This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft File: FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft (raw, json) Hash identifier: Y0kb+vK2+3RYHI6cQcyRcABThmjwwXklvynRPe6afEc= Subject key identifier: 4B:3D:76:8D:9B:38:51:89:50:F9:71:AC:77:B2:FF:8C:0F:17:A3:1F Authority key identifier: 16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C Certificate issuer: /CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c Certificate serial: 019B76A45671919573CE82B26D0931A7C70B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft Manifest number: 0AC6 Signing time: Wed 31 Dec 2025 23:00:40 +0000 Manifest this update: Wed 31 Dec 2025 23:00:40 +0000 Manifest next update: Thu 01 Jan 2026 23:00:40 +0000 Files and hashes: 1: FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl (hash: dPKmo+eCilHY5GvEvuFjA2sT+YbZ3C+iFdGr7qlsR5E=) 2: g3b-X86nv3p6U9DOq4hCU_Dnmdo.roa (hash: 2YoEPjb/mUp/HqQp7Qak5HkOS9XgXc9API514lfVQEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 23:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:a4:56:71:91:95:73:ce:82:b2:6d:09:31:a7:c7:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c Validity Not Before: Dec 31 23:00:40 2025 GMT Not After : Jan 1 23:00:40 2026 GMT Subject: CN=4b3d768d9b38518950f971ac77b2ff8c0f17a31f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:85:7d:09:60:b2:29:e2:1c:89:cf:e6:01:ec: 42:67:80:f3:de:17:fe:5d:1e:ff:ab:a2:7e:f7:16: ff:51:ac:69:63:a4:45:ff:73:d1:1c:fe:5e:29:7d: 46:a4:7b:d8:aa:dc:c5:4a:01:86:4f:24:5b:e2:27: 1a:76:d7:7e:5e:6d:ae:c8:40:d4:42:7e:5f:bf:5a: c4:0e:16:a5:4b:dc:17:38:68:15:3f:d1:2d:dd:b0: be:06:90:01:e4:fc:a6:4b:fe:ce:6a:7f:a9:bb:c7: a0:02:6b:80:9c:a7:86:60:bb:c9:40:d6:ee:cf:9d: 23:70:2a:3e:4e:dc:3d:e0:1c:1a:a7:e4:9a:28:2f: f1:27:4d:65:bd:8e:1e:ae:43:0a:57:cc:93:82:6f: 06:77:7a:96:08:11:ed:48:af:44:7d:ab:c4:b9:c5: 0d:20:72:2d:90:e6:02:de:8f:b6:e4:93:ad:17:81: e9:52:f8:8a:e1:67:3b:33:76:1e:01:5e:84:eb:5b: 51:11:1f:72:02:be:9a:ec:c1:52:18:2b:06:b8:b5: 47:41:97:b4:16:3c:5d:76:7b:c3:78:3e:e6:91:0b: 98:f6:9b:77:bf:f5:fe:ab:a0:55:6f:56:8f:df:86: 6f:a9:4c:f8:79:ad:98:51:4a:45:e0:87:8b:74:c2: ff:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3D:76:8D:9B:38:51:89:50:F9:71:AC:77:B2:FF:8C:0F:17:A3:1F X509v3 Authority Key Identifier: keyid:16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:48:42:31:57:06:be:60:9f:6c:72:6c:fb:d9:e0:94:3f:8b: 