShTuZrjr1eXwSPdFQc.mft (raw, json) Hash identifier: Dxgkcqj29Lgg/o7kF7xHeL+5kZJQbbctqKg5INzKAmA= Subject key identifier: 27:EC:C5:AE:AE:E2:D5:37:61:FF:CC:4A:D1:BB:54:9D:84:E8:F7:13 Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07 Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507 Certificate serial: 019B22BEE031EB4BFF3E46868A28A9B1C180 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft Manifest number: 11A2 Signing time: Mon 15 Dec 2025 16:01:32 +0000 Manifest this update: Mon 15 Dec 2025 16:01:32 +0000 Manifest next update: Tue 16 Dec 2025 16:01:32 +0000 Files and hashes: 1: f-4yu6sDyBHuoUp0ijzfgQJpE8U.roa (hash: I5XhYKmiwTTC0KZ/h+71MELDdEucvcsXapf63tq8JL0=) 2: fLi4cwN1yShTuZrjr1eXwSPdFQc.crl (hash: tex0K03NNPTrE8WbxVhbLyKo70jCutXDE1cj7z5Y1PQ=) 3: xNMYEYWeSRysGA1egNd5UYXQ2iE.roa (hash: mNuWxiNJNgSqM1Q6Fj113QLftCPa1zUr2fYNqR8cc3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:be:e0:31:eb:4b:ff:3e:46:86:8a:28:a9:b1:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507 Validity Not Before: Dec 15 16:01:32 2025 GMT Not After : Dec 16 16:01:32 2025 GMT Subject: CN=27ecc5aeaee2d53761ffcc4ad1bb549d84e8f713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e8:4c:d9:e6:22:1e:21:59:be:e9:99:c2:b0: 6c:93:4a:2a:1a:2c:6b:ad:87:67:bb:63:f8:bc:a3: d6:0a:32:98:21:89:da:d1:b3:04:69:02:91:6a:94: 72:da:c4:4a:de:c1:c1:40:63:ca:bd:e7:bc:ad:44: 4c:48:39:b2:99:60:c8:70:24:2e:b4:24:35:1d:92: df:f7:3f:98:28:5c:85:01:7f:ba:59:a7:48:41:82: 69:a3:d6:df:81:f2:ba:04:1f:19:f8:18:9e:dc:b7: 5e:39:88:ec:cd:5b:2d:2c:12:4f:80:94:42:c0:d0: ec:3b:58:57:e9:f3:e6:e9:0a:a3:09:f7:fa:08:ac: a7:99:98:a0:4d:b5:62:d5:7a:cb:e9:ca:e7:2d:32: e4:d3:66:69:a7:67:b7:c8:2c:03:83:d3:7d:bb:81: ed:3a:4f:ac:40:cb:5a:0a:73:78:10:52:7e:12:57: 6b:18:61:18:9c:f7:fb:7a:f2:f0:e5:ab:73:ea:ec: 99:e4:f3:b7:7c:da:52:6a:be:cf:a5:d0:22:f8:eb: 57:50:47:82:ee:7d:ca:b0:14:e4:1a:59:83:62:85: e8:f7:fb:3c:a6:72:22:10:42:72:df:ac:f8:aa:08: 49:45:1f:6a:91:61:9f:8f:48:e6:55:45:86:53:52: d4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:EC:C5:AE:AE:E2:D5:37:61:FF:CC:4A:D1:BB:54:9D:84:E8:F7:13 X509v3 Authority Key Identifier: keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:da:ae:c8:f4:24:ca:40:f2:f9:41:09:5e:0e:6a:1b:b3:15: 09:6e:83:5e:12:c5:e9:8a:00:a8:88:a1:07:5a:69:df:c0:b2: 