This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft File: FTyehIfJi0U_l08gMX7OPXD01d0.mft (raw, json) Hash identifier: UTEcv+Aam4fdi0Z6F7x/QkcP2pwSVam+tdkCSwIaTqo= Subject key identifier: 9F:E4:0F:EE:72:E6:44:CE:99:F8:44:EF:6B:8A:8F:DC:38:D4:4D:D3 Authority key identifier: 15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD Certificate issuer: /CN=153c9e8487c98b453f974f20317ece3d70f4d5dd Certificate serial: 019B3AFD8646A701DC78E9A93A7F0A0253AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft Manifest number: 0CC2 Signing time: Sat 20 Dec 2025 09:00:51 +0000 Manifest this update: Sat 20 Dec 2025 09:00:51 +0000 Manifest next update: Sun 21 Dec 2025 09:00:51 +0000 Files and hashes: 1: FAFOi_MWA5Fo0z_m3gqA-yNR33M.roa (hash: icR2KPf1nufIDLG/nPNr5vKSnrpkA3b1gplItzO6jeQ=) 2: FTyehIfJi0U_l08gMX7OPXD01d0.crl (hash: v+SWonDisjW+kzI/oZJ6crHonsCjnIZUDuEp3Njop+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:86:46:a7:01:dc:78:e9:a9:3a:7f:0a:02:53:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153c9e8487c98b453f974f20317ece3d70f4d5dd Validity Not Before: Dec 20 09:00:51 2025 GMT Not After : Dec 21 09:00:51 2025 GMT Subject: CN=9fe40fee72e644ce99f844ef6b8a8fdc38d44dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c8:8b:d0:6a:e0:85:7c:ea:2c:62:9a:5b:59: e8:f1:49:ba:c7:b1:d8:10:1e:f5:56:a0:3f:36:72: c4:05:87:a8:74:81:a3:71:ce:66:3c:ac:1d:4e:11: 63:43:bf:37:cf:d6:ba:45:dc:5f:10:03:7a:30:d3: d2:bf:d6:b3:7f:62:6f:ca:8c:b0:67:d1:7f:02:da: 73:99:bd:bf:b8:85:21:21:f5:03:14:c2:31:21:e3: 7e:26:0c:8a:c3:ad:ca:48:00:88:c1:5b:f7:b5:d9: d0:d8:2f:07:be:53:7a:bf:0e:6c:78:97:16:c9:3f: e2:83:91:d3:18:3f:6a:a1:3f:e0:da:6a:8b:3f:7d: 64:ba:53:bc:ef:8f:db:63:90:94:46:b6:f9:c6:5e: 22:f2:2f:e3:68:d6:66:aa:78:5c:93:48:bd:7b:ec: 61:2f:56:c3:37:a6:05:37:24:df:d3:d3:e3:67:23: e8:5b:19:ce:01:0f:3a:a5:c1:d4:bd:b4:75:a2:20: 5c:c3:ae:b9:2d:7f:ab:fc:ca:59:23:29:24:35:ed: 0f:61:4b:16:8b:79:0c:7b:e2:6d:2b:93:7f:59:8f: 3e:19:a0:15:1a:32:1e:d7:ea:83:1b:9d:71:ab:17: 2c:53:e2:f6:ac:23:98:7b:ac:94:1c:1a:83:67:be: 5e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E4:0F:EE:72:E6:44:CE:99:F8:44:EF:6B:8A:8F:DC:38:D4:4D:D3 X509v3 Authority Key Identifier: keyid:15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:79:11:12:19:d7:df:93:26:48:8f:7d:a7:18:98:e3:e5:eb: 03:95:a1:2c:2e:1b:1d:68:24:76:65:e1:dc:e1:1a:99:a0:c8: