This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft File: FT8kGD1slRhZGTSebpJTNzZDe5Q.mft (raw, json) Hash identifier: hDDJifII6TEnN3AR4ig6/SlIaXPMguPtTR6ABkZ6zUg= Subject key identifier: E2:D4:55:D0:25:FA:0D:DB:64:14:D3:8D:C7:B6:80:02:CC:3B:45:21 Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94 Certificate issuer: /CN=153f24183d6c95185919349e6e92533736437b94 Certificate serial: 019B2AAE7F8238D183D6613134B24B657FF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft Manifest number: 0879 Signing time: Wed 17 Dec 2025 05:00:37 +0000 Manifest this update: Wed 17 Dec 2025 05:00:37 +0000 Manifest next update: Thu 18 Dec 2025 05:00:37 +0000 Files and hashes: 1: 02srA_dodlsqHDgp--vASVvWX9E.roa (hash: lJ1KGWWna7XFX1YELq/QOjPK38+hDLl/0ZeJxdIW2VA=) 2: FT8kGD1slRhZGTSebpJTNzZDe5Q.crl (hash: TLjFY7EJ5Vah/NiBhvZTdbyL6se9P8UdCUwCPRKVqM8=) 3: MBq9_d6LT2vyQzQfNudTMEVPC5w.roa (hash: md4P7geg1tPk/NRWigzWi02Y2+T+SaZ3+I/C1pIam5U=) 4: w6nyjw8CCPdGWE2r0om0qvXFyXo.roa (hash: 1O15ZgeKf2Rbzxb6TQY0MNC2RDhbgVcfZUfdxbDgya4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 05:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:ae:7f:82:38:d1:83:d6:61:31:34:b2:4b:65:7f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153f24183d6c95185919349e6e92533736437b94 Validity Not Before: Dec 17 05:00:37 2025 GMT Not After : Dec 18 05:00:37 2025 GMT Subject: CN=e2d455d025fa0ddb6414d38dc7b68002cc3b4521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d7:73:5c:ae:0b:45:3c:e6:13:73:81:dd:f2: 92:f2:24:78:05:b2:52:87:e9:28:fe:95:28:16:99: 8b:59:db:90:c4:fe:7a:0e:cd:e3:45:e6:ee:bc:51: ef:bc:70:18:fb:7d:98:63:4f:2d:da:68:b8:6b:bf: 81:72:13:3b:c7:5f:0c:f5:33:46:4a:93:4e:d2:e7: 5c:38:e5:65:f7:d5:9a:54:19:4e:cb:be:07:e6:7e: 12:00:e2:29:44:64:1d:b2:c4:5a:91:b5:5e:4c:a4: 79:7d:5d:62:0f:18:94:ea:75:65:9b:bb:89:22:d1: 55:53:70:2b:c8:5a:68:90:74:da:a8:9b:6c:91:0a: 05:66:ac:55:e3:1a:fd:5e:3b:ea:7d:3d:73:a8:d1: 49:63:f7:3c:03:f1:27:48:fb:2c:69:7e:e7:6e:42: aa:eb:01:f8:06:a8:3e:c2:1b:27:e6:c8:88:e7:62: 6d:d0:65:e5:a8:7a:97:02:40:35:56:b9:6d:f3:c7: a1:65:b8:d5:d0:bf:42:74:04:84:17:c7:56:f9:0c: 61:a4:00:a4:15:08:a6:d4:d1:ec:a4:4f:4a:a3:a3: 2d:f2:89:cf:4f:06:b7:c7:46:79:89:12:dd:14:ef: b1:6d:3b:16:9e:ec:8a:79:6a:19:b1:d3:2d:ba:37: 62:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D4:55:D0:25:FA:0D:DB:64:14:D3:8D:C7:B6:80:02:CC:3B:45:21 X509v3 