5d:dd:ef:f0:c4:d6:fc:cf:fa:eb:ae:f8:6b:44:29:3a:06:5e: 65:6a:d0:fe:73:09:79:44:64:59:a1:18:97:5b:7b:32:f7:92: 10:b3:5f:33:e1:65:f4:8a:b3:ca:3c:62:90:40:63:23:6e:39: e3:5f:f1:e4:5f:7d:fa:2e:33:33:91:28:0b:c3:b2:39:43:fe: 3f:c1:1c:28:e0:a8:d5:c3:90:cc:60:d7:dd:94:c0:bd:60:8f: 30:ae:3e:2b:6e:cc:2c:69:5a:b6:70:2d:ae:4e:4a:22:f5:62: 79:7b:81:aa:2a:51:63:34:a3:0e:ef:f6:eb:c7:74:c0:c7:b4: c0:3a:22:ed:d3:4b:34:83:1d:5d:11:6e:81:1b:3b:ce:47:98: e2:34:c2:f8:d7:84:dc:f7:9d:8c:60:05:39:06:a3:e3:c3:71: 7b:e8:23:e4:39:32:63:24:c8:7a:44:b9:53:25:a0:03:47:26: c3:28:2f:9c:f9:9f:0e:5c:f4:b8:fb:10:c8:50:ec:62:76:1c: b9:b2:20:b1:01:0f:ea:a2:ab:c0:56:88:12:89:3a:03:13:15: 4b:83:da:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsivuAx60v/PkaGiiipscGAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYjhiODczMDM3NWM5Mjg1M2I5OWFlM2FmNTc5N2MxMjNk ZDE1MDcwHhcNMjUxMjE1MTYwMTMyWhcNMjUxMjE2MTYwMTMyWjAzMTEwLwYDVQQD EygyN2VjYzVhZWFlZTJkNTM3NjFmZmNjNGFkMWJiNTQ5ZDg0ZThmNzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOhM2eYiHiFZvumZwrBsk0oqGixr rYdnu2P4vKPWCjKYIYna0bMEaQKRapRy2sRK3sHBQGPKvee8rURMSDmymWDIcCQu tCQ1HZLf9z+YKFyFAX+6WadIQYJpo9bfgfK6BB8Z+Bie3LdeOYjszVstLBJPgJRC wNDsO1hX6fPm6QqjCff6CKynmZigTbVi1XrL6crnLTLk02Zpp2e3yCwDg9N9u4Ht Ok+sQMtaCnN4EFJ+EldrGGEYnPf7evLw5atz6uyZ5PO3fNpSar7PpdAi+OtXUEeC 7n3KsBTkGlmDYoXo9/s8pnIiEEJy36z4qghJRR9qkWGfj0jmVUWGU1LUfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfsxa6u4tU3Yf/MStG7VJ2E6PcTMB8GA1UdIwQY MBaAFHy4uHMDdckoU7ma469Xl8Ej3RUHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkxpNGN3TjF5U2hUdVpyanIxZVh3U1BkRlFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hOWNlZDItM2ZhNC00NmVkLTg4ZTAt Mzg0MTFhMzEyZDg2LzEvZkxpNGN3TjF5U2hUdVpyanIxZVh3U1BkRlFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9hOWNlZDItM2ZhNC00NmVkLTg4ZTAtMzg0MTFhMzEyZDg2 LzEvZkxpNGN3TjF5U2hUdVpyanIxZVh3U1BkRlFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNquyPQk ykDy+UEJXg5qG7MVCW6DXhLF6YoAqIihB1pp38CyXd3v8MTW/M/66674a0QpOgZe ZWrQ/nMJeURkWaEYl1t7MveSELNfM+Fl9IqzyjxikEBjI24541/x5F99+i4zM5Eo C8OyOUP+P8EcKOCo1cOQzGDX3ZTAvWCPMK4+K27MLGlatnAtrk5KIvVieXuBqipR YzSjDu/268d0wMe0wDoi7dNLNIMdXRFugRs7zkeY4jTC+NeE3PedjGAFOQaj48Nx e+gj5DkyYyTIekS5UyWgA0cmwygvnPmfDlz0uPsQyFDsYnYcubIgsQEP6qKrwFaI Eok6AxMVS4ParA== -----END CERTIFICATE-----Generated at Mon Dec 15 20:02:16 2025 by rpki-client