This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft File: ftCMDM2oAs8gznq97qICFOBeR68.mft (raw, json) Hash identifier: Ios6NdomUvvJ8fsXGpMX+HuIJUa6uKtFBnU1Fz96OZk= Subject key identifier: AF:2A:E0:00:7F:BC:BB:58:E9:80:E4:96:CA:70:21:5D:34:24:F9:B7 Authority key identifier: 7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF Certificate issuer: /CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af Certificate serial: 019B51BC9F4E6038ADED91932B82BC71978B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 19:01:14 +0000 Manifest this update: Wed 24 Dec 2025 19:01:14 +0000 Manifest next update: Thu 25 Dec 2025 19:01:14 +0000 Files and hashes: 1: 6w55XSdz6C1MVeTVI2bqPT0HfT4.roa (hash: PA64tMamz9Jr6hO7ooAglcNP0CN5ddS+agnLpfV6sk8=) 2: ftCMDM2oAs8gznq97qICFOBeR68.crl (hash: C1GWahxzS248ax1KIiE7zkyYEJcdr3fk76vzWh1b5nQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:9f:4e:60:38:ad:ed:91:93:2b:82:bc:71:97:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af Validity Not Before: Dec 24 19:01:14 2025 GMT Not After : Dec 25 19:01:14 2025 GMT Subject: CN=af2ae0007fbcbb58e980e496ca70215d3424f9b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a5:10:15:3e:b7:1d:ef:bb:d8:0b:02:4b:f1: 5d:33:b1:c4:22:65:5b:2f:ee:ee:9e:0b:4e:39:20: 10:a9:27:0b:86:24:56:13:14:37:8d:94:8c:b1:4d: 9c:b7:17:9e:2e:ec:be:a4:7e:4b:b7:22:8b:81:13: d7:8c:89:3e:bc:4c:e9:27:58:a9:60:e2:a8:7c:d9: 73:62:1e:28:0b:22:e5:26:f9:3b:3e:90:86:93:cd: 7f:84:05:1d:e5:c9:7c:89:85:0d:f0:79:a8:99:ac: 53:2b:3d:bc:dd:d6:1b:e1:91:af:60:fb:cd:dd:87: dc:16:a9:ca:15:71:e2:3c:af:f0:78:6f:1d:9b:cc: 83:10:80:09:80:15:7d:17:01:b5:0e:e7:a7:cc:d3: 1e:58:00:bc:0b:38:0b:8c:72:b7:79:12:5e:92:af: b9:46:a4:25:9f:2a:8e:56:a5:c6:d9:7d:30:15:a8: fc:09:e8:b2:ee:73:18:e4:1c:f9:e5:b3:ae:b7:e4: 78:43:2a:62:c3:8b:eb:d6:33:e8:f3:e0:35:cd:af: c7:2d:68:16:06:76:5f:55:19:cc:75:15:6f:f8:b4: 86:92:10:da:16:57:39:65:5b:c5:fd:7e:a9:73:1e: 50:a4:77:f0:4c:aa:4e:03:9e:0f:9d:1f:18:c8:da: 76:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2A:E0:00:7F:BC:BB:58:E9:80:E4:96:CA:70:21:5D:34:24:F9:B7 X509v3 Authority Key Identifier: keyid:7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:93:a3:21:a5:d2:d5:b5:88:7e:8b:07:39:2e:10:43:59:52: a0:ee:da:98:28:e9:3d:42:de:d6:4c:c2:41:d9:e3:77:d5:79: f9:19:b4:55:25:27:c0:5e:c9:c9:2a:93:db:a4:19:d2:33:3f: cd:21:b1:b2:88:e9:89:1a:e7:ef:c1:70:db:e4:d7:fd:1c:27: 6f:3f:a0:6a:aa:b2:04:30:d5:2a:bf:a9:d3:89:be:53:bf:fb: bc:08:5b:b7:0a:f1:1c:95:70:3f:ef:4a:db:48:f6:13:1b:d7: b3:21:0e:ce:bb:94:49:4f:d2:52:ec:01:a8:8d:1d:7d:82:63: cf:7d:16:a9:9c:a2:92:c1:05:72:74:ca:fe:25:dd:68:2d:8e: 5e:70:2d:30:82:f0:d5:75:7a:bb:e1:64:29:82:cf:01:31:9f: 16:25:85:a7:61:50:f6:03:82:dc:3d:1b:61:a3:fd:2b:62:08: aa:46:64:80:44:66:d2:1d:e0:ff:79:a9:73:30:e0:f0:1b:7e: 4a:07:6e:44:06:e8:ce:dd:10:2f:dd:eb:ca:17:e5:7b:5d:11: 02:26:9e:02:8e:be:69:b8:b5:66:b7:dc:94:30:ab:c7:a5:df: 03:8c:b7:3b:ef:04:76:88:8b:c0:39:aa:48:8c:ae:24:b8:61: 56:c4:11:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvJ9OYDit7ZGTK4K8cZeLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlZDA4YzBjY2RhODAyY2YyMGNlN2FiZGVlYTIwMjE0ZTA1 ZTQ3YWYwHhcNMjUxMjI0MTkwMTE0WhcNMjUxMjI1MTkwMTE0WjAzMTEwLwYDVQQD EyhhZjJhZTAwMDdmYmNiYjU4ZTk4MGU0OTZjYTcwMjE1ZDM0MjRmOWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKUQFT63He+72AsCS/FdM7HEImVb L+7ungtOOSAQqScLhiRWExQ3jZSMsU2ctxeeLuy+pH5LtyKLgRPXjIk+vEzpJ1ip YOKofNlzYh4oCyLlJvk7PpCGk81/hAUd5cl8iYUN8HmomaxTKz283dYb4ZGvYPvN 3YfcFqnKFXHiPK/weG8dm8yDEIAJgBV9FwG1DuenzNMeWAC8CzgLjHK3eRJekq+5 RqQlnyqOVqXG2X0wFaj8Ceiy7nMY5Bz55bOut+R4Qypiw4vr1jPo8+A1za/HLWgW BnZfVRnMdRVv+LSGkhDaFlc5ZVvF/X6pcx5QpHfwTKpOA54PnR8YyNp2nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8q4AB/vLtY6YDklspwIV00JPm3MB8GA1UdIwQY MBaAFH7QjAzNqALPIM56ve6iAhTgXkevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnRDTURNMm9Bczhnem5xOTdxSUNGT0JlUjY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zYTIwZDgtZTkwMi00MWY1LWJlZmEt YWI1ZjM5ZmI4ZDM2LzEvZnRDTURNMm9Bczhnem5xOTdxSUNGT0JlUjY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zYTIwZDgtZTkwMi00MWY1LWJlZmEtYWI1ZjM5ZmI4ZDM2 LzEvZnRDTURNMm9Bczhnem5xOTdxSUNGT0JlUjY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz5OjIaXS 1bWIfosHOS4QQ1lSoO7amCjpPULe1kzCQdnjd9V5+Rm0VSUnwF7JySqT26QZ0jM/ zSGxsojpiRrn78Fw2+TX/Rwnbz+gaqqyBDDVKr+p04m+U7/7vAhbtwrxHJVwP+9K 20j2ExvXsyEOzruUSU/SUuwBqI0dfYJjz30WqZyiksEFcnTK/iXdaC2OXnAtMILw 1XV6u+FkKYLPATGfFiWFp2FQ9gOC3D0bYaP9K2IIqkZkgERm0h3g/3mpczDg8Bt+ SgduRAbozt0QL93ryhfle10RAiaeAo6+abi1ZrfclDCrx6XfA4y3O+8EdoiLwDmq SIyuJLhhVsQR2A== -----END CERTIFICATE-----Generated at Wed Dec 24 23:52:33 2025 by rpki-client