This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft File: ftjlhnV1ut-0FwacbZAaCR2EvzE.mft (raw, json) Hash identifier: x4gk3a2DPnfvn2aATcgtZPC6hgrymfJuyRmfcHRI/jM= Subject key identifier: B3:79:3F:AC:F2:35:35:D1:BE:B4:16:DA:1C:F1:B0:2E:27:95:41:51 Authority key identifier: 7E:D8:E5:86:75:75:BA:DF:B4:17:06:9C:6D:90:1A:09:1D:84:BF:31 Certificate issuer: /CN=7ed8e5867575badfb417069c6d901a091d84bf31 Certificate serial: 019B717E66BCD896DE028856EBBDA516E632 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft Manifest number: 0298 Signing time: Tue 30 Dec 2025 23:01:07 +0000 Manifest this update: Tue 30 Dec 2025 23:01:07 +0000 Manifest next update: Wed 31 Dec 2025 23:01:07 +0000 Files and hashes: 1: G1iq2k_cWzyxuVDqibQhrF1UvXo.asa (hash: qFhn6B4jbdcAmHSt5MbFtiyaKQIllFx63/9Ucp+PZ+4=) 2: ftjlhnV1ut-0FwacbZAaCR2EvzE.crl (hash: w7/V4G9EvdPgWDCV0Gm9dfto/QMDTkYqhvq3LyYZa6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:7e:66:bc:d8:96:de:02:88:56:eb:bd:a5:16:e6:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ed8e5867575badfb417069c6d901a091d84bf31 Validity Not Before: Dec 30 23:01:07 2025 GMT Not After : Dec 31 23:01:07 2025 GMT Subject: CN=b3793facf23535d1beb416da1cf1b02e27954151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:40:e2:e6:43:16:f4:79:87:39:b4:41:ca:de: 02:fa:b0:0f:38:7b:5a:83:61:20:14:6e:cf:8b:48: 4b:c1:52:85:c2:9f:62:ea:3e:1b:5d:2f:58:e5:c0: f3:db:fd:b1:ec:c0:84:a8:b6:27:0a:b0:1a:36:6d: 6c:86:ad:ae:e3:e4:7f:91:7d:e8:50:cb:d1:ba:b6: e3:66:e1:fe:47:30:c4:60:8f:a6:55:62:c5:fa:4a: f8:46:79:00:46:ff:89:95:90:ae:8d:71:ed:c1:c8: da:f3:5c:b6:f1:16:2d:35:02:b5:7c:7d:ef:5b:d3: ad:2b:95:89:50:4e:56:8f:30:1e:1d:f8:11:fc:d2: b7:1b:28:ea:3f:99:cd:c1:10:0a:e1:a6:f4:0e:7a: 70:4c:d4:00:53:ed:c6:ea:a9:cc:ad:f9:49:9d:54: fd:6c:a3:db:1d:9f:09:4f:1a:fc:29:e4:b0:ce:67: a4:a7:96:13:f7:a1:85:0f:e3:c9:e8:55:a8:dd:f1: 58:ce:62:2c:84:d6:65:42:d3:29:17:c4:79:fe:24: 55:6e:a7:8a:eb:31:86:73:40:43:79:2b:c7:57:a9: 35:76:d5:84:1f:50:8b:f7:c7:81:d9:a9:a6:6f:38: f3:e1:07:1b:08:1d:cf:ff:be:16:d0:a8:8a:9f:0e: 34:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:79:3F:AC:F2:35:35:D1:BE:B4:16:DA:1C:F1:B0:2E:27:95:41:51 X509v3 Authority Key Identifier: keyid:7E:D8:E5:86:75:75:BA:DF:B4:17:06:9C:6D:90:1A:09:1D:84:BF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:28:84:e3:ba:81:45:66:c2:7c:01:eb:a8:db:6c:95:06:78: