This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft File: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft (raw, json) Hash identifier: obbli+eXbkEh32ENbaRXzvxAeJ3hAhrYkAuKWNKmeC8= Subject key identifier: DE:83:F1:90:FF:6A:18:2B:57:2A:3F:D9:5D:E3:EE:64:DB:9C:0E:25 Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37 Certificate issuer: /CN=145ceb292089e0df75719db3e96c509754f94837 Certificate serial: 019B3B34E3F906B193EF02D707C7F470489B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft Manifest number: 1790 Signing time: Sat 20 Dec 2025 10:01:20 +0000 Manifest this update: Sat 20 Dec 2025 10:01:20 +0000 Manifest next update: Sun 21 Dec 2025 10:01:20 +0000 Files and hashes: 1: 51NXVgAr2I1eXTe9a9kizTFuHJ4.roa (hash: 1iN5vxfuwXGFtbxcnMWPqsUykL0ZxXTKprGUJelmE44=) 2: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl (hash: woPBqs0V9Oy0VzLUEIUbOkCMNjy1tVgzgCd2Z1nJ7gQ=) 3: bzGs0AfDNETTzCPGuhNEtlqP4Lk.roa (hash: W1PVimH7iIBpOpHAPclX+yhqZLE6KhqWf6pI/1uvpY0=) 4: sySDvKNNenjKTqJVkF08wLomsjM.asa (hash: +kidr1/LWB3zdQ+Hae9NW1Zctl0LMXwwKKQuCxYbKjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:e3:f9:06:b1:93:ef:02:d7:07:c7:f4:70:48:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=145ceb292089e0df75719db3e96c509754f94837 Validity Not Before: Dec 20 10:01:20 2025 GMT Not After : Dec 21 10:01:20 2025 GMT Subject: CN=de83f190ff6a182b572a3fd95de3ee64db9c0e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d7:23:5a:46:3d:de:3e:5f:4b:88:65:a1:b1: 98:73:f6:bb:bf:4d:1c:e9:b5:d9:c4:e3:02:6e:65: e8:45:95:42:e0:55:79:12:70:e6:66:9d:a8:00:00: 77:a4:50:e5:5d:88:ad:f5:bd:fc:ac:48:b4:2f:cc: c2:a3:34:3a:cd:94:a7:15:fc:21:5f:71:92:0c:04: ea:3a:04:f8:cc:8d:58:cd:eb:70:80:54:e9:c5:4c: ab:59:41:d7:26:05:b2:89:24:5b:62:9c:96:47:27: 31:88:60:ac:e7:a7:1b:81:44:86:c6:44:ee:57:e3: 0b:a7:b1:3c:43:d7:47:33:24:37:1f:92:06:fd:99: 5b:d5:02:82:cd:e5:10:94:b1:94:a3:ac:0e:31:b8: 59:28:9f:f2:28:ef:1b:98:78:ec:ad:7a:3b:77:b1: 17:a2:e8:58:d5:89:9e:55:5e:97:4d:eb:2b:10:de: 76:d4:eb:90:3a:5d:f8:a9:a0:c5:b6:fd:d2:d5:f9: d9:a8:73:8a:7b:5e:c9:02:7a:b6:d9:7d:a1:ee:a8: 2d:f5:5f:7f:5a:1a:e1:84:10:5d:5c:30:65:79:a7: fb:14:2e:d4:83:e1:7e:28:7c:a5:f6:1a:f9:e7:1f: 44:e9:ad:2a:d7:f9:dd:0b:20:26:4b:88:69:ba:d6: 0a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:83:F1:90:FF:6A:18:2B:57:2A:3F:D9:5D:E3:EE:64:DB:9C:0E:25 X509v3 Authority Key Identifier: keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:48:29:75:2f:7b:bc:a7:0b:a2:0b:26:95:34:65:96:1b:5c: 