This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft File: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json) Hash identifier: UUtfkQywmT6FhIRFlYj5jMF9M9ID7cYGhbu+sKzJBCU= Subject key identifier: 8D:EE:39:C7:A6:10:9B:14:D4:B7:06:3D:F3:EE:CB:1E:8D:B7:52:39 Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8 Certificate issuer: /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8 Certificate serial: 019B1BAAEC68F69B4B043ABF37C6D8CABD52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft Manifest number: 1707 Signing time: Sun 14 Dec 2025 07:02:25 +0000 Manifest this update: Sun 14 Dec 2025 07:02:25 +0000 Manifest next update: Mon 15 Dec 2025 07:02:25 +0000 Files and hashes: 1: T65vqqQCj0Js7DJ85sBppVKxPcU.roa (hash: FL22UNhyCGLfnbVMSxPZxrBCfuIiaLb00z7Ca3ye/lo=) 2: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: RcwkW8JvgTTx58GdZl5yi1egD3p1lYx9TMVHU3xmbDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:aa:ec:68:f6:9b:4b:04:3a:bf:37:c6:d8:ca:bd:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8 Validity Not Before: Dec 14 07:02:25 2025 GMT Not After : Dec 15 07:02:25 2025 GMT Subject: CN=8dee39c7a6109b14d4b7063df3eecb1e8db75239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2f:77:41:4f:ad:02:10:d8:0a:b6:25:74:ad: c2:0b:7b:09:64:20:3f:fc:7c:9b:a1:06:78:fd:f2: 62:84:cd:32:d8:85:7b:63:d7:31:c0:ef:a6:03:f0: 8b:f4:9e:59:29:79:5b:a1:5c:b6:8f:0f:82:7d:d3: 4b:0d:27:7a:71:95:6f:d7:00:c6:8d:2f:68:4d:cb: ec:b6:24:b7:17:68:84:36:62:4c:d1:c7:29:a3:65: 97:58:48:19:10:34:fa:6a:05:26:f1:f1:d3:cc:ac: 39:b8:34:45:32:36:fb:55:6c:33:f9:d2:53:7b:21: 35:81:cd:b9:14:1f:78:48:96:a2:d1:19:d6:80:c0: 46:aa:23:1e:3d:4e:51:52:65:1a:e3:de:6a:33:48: 36:1a:1b:71:34:37:d1:2c:4d:c9:a4:88:cd:ac:ef: 00:06:76:8f:29:07:aa:41:4d:4c:7b:72:d9:af:a0: ed:66:13:e4:59:bb:5b:da:b7:04:3f:be:b6:fb:71: 67:d1:1f:f6:9f:76:d7:59:47:a1:99:40:0d:4f:e2: 6c:82:87:e9:0b:c4:2f:bc:93:39:d5:ac:a9:8d:95: 4d:50:01:5f:5a:a0:2d:cb:55:d7:08:af:21:06:53: 3d:60:df:fb:e7:e9:6d:60:f5:a2:70:27:17:43:4e: 24:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:EE:39:C7:A6:10:9B:14:D4:B7:06:3D:F3:EE:CB:1E:8D:B7:52:39 X509v3 Authority Key Identifier: keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:80:56:ef:49:06:28:04:b7:ee:1f:7a:4d:cb:59:b5:00:31: 96:90:e5:ca:b5:cf:5c:20:79:31:a0:a0:cc:ba:cd:0f:46:09: 82:03:11:68:bd:9d:f4:a4:44:e0:0a:02:64:c1:6f:36:3f:d2: 29:54:8a:62:13:83:77:7f:38:0d:7e:45:8d:77:b8:57:75:c6: 4c:e5:ad:34:af:15:62:38:eb:80:42:15:00:9e:5e:f2:f6:a5: 72:0a:1e:84:a8:81:16:d4:26:e9:d2:e1:49:52:de:c0:c1:a8: 72:30:b0:3c:67:63:61:15:4e:14:60:7d:93:32:f8:d7:04:e2: df:b0:c1:c1:9f:c7:67:7c:4e:53:4a:dc:b3:3d:e0:b5:d8:24: 65:6e:5a:7f:76:fd:6d:cf:83:38:d3:c1:c7:2c:51:00:5f:f2: 3a:0a:93:54:3a:3b:dc:5a:bd:3d:c0:44:62:83:4b:6c:d9:8a: d2:ea:60:de:75:0a:38:fe:de:33:c7:2b:36:31:a3:6b:40:b5: 15:d8:a8:23:84:12:e6:e2:ed:60:b9:56:43:be:9d:9b:a2:54: ff:e2:69:67:79:05:18:b4:a4:ca:3d:c7:86:61:46:03:f7:75: ea:6e:01:6d:60:68:7c:39:72:9b:e2:d5:4a:e2:c5:58:cb:af: b1:99:66:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbquxo9ptLBDq/N8bYyr1SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYjNhMzRlM2RkMGE3MWQ0ZDllYWYzNThlYjQzZDhiNjhl NWUwZTgwHhcNMjUxMjE0MDcwMjI1WhcNMjUxMjE1MDcwMjI1WjAzMTEwLwYDVQQD Eyg4ZGVlMzljN2E2MTA5YjE0ZDRiNzA2M2RmM2VlY2IxZThkYjc1MjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti93QU+tAhDYCrYldK3CC3sJZCA/ /HyboQZ4/fJihM0y2IV7Y9cxwO+mA/CL9J5ZKXlboVy2jw+CfdNLDSd6cZVv1wDG jS9oTcvstiS3F2iENmJM0ccpo2WXWEgZEDT6agUm8fHTzKw5uDRFMjb7VWwz+dJT eyE1gc25FB94SJai0RnWgMBGqiMePU5RUmUa495qM0g2GhtxNDfRLE3JpIjNrO8A BnaPKQeqQU1Me3LZr6DtZhPkWbtb2rcEP762+3Fn0R/2n3bXWUehmUANT+Jsgofp C8QvvJM51aypjZVNUAFfWqAty1XXCK8hBlM9YN/75+ltYPWicCcXQ04kVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3uOcemEJsU1LcGPfPuyx6Nt1I5MB8GA1UdIwQY MBaAFHyzo0490KcdTZ6vNY60PYto5eDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZjVkYzUtNjVlYi00YzA4LWFjNGQt ZjQ2YjVkNTdhNjg1LzEvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8yZjVkYzUtNjVlYi00YzA4LWFjNGQtZjQ2YjVkNTdhNjg1 LzEvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4BW70kG KAS37h96TctZtQAxlpDlyrXPXCB5MaCgzLrND0YJggMRaL2d9KRE4AoCZMFvNj/S KVSKYhODd384DX5FjXe4V3XGTOWtNK8VYjjrgEIVAJ5e8valcgoehKiBFtQm6dLh SVLewMGocjCwPGdjYRVOFGB9kzL41wTi37DBwZ/HZ3xOU0rcsz3gtdgkZW5af3b9 bc+DONPBxyxRAF/yOgqTVDo73Fq9PcBEYoNLbNmK0upg3nUKOP7eM8crNjGja0C1 FdioI4QS5uLtYLlWQ76dm6JU/+JpZ3kFGLSkyj3HhmFGA/d16m4BbWBofDlym+LV SuLFWMuvsZlmQA== -----END CERTIFICATE-----Generated at Sun Dec 14 12:11:54 2025 by rpki-client