This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft File: fTssMztylVesC-AnQLIiltgCv4E.mft (raw, json) Hash identifier: sH09hzkwvjehKDGc7z4s/GGGYOJhr+pMIaHAz0vp9xo= Subject key identifier: ED:FF:86:EC:03:E2:27:48:63:C2:88:34:7C:F3:BD:6E:DB:43:35:A3 Authority key identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81 Certificate issuer: /CN=7d3b2c333b729557ac0be02740b22296d802bf81 Certificate serial: 019B3D23625FF878C5622A23B01473B792BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft Manifest number: 1760 Signing time: Sat 20 Dec 2025 19:01:27 +0000 Manifest this update: Sat 20 Dec 2025 19:01:27 +0000 Manifest next update: Sun 21 Dec 2025 19:01:27 +0000 Files and hashes: 1: WqjB7EtZkSL-ePfOxy2nv62eOkA.roa (hash: PG/xFOwvIaW9rUlAX7rZLKuzOPksgvVi2XmtGvzJW70=) 2: fTssMztylVesC-AnQLIiltgCv4E.crl (hash: 1+UZEKYGHLPl9/PY4EBdjN8eOcX5zUCKnut+MkI1Nos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:62:5f:f8:78:c5:62:2a:23:b0:14:73:b7:92:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d3b2c333b729557ac0be02740b22296d802bf81 Validity Not Before: Dec 20 19:01:27 2025 GMT Not After : Dec 21 19:01:27 2025 GMT Subject: CN=edff86ec03e2274863c288347cf3bd6edb4335a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:77:ec:2f:92:c5:8e:2e:29:f3:c4:1f:13:44: 0f:29:fb:ab:d1:70:a4:9a:d2:c9:ee:8b:6c:20:3c: 1d:82:6e:7c:cc:8f:de:8f:c8:38:a3:56:68:dd:3e: d7:6d:76:ad:0e:2e:d4:e6:eb:b0:54:d2:af:a1:89: b8:70:f0:3b:ba:57:a9:0e:5d:a5:99:7d:80:2d:d5: 1b:f4:b9:12:48:30:9d:ea:5a:d8:4f:c0:e5:d5:c2: a1:3f:9e:01:44:2c:69:12:38:55:18:8d:9f:8e:43: 3a:88:c0:f6:b6:c3:da:dd:4e:4d:83:e1:fc:0e:c8: 41:79:ee:ba:5a:43:d7:3b:b7:96:ff:4f:85:6e:3e: 43:1b:83:ee:c0:52:69:7e:4c:c1:1e:c8:bb:8b:7c: 58:1f:c7:69:60:36:61:f1:72:a0:a1:9c:96:59:ae: 5c:83:b7:f8:d6:f3:c9:a7:d9:7b:46:fd:6e:71:d2: ff:6a:a8:a1:59:75:f6:d6:d4:7d:db:ff:1f:e6:dd: 28:b7:ae:22:94:4c:f6:66:33:f0:24:70:50:61:9e: 41:bd:44:ec:04:19:08:74:6e:bf:9f:c8:09:26:85: 8d:da:45:5d:8a:16:ae:ea:3f:5b:db:c7:d4:87:cb: a8:7c:33:93:1b:92:8c:ec:50:62:93:3c:08:a9:ab: d8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:FF:86:EC:03:E2:27:48:63:C2:88:34:7C:F3:BD:6E:DB:43:35:A3 X509v3 Authority Key Identifier: keyid:7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:3f:ba:75:4c:81:8e:72:ae:d8:d6:50:e3:18:2e:c2:75:d8: 2b:d3:59:19:b0:d1:8a:07:81:91:db:00:bb:11:8d:30:d4:88: 