Authority Key Identifier: keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:9d:1d:ea:3a:3d:16:9e:c2:c5:c9:48:b8:76:24:dc:b4:40: ba:64:a3:dc:c3:3c:2b:41:e6:79:25:42:2d:1c:27:70:4c:3e: 39:ff:36:af:45:3d:bf:01:59:c4:19:68:37:56:84:97:64:9b: 99:3e:0c:5e:2e:0a:72:a9:1d:26:36:27:9a:67:e0:45:91:41: 93:50:69:14:1f:fd:08:79:2e:53:06:25:13:38:9d:57:97:54: 96:29:6a:12:a5:db:88:fd:46:dd:9d:5e:1d:14:d6:60:90:0b: fe:2b:9d:b1:6f:d8:ec:39:17:b7:ae:62:12:de:0d:4b:42:f1: 63:e1:ae:f2:52:29:07:7e:93:07:5b:05:0b:9f:73:34:f9:3f: 7e:02:0c:b4:88:91:72:1d:c0:b7:47:d8:e1:04:a6:69:9b:dc: 08:2d:9c:06:9f:3f:58:a6:14:a5:8e:ba:48:39:2c:36:d6:8b: 36:ec:9e:bb:be:91:80:a9:43:27:e5:4f:a3:10:3d:91:b4:e5: 00:f8:aa:5b:67:5a:00:66:42:3b:c8:92:70:2c:c2:97:d2:3b: 13:80:00:3b:9c:57:18:0b:f8:03:74:6c:83:70:31:31:4b:b7: 7a:e0:6e:9d:80:15:3e:04:4a:22:d0:5f:11:b0:83:a7:82:bf: 41:f5:d6:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqrn+CONGD1mExNLJLZX/1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1M2YyNDE4M2Q2Yzk1MTg1OTE5MzQ5ZTZlOTI1MzM3MzY0 MzdiOTQwHhcNMjUxMjE3MDUwMDM3WhcNMjUxMjE4MDUwMDM3WjAzMTEwLwYDVQQD EyhlMmQ0NTVkMDI1ZmEwZGRiNjQxNGQzOGRjN2I2ODAwMmNjM2I0NTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvddzXK4LRTzmE3OB3fKS8iR4BbJS h+ko/pUoFpmLWduQxP56Ds3jRebuvFHvvHAY+32YY08t2mi4a7+BchM7x18M9TNG SpNO0udcOOVl99WaVBlOy74H5n4SAOIpRGQdssRakbVeTKR5fV1iDxiU6nVlm7uJ ItFVU3AryFpokHTaqJtskQoFZqxV4xr9XjvqfT1zqNFJY/c8A/EnSPssaX7nbkKq 6wH4Bqg+whsn5siI52Jt0GXlqHqXAkA1Vrlt88ehZbjV0L9CdASEF8dW+QxhpACk FQim1NHspE9Ko6Mt8onPTwa3x0Z5iRLdFO+xbTsWnuyKeWoZsdMtujdilQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLUVdAl+g3bZBTTjce2gALMO0UhMB8GA1UdIwQY MBaAFBU/JBg9bJUYWRk0nm6SUzc2Q3uUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iMDVlMDgtMDc2Mi00ZGM3LWE0YjAt NTgwNWQzZjNkYmIyLzEvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9iMDVlMDgtMDc2Mi00ZGM3LWE0YjAtNTgwNWQzZjNkYmIy LzEvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAop0d6jo9 Fp7CxclIuHYk3LRAumSj3MM8K0HmeSVCLRwncEw+Of82r0U9vwFZxBloN1aEl2Sb mT4MXi4KcqkdJjYnmmfgRZFBk1BpFB/9CHkuUwYlEzidV5dUlilqEqXbiP1G3Z1e HRTWYJAL/iudsW/Y7DkXt65iEt4NS0LxY+Gu8lIpB36TB1sFC59zNPk/fgIMtIiR ch3At0fY4QSmaZvcCC2cBp8/WKYUpY66SDksNtaLNuyeu76RgKlDJ+VPoxA9kbTl APiqW2daAGZCO8iScCzCl9I7E4AAO5xXGAv4A3Rsg3AxMUu3euBunYAVPgRKItBf EbCDp4K/QfXWuQ== -----END CERTIFICATE-----Generated at Wed Dec 17 13:28:07 2025 by rpki-client