This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft File: FL85E5txDE9yN-39iFGGVa85wyM.mft (raw, json) Hash identifier: jKIxGYcW62PPfq7kWsblvUBO0teKX+DGG3sgDJ7ENIc= Subject key identifier: 5A:5E:3E:4B:22:97:48:A1:39:2B:0B:55:D6:1C:92:8B:36:43:72:F1 Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23 Certificate issuer: /CN=14bf39139b710c4f7237edfd88518655af39c323 Certificate serial: 019B35A0C35C34107CF0158F1E500DFEB0B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft Manifest number: 0D7B Signing time: Fri 19 Dec 2025 08:01:26 +0000 Manifest this update: Fri 19 Dec 2025 08:01:26 +0000 Manifest next update: Sat 20 Dec 2025 08:01:26 +0000 Files and hashes: 1: FL85E5txDE9yN-39iFGGVa85wyM.crl (hash: qm2x9RqUs14b7eik290Ylqsip2YIRUQQSdo+voHLcAY=) 2: T8jVRfNtgOkoesNchTYMyWBMejA.roa (hash: odUOdpKN+tr75AiaB4U/yYO30gvxGiZ+PPW0U2k0wWk=) 3: _oI5hyBnCt55tCVsP54xRvG07cg.roa (hash: siBfTW9OHIW7tDQ3Efjyi7KuTusgOUvikxuMwP5Dkrs=) 4: h09V_pfLhbG06t0gQbFrPM7mXKs.roa (hash: 5yQRSQYWk0Fc992YjmOb7t6zzDvUZZ6yh9Kn/c45gMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:c3:5c:34:10:7c:f0:15:8f:1e:50:0d:fe:b0:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323 Validity Not Before: Dec 19 08:01:26 2025 GMT Not After : Dec 20 08:01:26 2025 GMT Subject: CN=5a5e3e4b229748a1392b0b55d61c928b364372f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c3:2d:a3:18:5a:f7:d7:89:bf:d0:b6:f4:05: 71:b9:c8:52:83:57:52:f2:88:a2:79:15:c7:66:bb: 77:67:ea:4a:7a:3c:b2:31:a3:1c:8d:0a:1c:ac:72: 30:b2:af:37:28:09:21:6a:32:af:f2:cf:5f:f8:2c: 55:05:74:16:b5:a2:c9:dc:f9:05:26:db:e3:af:a3: ba:a9:a4:57:0c:9f:5b:61:0c:71:04:a6:72:31:12: d1:aa:03:54:03:1f:8d:93:48:df:0b:2e:1d:50:5a: d1:a3:6d:8d:30:1e:12:41:34:98:5a:64:68:74:a9: 02:78:26:39:b8:72:3f:50:aa:2c:99:66:b9:64:e0: d9:8c:da:18:e7:73:dd:3a:e1:0a:9a:b3:f3:b3:de: c4:ee:c5:b7:c3:9d:fb:bd:b1:fa:4b:13:cf:55:3a: 7c:1e:79:fc:0d:5f:88:6e:6b:a1:fd:27:63:6d:33: 84:c2:3d:ca:e9:c6:3d:f1:98:2d:ad:19:cf:d4:df: db:21:91:b7:9d:e0:68:bc:72:6f:e4:86:c2:d8:1c: ed:53:ff:71:2c:4a:86:a8:6c:ea:da:82:92:b5:0d: dc:00:0f:da:21:fe:d6:da:ab:09:8f:15:2f:25:ab: f0:46:6c:6d:42:92:28:5e:62:b9:a0:4c:d4:1b:f5: 11:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5E:3E:4B:22:97:48:A1:39:2B:0B:55:D6:1C:92:8B:36:43:72:F1 X509v3 Authority Key Identifier: keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:d5:44:1e:21:84:69:70:87:82:a3:cc:7e:cb:2d:f8:20:e4: d8:06:06:fb:90:90:f8:82:d0:5d:a4:6f:c8:5f:01:9b:05:51: 6d:1c:68:b3:3b:90:3d:a9:4e:b9:9c:ff:e0:9d:da:05:5d:d6: 77:e4:28:74:53:db:f2:2d:ce:9d:c8:81:71:8b:9b:15:6c:8c: 22:ca:b3:10:e2:e3:02:d1:ea:96:db:64:0f:1f:4e:8c:2f:48: 2c:23:44:6d:7b:48:21:0a:4e:14:ca:91:46:bd:0d:67:63:fa: 04:d8:41:a2:da:3f:cb:98:8b:58:5d:5f:95:07:32:4e:67:3a: e9:02:d0:91:67:06:f5:02:c0:47:57:6f:30:21:2d:a8:b0:5b: 07:0c:cf:bf:63:0c:ac:6d:ea:76:22:ab:50:50:a0:19:8a:d8: 32:94:ff:8c:91:82:3c:43:80:e0:e8:52:cd:ce:d0:a2:8a:33: 96:bf:42:73:04:a0:38:f6:26:8e:00:8f:1e:37:1d:87:a3:9c: 6b:96:e7:e5:60:58:fc:2c:db:98:41:eb:3e:35:bc:df:ef:ee: 1a:10:2f:ef:c1:99:41:a5:2d:10:fb:b1:5e:b2:22:c1:e7:b8: d3:26:84:cd:83:b2:a4:52:f6:13:17:a7:56:b7:17:81:9a:fc: 18:d8:3a:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oMNcNBB88BWPHlAN/rCyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmYzOTEzOWI3MTBjNGY3MjM3ZWRmZDg4NTE4NjU1YWYz OWMzMjMwHhcNMjUxMjE5MDgwMTI2WhcNMjUxMjIwMDgwMTI2WjAzMTEwLwYDVQQD Eyg1YTVlM2U0YjIyOTc0OGExMzkyYjBiNTVkNjFjOTI4YjM2NDM3MmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8Mtoxha99eJv9C29AVxuchSg1dS 8oiieRXHZrt3Z+pKejyyMaMcjQocrHIwsq83KAkhajKv8s9f+CxVBXQWtaLJ3PkF Jtvjr6O6qaRXDJ9bYQxxBKZyMRLRqgNUAx+Nk0jfCy4dUFrRo22NMB4SQTSYWmRo dKkCeCY5uHI/UKosmWa5ZODZjNoY53PdOuEKmrPzs97E7sW3w537vbH6SxPPVTp8 Hnn8DV+Ibmuh/SdjbTOEwj3K6cY98ZgtrRnP1N/bIZG3neBovHJv5IbC2BztU/9x LEqGqGzq2oKStQ3cAA/aIf7W2qsJjxUvJavwRmxtQpIoXmK5oEzUG/UR3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpePksil0ihOSsLVdYckos2Q3LxMB8GA1UdIwQY MBaAFBS/ORObcQxPcjft/YhRhlWvOcMjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw4NUU1dHhERTl5Ti0zOWlGR0dWYTg1d3lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iOTYyNTktMzNiOC00NTRhLThjNWYt YTg2MmI4ODU5M2EwLzEvRkw4NUU1dHhERTl5Ti0zOWlGR0dWYTg1d3lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iOTYyNTktMzNiOC00NTRhLThjNWYtYTg2MmI4ODU5M2Ew LzEvRkw4NUU1dHhERTl5Ti0zOWlGR0dWYTg1d3lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNVEHiGE aXCHgqPMfsst+CDk2AYG+5CQ+ILQXaRvyF8BmwVRbRxoszuQPalOuZz/4J3aBV3W d+QodFPb8i3OnciBcYubFWyMIsqzEOLjAtHqlttkDx9OjC9ILCNEbXtIIQpOFMqR Rr0NZ2P6BNhBoto/y5iLWF1flQcyTmc66QLQkWcG9QLAR1dvMCEtqLBbBwzPv2MM rG3qdiKrUFCgGYrYMpT/jJGCPEOA4OhSzc7Qooozlr9CcwSgOPYmjgCPHjcdh6Oc a5bn5WBY/CzbmEHrPjW83+/uGhAv78GZQaUtEPuxXrIiwee40yaEzYOypFL2Exen VrcXgZr8GNg6Cw== -----END CERTIFICATE-----Generated at Fri Dec 19 11:01:38 2025 by rpki-client