This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft File: FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json) Hash identifier: eU6yCtcief5Bsubh805evvgxARF+lIMnHTbSXWNFhgE= Subject key identifier: 4B:BD:09:F2:66:CE:05:C1:F3:49:CC:49:24:7A:74:E4:1B:B1:11:FC Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 019B0DB725C266747CEE8D6A12A073567D3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft Manifest number: 1784 Signing time: Thu 11 Dec 2025 14:01:05 +0000 Manifest this update: Thu 11 Dec 2025 14:01:05 +0000 Manifest next update: Fri 12 Dec 2025 14:01:05 +0000 Files and hashes: 1: 08gO2xhzYB9MrOPyUgzVPTFsEks.roa (hash: uuTu5Ilmhz+ZTWX0lT3lDAgUnguN/hhWVP6RiQFWbO0=) 2: 2WvVwy-PRL5GLrJD80GhjHcE31U.roa (hash: V+gab5/KP1zLki+Ce4a8elUju3qZMThRlJep3bHdmjU=) 3: DlttiF7sTnpZBCWr79VnOWAb-Cw.roa (hash: 1I+LBYXesIZu1L3F5YYgW1sIY18eU3XqF+UKWnyiXM4=) 4: E_7lfxRnXL43BaxS0BR35ae28-8.roa (hash: bsdbl8+gmpOB2GMwRa9PUSXIwKLCbxh9y6aoGWsrfmA=) 5: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: OeH1ocMRZGdYb82WUuPYJBKT/rd0ZVozKX/mDG0wWsI=) 6: FYYHYUGoGvN1v8iZEsvIMUiBDuc.roa (hash: 5TNc2AIFURoGMvX0XYbEM3UC8FEruKwZsC3SRf2KaGU=) 7: G-5B6YeJ2OAL5vWCYn9oGob6FBk.roa (hash: wzpNaRep9vHFkuM4ho/JF0i7it8caDtKDv8qyIaqtG8=) 8: LVCOq86MWXkEBLGlXajn0ZENzKo.roa (hash: za/dFUKCElp0tRhTQ1rRsumZkCaRLeXmcSoTGiaBfbk=) 9: MRT2LF_aEOeFlu0z18oRZu0OKoQ.roa (hash: RWWOAldqVltxk1TROg2IYHHxbCDwXOV9TETvXzcXc50=) 10: RS51aQgOg2IG7Kd3gYmS2BKt-mo.roa (hash: 04jNZ5D66dkBNT8VoJCjjfzY2tYl+DQ4VUJcAaUENu8=) 11: UkVGZcePqwW-KxvbBYt50liz4UM.roa (hash: HUtG9jf1oU5Vm0ZUnGnbYEpFmR4EvSJFZLnuUG/MWnk=) 12: bKyX5SG6DyCqJiQSkFdqFjg1o-E.roa (hash: yT9Yzf+uBBeDkqte+YCfH3PUHF4dkiH/zoa5XVP6GqA=) 13: kVpC8L3NVBoBD0uRMCZwUe0L0hI.roa (hash: ZhoOhvNlGipJNbOy/H0tyIYa78nFkIWP7NHbAfT2b3I=) 14: uqIp0R_dvDEsqpriRwcj3sItHGw.roa (hash: 0M8ijVLRqjXM3pBRfR1epwx7A0hp1U4azXVWoA9LspU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b7:25:c2:66:74:7c:ee:8d:6a:12:a0:73:56:7d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Dec 11 14:01:05 2025 GMT Not After : Dec 12 14:01:05 2025 GMT Subject: CN=4bbd09f266ce05c1f349cc49247a74e41bb111fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c6:10:02:ff:d1:52:32:9c:b2:59:4c:ee:0c: 3b:ec:86:ae:11:39:ab:46:db:df:13:3a:09:24:5e: 28:42:2b:c0:66:d0:c9:6c:63:7a:75:60:1b:4c:b9: 7c:72:8f:74:79:b0:ad:65:f3:69:be:32:11:f1:8c: c7:6a:ae:68:8b:20:7c:06:d8:b3:55:e6:02:45:59: 0e:2e:06:1f:d5:21:2a:e8:26:49:4b:cc:f7:77:58: e0:25:b2:25:b3:5c:9c:60:0a:bc:7d:2d:47:21:9f: cc:c7:39:f1:72:bf:c5:37:a6:83:38:ff:c1:c0:68: 