This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft File: FL8A3_gGMjG9mWdomeq-q6M7xdk.mft (raw, json) Hash identifier: ci5XwujZM8LoHlG43o5l66m6eZ9OAJf+QaG+RNn7dw0= Subject key identifier: 32:1E:0D:62:37:23:6B:58:82:88:D8:62:98:4F:2E:24:64:CE:91:1C Authority key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9 Certificate issuer: /CN=14bf00dff8063231bd99676899eabeaba33bc5d9 Certificate serial: 019B1B051BDE61047FF0C974432BD9F54BF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 04:01:18 +0000 Manifest this update: Sun 14 Dec 2025 04:01:18 +0000 Manifest next update: Mon 15 Dec 2025 04:01:18 +0000 Files and hashes: 1: Csk6MxobRULFjoV8vwBDWTrNIjY.roa (hash: /qSTaCee19sT1splpe2clgwA+iPwSFp3O0YpahxqTpY=) 2: FL8A3_gGMjG9mWdomeq-q6M7xdk.crl (hash: 6qnH9u6w1MgYbhDFuPSPxJkdONPXbnJjHsEzxuKD2tY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:05:1b:de:61:04:7f:f0:c9:74:43:2b:d9:f5:4b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bf00dff8063231bd99676899eabeaba33bc5d9 Validity Not Before: Dec 14 04:01:18 2025 GMT Not After : Dec 15 04:01:18 2025 GMT Subject: CN=321e0d6237236b588288d862984f2e2464ce911c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:46:83:ae:c5:fe:76:6c:94:3d:88:0d:d5:a4: 5f:a2:e2:86:51:18:f5:00:e4:7a:45:e5:3d:ce:83: a9:b7:0d:30:ad:29:a6:6d:23:1b:65:07:13:ff:f7: a5:b1:d7:fb:08:f0:6f:ab:c0:f2:39:95:fb:da:f0: fb:6f:1c:c8:3b:12:c9:4c:52:a3:eb:c4:3c:19:ed: df:a0:bb:b1:b2:7f:db:07:06:cd:c5:88:d6:35:7e: ac:74:4b:d2:fd:0c:1f:4f:a8:34:ae:c6:4f:fa:54: 0a:af:e4:aa:73:50:c5:6f:5e:c9:28:9b:be:ed:e2: 3a:2a:a5:ba:01:61:d3:48:8a:3e:2a:22:8d:51:0a: 25:c6:52:e0:44:12:e3:bb:e4:db:b8:a2:e5:e3:50: 17:5a:cc:f4:d7:4f:66:12:e5:14:14:7b:f6:38:30: 46:83:cc:e4:94:54:05:e6:e8:57:8d:28:bc:62:22: a5:0d:7d:b8:35:aa:f0:7a:b2:7f:f6:1e:1f:7c:c2: 05:51:5b:9a:d4:9a:b0:7b:3c:d3:84:4f:fe:39:31: a2:a8:ef:84:ee:75:04:0d:8c:65:a7:29:1d:b6:1a: 83:ff:e5:54:dd:cb:ef:a4:a6:12:03:2e:e0:c7:bd: 3d:4b:39:93:51:a4:6d:87:a2:97:c8:00:2b:e9:7b: 16:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1E:0D:62:37:23:6B:58:82:88:D8:62:98:4F:2E:24:64:CE:91:1C X509v3 Authority Key Identifier: keyid:14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:a8:53:ca:13:3f:10:1d:d0:b8:e0:a2:84:6c:5e:77:99:2f: 06:ec:1b:ea:28:7e:dd:a1:b7:16:d3:e8:3c:a9:d0:b8:3c:66: ee:a3:3f:2b:f4:1b:e2:db:15:b8:7c:82:6b:be:d8:59:5d:a0: 8d:9b:ef:bd:7f:d2:4c:47:bf:90:92:18:86:70:17:71:01:02: 2b:a4:88:8a:a1:0d:3c:54:ec:1a:07:ff:2d:4d:f6:40:33:e0: 26:72:fd:0f:3b:b4:4b:39:0f:50:d8:da:ae:35:45:7b:ff:79: 29:eb:90:43:d0:e9:d9:7a:30:f0:37:ec:0c:42:a8:c0:99:aa: 82:05:7c:bf:bb:d8:25:ff:45:f3:1c:65:2f:f5:4e:ff:12:d8: 45:5f:61:2b:b6:74:0c:02:0d:be:eb:3d:86:c9:3d:f1:7e:e8: 72:9c:6b:b6:90:6f:e4:bd:34:a2:a4:ae:d7:02:b5:6b:e9:46: f1:f2:67:e5:86:d6:9f:a2:b8:28:0f:a3:fd:18:1c:df:22:27: 1d:75:a4:83:d8:ed:76:dc:de:3a:da:db:2c:f4:8c:b6:8c:cc: 13:f2:e0:db:65:e3:3f:ae:53:80:3c:a2:4e:36:ea:56:34:f8: 3a:e0:56:e9:9c:05:c5:27:9a:ae:26:44:21:b9:4e:ee:ff:dd: 93:0a:c0:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBRveYQR/8Ml0QyvZ9Uv3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmYwMGRmZjgwNjMyMzFiZDk5Njc2ODk5ZWFiZWFiYTMz YmM1ZDkwHhcNMjUxMjE0MDQwMTE4WhcNMjUxMjE1MDQwMTE4WjAzMTEwLwYDVQQD EygzMjFlMGQ2MjM3MjM2YjU4ODI4OGQ4NjI5ODRmMmUyNDY0Y2U5MTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UaDrsX+dmyUPYgN1aRfouKGURj1 AOR6ReU9zoOptw0wrSmmbSMbZQcT//elsdf7CPBvq8DyOZX72vD7bxzIOxLJTFKj 68Q8Ge3foLuxsn/bBwbNxYjWNX6sdEvS/QwfT6g0rsZP+lQKr+Sqc1DFb17JKJu+ 7eI6KqW6AWHTSIo+KiKNUQolxlLgRBLju+TbuKLl41AXWsz0109mEuUUFHv2ODBG g8zklFQF5uhXjSi8YiKlDX24NarwerJ/9h4ffMIFUVua1JqwezzThE/+OTGiqO+E 7nUEDYxlpykdthqD/+VU3cvvpKYSAy7gx709SzmTUaRth6KXyAAr6XsWqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIeDWI3I2tYgojYYphPLiRkzpEcMB8GA1UdIwQY MBaAFBS/AN/4BjIxvZlnaJnqvqujO8XZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw4QTNfZ0dNakc5bVdkb21lcS1xNk03eGRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS85OTZjNzItYjRhOS00MDU4LWJkZjgt YmQyZTc3Y2Q0NzkzLzEvRkw4QTNfZ0dNakc5bVdkb21lcS1xNk03eGRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS85OTZjNzItYjRhOS00MDU4LWJkZjgtYmQyZTc3Y2Q0Nzkz LzEvRkw4QTNfZ0dNakc5bVdkb21lcS1xNk03eGRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKhTyhM/ EB3QuOCihGxed5kvBuwb6ih+3aG3FtPoPKnQuDxm7qM/K/Qb4tsVuHyCa77YWV2g jZvvvX/STEe/kJIYhnAXcQECK6SIiqENPFTsGgf/LU32QDPgJnL9Dzu0SzkPUNja rjVFe/95KeuQQ9Dp2Xow8DfsDEKowJmqggV8v7vYJf9F8xxlL/VO/xLYRV9hK7Z0 DAINvus9hsk98X7ocpxrtpBv5L00oqSu1wK1a+lG8fJn5YbWn6K4KA+j/Rgc3yIn HXWkg9jtdtzeOtrbLPSMtozME/Lg22XjP65TgDyiTjbqVjT4OuBW6ZwFxSeariZE IblO7v/dkwrArw== -----END CERTIFICATE-----Generated at Sun Dec 14 14:42:02 2025 by rpki-client