This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft File: FTyehIfJi0U_l08gMX7OPXD01d0.mft (raw, json) Hash identifier: Bpnq5Ew3/vglSNzN+TlsoREBRkaedfcT/l5BHWNtU3Q= Subject key identifier: A8:93:A5:D4:C5:4D:68:AF:C4:BF:0D:C2:A1:89:39:B8:E8:12:85:F9 Authority key identifier: 15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD Certificate issuer: /CN=153c9e8487c98b453f974f20317ece3d70f4d5dd Certificate serial: 019B35325CE26FD945A4F42FAC1DEF6F44E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft Manifest number: 0CBF Signing time: Fri 19 Dec 2025 06:00:51 +0000 Manifest this update: Fri 19 Dec 2025 06:00:51 +0000 Manifest next update: Sat 20 Dec 2025 06:00:51 +0000 Files and hashes: 1: FAFOi_MWA5Fo0z_m3gqA-yNR33M.roa (hash: icR2KPf1nufIDLG/nPNr5vKSnrpkA3b1gplItzO6jeQ=) 2: FTyehIfJi0U_l08gMX7OPXD01d0.crl (hash: 1rzAnohLP+3ZSM7Xrn5bDX+J/OE+YeYz2D1/PuQlcxA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:5c:e2:6f:d9:45:a4:f4:2f:ac:1d:ef:6f:44:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153c9e8487c98b453f974f20317ece3d70f4d5dd Validity Not Before: Dec 19 06:00:51 2025 GMT Not After : Dec 20 06:00:51 2025 GMT Subject: CN=a893a5d4c54d68afc4bf0dc2a18939b8e81285f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:23:cb:5f:6c:01:30:4a:87:a7:87:8c:0a:a1: bb:96:ff:c6:65:46:03:7c:e7:2c:c0:22:44:e1:56: 9e:dc:53:d4:83:8c:82:ab:ed:73:fb:91:a3:b0:7e: 85:91:2a:53:dc:38:dc:69:93:7e:ba:18:69:7c:85: d2:18:6c:f6:24:2e:83:3d:b0:6a:c9:09:1a:72:be: 07:d5:76:3b:11:66:a7:b0:d4:77:be:4d:f9:5f:f0: 43:a8:5b:4b:81:1b:87:1d:7c:1f:54:e9:07:1b:9a: 8a:22:75:b3:1a:71:34:ee:91:66:8f:51:aa:22:30: 9f:78:a8:b1:24:bb:cb:29:6d:18:73:0e:60:01:68: d7:d7:c4:10:8d:5b:81:a5:5b:2d:15:71:a8:cb:c7: 15:95:31:e3:d1:8b:d5:d9:03:a6:78:5e:5a:cd:22: d9:b7:5c:d2:be:52:48:32:0c:87:b9:c3:ce:9d:91: f2:c6:bb:98:06:1c:06:ad:d3:4e:9f:09:a8:50:13: 21:54:24:71:ed:b2:0d:07:6b:ed:d9:67:ab:a2:1d: e7:4c:bf:0c:33:a2:fd:d8:4b:45:0a:2a:25:f0:7d: 00:32:87:51:e2:2e:c0:17:2e:f4:71:b6:42:96:3f: d6:4c:14:17:86:f3:6b:b8:f8:bd:f9:ac:98:ec:6e: bf:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:93:A5:D4:C5:4D:68:AF:C4:BF:0D:C2:A1:89:39:B8:E8:12:85:F9 X509v3 Authority Key Identifier: keyid:15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:4e:34:a6:63:d8:d6:7a:f8:dc:46:9e:21:c0:47:68:bd:04: ec:f5:86:ce:53:68:fa:f6:6d:84:89:4d:42:bf:12:53:16:4f: b3:52:2f:eb:94:a6:b7:13:6f:6f:c6:9b:f3:61:a6:38:fc:06: 14:b6:bd:58:d4:eb:ea:5c:a3:ca:55:c7:09:f4:c6:71:7a:4c: fa:83:5f:e3:f4:f5:65:71:f7:2f:15:dc:68:ce:da:d6:a5:38: 02:de:dc:4f:0a:fb:15:cf:44:d0:6a:fe:d1:8f:1a:fa:4e:f8: 8e:9c:df:5e:f3:f1:24:23:1e:7f:2e:16:98:0f:50:ea:fd:d0: d4:77:a2:1e:c7:89:87:e5:68:74:e4:b9:e5:47:42:a9:c0:9c: f3:59:4c:07:a0:e3:81:16:8a:26:05:16:01:29:d1:28:1e:ae: ae:ac:08:89:15:9a:15:35:68:75:eb:ad:53:9a:e2:d0:b7:7c: ce:42:ca:a1:4c:88:be:91:c4:e4:74:bd:57:f8:c4:ca:91:87: 25:c0:1b:53:97:61:d5:c6:b7:18:64:9a:a1:b6:f6:a3:4c:82: d1:01:a6:0f:b3:b9:6f:06:fd:f3:61:e6:9d:c9:55:1b:46:df: 12:f7:ed:40:61:88:ab:9b:e8:02:ea:fa:b4:88:f1:b0:1a:19: 0d:9a:39:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mlzib9lFpPQvrB3vb0TkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1M2M5ZTg0ODdjOThiNDUzZjk3NGYyMDMxN2VjZTNkNzBm NGQ1ZGQwHhcNMjUxMjE5MDYwMDUxWhcNMjUxMjIwMDYwMDUxWjAzMTEwLwYDVQQD EyhhODkzYTVkNGM1NGQ2OGFmYzRiZjBkYzJhMTg5MzliOGU4MTI4NWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SPLX2wBMEqHp4eMCqG7lv/GZUYD fOcswCJE4Vae3FPUg4yCq+1z+5GjsH6FkSpT3DjcaZN+uhhpfIXSGGz2JC6DPbBq yQkacr4H1XY7EWansNR3vk35X/BDqFtLgRuHHXwfVOkHG5qKInWzGnE07pFmj1Gq IjCfeKixJLvLKW0Ycw5gAWjX18QQjVuBpVstFXGoy8cVlTHj0YvV2QOmeF5azSLZ t1zSvlJIMgyHucPOnZHyxruYBhwGrdNOnwmoUBMhVCRx7bINB2vt2Weroh3nTL8M M6L92EtFCiol8H0AModR4i7AFy70cbZClj/WTBQXhvNruPi9+ayY7G6/jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKiTpdTFTWivxL8NwqGJObjoEoX5MB8GA1UdIwQY MBaAFBU8noSHyYtFP5dPIDF+zj1w9NXdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlR5ZWhJZkppMFVfbDA4Z01YN09QWEQwMWQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wZmY2MzMtZWI0YS00ZTE4LWFkNTYt MGQwMThkYmNjN2NiLzEvRlR5ZWhJZkppMFVfbDA4Z01YN09QWEQwMWQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8wZmY2MzMtZWI0YS00ZTE4LWFkNTYtMGQwMThkYmNjN2Ni LzEvRlR5ZWhJZkppMFVfbDA4Z01YN09QWEQwMWQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfk40pmPY 1nr43EaeIcBHaL0E7PWGzlNo+vZthIlNQr8SUxZPs1Iv65SmtxNvb8ab82GmOPwG FLa9WNTr6lyjylXHCfTGcXpM+oNf4/T1ZXH3LxXcaM7a1qU4At7cTwr7Fc9E0Gr+ 0Y8a+k74jpzfXvPxJCMefy4WmA9Q6v3Q1HeiHseJh+VodOS55UdCqcCc81lMB6Dj gRaKJgUWASnRKB6urqwIiRWaFTVodeutU5ri0Ld8zkLKoUyIvpHE5HS9V/jEypGH JcAbU5dh1ca3GGSaobb2o0yC0QGmD7O5bwb982HmnclVG0bfEvftQGGIq5voAur6 tIjxsBoZDZo5Wg== -----END CERTIFICATE-----Generated at Fri Dec 19 10:01:04 2025 by rpki-client