This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft File: Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft (raw, json) Hash identifier: p9LAPHQy2zWfmfj6oy0PF9+TubkGA/07kFay33RKCp8= Subject key identifier: 26:FC:69:34:56:1D:C4:47:07:70:02:26:85:C1:2D:61:6C:73:EB:8C Authority key identifier: 16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2 Certificate issuer: /CN=165fad4109283b33b6f3ba53fae83a145d1934e2 Certificate serial: 019B5975AE66F5117FE14BC5B2525475761A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft Manifest number: 04A0 Signing time: Fri 26 Dec 2025 07:00:43 +0000 Manifest this update: Fri 26 Dec 2025 07:00:43 +0000 Manifest next update: Sat 27 Dec 2025 07:00:43 +0000 Files and hashes: 1: Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl (hash: b7P3KZpoB93DGO9qbTLbRsLfBkA6W9Mf9gxfu4JErTQ=) 2: Ln2JbGXgQ88O79Pg1zLA68Pqxy0.roa (hash: Mstyw2j7AKFxamlwfGacDBtId3D916+hLBKPld0IQWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:ae:66:f5:11:7f:e1:4b:c5:b2:52:54:75:76:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=165fad4109283b33b6f3ba53fae83a145d1934e2 Validity Not Before: Dec 26 07:00:43 2025 GMT Not After : Dec 27 07:00:43 2025 GMT Subject: CN=26fc6934561dc4470770022685c12d616c73eb8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e2:13:38:b4:c1:5d:6f:81:05:f2:44:80:aa: a5:58:7e:c6:6a:e5:2d:ae:e4:19:c7:88:41:0c:eb: 86:31:38:33:25:70:5b:3f:37:3e:69:c8:d3:b4:99: 06:0d:f3:78:57:53:b2:c1:55:5c:95:d2:e9:fe:7f: 21:ff:92:9f:9d:8c:2c:53:c8:69:6c:8e:16:4f:66: d0:13:8c:2f:8e:82:3b:cb:09:e9:f9:c9:75:fb:e7: 2b:f3:ed:ea:88:6b:e2:d1:01:43:bc:8a:75:ab:9d: 81:d6:c5:1e:b8:23:04:cd:41:31:57:eb:95:62:72: b5:8e:5a:37:7e:45:af:dc:c9:d0:a9:99:91:7d:b3: dc:f6:b2:a4:5e:51:56:8d:74:ad:2a:50:6a:84:f6: 51:40:c6:17:42:10:a1:e3:a9:47:36:fc:ba:3d:86: a3:8e:20:0e:4f:3b:1f:25:b7:9a:1f:60:52:aa:fa: 8f:3a:10:05:e0:44:82:2a:da:93:d3:84:30:70:1d: 98:bd:60:65:27:58:a4:7b:f9:ff:2f:3f:57:06:83: 50:2c:ff:48:35:49:5f:23:49:d1:84:60:74:29:7b: f6:27:00:3a:a7:61:e9:c4:38:13:0e:d7:df:86:48: 23:10:ea:ec:17:53:28:72:6b:6c:41:b7:31:0f:40: 27:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:FC:69:34:56:1D:C4:47:07:70:02:26:85:C1:2D:61:6C:73:EB:8C X509v3 Authority Key Identifier: keyid:16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f0:80:53:cf:5d:1a:ff:bf:33:ce:5f:a8:36:66:51:2a:c3: 