1c:0c:47:97:7d:77:93:2b:10:67:6c:b2:99:33:ca:c2:90:91: ba:8c:e4:74:13:ab:32:cd:18:59:f1:46:4c:cb:5a:9e:45:d3: 59:00:08:4b:cd:ad:33:be:01:22:2c:2a:94:60:3b:8c:8f:a2: 04:46:65:9f:07:8f:81:e0:38:31:ca:9c:c8:af:03:9f:a5:e0: 12:42:f2:d1:31:ef:b8:55:c7:ca:e6:76:55:e6:18:cb:b1:94: ee:b1:c1:98:ec:03:21:f4:f7:bb:68:1e:10:4f:bf:98:3f:a4: 4a:77:46:4f:cf:6d:25:be:ab:7a:64:d4:5f:73:cb:36:81:72: 74:10:cd:1b:72:c6:b8:4e:fd:eb:0f:6b:57:93:8a:12:72:ec: e7:97:f7:42:fc:db:05:e5:e4:88:69:9b:5b:e5:d1:b7:c5:f5: a9:d7:6a:cb:bb:b7:24:b0:5b:e9:88:26:29:60:ee:57:39:4e: de:cc:34:0a:8e:df:35:7b:6f:29:bb:28:8d:23:85:4a:38:fc: f3:5f:26:50:c9:ce:15:b4:f2:8a:74:03:de:fd:3e:c7:03:36: 50:da:0d:1e:22:e2:63:95:13:7b:18:5d:36:87:e4:c6:68:19: 8d:54:33:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2pFZxkZVzzoKybQkxp8cLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZDMxYjJkODk5ZDZlYjJiY2I3YTRkNzhjYzMxMDBkY2Uz MGM5MGMwHhcNMjUxMjMxMjMwMDQwWhcNMjYwMTAxMjMwMDQwWjAzMTEwLwYDVQQD Eyg0YjNkNzY4ZDliMzg1MTg5NTBmOTcxYWM3N2IyZmY4YzBmMTdhMzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYV9CWCyKeIcic/mAexCZ4Dz3hf+ XR7/q6J+9xb/UaxpY6RF/3PRHP5eKX1GpHvYqtzFSgGGTyRb4icadtd+Xm2uyEDU Qn5fv1rEDhalS9wXOGgVP9Et3bC+BpAB5PymS/7Oan+pu8egAmuAnKeGYLvJQNbu z50jcCo+Ttw94Bwap+SaKC/xJ01lvY4erkMKV8yTgm8Gd3qWCBHtSK9EfavEucUN IHItkOYC3o+25JOtF4HpUviK4Wc7M3YeAV6E61tRER9yAr6a7MFSGCsGuLVHQZe0 FjxddnvDeD7mkQuY9pt3v/X+q6BVb1aP34ZvqUz4ea2YUUpF4IeLdML/ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEs9do2bOFGJUPlxrHey/4wPF6MfMB8GA1UdIwQY MBaAFBbTGy2JnW6yvLek14zDEA3OMMkMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnRNYkxZbWRicks4dDZUWGpNTVFEYzR3eVF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83YzNhMTgtMGVjOS00MTU3LWJmNWEt NTIwN2Y2NjRkZjIxLzEvRnRNYkxZbWRicks4dDZUWGpNTVFEYzR3eVF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS83YzNhMTgtMGVjOS00MTU3LWJmNWEtNTIwN2Y2NjRkZjIx LzEvRnRNYkxZbWRicks4dDZUWGpNTVFEYzR3eVF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekhCMVcG vmCfbHJs+9nglD+LHAxHl313kysQZ2yymTPKwpCRuozkdBOrMs0YWfFGTMtankXT WQAIS82tM74BIiwqlGA7jI+iBEZlnwePgeA4McqcyK8Dn6XgEkLy0THvuFXHyuZ2 VeYYy7GU7rHBmOwDIfT3u2geEE+/mD+kSndGT89tJb6remTUX3PLNoFydBDNG3LG uE796w9rV5OKEnLs55f3QvzbBeXkiGmbW+XRt8X1qddqy7u3JLBb6YgmKWDuVzlO 3sw0Co7fNXtvKbsojSOFSjj8818mUMnOFbTyinQD3v0+xwM2UNoNHiLiY5UTexhd NofkxmgZjVQzMA== -----END CERTIFICATE-----Generated at Thu Jan 1 02:50:31 2026 by rpki-client