This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft File: FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft (raw, json) Hash identifier: 2mn0OBr9pfDFxIVMUEqDeyxh7b4y6MTlWphllXK1MFk= Subject key identifier: D4:E2:CC:D8:88:ED:88:48:01:F7:A3:E5:32:8C:CB:C6:E2:2C:64:C1 Authority key identifier: 15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3 Certificate issuer: /CN=153831c16635161c4dbd18ec5a72b99c4ee519e3 Certificate serial: 019B54F49E7183F5B671E9C150929FFF3DFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft Manifest number: 1407 Signing time: Thu 25 Dec 2025 10:01:16 +0000 Manifest this update: Thu 25 Dec 2025 10:01:16 +0000 Manifest next update: Fri 26 Dec 2025 10:01:16 +0000 Files and hashes: 1: FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl (hash: uPBTCG6xPY9FgC0III6n5xfcZEnkBYSvWhJkls5mwxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:f4:9e:71:83:f5:b6:71:e9:c1:50:92:9f:ff:3d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153831c16635161c4dbd18ec5a72b99c4ee519e3 Validity Not Before: Dec 25 10:01:16 2025 GMT Not After : Dec 26 10:01:16 2025 GMT Subject: CN=d4e2ccd888ed884801f7a3e5328ccbc6e22c64c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1a:9f:89:73:8f:fc:72:3b:b4:38:32:15:b6: a0:90:03:05:0a:06:07:d4:7d:bd:ae:e5:2a:13:fd: 57:93:06:fe:f2:d4:e4:b8:f8:07:db:e8:e5:66:3c: f7:d4:a8:2e:f7:56:92:2e:24:1e:aa:18:f8:37:53: 10:77:ba:24:46:f6:e0:b0:9e:a6:de:89:e9:8e:55: 6e:67:75:3a:37:af:96:ab:4d:5f:25:78:1e:b1:e1: a6:c9:09:4e:03:07:f1:eb:b0:e0:94:bd:92:65:ed: c6:23:63:a7:e1:ba:86:43:dc:45:2c:75:d3:16:9c: 3e:fe:a8:cd:f2:3e:ab:60:3a:f4:d9:fd:3b:53:87: 30:e5:7e:42:dc:17:83:4e:3a:2a:94:c0:00:a4:19: a6:2a:ac:fc:8f:e7:2a:40:1d:19:9d:32:17:82:c8: d8:a0:e1:35:8f:19:ec:1c:50:a1:f1:d8:61:0b:2a: 7b:a1:69:ee:cd:fe:fc:ed:2b:5f:77:11:12:5a:d6: 23:ed:7d:de:de:5a:f4:be:fb:a2:05:d2:7e:c5:e6: b3:7b:6a:94:e6:6c:9f:39:d0:f9:5f:63:45:50:1b: 6a:58:83:bb:1c:60:2c:4e:ac:15:78:9b:f4:66:a9: ac:92:d6:5f:89:c1:79:2a:7a:2a:8b:c5:7a:69:64: 3d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E2:CC:D8:88:ED:88:48:01:F7:A3:E5:32:8C:CB:C6:E2:2C:64:C1 X509v3 Authority Key Identifier: keyid:15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:ad:5c:0a:26:9b:59:cd:df:3e:75:ed:17:3d:45:45:1c:60: b7:0c:9f:17:c8:ef:44:85:5e:f3:c6:f2:56:da:fd:fb:77:09: d6:73:50:49:33:c8:a0:74:5d:77:23:29:0b:96:42:b0:6c:4e: 15:f2:e5:fe:8d:f0:55:47:e7:f2:7e:99:3a:8f:6e:60:7b:13: 8c:3f:4b:36:68:cb:73:0a:d9:73:6a:a6:23:e7:36:5e:ab:4f: 23:24:14:bc:8b:fc:c6:bb:d0:46:f3:25:11:e9:1f:af:73:31: 14:23:7d:64:96:f5:0a:03:27:80:04:fa:35:50:fe:a7:e8:cd: bd:2f:a0:a9:25:b9:ca:4a:c0:07:98:11:f9:ac:14:93:9c:02: c4:d0:e8:19:d2:4f:d6:85:4e:8a:ba:31:8f:d0:ba:a6:fa:3c: fd:29:67:61:2f:c5:30:87:05:32:26:d2:85:30:00:d2:e3:ac: 98:85:d4:74:07:82:97:49:58:31:47:d1:57:65:af:57:f4:c7: 08:6f:32:4d:db:4f:90:20:19:d7:41:c5:e4:fb:56:8d:d9:64: 2b:55:5e:9d:5d:cd:3a:cd:de:49:ed:b1:da:00:a4:af:dd:41: f6:69:26:46:6a:09:44:d5:1a:5c:55:02:13:4b:ef:1b:97:7b: 74:4d:0c:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtU9J5xg/W2cenBUJKf/z39MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MzgzMWMxNjYzNTE2MWM0ZGJkMThlYzVhNzJiOTljNGVl NTE5ZTMwHhcNMjUxMjI1MTAwMTE2WhcNMjUxMjI2MTAwMTE2WjAzMTEwLwYDVQQD EyhkNGUyY2NkODg4ZWQ4ODQ4MDFmN2EzZTUzMjhjY2JjNmUyMmM2NGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRqfiXOP/HI7tDgyFbagkAMFCgYH 1H29ruUqE/1Xkwb+8tTkuPgH2+jlZjz31Kgu91aSLiQeqhj4N1MQd7okRvbgsJ6m 3onpjlVuZ3U6N6+Wq01fJXgeseGmyQlOAwfx67DglL2SZe3GI2On4bqGQ9xFLHXT Fpw+/qjN8j6rYDr02f07U4cw5X5C3BeDTjoqlMAApBmmKqz8j+cqQB0ZnTIXgsjY oOE1jxnsHFCh8dhhCyp7oWnuzf787StfdxESWtYj7X3e3lr0vvuiBdJ+xeaze2qU 5myfOdD5X2NFUBtqWIO7HGAsTqwVeJv0ZqmsktZficF5Knoqi8V6aWQ9jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTizNiI7YhIAfej5TKMy8biLGTBMB8GA1UdIwQY MBaAFBU4McFmNRYcTb0Y7FpyuZxO5RnjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlRneHdXWTFGaHhOdlJqc1duSzVuRTdsR2VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85NTQ1NTctMmE1Zi00ODI2LWFiMTYt Y2Q1MTdiMTY5Zjg5LzEvRlRneHdXWTFGaHhOdlJqc1duSzVuRTdsR2VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS85NTQ1NTctMmE1Zi00ODI2LWFiMTYtY2Q1MTdiMTY5Zjg5 LzEvRlRneHdXWTFGaHhOdlJqc1duSzVuRTdsR2VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArK1cCiab Wc3fPnXtFz1FRRxgtwyfF8jvRIVe88byVtr9+3cJ1nNQSTPIoHRddyMpC5ZCsGxO FfLl/o3wVUfn8n6ZOo9uYHsTjD9LNmjLcwrZc2qmI+c2XqtPIyQUvIv8xrvQRvMl Eekfr3MxFCN9ZJb1CgMngAT6NVD+p+jNvS+gqSW5ykrAB5gR+awUk5wCxNDoGdJP 1oVOiroxj9C6pvo8/SlnYS/FMIcFMibShTAA0uOsmIXUdAeCl0lYMUfRV2WvV/TH CG8yTdtPkCAZ10HF5PtWjdlkK1VenV3NOs3eSe2x2gCkr91B9mkmRmoJRNUaXFUC E0vvG5d7dE0MEw== -----END CERTIFICATE-----Generated at Thu Dec 25 12:48:10 2025 by rpki-client