This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft File: ftUAFk8HOBNbmuwE44_CTLkOD18.mft (raw, json) Hash identifier: s0oFu+2DZI2D8HbBlZgrnSpeDKYkOJZSje8Pt46MCvE= Subject key identifier: BE:88:7F:C2:0E:7B:2E:46:B1:47:FB:B1:46:A8:C9:B3:8D:EF:72:60 Authority key identifier: 7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F Certificate issuer: /CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f Certificate serial: 019B3CEBCECC7B8EC62A91EDE7B733FFB770 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft Manifest number: 14D7 Signing time: Sat 20 Dec 2025 18:00:45 +0000 Manifest this update: Sat 20 Dec 2025 18:00:45 +0000 Manifest next update: Sun 21 Dec 2025 18:00:45 +0000 Files and hashes: 1: UpOdGPWJK0meS7Gh3_WX8w49CRw.roa (hash: Xe80koGnCIpEItaZAU3CBuIZI63oxsrazQvG2gOmx4M=) 2: YPpoO-eihLVjR6QWGuwlFSalldc.roa (hash: I2Yas9YEEPm9KZs3KYRfc07hbQQR2Q6lK14KBojWMnk=) 3: ftUAFk8HOBNbmuwE44_CTLkOD18.crl (hash: +uefQKYEaQ0gUH/xTLT/0TRtwQp3NKMVxluWPtPeMR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:ce:cc:7b:8e:c6:2a:91:ed:e7:b7:33:ff:b7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f Validity Not Before: Dec 20 18:00:45 2025 GMT Not After : Dec 21 18:00:45 2025 GMT Subject: CN=be887fc20e7b2e46b147fbb146a8c9b38def7260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c0:de:8f:61:fd:e1:82:82:ca:38:ba:ff:12: 28:a8:5f:84:b5:0f:c6:d4:3c:90:d5:f7:72:96:4a: 25:04:78:e9:ec:32:3b:ae:aa:71:1d:00:f3:0c:77: a3:8d:be:bd:49:b2:06:3a:84:96:d9:f7:3c:7a:ab: 40:f2:1a:7a:ee:44:4f:14:60:23:6d:a4:8a:11:04: 19:34:e1:f2:31:99:fd:30:41:12:cb:09:92:ec:f9: 86:25:c4:ae:79:ab:98:46:ec:56:45:25:31:06:85: 4e:cb:14:2a:2e:4d:b9:60:64:0e:65:63:a6:28:a4: 4e:56:5f:97:1a:a2:49:8f:7e:54:19:45:d4:1c:41: 8c:00:89:dd:2d:30:89:49:8a:d5:a4:49:24:b4:98: 99:32:22:86:a9:97:40:5f:5f:7f:61:b5:1a:0a:e9: b8:dc:c0:0a:d8:e3:bf:6f:40:47:f3:e0:28:e1:b0: 9d:52:37:a2:d0:63:18:55:51:d9:7e:be:d4:cf:04: 45:0b:b8:49:bc:25:11:04:76:e3:1e:6c:c3:a4:43: 38:b7:8c:db:87:af:c9:1e:60:f9:a9:ab:d1:eb:fa: c0:25:99:65:36:25:68:76:85:0c:08:87:59:83:b1: 01:ce:bf:7c:86:63:92:54:6f:a9:09:8b:97:bf:6a: 02:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:88:7F:C2:0E:7B:2E:46:B1:47:FB:B1:46:A8:C9:B3:8D:EF:72:60 X509v3 Authority Key Identifier: keyid:7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:2a:0d:33:fd:7d:32:87:a3:83:6f:af:49:2d:bc:06:ec:8c: bb:d5:7b:25:ac:c2:47:9a:e6:a4:b2:71:96:16:dd:2a:db:54: cd:f6:3d:71:1e:45:4d:7d:82:7b:2c:d1:83:86:85:9f:da:19: b4:1f:c7:ac:c1:5b:07:8b:0b:1a:50:3d:e1:c9:cb:6a:2c:f6: de:f3:d0:8e:38:a1:03:a5:c8:b8:a0:40:ea:8c:82:f9:89:67: 16:6f:93:03:dd:18:60:71:90:d6:29:8c:97:37:a8:78:c1:ea: b5:61:28:3b:01:5d:0b:8a:4a:94:1e:49:03:40:88:33:c6:ee: 09:87:02:9a:f2:98:94:e9:a8:48:02:7e:52:14:df:21:ce:c3: 0d:96:7e:74:f2:61:87:fc:eb:4c:a7:16:d5:bf:ac:2c:6b:a7: 1f:05:b1:27:83:4a:b1:b6:57:cb:fd:1d:d6:9b:c5:70:c2:11: b7:ed:46:31:e9:a0:e7:ba:85:ea:f1:76:c9:bc:da:68:e8:dc: b0:c7:41:77:32:d4:05:22:9a:b8:40:05:40:1c:08:8d:6a:d0: d7:b3:a1:7e:b1:01:be:fd:cc:18:ca:45:23:02:0b:b5:a7:cf: f6:67:78:46:b5:b8:8d:8d:ac:0c:6a:d9:3b:ca:16:e5:5c:a8: f6:cb:a4:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8687Me47GKpHt57cz/7dwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlZDUwMDE2NGYwNzM4MTM1YjlhZWMwNGUzOGZjMjRjYjkw ZTBmNWYwHhcNMjUxMjIwMTgwMDQ1WhcNMjUxMjIxMTgwMDQ1WjAzMTEwLwYDVQQD EyhiZTg4N2ZjMjBlN2IyZTQ2YjE0N2ZiYjE0NmE4YzliMzhkZWY3MjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MDej2H94YKCyji6/xIoqF+EtQ/G 1DyQ1fdylkolBHjp7DI7rqpxHQDzDHejjb69SbIGOoSW2fc8eqtA8hp67kRPFGAj baSKEQQZNOHyMZn9MEESywmS7PmGJcSueauYRuxWRSUxBoVOyxQqLk25YGQOZWOm KKROVl+XGqJJj35UGUXUHEGMAIndLTCJSYrVpEkktJiZMiKGqZdAX19/YbUaCum4 3MAK2OO/b0BH8+Ao4bCdUjei0GMYVVHZfr7UzwRFC7hJvCURBHbjHmzDpEM4t4zb h6/JHmD5qavR6/rAJZllNiVodoUMCIdZg7EBzr98hmOSVG+pCYuXv2oCpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6If8IOey5GsUf7sUaoybON73JgMB8GA1UdIwQY MBaAFH7VABZPBzgTW5rsBOOPwky5Dg9fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnRVQUZrOEhPQk5ibXV3RTQ0X0NUTGtPRDE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YzUzNTktMzQ1Mi00MmYzLTg4MGIt ODJkOWE5ZWI0MzBjLzEvZnRVQUZrOEhPQk5ibXV3RTQ0X0NUTGtPRDE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC85YzUzNTktMzQ1Mi00MmYzLTg4MGItODJkOWE5ZWI0MzBj LzEvZnRVQUZrOEhPQk5ibXV3RTQ0X0NUTGtPRDE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASioNM/19 Moejg2+vSS28BuyMu9V7JazCR5rmpLJxlhbdKttUzfY9cR5FTX2CeyzRg4aFn9oZ tB/HrMFbB4sLGlA94cnLaiz23vPQjjihA6XIuKBA6oyC+YlnFm+TA90YYHGQ1imM lzeoeMHqtWEoOwFdC4pKlB5JA0CIM8buCYcCmvKYlOmoSAJ+UhTfIc7DDZZ+dPJh h/zrTKcW1b+sLGunHwWxJ4NKsbZXy/0d1pvFcMIRt+1GMemg57qF6vF2ybzaaOjc sMdBdzLUBSKauEAFQBwIjWrQ17OhfrEBvv3MGMpFIwILtafP9md4RrW4jY2sDGrZ O8oW5Vyo9suktg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:28:43 2025 by rpki-client