dd:b2:b3:e4:65:0c:cd:25:4b:07:bc:d1:21:bd:97:62:9b:81: b6:7e:ef:5b:72:b5:ba:d8:7c:24:c6:ef:b4:26:b9:f5:87:e7: c4:fe:24:b1:08:a0:33:6e:48:70:33:e3:42:b7:a5:10:ce:94: 26:cc:52:dd:3b:dd:0c:32:58:fe:b2:1e:42:84:66:28:57:cc: e6:d0:81:f4:b8:9e:89:e3:3d:94:a6:09:b1:48:84:f1:91:75: c6:15:67:b1:12:7e:fe:9e:b5:34:7a:26:66:4a:cd:6b:a3:4a: a1:e8:4b:f6:7b:5c:cc:00:49:80:d7:c9:4a:b1:99:5b:c2:10: 8f:d6:50:c4:79:c1:ad:f6:6a:af:9c:70:f0:b3:5e:aa:b0:4b: e3:8f:2f:dc:c8:58:e2:c5:41:10:6b:33:f0:18:16:23:43:ca: f2:a4:50:dc:f7:42:06:eb:0b:10:56:00:e7:35:6c:d8:38:27: 73:23:2f:11:1b:a1:4a:80:a5:d7:1d:b8:90:ff:36:99:44:6c: 0a:c8:ba:a9:7d:0e:f0:9a:2c:a9:7f:ca:91:aa:a4:50:8f:7c: d8:76:a6:e1:64:2a:f6:99:6d:8c:f3:ff:a4:fd:0a:d3:48:25: 16:f2:44:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxfma82JbeAohW672lFuYyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlZDhlNTg2NzU3NWJhZGZiNDE3MDY5YzZkOTAxYTA5MWQ4 NGJmMzEwHhcNMjUxMjMwMjMwMTA3WhcNMjUxMjMxMjMwMTA3WjAzMTEwLwYDVQQD EyhiMzc5M2ZhY2YyMzUzNWQxYmViNDE2ZGExY2YxYjAyZTI3OTU0MTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEDi5kMW9HmHObRByt4C+rAPOHta g2EgFG7Pi0hLwVKFwp9i6j4bXS9Y5cDz2/2x7MCEqLYnCrAaNm1shq2u4+R/kX3o UMvRurbjZuH+RzDEYI+mVWLF+kr4RnkARv+JlZCujXHtwcja81y28RYtNQK1fH3v W9OtK5WJUE5WjzAeHfgR/NK3GyjqP5nNwRAK4ab0DnpwTNQAU+3G6qnMrflJnVT9 bKPbHZ8JTxr8KeSwzmekp5YT96GFD+PJ6FWo3fFYzmIshNZlQtMpF8R5/iRVbqeK 6zGGc0BDeSvHV6k1dtWEH1CL98eB2ammbzjz4QcbCB3P/74W0KiKnw40swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLN5P6zyNTXRvrQW2hzxsC4nlUFRMB8GA1UdIwQY MBaAFH7Y5YZ1dbrftBcGnG2QGgkdhL8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnRqbGhuVjF1dC0wRndhY2JaQWFDUjJFdnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi82ZGU2MTgtNjczMC00ZDI5LWJkODct NmRlOTM1NWVkYjNhLzEvZnRqbGhuVjF1dC0wRndhY2JaQWFDUjJFdnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi82ZGU2MTgtNjczMC00ZDI5LWJkODctNmRlOTM1NWVkYjNh LzEvZnRqbGhuVjF1dC0wRndhY2JaQWFDUjJFdnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyiE47qB RWbCfAHrqNtslQZ43bKz5GUMzSVLB7zRIb2XYpuBtn7vW3K1uth8JMbvtCa59Yfn xP4ksQigM25IcDPjQrelEM6UJsxS3TvdDDJY/rIeQoRmKFfM5tCB9LieieM9lKYJ sUiE8ZF1xhVnsRJ+/p61NHomZkrNa6NKoehL9ntczABJgNfJSrGZW8IQj9ZQxHnB rfZqr5xw8LNeqrBL448v3MhY4sVBEGsz8BgWI0PK8qRQ3PdCBusLEFYA5zVs2Dgn cyMvERuhSoCl1x24kP82mURsCsi6qX0O8JosqX/KkaqkUI982Ham4WQq9pltjPP/ pP0K00glFvJE7w== -----END CERTIFICATE-----Generated at Wed Dec 31 07:05:33 2025 by rpki-client