This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json)
Hash identifier: Wri1C/n5hJt06g8us3YYB6s0n6SZgR96bWSRdCDeERs=
Subject key identifier: BD:EA:91:D3:27:D4:A8:20:5E:4A:3F:1E:7C:1F:FD:0D:A5:6B:8C:0E
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 019B3C7E0DF346E052021F214460310A5215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
Manifest number: 15F1
Signing time: Sat 20 Dec 2025 16:00:52 +0000
Manifest this update: Sat 20 Dec 2025 16:00:52 +0000
Manifest next update: Sun 21 Dec 2025 16:00:52 +0000
Files and hashes: 1: 8-v-Z7Xa6lfqMbl7evIHp25t1sA.roa (hash: BWcCx1HwRpdJveviEQtt8WgW8hrEfngJob3ia7RrZwQ=)
2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: E5kU/fbXO+oY2ZEajLP1DjQKijP+HvsiY+Hwr+e0JF4=)
3: cFc0gNIOK5WxBeuSF5eiQkXoOKE.roa (hash: GkH9aMuKOzi/6cYcKbTikX2OvYkhD9zkPc0LnUJCl1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3c:7e:0d:f3:46:e0:52:02:1f:21:44:60:31:0a:52:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: Dec 20 16:00:52 2025 GMT
Not After : Dec 21 16:00:52 2025 GMT
Subject: CN=bdea91d327d4a8205e4a3f1e7c1ffd0da56b8c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:78:95:1b:f2:1c:e5:fb:a8:97:58:ec:c9:
34:ca:55:b4:29:e6:c7:02:03:8f:03:1e:37:a0:97:
cc:42:2e:28:bd:40:db:64:bb:15:20:cc:76:17:82:
39:05:c4:1e:c8:e3:71:dc:73:ae:a3:83:57:55:8c:
a2:3f:28:7e:5d:4e:d2:8e:2f:e4:06:22:c8:9c:c3:
bc:f0:80:21:7b:0d:81:13:e0:85:5e:95:0f:d4:85:
11:f2:0b:0c:d1:1e:97:13:cd:17:eb:29:d8:4e:a9:
e3:44:0e:2c:27:9f:2a:54:ea:b8:ed:3e:b8:51:56:
76:99:db:db:dc:4b:b3:a2:3a:65:a8:c1:94:38:56:
37:da:14:f4:66:92:d3:b5:27:da:e2:d4:57:dd:38:
fa:5d:a9:38:f7:a0:84:59:9a:95:78:7f:f8:4f:7f:
62:32:33:76:41:ca:94:63:cc:a0:ac:d4:6d:c0:7e:
37:9f:53:ae:81:c5:7e:d8:f1:84:fc:5d:43:5c:0f:
09:2c:21:ed:f2:ea:3c:d9:cf:94:f0:3f:e8:f8:32:
af:ca:24:f7:23:75:01:fd:d2:32:fd:2e:da:26:06:
52:2c:07:2e:4f:95:05:cc:1d:6a:70:4e:2d:4d:99:
68:ee:58:13:a8:bf:be:15:73:ed:3b:3d:d7:a8:7f:
c1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EA:91:D3:27:D4:A8:20:5E:4A:3F:1E:7C:1F:FD:0D:A5:6B:8C:0E
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:25:31:9d:a4:a5:52:4e:75:bf:0e:25:31:50:99:87:ec:4c:
cf:d8:e2:be:81:eb:37:cf:99:69:0b:e6:5c:06:6d:61:5c:34:
5d:7c:05:6b:85:fa:c6:e8:31:64:65:45:01:0d:05:43:bc:c3:
d2:01:85:70:bf:6f:f3:a1:5c:75:3e:6f:61:9c:fb:ae:98:d6:
28:a7:64:03:da:e3:b8:b1:3b:a0:f7:1c:9b:14:57:91:ab:03:
18:01:a1:05:b8:28:55:a8:ba:96:22:df:58:11:47:1f:7c:cf:
39:71:7c:f2:d3:b6:08:42:c2:cd:79:f2:69:5d:9d:77:05:e3:
60:53:27:29:c2:01:ff:96:9e:3f:89:f6:c4:96:51:38:ba:b7:
fd:27:3d:ab:f1:a6:8c:0c:62:57:a7:24:2e:ed:06:27:7e:fd:
8e:5f:6d:7c:cf:c0:9c:c2:fc:58:43:77:8d:27:bd:a7:4e:cd:
72:83:06:02:e5:66:af:bd:10:4d:10:e8:bb:e5:72:ca:a1:8c:
c5:bd:13:cb:5c:4e:30:55:09:b8:a8:58:9c:7b:d8:c2:61:a8:
c8:ee:f3:4e:6f:35:88:14:22:2b:34:64:af:02:4a:13:c6:48:
e5:51:2a:c0:4d:67:09:96:b7:af:28:3f:ba:d9:ce:93:ae:db:
e4:e1:6a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:48:12 2025 by rpki-client