4e:45:c7:90:c0:00:8d:69:ac:00:cf:45:c4:c2:cb:86:dc:1d: 78:41:de:d5:a1:c7:39:ec:20:14:76:c2:15:a9:06:53:fd:fd: 95:c1:c8:97:0e:fa:ef:ca:a8:0b:82:aa:4f:62:a1:c6:74:09: 7c:48:88:1e:2c:9d:c3:96:26:ff:06:44:18:ea:41:a1:98:1d: ca:8b:40:8f:4d:3e:2c:0a:40:5e:81:d6:94:c4:e0:4d:a4:b2: 08:be:c3:b1:d8:81:42:ec:90:d6:3d:21:e9:3a:d7:bb:16:7d: 11:44:ed:bb:72:03:39:80:5f:ef:79:5a:c4:4a:cd:47:f4:9d: ae:46:29:d3:d4:e4:9d:8b:6f:99:ab:37:33:61:18:21:30:20: 31:cf:85:67:24:ce:bc:7e:72:8f:0d:bb:22:a7:47:6b:6e:d7: b7:34:4f:0f:59:32:07:58:6c:8c:26:3d:61:df:e5:1f:ce:df: 16:e4:9e:c6:45:55:2a:42:82:66:97:cb:0a:f1:fa:81:fb:96: 5a:5c:c3:cb:f4:b2:6f:24:c1:16:b4:6d:82:34:42:f7:ec:b9: b0:91:8b:dd:91:05:0c:b9:20:72:2b:39:af:c2:a8:1f:c4:20: 98:44:c4:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZda5m9RF/4UvFslJUdXYaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NWZhZDQxMDkyODNiMzNiNmYzYmE1M2ZhZTgzYTE0NWQx OTM0ZTIwHhcNMjUxMjI2MDcwMDQzWhcNMjUxMjI3MDcwMDQzWjAzMTEwLwYDVQQD EygyNmZjNjkzNDU2MWRjNDQ3MDc3MDAyMjY4NWMxMmQ2MTZjNzNlYjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+ITOLTBXW+BBfJEgKqlWH7GauUt ruQZx4hBDOuGMTgzJXBbPzc+acjTtJkGDfN4V1OywVVcldLp/n8h/5KfnYwsU8hp bI4WT2bQE4wvjoI7ywnp+cl1++cr8+3qiGvi0QFDvIp1q52B1sUeuCMEzUExV+uV YnK1jlo3fkWv3MnQqZmRfbPc9rKkXlFWjXStKlBqhPZRQMYXQhCh46lHNvy6PYaj jiAOTzsfJbeaH2BSqvqPOhAF4ESCKtqT04QwcB2YvWBlJ1ike/n/Lz9XBoNQLP9I NUlfI0nRhGB0KXv2JwA6p2HpxDgTDtffhkgjEOrsF1MocmtsQbcxD0AnDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCb8aTRWHcRHB3ACJoXBLWFsc+uMMB8GA1UdIwQY MBaAFBZfrUEJKDsztvO6U/roOhRdGTTiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmwtdFFRa29Pek8yODdwVC11ZzZGRjBaTk9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zYjcyYzAtNWRlOS00NmE0LWFiZDQt MzFiNjAzMTFjMzE1LzEvRmwtdFFRa29Pek8yODdwVC11ZzZGRjBaTk9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8zYjcyYzAtNWRlOS00NmE0LWFiZDQtMzFiNjAzMTFjMzE1 LzEvRmwtdFFRa29Pek8yODdwVC11ZzZGRjBaTk9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjfCAU89d Gv+/M85fqDZmUSrDTkXHkMAAjWmsAM9FxMLLhtwdeEHe1aHHOewgFHbCFakGU/39 lcHIlw7678qoC4KqT2KhxnQJfEiIHiydw5Ym/wZEGOpBoZgdyotAj00+LApAXoHW lMTgTaSyCL7DsdiBQuyQ1j0h6TrXuxZ9EUTtu3IDOYBf73laxErNR/SdrkYp09Tk nYtvmas3M2EYITAgMc+FZyTOvH5yjw27IqdHa27XtzRPD1kyB1hsjCY9Yd/lH87f FuSexkVVKkKCZpfLCvH6gfuWWlzDy/SybyTBFrRtgjRC9+y5sJGL3ZEFDLkgcis5 r8KoH8QgmETEZw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:38 2025 by rpki-client