b9:d4:39:76:d3:82:66:5a:90:09:16:e6:39:b1:db:c6:2f:46: 05:0d:95:da:47:a9:07:5a:b4:ce:eb:40:3a:c0:8a:ae:b6:84: 22:3f:7d:4d:94:a7:4c:31:c6:bb:8b:98:3b:9c:39:44:e8:c6: 58:7c:e8:84:fe:17:78:7c:08:5f:fd:18:47:81:d1:cd:74:63: 0f:d0:c3:8c:53:76:5d:93:3b:d8:04:0e:fe:df:a6:71:30:2d: e3:d2:23:82:b3:1e:4d:ec:09:59:64:99:f1:a2:af:c0:22:78: f4:c6:1f:18:8f:24:8c:cc:18:d5:fa:63:99:d0:8f:bf:3f:76: a0:4f:f2:38:de:7e:75:94:a7:03:01:9a:6f:95:17:a4:38:e3: 63:31:4f:b8:94:ff:dc:13:ec:ef:11:5c:09:ce:a0:15:c3:cc: 09:e2:da:17:13:07:0a:2a:3b:48:85:c0:43:e8:e6:bb:01:48: 23:3d:ac:5a:69:f5:f1:6b:f8:c7:2b:3e:38:ee:e0:8a:fc:28: 72:62:eb:b1:7f:5b:1c:28:62:54:94:93:35:ea:9f:0b:e1:27: 82:3e:37:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/YZGpwHceOmpOn8KAlOtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1M2M5ZTg0ODdjOThiNDUzZjk3NGYyMDMxN2VjZTNkNzBm NGQ1ZGQwHhcNMjUxMjIwMDkwMDUxWhcNMjUxMjIxMDkwMDUxWjAzMTEwLwYDVQQD Eyg5ZmU0MGZlZTcyZTY0NGNlOTlmODQ0ZWY2YjhhOGZkYzM4ZDQ0ZGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlciL0GrghXzqLGKaW1no8Um6x7HY EB71VqA/NnLEBYeodIGjcc5mPKwdThFjQ783z9a6RdxfEAN6MNPSv9azf2Jvyoyw Z9F/Atpzmb2/uIUhIfUDFMIxIeN+JgyKw63KSACIwVv3tdnQ2C8HvlN6vw5seJcW yT/ig5HTGD9qoT/g2mqLP31kulO874/bY5CURrb5xl4i8i/jaNZmqnhck0i9e+xh L1bDN6YFNyTf09PjZyPoWxnOAQ86pcHUvbR1oiBcw665LX+r/MpZIykkNe0PYUsW i3kMe+JtK5N/WY8+GaAVGjIe1+qDG51xqxcsU+L2rCOYe6yUHBqDZ75eSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/kD+5y5kTOmfhE72uKj9w41E3TMB8GA1UdIwQY MBaAFBU8noSHyYtFP5dPIDF+zj1w9NXdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlR5ZWhJZkppMFVfbDA4Z01YN09QWEQwMWQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wZmY2MzMtZWI0YS00ZTE4LWFkNTYt MGQwMThkYmNjN2NiLzEvRlR5ZWhJZkppMFVfbDA4Z01YN09QWEQwMWQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8wZmY2MzMtZWI0YS00ZTE4LWFkNTYtMGQwMThkYmNjN2Ni LzEvRlR5ZWhJZkppMFVfbDA4Z01YN09QWEQwMWQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHkREhnX 35MmSI99pxiY4+XrA5WhLC4bHWgkdmXh3OEamaDIudQ5dtOCZlqQCRbmObHbxi9G BQ2V2kepB1q0zutAOsCKrraEIj99TZSnTDHGu4uYO5w5ROjGWHzohP4XeHwIX/0Y R4HRzXRjD9DDjFN2XZM72AQO/t+mcTAt49IjgrMeTewJWWSZ8aKvwCJ49MYfGI8k jMwY1fpjmdCPvz92oE/yON5+dZSnAwGab5UXpDjjYzFPuJT/3BPs7xFcCc6gFcPM CeLaFxMHCio7SIXAQ+jmuwFIIz2sWmn18Wv4xys+OO7givwocmLrsX9bHChiVJST NeqfC+Engj43hA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:43:12 2025 by rpki-client