This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft File: FTtGcCg5p5W6uo2NFezcymN-M2w.mft (raw, json) Hash identifier: ji6uliQ2+3is7y1qe6hOs69fhkYcL7KGxoFldNZbh/Q= Subject key identifier: 12:99:A4:E5:F8:92:D9:E1:C2:48:BF:6F:67:CD:11:49:BD:B5:34:EB Authority key identifier: 15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C Certificate issuer: /CN=153b46702839a795baba8d8d15ecdcca637e336c Certificate serial: 019B3DFEC13DC34024247A2283B5B7B47B5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 23:01:04 +0000 Manifest this update: Sat 20 Dec 2025 23:01:04 +0000 Manifest next update: Sun 21 Dec 2025 23:01:04 +0000 Files and hashes: 1: 7LfdpybXjkO1zp9O6nzu1fNfc88.roa (hash: QAPjHN/iZlfmzhgOwFaV5zDBEKY0r/wVKeB2R6gKrqA=) 2: FTtGcCg5p5W6uo2NFezcymN-M2w.crl (hash: ffVT2+VFU1vqDZC0O6bIdYM4YEdsxK16mR7exlPAGcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:c1:3d:c3:40:24:24:7a:22:83:b5:b7:b4:7b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153b46702839a795baba8d8d15ecdcca637e336c Validity Not Before: Dec 20 23:01:04 2025 GMT Not After : Dec 21 23:01:04 2025 GMT Subject: CN=1299a4e5f892d9e1c248bf6f67cd1149bdb534eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3b:7f:c1:93:44:ae:2e:6e:aa:22:75:7d:84: c1:07:bb:c9:91:dd:21:da:06:70:7d:c4:3e:ee:d0: c1:9d:b3:80:4c:6b:1f:f0:c0:d8:ef:1d:92:9b:81: 98:0f:6a:d6:40:6f:ff:ff:66:87:13:24:48:ee:5f: a1:51:e2:2c:27:e1:f1:50:df:7b:56:54:53:c1:00: 83:4d:23:b1:95:22:dc:07:42:69:c5:94:9b:fb:8e: 37:8a:7a:04:c5:b2:c5:8b:b6:41:64:67:5d:d4:2c: 7d:7b:c0:6f:4a:7b:1e:27:3f:44:0f:50:56:7a:75: 2d:38:99:4e:4c:93:98:55:50:a1:bd:4e:14:58:f9: 73:b7:44:25:a8:bf:86:50:b9:bb:c9:38:c6:fc:c4: 4e:d1:b8:bd:20:6e:d5:8b:df:6b:b0:5d:cc:75:00: 8e:22:8d:0e:e2:f2:3b:bc:56:52:c9:92:a2:82:00: 5e:ba:07:23:4a:24:09:b7:ec:17:0b:a9:8e:b6:f3: 8f:cb:11:dd:25:60:7a:3b:d1:c5:6f:66:38:26:ca: 68:6c:d6:f4:84:ee:ba:cc:e9:92:2d:25:e3:8b:20: 8b:af:76:91:d9:0f:38:4c:72:a1:24:94:80:55:22: 2e:b4:92:dd:1c:0f:fd:91:1f:7e:3a:3f:f6:2b:c5: 24:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:99:A4:E5:F8:92:D9:E1:C2:48:BF:6F:67:CD:11:49:BD:B5:34:EB X509v3 Authority Key Identifier: keyid:15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:83:48:cb:d9:f2:11:f1:77:64:a9:6d:99:1d:e2:15:ad:ec: 12:60:a7:61:aa:c1:7b:23:82:8d:ec:9b:86:0d:97:8b:1d:2e: ab:54:76:72:20:ca:dc:f3:42:7e:07:cf:a2:ef:78:53:3c:7f: 65:d9:4f:b2:83:5d:25:ac:4d:fe:ea:98:b3:ae:36:9f:52:bc: c1:9c:8c:3c:59:85:66:35:18:c7:a0:0f:d0:ca:7f:28:77:d6: d7:e8:04:8f:29:bd:a3:12:e1:af:3f:7a:cf:9d:79:4d:b7:10: d3:88:b4:4e:7c:d9:0c:6d:02:5e:b8:de:b0:c1:a8:d0:16:07: a0:d1:35:e6:63:d9:60:71:21:34:a9:8a:42:5e:50:c4:62:d6: 3c:3c:87:e7:77:06:30:f6:41:2c:e3:df:72:47:f0:8b:82:8a: aa:e7:7e:05:56:f7:74:8d:19:95:b4:62:ca:d0:94:eb:3e:27: d3:aa:11:29:a3:2d:91:c8:c5:ee:f2:62:9c:9b:d7:b8:5e:2a: 1a:d1:c9:a5:5c:2b:a9:cb:dc:95:94:ca:62:c2:b7:3a:58:83: 44:29:5d:2f:68:ad:1d:99:69:07:fa:a6:0e:08:5d:9d:24:0c: e7:ca:a9:c9:83:44:9c:dc:45:39:df:43:e6:57:29:ae:8f:76: 9e:6d:68:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/sE9w0AkJHoig7W3tHtaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1M2I0NjcwMjgzOWE3OTViYWJhOGQ4ZDE1ZWNkY2NhNjM3 ZTMzNmMwHhcNMjUxMjIwMjMwMTA0WhcNMjUxMjIxMjMwMTA0WjAzMTEwLwYDVQQD EygxMjk5YTRlNWY4OTJkOWUxYzI0OGJmNmY2N2NkMTE0OWJkYjUzNGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTt/wZNEri5uqiJ1fYTBB7vJkd0h 2gZwfcQ+7tDBnbOATGsf8MDY7x2Sm4GYD2rWQG///2aHEyRI7l+hUeIsJ+HxUN97 VlRTwQCDTSOxlSLcB0JpxZSb+443inoExbLFi7ZBZGdd1Cx9e8BvSnseJz9ED1BW enUtOJlOTJOYVVChvU4UWPlzt0QlqL+GULm7yTjG/MRO0bi9IG7Vi99rsF3MdQCO Io0O4vI7vFZSyZKiggBeugcjSiQJt+wXC6mOtvOPyxHdJWB6O9HFb2Y4JspobNb0 hO66zOmSLSXjiyCLr3aR2Q84THKhJJSAVSIutJLdHA/9kR9+Oj/2K8UknwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKZpOX4ktnhwki/b2fNEUm9tTTrMB8GA1UdIwQY MBaAFBU7RnAoOaeVurqNjRXs3MpjfjNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlR0R2NDZzVwNVc2dW8yTkZlemN5bU4tTTJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNTZkN2YtMWI3OC00NDUzLTgxZTct YmE1NjM3OGE2NDc2LzEvRlR0R2NDZzVwNVc2dW8yTkZlemN5bU4tTTJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9mNTZkN2YtMWI3OC00NDUzLTgxZTctYmE1NjM3OGE2NDc2 LzEvRlR0R2NDZzVwNVc2dW8yTkZlemN5bU4tTTJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaoNIy9ny EfF3ZKltmR3iFa3sEmCnYarBeyOCjeybhg2Xix0uq1R2ciDK3PNCfgfPou94Uzx/ ZdlPsoNdJaxN/uqYs642n1K8wZyMPFmFZjUYx6AP0Mp/KHfW1+gEjym9oxLhrz96 z515TbcQ04i0TnzZDG0CXrjesMGo0BYHoNE15mPZYHEhNKmKQl5QxGLWPDyH53cG MPZBLOPfckfwi4KKqud+BVb3dI0ZlbRiytCU6z4n06oRKaMtkcjF7vJinJvXuF4q GtHJpVwrqcvclZTKYsK3OliDRCldL2itHZlpB/qmDghdnSQM58qpyYNEnNxFOd9D 5lcpro92nm1oBA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:26:24 2025 by rpki-client