57:f0:40:ce:74:2e:07:c0:24:82:81:b9:d2:95:81: c6:ab:c2:4f:1c:7d:ee:7b:8a:f7:09:ff:88:46:cc: 16:3b:0a:ce:e3:4c:11:77:15:d9:62:20:d4:0f:aa: 93:db:ef:11:bd:dd:d4:ed:80:8f:78:2b:07:9b:6a: 0c:36:60:22:c7:8c:29:e4:39:1e:8f:23:3b:80:32: be:b5:86:a6:31:25:82:9c:25:d0:ae:51:1c:29:2c: 69:76:92:94:85:55:61:04:a7:34:da:d9:60:80:5b: 85:01:14:9a:a6:47:47:8b:17:77:fe:d5:8c:60:c0: ac:11:5a:52:28:a4:9e:d3:d7:26:a3:79:07:35:4d: 6f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BD:09:F2:66:CE:05:C1:F3:49:CC:49:24:7A:74:E4:1B:B1:11:FC X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:c7:81:a3:03:e1:cc:31:54:1f:51:9d:70:cf:1c:84:e5:d9: 4e:c2:34:b8:04:8b:37:f7:78:07:c2:63:8c:f3:63:d1:a6:58: 67:f0:d4:cc:c2:1b:cb:03:9e:47:af:5a:75:ae:ce:34:73:96: 31:75:d0:c1:b4:65:67:92:b4:9f:7d:d7:7a:01:0c:ea:7f:87: 55:7a:d2:bd:72:46:1f:ca:94:6c:92:2a:55:8d:68:eb:ad:bc: 6b:fd:cd:2a:4d:00:d5:77:e1:84:3b:59:24:a7:b5:5c:87:97: 32:41:89:77:e1:f6:df:23:3d:71:ff:bc:13:84:17:11:e1:4f: 8c:b9:7b:c3:39:14:35:d6:39:64:8d:0d:3c:9f:03:7d:56:60: 83:0e:d5:86:9b:01:31:be:33:da:5b:45:6c:58:a2:8f:2b:01: 53:06:dc:af:b4:47:0f:05:78:96:2f:1e:92:57:f0:f7:cb:9e: 93:78:9b:6c:8d:8f:fc:0e:0b:a5:cb:20:7e:13:f2:6e:90:9b: 33:21:ee:f1:4a:7e:a7:61:2d:22:b0:0f:57:94:24:dc:0f:ef: f6:77:96:4f:02:8e:6a:ef:cb:25:79:cc:29:f1:8f:9a:60:9d: 93:3d:02:b0:d4:a5:92:3a:5a:df:de:fd:fd:b8:8d:b4:c9:b3: 58:4c:b2:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtyXCZnR87o1qEqBzVn06MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjUxMjExMTQwMTA1WhcNMjUxMjEyMTQwMTA1WjAzMTEwLwYDVQQD Eyg0YmJkMDlmMjY2Y2UwNWMxZjM0OWNjNDkyNDdhNzRlNDFiYjExMWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksYQAv/RUjKcsllM7gw77IauETmr RtvfEzoJJF4oQivAZtDJbGN6dWAbTLl8co90ebCtZfNpvjIR8YzHaq5oiyB8Btiz VeYCRVkOLgYf1SEq6CZJS8z3d1jgJbIls1ycYAq8fS1HIZ/Mxznxcr/FN6aDOP/B wGhX8EDOdC4HwCSCgbnSlYHGq8JPHH3ue4r3Cf+IRswWOwrO40wRdxXZYiDUD6qT 2+8Rvd3U7YCPeCsHm2oMNmAix4wp5DkejyM7gDK+tYamMSWCnCXQrlEcKSxpdpKU hVVhBKc02tlggFuFARSapkdHixd3/tWMYMCsEVpSKKSe09cmo3kHNU1vgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEu9CfJmzgXB80nMSSR6dOQbsRH8MB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIceBowPh zDFUH1GdcM8chOXZTsI0uASLN/d4B8JjjPNj0aZYZ/DUzMIbywOeR69ada7ONHOW MXXQwbRlZ5K0n33XegEM6n+HVXrSvXJGH8qUbJIqVY1o6628a/3NKk0A1XfhhDtZ JKe1XIeXMkGJd+H23yM9cf+8E4QXEeFPjLl7wzkUNdY5ZI0NPJ8DfVZggw7VhpsB Mb4z2ltFbFiijysBUwbcr7RHDwV4li8eklfw98uek3ibbI2P/A4LpcsgfhPybpCb MyHu8Up+p2EtIrAPV5Qk3A/v9neWTwKOau/LJXnMKfGPmmCdkz0CsNSlkjpa3979 /biNtMmzWEyyFw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:29:08 2025 by rpki-client