This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft File: FRRT9ILNp468mWJdgLD_w2YPlfI.mft (raw, json) Hash identifier: FC2uF6uFiPk/hDapV9DbZO4sm5RBmcvReG/fmKhRccg= Subject key identifier: 9B:2A:14:2E:80:B2:AB:0A:F3:3C:5A:64:25:32:DB:9C:F6:22:5B:02 Authority key identifier: 15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2 Certificate issuer: /CN=151453f482cda78ebc99625d80b0ffc3660f95f2 Certificate serial: 019B3C7DC44FA029FC52E552E52046D9C730 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft Manifest number: 1797 Signing time: Sat 20 Dec 2025 16:00:33 +0000 Manifest this update: Sat 20 Dec 2025 16:00:33 +0000 Manifest next update: Sun 21 Dec 2025 16:00:33 +0000 Files and hashes: 1: 1-lv-eyLkZwpQLTuJorHeKbcVMK8.roa (hash: tvNysXrHBHPZC5fymq/kQjA0jN47rS/9OLBH7USYU6E=) 2: FRRT9ILNp468mWJdgLD_w2YPlfI.crl (hash: ei7t+5p1aDeuXErGgR4OafvglhioC/gGmNF3cDFzRtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:c4:4f:a0:29:fc:52:e5:52:e5:20:46:d9:c7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=151453f482cda78ebc99625d80b0ffc3660f95f2 Validity Not Before: Dec 20 16:00:33 2025 GMT Not After : Dec 21 16:00:33 2025 GMT Subject: CN=9b2a142e80b2ab0af33c5a642532db9cf6225b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:78:bd:b7:8e:b0:db:03:6c:a6:af:67:76:e3: ce:a4:1c:e9:4b:bc:e0:e3:41:21:5c:d0:a3:89:73: bd:b7:fd:ca:78:fa:10:ef:a3:e6:3c:5f:dd:3a:61: 7f:80:9e:35:53:de:9a:ee:a2:56:85:5c:2f:a1:2f: 6b:5b:50:21:02:82:a8:0b:cc:b8:12:e7:38:f0:f5: 66:80:9a:f1:66:d2:cd:00:8e:67:80:77:a5:d5:87: 5b:6f:99:61:d1:9e:bc:cb:f8:78:27:cf:a4:25:38: ce:d3:98:db:7e:73:b3:08:20:a6:8a:6c:8d:11:ba: e0:64:f8:ff:22:f3:bc:55:38:53:2b:9c:24:a6:c9: 3b:d4:ac:a1:00:38:31:56:17:3b:e7:c2:3e:70:e6: e6:40:14:d1:80:2f:b0:f5:a1:55:fe:45:5a:d5:6f: 5b:4d:ae:4e:9a:d4:82:4d:d7:83:eb:80:e9:51:c6: 13:23:f2:5c:b0:ec:d6:61:2a:6d:3c:06:3d:88:85: 52:79:1c:89:52:1e:10:62:6e:ae:7f:d7:c3:c1:62: ee:ae:56:a3:70:90:5d:b9:c4:ac:db:9c:34:1a:ec: c2:b1:61:96:6c:c6:3d:eb:d5:3f:ec:fe:ea:8d:d1: 6c:63:20:47:f7:9b:1c:b4:e0:70:f3:b8:c8:2f:d8: 33:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2A:14:2E:80:B2:AB:0A:F3:3C:5A:64:25:32:DB:9C:F6:22:5B:02 X509v3 Authority Key Identifier: keyid:15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:9e:5c:5d:da:34:94:3e:57:90:6f:3d:48:f3:38:bc:a7:80: a2:2e:9c:6b:84:6f:ee:5e:d1:be:27:25:6a:97:30:ae:60:ad: 06:c9:59:bb:01:6a:a4:70:2a:b6:a2:02:e9:da:b2:26:1e:15: ec:b9:c6:90:ce:17:cc:41:c0:4b:0e:7d:fa:ec:79:fa:b0:73: b6:ea:5e:8b:34:ae:15:56:0b:24:9f:ca:20:36:b0:89:4d:4d: 69:63:cb:75:46:bf:2a:7e:64:67:cb:dc:42:d4:a0:55:c1:0a: 6b:58:3d:8f:98:5a:9c:38:43:96:8f:a0:0b:ad:18:cc:92:b2: b2:3a:72:3f:ea:5d:81:64:db:a6:d7:bb:8c:60:43:bd:85:66: ea:c5:8a:22:5c:e4:42:41:e6:59:d9:77:70:f3:28:89:4b:cd: a4:b1:6c:78:7e:a2:42:7f:ba:fa:31:32:c7:5a:a6:ee:ba:ef: 21:25:49:a2:cc:e6:c5:61:9a:8a:b9:29:c8:73:77:32:b8:7e: 1b:01:85:fd:48:b5:71:fe:80:65:b2:6f:fb:4d:79:f4:f2:30: bf:a2:b6:88:5f:80:7b:28:e9:f8:23:21:87:b3:91:6b:82:e2: 2f:f8:bc:93:8a:02:d9:c1:d3:6c:09:fe:4f:92:b1:54:fe:a5: 4d:f9:0f:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fcRPoCn8UuVS5SBG2ccwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MTQ1M2Y0ODJjZGE3OGViYzk5NjI1ZDgwYjBmZmMzNjYw Zjk1ZjIwHhcNMjUxMjIwMTYwMDMzWhcNMjUxMjIxMTYwMDMzWjAzMTEwLwYDVQQD Eyg5YjJhMTQyZTgwYjJhYjBhZjMzYzVhNjQyNTMyZGI5Y2Y2MjI1YjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXi9t46w2wNspq9nduPOpBzpS7zg 40EhXNCjiXO9t/3KePoQ76PmPF/dOmF/gJ41U96a7qJWhVwvoS9rW1AhAoKoC8y4 Euc48PVmgJrxZtLNAI5ngHel1Ydbb5lh0Z68y/h4J8+kJTjO05jbfnOzCCCmimyN EbrgZPj/IvO8VThTK5wkpsk71KyhADgxVhc758I+cObmQBTRgC+w9aFV/kVa1W9b Ta5OmtSCTdeD64DpUcYTI/JcsOzWYSptPAY9iIVSeRyJUh4QYm6uf9fDwWLurlaj cJBducSs25w0GuzCsWGWbMY969U/7P7qjdFsYyBH95sctOBw87jIL9gzvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsqFC6AsqsK8zxaZCUy25z2IlsCMB8GA1UdIwQY MBaAFBUUU/SCzaeOvJliXYCw/8NmD5XyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC81OWZjZjAtMWQ1Yy00ZWNiLWJmODct M2JjYjhiZjhiYmZlLzEvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC81OWZjZjAtMWQ1Yy00ZWNiLWJmODctM2JjYjhiZjhiYmZl LzEvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJ5cXdo0 lD5XkG89SPM4vKeAoi6ca4Rv7l7RviclapcwrmCtBslZuwFqpHAqtqIC6dqyJh4V 7LnGkM4XzEHASw59+ux5+rBztupeizSuFVYLJJ/KIDawiU1NaWPLdUa/Kn5kZ8vc QtSgVcEKa1g9j5hanDhDlo+gC60YzJKysjpyP+pdgWTbpte7jGBDvYVm6sWKIlzk QkHmWdl3cPMoiUvNpLFseH6iQn+6+jEyx1qm7rrvISVJoszmxWGairkpyHN3Mrh+ GwGF/Ui1cf6AZbJv+0159PIwv6K2iF+Aeyjp+CMhh7ORa4LiL/i8k4oC2cHTbAn+ T5KxVP6lTfkPmw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:06:21 2025 by rpki-client