This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft File: FfiJ_tAIX8IbCPy7slLDEG35mqg.mft (raw, json) Hash identifier: YS5y8dc3CNOiUKPc2R2hukTho+9Q8maVPO7WiXD6PCo= Subject key identifier: 6E:FC:F9:73:7E:E4:F2:34:04:BB:DD:FF:9A:5F:62:0A:C0:C7:83:61 Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8 Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8 Certificate serial: 019B2BF83A5CD41076DCD8D8F4108615B366 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 11:00:46 +0000 Manifest this update: Wed 17 Dec 2025 11:00:46 +0000 Manifest next update: Thu 18 Dec 2025 11:00:46 +0000 Files and hashes: 1: F-M_Dbb2L6tcSdeWJ7Oy2HrJOC4.roa (hash: BGnC69CpqiSAFUqMIgAkLbDOLnnsUTPqZ+RBKIpsT2E=) 2: FfiJ_tAIX8IbCPy7slLDEG35mqg.crl (hash: JZg6JaOPsGzJTnT84iqp9P9YFUAu6HYfcqv98j4xWMI=) 3: c7aVec8wRWh2uY_ep7B9EB_Hd_8.roa (hash: IVR9qhn2n9gPQEgDnZi5eZBL8Hlmr2T2MC2szELxnvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:3a:5c:d4:10:76:dc:d8:d8:f4:10:86:15:b3:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8 Validity Not Before: Dec 17 11:00:46 2025 GMT Not After : Dec 18 11:00:46 2025 GMT Subject: CN=6efcf9737ee4f23404bbddff9a5f620ac0c78361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1e:f4:f0:d3:9d:64:17:76:17:23:7e:ce:c4: ce:62:61:fa:4e:9b:93:d6:df:a7:6e:54:a9:c8:58: df:01:1e:9b:c1:99:49:f5:de:4b:6b:65:db:70:c1: fa:d5:9e:5a:bd:21:38:ca:cb:cf:6b:9c:52:05:9c: 3b:9d:27:b3:e9:f5:ec:65:a3:72:fb:5e:67:dc:e0: 0e:6f:63:f2:c8:4f:6b:ff:ae:77:4e:83:45:eb:be: a6:11:8f:48:e7:f7:b4:da:b8:7b:f2:9f:ed:b7:25: 92:80:26:6c:44:79:3f:1d:85:cb:b2:d9:3e:d7:9d: ca:06:0b:0c:1f:4b:18:c9:f5:ea:0d:58:a8:df:13: a3:e2:76:09:da:a2:ac:e5:f8:4a:26:4f:3e:8b:30: fe:e5:63:3e:8b:6d:50:1a:f0:6b:0f:79:70:79:3a: 2e:59:d8:91:eb:03:e2:96:c3:53:c8:f5:b7:72:28: c5:bc:5e:ae:f9:c3:a8:fe:3f:79:10:2b:22:39:4d: 97:34:8b:0a:04:73:3e:34:01:b7:4a:8e:ee:65:70: 5b:a4:29:1f:9a:6e:28:e4:ba:6f:ff:51:07:55:47: 5d:ab:81:d0:8d:76:57:1d:49:b5:de:bf:be:0e:46: 89:ec:6d:55:4d:6f:ac:6c:7e:d6:52:4f:d7:c2:a3: 24:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:FC:F9:73:7E:E4:F2:34:04:BB:DD:FF:9A:5F:62:0A:C0:C7:83:61 X509v3 Authority Key Identifier: keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d7:a5:b6:36:25:a6:11:9b:36:05:71:08:c2:c1:d5:f5:e4: f7:e0:86:51:77:a9:62:f8:d7:e0:14:77:bf:be:25:07:de:1b: a4:1e:da:5a:3f:09:e4:04:2d:91:cf:ac:e3:c5:3d:d0:3e:dd: 2a:ba:5e:6a:c6:ea:60:10:f0:5a:39:53:69:a2:b3:9a:6b:6b: 76:91:33:d1:57:18:9b:25:8e:5d:72:d3:50:c3:a3:83:76:69: 2f:4b:2b:1c:45:1b:78:03:fa:a2:8d:04:07:e9:ab:6c:38:f0: 65:ca:10:e9:f6:9d:2e:a7:87:8f:93:53:df:13:c0:fd:b1:93: 5f:1c:28:0d:b2:14:7e:6c:37:a4:61:06:a1:a6:f0:46:b7:0d: 6a:11:12:a2:ae:37:2a:8f:3a:2c:5c:21:ca:6d:63:c6:89:61: 22:4c:5a:a7:f8:93:f9:7d:51:2d:eb:2b:89:a4:f5:70:79:d0: 7c:e8:c0:23:0f:6c:db:bd:0d:6d:b9:08:70:60:67:e7:d0:56: e6:2d:67:82:92:09:cf:b2:8d:fa:78:0a:92:78:59:a7:5e:86: 4e:16:c7:e1:09:2b:37:2b:8e:81:97:e7:0b:26:26:eb:7c:78: bf:d5:bc:e1:ba:89:c4:e6:40:33:7b:1c:8d:60:88:8d:81:50: 69:5c:05:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+Dpc1BB23NjY9BCGFbNmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Zjg4OWZlZDAwODVmYzIxYjA4ZmNiYmIyNTJjMzEwNmRm OTlhYTgwHhcNMjUxMjE3MTEwMDQ2WhcNMjUxMjE4MTEwMDQ2WjAzMTEwLwYDVQQD Eyg2ZWZjZjk3MzdlZTRmMjM0MDRiYmRkZmY5YTVmNjIwYWMwYzc4MzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR708NOdZBd2FyN+zsTOYmH6TpuT 1t+nblSpyFjfAR6bwZlJ9d5La2XbcMH61Z5avSE4ysvPa5xSBZw7nSez6fXsZaNy +15n3OAOb2PyyE9r/653ToNF676mEY9I5/e02rh78p/ttyWSgCZsRHk/HYXLstk+ 153KBgsMH0sYyfXqDVio3xOj4nYJ2qKs5fhKJk8+izD+5WM+i21QGvBrD3lweTou WdiR6wPilsNTyPW3cijFvF6u+cOo/j95ECsiOU2XNIsKBHM+NAG3So7uZXBbpCkf mm4o5Lpv/1EHVUddq4HQjXZXHUm13r++DkaJ7G1VTW+sbH7WUk/XwqMkvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG78+XN+5PI0BLvd/5pfYgrAx4NhMB8GA1UdIwQY MBaAFBX4if7QCF/CGwj8u7JSwxBt+ZqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mOTUyZmItOTMxOC00OWI2LWI5NDYt MWUzYTE5NTQ3OGUwLzEvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9mOTUyZmItOTMxOC00OWI2LWI5NDYtMWUzYTE5NTQ3OGUw LzEvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGteltjYl phGbNgVxCMLB1fXk9+CGUXepYvjX4BR3v74lB94bpB7aWj8J5AQtkc+s48U90D7d KrpeasbqYBDwWjlTaaKzmmtrdpEz0VcYmyWOXXLTUMOjg3ZpL0srHEUbeAP6oo0E B+mrbDjwZcoQ6fadLqeHj5NT3xPA/bGTXxwoDbIUfmw3pGEGoabwRrcNahESoq43 Ko86LFwhym1jxolhIkxap/iT+X1RLesriaT1cHnQfOjAIw9s270NbbkIcGBn59BW 5i1ngpIJz7KN+ngKknhZp16GThbH4QkrNyuOgZfnCyYm63x4v9W84bqJxOZAM3sc jWCIjYFQaVwFdw== -----END CERTIFICATE-----Generated at Wed Dec 17 18:24:45 2025 by rpki-client