0a:c6:c2:e5:2b:f9:ed:18:13:42:09:b9:b0:27:3c:f4:9b:95: e5:e2:46:bf:8c:59:d2:64:77:03:83:ce:b4:00:75:c7:93:9d: 9a:9f:73:4a:83:b8:62:8c:9c:33:a7:2d:99:70:ab:20:5f:72: 84:b0:45:38:e4:e5:1a:ec:2f:55:12:7c:f4:ff:35:60:04:39: e0:e1:89:50:5e:e3:11:a4:a1:44:1e:88:73:71:c6:a3:36:34: f6:06:58:92:89:cf:59:a2:ab:2f:7f:a4:b7:1e:ef:78:96:90: 8d:88:5e:07:67:30:e8:92:99:0b:e9:56:27:ba:62:3b:fb:5e: c2:50:dc:ac:70:43:15:6c:6d:97:fc:69:a7:de:d2:8a:fd:2d: 26:9c:74:7f:c6:a8:bc:32:9b:61:ee:41:a1:7b:f0:d0:9b:0a: a5:09:43:9a:f9:c7:0f:b7:89:c4:46:04:2a:6a:26:19:8b:c3: 31:01:de:a2:e7:a7:71:e8:ed:b0:eb:f3:85:17:da:c4:a0:22: da:55:d8:b9:50:a9:c0:16:07:f9:3e:27:8e:90:a0:fb:7e:90: 33:c1:9d:08:56:b0:75:a2:54:13:84:9d:06:b7:83:4b:e8:f0: 1c:5e:a8:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NOP5BrGT7wLXB8f0cEibMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NWNlYjI5MjA4OWUwZGY3NTcxOWRiM2U5NmM1MDk3NTRm OTQ4MzcwHhcNMjUxMjIwMTAwMTIwWhcNMjUxMjIxMTAwMTIwWjAzMTEwLwYDVQQD EyhkZTgzZjE5MGZmNmExODJiNTcyYTNmZDk1ZGUzZWU2NGRiOWMwZTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydcjWkY93j5fS4hlobGYc/a7v00c 6bXZxOMCbmXoRZVC4FV5EnDmZp2oAAB3pFDlXYit9b38rEi0L8zCozQ6zZSnFfwh X3GSDATqOgT4zI1YzetwgFTpxUyrWUHXJgWyiSRbYpyWRycxiGCs56cbgUSGxkTu V+MLp7E8Q9dHMyQ3H5IG/Zlb1QKCzeUQlLGUo6wOMbhZKJ/yKO8bmHjsrXo7d7EX ouhY1YmeVV6XTesrEN521OuQOl34qaDFtv3S1fnZqHOKe17JAnq22X2h7qgt9V9/ WhrhhBBdXDBleaf7FC7Ug+F+KHyl9hr55x9E6a0q1/ndCyAmS4hputYK/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6D8ZD/ahgrVyo/2V3j7mTbnA4lMB8GA1UdIwQY MBaAFBRc6ykgieDfdXGds+lsUJdU+Ug3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkZ6cktTQ0o0TjkxY1oyejZXeFFsMVQ1U0RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jNzFmZGUtM2VmMi00YmY3LTg2NDEt MTI3MTljMjYxY2MwLzEvRkZ6cktTQ0o0TjkxY1oyejZXeFFsMVQ1U0RjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9jNzFmZGUtM2VmMi00YmY3LTg2NDEtMTI3MTljMjYxY2Mw LzEvRkZ6cktTQ0o0TjkxY1oyejZXeFFsMVQ1U0RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUgpdS97 vKcLogsmlTRllhtcCsbC5Sv57RgTQgm5sCc89JuV5eJGv4xZ0mR3A4POtAB1x5Od mp9zSoO4YoycM6ctmXCrIF9yhLBFOOTlGuwvVRJ89P81YAQ54OGJUF7jEaShRB6I c3HGozY09gZYkonPWaKrL3+ktx7veJaQjYheB2cw6JKZC+lWJ7piO/tewlDcrHBD FWxtl/xpp97Siv0tJpx0f8aovDKbYe5BoXvw0JsKpQlDmvnHD7eJxEYEKmomGYvD MQHeouencejtsOvzhRfaxKAi2lXYuVCpwBYH+T4njpCg+36QM8GdCFawdaJUE4Sd BreDS+jwHF6oNw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:52:46 2025 by rpki-client