0f:4e:fb:3f:0b:df:f8:7e:02:84:a8:4f:18:22:20:ad:03:f2: 64:82:ca:be:ab:6d:9d:74:12:e4:26:84:b7:07:8e:ec:67:ea: fc:4e:ab:f9:4a:ef:01:03:53:a7:0b:4a:78:30:f3:25:c8:44: 91:58:4b:28:97:d1:59:5c:3f:7c:5b:d1:5e:91:82:22:2b:37: ca:6b:3d:ad:0f:d2:e1:08:3a:1d:f2:5c:31:23:cc:49:29:92: 92:c5:a4:3a:5f:0e:7d:0c:dd:79:6c:18:6b:61:ca:85:d9:50: ed:0a:a9:41:b0:2f:76:90:4d:73:ce:ce:ce:7f:c2:4b:56:4c: 55:cc:9d:e2:d3:5e:6f:80:6e:21:34:24:ca:b7:22:1e:05:7a: e0:49:22:26:c0:ff:13:21:ba:5f:49:20:0c:af:7e:21:30:70: d6:4c:6a:0d:6d:dd:a1:10:73:42:19:97:c8:a3:b5:ae:80:cb: 23:59:ee:da:e2:d0:c2:29:21:50:ce:0a:c0:e7:e7:18:f3:52: bf:b1:9c:25:1f:2c:13:22:34:1c:75:da:4e:43:16:d0:93:2d: 7c:98:0c:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I2Jf+HjFYiojsBRzt5K/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkM2IyYzMzM2I3Mjk1NTdhYzBiZTAyNzQwYjIyMjk2ZDgw MmJmODEwHhcNMjUxMjIwMTkwMTI3WhcNMjUxMjIxMTkwMTI3WjAzMTEwLwYDVQQD EyhlZGZmODZlYzAzZTIyNzQ4NjNjMjg4MzQ3Y2YzYmQ2ZWRiNDMzNWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3fsL5LFji4p88QfE0QPKfur0XCk mtLJ7otsIDwdgm58zI/ej8g4o1Zo3T7XbXatDi7U5uuwVNKvoYm4cPA7ulepDl2l mX2ALdUb9LkSSDCd6lrYT8Dl1cKhP54BRCxpEjhVGI2fjkM6iMD2tsPa3U5Ng+H8 DshBee66WkPXO7eW/0+Fbj5DG4PuwFJpfkzBHsi7i3xYH8dpYDZh8XKgoZyWWa5c g7f41vPJp9l7Rv1ucdL/aqihWXX21tR92/8f5t0ot64ilEz2ZjPwJHBQYZ5BvUTs BBkIdG6/n8gJJoWN2kVdihau6j9b28fUh8uofDOTG5KM7FBikzwIqavYrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3/huwD4idIY8KINHzzvW7bQzWjMB8GA1UdIwQY MBaAFH07LDM7cpVXrAvgJ0CyIpbYAr+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlRzc016dHlsVmVzQy1BblFMSWlsdGdDdjRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82YjFiNjQtMjU2NC00N2E3LWIxYzEt NTI4MzVkYjY1MTJjLzEvZlRzc016dHlsVmVzQy1BblFMSWlsdGdDdjRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS82YjFiNjQtMjU2NC00N2E3LWIxYzEtNTI4MzVkYjY1MTJj LzEvZlRzc016dHlsVmVzQy1BblFMSWlsdGdDdjRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZz+6dUyB jnKu2NZQ4xguwnXYK9NZGbDRigeBkdsAuxGNMNSID077Pwvf+H4ChKhPGCIgrQPy ZILKvqttnXQS5CaEtweO7Gfq/E6r+UrvAQNTpwtKeDDzJchEkVhLKJfRWVw/fFvR XpGCIis3yms9rQ/S4Qg6HfJcMSPMSSmSksWkOl8OfQzdeWwYa2HKhdlQ7QqpQbAv dpBNc87Ozn/CS1ZMVcyd4tNeb4BuITQkyrciHgV64EkiJsD/EyG6X0kgDK9+ITBw 1kxqDW3doRBzQhmXyKO1roDLI1nu2uLQwikhUM4KwOfnGPNSv7GcJR8sEyI0HHXa TkMW0JMtfJgMHw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:22:50 2025 by rpki-client