This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft
File: ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft (raw, json)
Hash identifier: 9jk7GqVbsCrr8JUH4YBpJmI9/+ugg/kf6NDvNO9GSeM=
Subject key identifier: CE:06:7B:62:BC:69:DB:63:E1:78:01:44:62:E1:2D:36:1C:F4:E9:A4
Authority key identifier: 7E:D2:4C:5D:34:4F:B9:2B:CF:4C:F6:E1:E5:69:F5:1A:E4:1A:A8:7C
Certificate issuer: /CN=7ed24c5d344fb92bcf4cf6e1e569f51ae41aa87c
Certificate serial: 019B5599F25E2039CDC88344B83DE8DA6FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft
Manifest number: 1796
Signing time: Thu 25 Dec 2025 13:01:50 +0000
Manifest this update: Thu 25 Dec 2025 13:01:50 +0000
Manifest next update: Fri 26 Dec 2025 13:01:50 +0000
Files and hashes: 1: agRUYODGUgcgQjP7ijxcZLYm3nc.roa (hash: f6YBLXl3ZPBgWVXG5y2MoTRUZ2l1iv1DIF9aPxpzV6M=)
2: ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl (hash: KOjUENBgmAnPHRMJPsBHOeEeisI9d+9h2H001iBWfBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Dec 2025 13:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:55:99:f2:5e:20:39:cd:c8:83:44:b8:3d:e8:da:6f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed24c5d344fb92bcf4cf6e1e569f51ae41aa87c
Validity
Not Before: Dec 25 13:01:50 2025 GMT
Not After : Dec 26 13:01:50 2025 GMT
Subject: CN=ce067b62bc69db63e178014462e12d361cf4e9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:54:cb:63:1a:bb:7c:e1:2d:03:ec:06:66:
5e:3a:f5:88:55:09:7b:61:40:c2:5b:7d:38:7e:f5:
b4:0b:b2:e2:66:a9:b6:6b:5e:dd:2d:81:d4:68:f3:
58:2d:df:02:90:73:63:bc:ef:fd:51:32:0b:c4:f6:
93:02:18:98:40:e1:06:04:36:6d:9d:52:3c:d2:b1:
6b:f0:dd:10:1a:7d:62:a8:4d:b5:26:92:d0:e5:b5:
c8:bc:2a:8e:9a:49:1b:43:d1:3f:28:10:9f:fb:a3:
89:1c:e7:86:ab:82:ba:8d:fc:6c:e2:df:3d:b7:1b:
cf:29:3d:fe:10:42:aa:be:69:2f:96:de:2d:dc:6d:
de:98:79:dd:dc:32:bc:db:8a:31:63:d0:7f:b1:d3:
93:d0:a8:a4:02:e0:bc:08:10:a2:35:96:07:d4:d5:
21:04:70:ae:e5:ab:d6:54:a4:4d:6d:67:eb:cb:e7:
68:b4:d9:4a:0c:12:21:0a:e1:a6:ef:5b:5d:f9:0c:
dd:aa:54:78:08:d5:ad:75:cf:f5:7c:c4:55:0c:42:
23:e3:fd:52:44:e0:4a:a7:e9:bf:d2:af:ca:59:30:
97:31:19:0c:f0:a3:28:d4:32:3a:e6:4f:22:63:ec:
0c:51:cf:74:72:c7:02:59:7a:7d:0e:5b:01:4d:ca:
f4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:06:7B:62:BC:69:DB:63:E1:78:01:44:62:E1:2D:36:1C:F4:E9:A4
X509v3 Authority Key Identifier:
keyid:7E:D2:4C:5D:34:4F:B9:2B:CF:4C:F6:E1:E5:69:F5:1A:E4:1A:A8:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:62:29:8e:03:14:41:ef:32:33:42:e1:40:4a:ce:7b:19:ea:
d9:76:d2:a1:3a:75:d1:ea:02:55:b1:b7:fb:c1:94:ce:9e:43:
ce:35:ed:0e:86:ba:25:98:68:c8:e5:62:1e:ba:f4:7e:50:42:
f1:38:ad:fa:09:f5:1e:e1:96:00:13:57:87:65:bd:85:2c:42:
36:03:08:78:50:8f:41:6c:e5:27:d4:3d:9c:2e:be:08:77:49:
6e:48:c4:63:db:28:38:69:f5:2d:cb:a0:bb:f8:d8:c9:e5:bc:
5f:24:a1:29:b8:87:5e:7f:a6:76:19:42:ff:8e:cc:f8:18:82:
e6:96:97:1e:ba:1d:81:38:71:9a:80:7b:c8:31:44:31:03:3b:
19:c5:51:86:21:64:61:0b:d2:f7:ad:ec:13:b2:45:ee:dc:06:
cb:1c:f7:cf:b6:c4:78:c7:99:f9:6f:ca:eb:0a:3e:df:48:28:
ac:c4:90:41:05:31:07:41:d4:b3:3f:60:e7:98:60:da:5c:34:
0d:d9:f7:e0:7c:1c:f4:d5:ae:0c:b2:42:7c:bd:f2:6b:64:b8:
4e:fc:27:96:d7:a8:6e:10:a5:3d:cd:f6:fc:00:6e:cf:3c:54:
0b:db:e2:08:cf:8a:33:4b:42:49:f7:6b:e8:59:73:70:50:c8:
c8:4a:c9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 22:34:52 2025 by rpki-client