This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft File: FfiJ_tAIX8IbCPy7slLDEG35mqg.mft (raw, json) Hash identifier: wZH8Cqj2Lejb2PCxZodxJhaaPFqPYaMJY54dn0XQCTw= Subject key identifier: CB:D5:C8:FE:35:59:19:F9:14:89:CE:E2:79:EC:F4:A2:DD:EE:56:74 Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8 Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8 Certificate serial: 019B2FD4CFD17A8120D8B8C7445114267F6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 05:00:34 +0000 Manifest this update: Thu 18 Dec 2025 05:00:34 +0000 Manifest next update: Fri 19 Dec 2025 05:00:34 +0000 Files and hashes: 1: F-M_Dbb2L6tcSdeWJ7Oy2HrJOC4.roa (hash: BGnC69CpqiSAFUqMIgAkLbDOLnnsUTPqZ+RBKIpsT2E=) 2: FfiJ_tAIX8IbCPy7slLDEG35mqg.crl (hash: hdED+5YnjXs5/SgmTYo9wDf7Oz5sozkzRUFQ2JYvl9A=) 3: c7aVec8wRWh2uY_ep7B9EB_Hd_8.roa (hash: IVR9qhn2n9gPQEgDnZi5eZBL8Hlmr2T2MC2szELxnvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d4:cf:d1:7a:81:20:d8:b8:c7:44:51:14:26:7f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8 Validity Not Before: Dec 18 05:00:34 2025 GMT Not After : Dec 19 05:00:34 2025 GMT Subject: CN=cbd5c8fe355919f91489cee279ecf4a2ddee5674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:68:a2:a9:ab:2f:db:ad:2d:9d:5c:ef:7a:42: 9d:c1:51:0a:33:6d:62:1e:b5:78:47:76:53:0d:03: d1:2a:83:9b:63:6f:d9:0b:46:df:37:85:20:de:91: 69:a2:ff:6e:83:e5:c8:ba:ab:59:6d:be:b5:5e:81: 1b:b9:9b:36:b9:7e:68:79:af:97:44:10:3c:f2:df: 46:12:a4:ed:1f:e0:dc:a1:45:a6:56:74:40:91:15: c9:5c:f4:b0:fc:59:9e:1b:87:b7:af:68:8e:8e:30: 65:1b:ea:9b:4b:12:af:55:8b:02:d2:2e:fb:be:00: ce:92:86:69:5c:4c:cb:2d:93:ca:7c:28:b5:37:42: ac:5c:d1:78:48:2a:7e:b3:e6:e1:9d:80:a4:e1:54: 63:84:ff:02:ae:f9:4c:a7:40:9d:29:54:85:27:03: 57:fd:c9:0c:13:0f:8c:cd:e4:df:0e:69:52:91:48: 6b:f9:f7:85:7f:6b:07:1e:4d:57:f2:2b:9d:60:2c: b7:2f:61:71:04:90:fb:9d:cb:b1:a0:0b:4e:71:45: 9d:63:62:6b:22:a7:d1:69:62:54:71:df:8d:f5:cf: 72:33:8d:47:3e:92:4e:25:b1:ab:a9:bc:d2:e3:10: 87:25:9c:16:a4:d6:5f:e9:9b:ee:f8:66:e8:45:e7: 00:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D5:C8:FE:35:59:19:F9:14:89:CE:E2:79:EC:F4:A2:DD:EE:56:74 X509v3 Authority Key Identifier: keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a9:04:e0:a3:fa:f7:51:1d:09:12:5d:46:24:e4:07:a3:6e: a3:85:86:31:e2:34:86:ad:c3:01:19:2e:0e:67:98:73:a3:f2: b7:0d:b4:b1:92:56:26:4e:dd:44:db:55:a1:05:61:ae:f4:9b: 78:26:c9:c6:83:4e:d9:78:c4:be:f3:bb:91:1b:83:0f:15:53: 55:52:2c:0e:fe:c8:88:34:cb:ac:f5:78:28:38:95:a6:bc:62: a9:8f:af:72:bb:5b:0c:5e:3a:22:7e:ee:6a:69:0e:b5:c3:77: b2:01:ed:19:19:e2:2d:e9:83:3b:04:df:0d:dd:af:49:2c:88: ba:08:67:ec:73:58:be:6d:7c:8e:b0:0d:28:0c:2c:d1:c1:12: 22:6f:71:f8:8a:b0:1a:79:df:a6:39:8c:1f:ee:ad:3f:f1:1f: 8c:1f:80:fb:bd:8e:c5:1d:77:a5:11:61:47:ea:49:47:1f:9a: 7b:b8:57:23:f3:8c:84:e7:e5:03:2d:2a:45:e2:2e:39:ee:c4: d7:a8:94:a2:30:2e:39:a6:fd:1f:64:ad:5c:e3:99:86:16:bb: 13:05:65:05:85:20:cb:0d:97:1f:7a:d6:30:7b:50:83:4f:25: a1:d7:5f:cb:c5:9a:8a:ae:be:99:c8:f2:b0:05:7f:75:77:36: 8a:ac:e2:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1M/ReoEg2LjHRFEUJn9rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Zjg4OWZlZDAwODVmYzIxYjA4ZmNiYmIyNTJjMzEwNmRm OTlhYTgwHhcNMjUxMjE4MDUwMDM0WhcNMjUxMjE5MDUwMDM0WjAzMTEwLwYDVQQD EyhjYmQ1YzhmZTM1NTkxOWY5MTQ4OWNlZTI3OWVjZjRhMmRkZWU1Njc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWiiqasv260tnVzvekKdwVEKM21i HrV4R3ZTDQPRKoObY2/ZC0bfN4Ug3pFpov9ug+XIuqtZbb61XoEbuZs2uX5oea+X RBA88t9GEqTtH+DcoUWmVnRAkRXJXPSw/FmeG4e3r2iOjjBlG+qbSxKvVYsC0i77 vgDOkoZpXEzLLZPKfCi1N0KsXNF4SCp+s+bhnYCk4VRjhP8CrvlMp0CdKVSFJwNX /ckMEw+MzeTfDmlSkUhr+feFf2sHHk1X8iudYCy3L2FxBJD7ncuxoAtOcUWdY2Jr IqfRaWJUcd+N9c9yM41HPpJOJbGrqbzS4xCHJZwWpNZf6Zvu+GboRecATQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvVyP41WRn5FInO4nns9KLd7lZ0MB8GA1UdIwQY MBaAFBX4if7QCF/CGwj8u7JSwxBt+ZqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mOTUyZmItOTMxOC00OWI2LWI5NDYt MWUzYTE5NTQ3OGUwLzEvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9mOTUyZmItOTMxOC00OWI2LWI5NDYtMWUzYTE5NTQ3OGUw LzEvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZakE4KP6 91EdCRJdRiTkB6Nuo4WGMeI0hq3DARkuDmeYc6Pytw20sZJWJk7dRNtVoQVhrvSb eCbJxoNO2XjEvvO7kRuDDxVTVVIsDv7IiDTLrPV4KDiVprxiqY+vcrtbDF46In7u amkOtcN3sgHtGRniLemDOwTfDd2vSSyIughn7HNYvm18jrANKAws0cESIm9x+Iqw GnnfpjmMH+6tP/EfjB+A+72OxR13pRFhR+pJRx+ae7hXI/OMhOflAy0qReIuOe7E 16iUojAuOab9H2StXOOZhha7EwVlBYUgyw2XH3rWMHtQg08loddfy8Waiq6+mcjy sAV/dXc2iqziZA== -----END CERTIFICATE-----Generated at Thu Dec 18 12:41:26 2025 by rpki-client