This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft File: FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft (raw, json) Hash identifier: ZaHgvp25GzYG0lathCj7SteYjI4kmXAZWclQ0QdSJQ0= Subject key identifier: 3E:C5:B5:FC:19:FA:D0:27:95:28:57:24:39:FE:A4:68:60:AC:43:10 Authority key identifier: 15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3 Certificate issuer: /CN=153831c16635161c4dbd18ec5a72b99c4ee519e3 Certificate serial: 019B476F77AA4E213B83660A17B1A0F28DC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft Manifest number: 1400 Signing time: Mon 22 Dec 2025 19:00:45 +0000 Manifest this update: Mon 22 Dec 2025 19:00:45 +0000 Manifest next update: Tue 23 Dec 2025 19:00:45 +0000 Files and hashes: 1: FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl (hash: 1C+9JuAknjWXDhb9snbjX3RA9gGcKs4nTVk9UI0OZFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:6f:77:aa:4e:21:3b:83:66:0a:17:b1:a0:f2:8d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153831c16635161c4dbd18ec5a72b99c4ee519e3 Validity Not Before: Dec 22 19:00:45 2025 GMT Not After : Dec 23 19:00:45 2025 GMT Subject: CN=3ec5b5fc19fad0279528572439fea46860ac4310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1f:3f:f1:19:91:df:cc:d2:ff:f8:f4:48:77: 34:b2:53:f3:6a:b1:71:7c:90:08:ee:52:c4:c6:e7: 93:ee:2c:c9:91:05:22:0e:ad:75:ae:e5:e8:af:f4: 77:b6:14:a4:15:37:33:05:3a:96:0a:c1:e9:02:fb: de:60:49:0f:32:00:3a:bd:63:21:ed:f0:c7:85:a7: de:c8:06:43:d9:a3:7e:09:60:60:5e:80:ed:a4:f1: b1:71:85:aa:3b:9a:ba:40:b4:a8:9c:71:07:9a:e8: e1:c1:04:8e:cb:70:4f:ac:d9:0f:5e:01:fd:90:b2: 55:54:e6:8e:e1:e5:1e:81:e7:db:68:c7:0c:c4:5b: 51:24:07:aa:02:a6:e8:a4:cd:91:76:aa:4f:43:f7: 73:0f:0b:7d:3d:64:f7:6a:60:a9:91:d6:67:74:13: 37:77:0d:a2:a9:de:2d:ed:cc:f1:74:25:0e:ef:ef: 17:9c:02:90:44:62:f1:a6:d8:88:86:2d:b4:40:83: a5:0e:62:ef:c8:61:8d:af:11:42:e9:0e:ea:7b:ee: 4f:ae:1a:e1:a4:8d:a2:fe:aa:35:98:e5:60:e5:cf: a0:5e:7d:33:58:c3:82:cd:93:47:a4:e5:c3:d0:58: 55:6f:4c:8f:c8:58:8f:75:3b:c7:08:1b:23:e4:03: 5e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C5:B5:FC:19:FA:D0:27:95:28:57:24:39:FE:A4:68:60:AC:43:10 X509v3 Authority Key Identifier: keyid:15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:da:7a:36:90:69:42:fa:e3:a7:28:8c:91:23:85:8e:3b:df: a2:a9:08:77:93:09:3b:2b:fa:57:10:34:8b:80:41:6e:2b:85: 7f:0b:47:ab:82:69:d8:c8:d0:4d:bb:c6:f7:fc:be:b9:0e:39: 50:79:14:91:49:1d:39:3f:cd:5c:32:bf:73:79:9b:4d:c7:08: ba:58:bb:18:21:2a:3f:55:8e:7e:40:16:66:2e:72:bf:bd:29: 30:09:ba:28:b9:c9:8e:2e:10:5b:cf:52:f9:03:75:12:1f:e6: 0b:8b:95:e4:54:8a:f4:51:d5:55:cf:46:3d:6f:f5:92:a0:1d: 1e:e7:3a:e3:2c:c2:3c:cc:3d:0a:16:20:0f:56:eb:19:8e:11: 57:9b:81:1e:4e:1c:f4:43:5f:3c:77:bc:0d:01:db:e7:ba:ba: 2a:85:3e:19:10:18:a4:28:20:d3:19:2b:8c:10:03:d2:0d:d8: de:e7:bc:cf:c2:3e:2a:92:10:79:fd:4a:c2:de:53:fb:01:e8: ae:a7:df:14:ee:19:ef:c5:c8:f6:cf:eb:34:7e:7b:79:84:bd: ee:41:50:b3:e8:da:e5:09:46:09:34:68:b5:bc:53:a1:8f:11: db:19:82:8d:41:af:4d:d8:99:60:5a:b9:b3:fc:d4:48:3e:f4: 41:12:bc:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHb3eqTiE7g2YKF7Gg8o3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MzgzMWMxNjYzNTE2MWM0ZGJkMThlYzVhNzJiOTljNGVl NTE5ZTMwHhcNMjUxMjIyMTkwMDQ1WhcNMjUxMjIzMTkwMDQ1WjAzMTEwLwYDVQQD EygzZWM1YjVmYzE5ZmFkMDI3OTUyODU3MjQzOWZlYTQ2ODYwYWM0MzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R8/8RmR38zS//j0SHc0slPzarFx fJAI7lLExueT7izJkQUiDq11ruXor/R3thSkFTczBTqWCsHpAvveYEkPMgA6vWMh 7fDHhafeyAZD2aN+CWBgXoDtpPGxcYWqO5q6QLSonHEHmujhwQSOy3BPrNkPXgH9 kLJVVOaO4eUegefbaMcMxFtRJAeqAqbopM2RdqpPQ/dzDwt9PWT3amCpkdZndBM3 dw2iqd4t7czxdCUO7+8XnAKQRGLxptiIhi20QIOlDmLvyGGNrxFC6Q7qe+5Prhrh pI2i/qo1mOVg5c+gXn0zWMOCzZNHpOXD0FhVb0yPyFiPdTvHCBsj5ANeBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7FtfwZ+tAnlShXJDn+pGhgrEMQMB8GA1UdIwQY MBaAFBU4McFmNRYcTb0Y7FpyuZxO5RnjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlRneHdXWTFGaHhOdlJqc1duSzVuRTdsR2VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85NTQ1NTctMmE1Zi00ODI2LWFiMTYt Y2Q1MTdiMTY5Zjg5LzEvRlRneHdXWTFGaHhOdlJqc1duSzVuRTdsR2VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS85NTQ1NTctMmE1Zi00ODI2LWFiMTYtY2Q1MTdiMTY5Zjg5 LzEvRlRneHdXWTFGaHhOdlJqc1duSzVuRTdsR2VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAdp6NpBp QvrjpyiMkSOFjjvfoqkId5MJOyv6VxA0i4BBbiuFfwtHq4Jp2MjQTbvG9/y+uQ45 UHkUkUkdOT/NXDK/c3mbTccIuli7GCEqP1WOfkAWZi5yv70pMAm6KLnJji4QW89S +QN1Eh/mC4uV5FSK9FHVVc9GPW/1kqAdHuc64yzCPMw9ChYgD1brGY4RV5uBHk4c 9ENfPHe8DQHb57q6KoU+GRAYpCgg0xkrjBAD0g3Y3ue8z8I+KpIQef1Kwt5T+wHo rqffFO4Z78XI9s/rNH57eYS97kFQs+ja5QlGCTRotbxToY8R2xmCjUGvTdiZYFq5 s/zUSD70QRK8xA== -----END CERTIFICATE-----Generated at Tue Dec 23 00:44:46 2025 by rpki-client