This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft File: FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft (raw, json) Hash identifier: 6EQKeQQhTjkEt+K13sD0B+wT1iIGT+Hlxu/IYHgCPGc= Subject key identifier: 53:76:D8:8C:AB:1F:8B:7A:25:1D:E8:53:E3:95:66:13:42:43:90:1A Authority key identifier: 14:BB:6F:AC:69:19:D9:00:A2:FE:BB:78:1D:19:7F:4D:81:34:E0:5B Certificate issuer: /CN=14bb6fac6919d900a2febb781d197f4d8134e05b Certificate serial: 019B1EE1B4126BBF416F2155214D0581EB72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft Manifest number: 138F Signing time: Sun 14 Dec 2025 22:01:06 +0000 Manifest this update: Sun 14 Dec 2025 22:01:06 +0000 Manifest next update: Mon 15 Dec 2025 22:01:06 +0000 Files and hashes: 1: FLtvrGkZ2QCi_rt4HRl_TYE04Fs.crl (hash: BDhHQkp9B8O1Yu1IqppshncmERt/N1M65kXaVi9hRs0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 22:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:e1:b4:12:6b:bf:41:6f:21:55:21:4d:05:81:eb:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bb6fac6919d900a2febb781d197f4d8134e05b Validity Not Before: Dec 14 22:01:06 2025 GMT Not After : Dec 15 22:01:06 2025 GMT Subject: CN=5376d88cab1f8b7a251de853e39566134243901a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:99:52:4f:f4:bf:c3:a9:c0:84:fa:19:92:3e: d4:b7:14:ca:43:31:a5:b8:ad:da:7c:de:e2:3d:71: 10:0e:b1:a7:2d:e0:31:5c:28:79:ac:72:51:88:1e: 5e:a8:cc:f5:90:3b:23:05:80:24:ad:5d:86:8a:f6: c6:b6:ec:5e:aa:7a:27:8a:4b:4f:c7:68:7b:69:a3: 83:6c:95:54:63:a8:6e:5c:ef:46:e0:2b:43:3d:f8: 44:b3:48:59:28:c6:4b:61:35:25:4d:af:b5:81:76: a2:75:e7:f4:14:72:8f:14:c3:54:66:dd:ae:b7:61: 9c:20:5e:cf:2f:0e:c3:9f:3d:dc:9f:4f:52:9b:9c: b2:3d:c3:b6:69:6b:02:68:3a:bb:d3:4f:64:0a:17: 96:82:16:1e:58:eb:99:0f:39:1f:35:b8:c3:cc:ac: c1:73:b3:c0:18:eb:f1:f7:d1:64:e2:22:63:06:73: d0:42:21:12:13:2b:ae:82:1b:84:35:d3:5b:92:87: f6:24:f4:17:b4:1d:1f:37:f5:2c:45:f0:0a:cb:34: 9b:54:a8:2b:56:9e:6a:8b:53:0e:5b:fe:7d:8b:22: a2:51:41:10:18:0e:0b:c3:4c:af:87:8c:57:92:64: 48:d6:ae:7a:2f:23:57:25:50:9d:4e:06:bb:2d:d2: bb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:76:D8:8C:AB:1F:8B:7A:25:1D:E8:53:E3:95:66:13:42:43:90:1A X509v3 Authority Key Identifier: keyid:14:BB:6F:AC:69:19:D9:00:A2:FE:BB:78:1D:19:7F:4D:81:34:E0:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4f4e5f-2549-4ff8-b3f7-2e859575e1ea/1/FLtvrGkZ2QCi_rt4HRl_TYE04Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:2f:48:0e:4d:14:ee:15:a6:de:9a:a6:9e:e7:7c:4b:68:a0: c0:6e:b3:45:35:f9:35:4a:fb:cd:f0:fd:37:b2:5f:4d:94:e8: 1b:d6:16:85:e2:1a:91:6b:56:80:da:b2:35:2d:1d:c0:ed:5e: b2:87:8e:13:1a:24:02:ba:a3:3b:7e:4b:cb:ed:74:b6:7a:31: d5:7c:ab:d9:a0:73:86:12:a4:2b:ec:2d:b9:8a:32:e3:53:4d: 4a:f3:c5:eb:82:c5:e8:24:51:f6:a6:5d:66:af:2c:17:ac:61: 68:95:cc:23:e3:df:fe:a9:dc:8c:b1:a0:51:eb:54:f2:60:69: 41:65:d0:e8:09:ff:b0:3e:4b:ec:87:b1:e2:60:76:2d:05:26: fb:92:00:c9:05:f5:bb:ea:2a:65:7c:0b:d0:89:81:27:97:f9: 89:4d:df:d6:ac:ae:5a:9e:6a:6b:b7:ee:3d:c6:f7:0c:e2:48: 9e:09:ba:c0:a8:65:be:e3:82:33:22:2b:20:f4:6e:4e:27:37: 51:52:49:b3:65:4c:06:f7:31:22:1e:3e:70:ae:89:5c:dd:e6: d6:fc:41:46:c6:f1:c6:a0:65:0e:a3:68:c2:85:b6:ae:2f:71: 74:f8:0e:83:15:7e:02:76:aa:32:7a:bf:87:a0:bf:ea:9c:ad: 12:a1:25:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZse4bQSa79BbyFVIU0FgetyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmI2ZmFjNjkxOWQ5MDBhMmZlYmI3ODFkMTk3ZjRkODEz NGUwNWIwHhcNMjUxMjE0MjIwMTA2WhcNMjUxMjE1MjIwMTA2WjAzMTEwLwYDVQQD Eyg1Mzc2ZDg4Y2FiMWY4YjdhMjUxZGU4NTNlMzk1NjYxMzQyNDM5MDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8plST/S/w6nAhPoZkj7UtxTKQzGl uK3afN7iPXEQDrGnLeAxXCh5rHJRiB5eqMz1kDsjBYAkrV2GivbGtuxeqnoniktP x2h7aaODbJVUY6huXO9G4CtDPfhEs0hZKMZLYTUlTa+1gXaidef0FHKPFMNUZt2u t2GcIF7PLw7Dnz3cn09Sm5yyPcO2aWsCaDq7009kCheWghYeWOuZDzkfNbjDzKzB c7PAGOvx99Fk4iJjBnPQQiESEyuughuENdNbkof2JPQXtB0fN/UsRfAKyzSbVKgr Vp5qi1MOW/59iyKiUUEQGA4Lw0yvh4xXkmRI1q56LyNXJVCdTga7LdK7jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFN22IyrH4t6JR3oU+OVZhNCQ5AaMB8GA1UdIwQY MBaAFBS7b6xpGdkAov67eB0Zf02BNOBbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkx0dnJHa1oyUUNpX3J0NEhSbF9UWUUwNEZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80ZjRlNWYtMjU0OS00ZmY4LWIzZjct MmU4NTk1NzVlMWVhLzEvRkx0dnJHa1oyUUNpX3J0NEhSbF9UWUUwNEZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80ZjRlNWYtMjU0OS00ZmY4LWIzZjctMmU4NTk1NzVlMWVh LzEvRkx0dnJHa1oyUUNpX3J0NEhSbF9UWUUwNEZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVi9IDk0U 7hWm3pqmnud8S2igwG6zRTX5NUr7zfD9N7JfTZToG9YWheIakWtWgNqyNS0dwO1e soeOExokArqjO35Ly+10tnox1Xyr2aBzhhKkK+wtuYoy41NNSvPF64LF6CRR9qZd Zq8sF6xhaJXMI+Pf/qncjLGgUetU8mBpQWXQ6An/sD5L7Iex4mB2LQUm+5IAyQX1 u+oqZXwL0ImBJ5f5iU3f1qyuWp5qa7fuPcb3DOJIngm6wKhlvuOCMyIrIPRuTic3 UVJJs2VMBvcxIh4+cK6JXN3m1vxBRsbxxqBlDqNowoW2ri9xdPgOgxV+AnaqMnq/ h6C/6pytEqElYw== -----END CERTIFICATE-----Generated at Mon Dec 15 04:52:21 2025 by rpki-client