This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft File: fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json) Hash identifier: GzjqrrwD8XSZh77jOlYIss6kJUd0CiGrs+wKe0Tx4aE= Subject key identifier: EB:1E:4A:1E:50:B2:BC:7F:6E:2A:A3:2D:0A:DF:52:C0:51:0D:2C:F0 Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61 Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61 Certificate serial: 019B3BD90C30ED15B86420A42B6BEE9922C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft Manifest number: 0AE9 Signing time: Sat 20 Dec 2025 13:00:38 +0000 Manifest this update: Sat 20 Dec 2025 13:00:38 +0000 Manifest next update: Sun 21 Dec 2025 13:00:38 +0000 Files and hashes: 1: 7gpeu0S7hXZ8riAsKwy1ohmGU98.roa (hash: yLiQ4BEaMhFQdskxNlE7aRv3rWf0cLts9Xjd3ePJwJ8=) 2: Be7hWobHeXIDcEV-DcvLVcoAOIA.roa (hash: BaLaak1kH9hW9zdiezS80huivnGVBMTLdsyXEFD6uzM=) 3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: f2qLj2FBms/RO+/jtgIRO9mFEzUNc2Jv4Y2Degq4bCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:0c:30:ed:15:b8:64:20:a4:2b:6b:ee:99:22:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61 Validity Not Before: Dec 20 13:00:38 2025 GMT Not After : Dec 21 13:00:38 2025 GMT Subject: CN=eb1e4a1e50b2bc7f6e2aa32d0adf52c0510d2cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d3:78:f0:87:8d:8d:08:73:63:0b:10:89:31: 6e:24:50:03:30:fc:cc:01:cf:7f:01:72:d1:ed:7f: f1:5e:d1:c2:6b:d3:88:aa:1d:88:0e:f2:f2:44:b2: da:fd:8c:52:e5:e6:fa:48:da:61:c2:3e:c9:5b:09: 7d:8f:b2:4f:f6:77:fb:d4:0a:5c:fb:0a:79:c7:8f: 15:2a:7d:13:4e:16:28:ec:95:9b:3a:94:b1:8b:b7: 85:39:cc:c0:aa:5a:04:b6:d5:ec:15:22:60:53:27: 0b:fb:9b:45:a6:32:06:d6:96:53:b7:5b:63:ad:93: 27:b8:5f:45:23:d6:36:4a:ae:a2:50:5a:89:1e:56: 61:cd:de:7a:87:c7:05:0d:18:69:d0:2b:16:78:09: 3e:de:4d:f7:14:b4:e7:e6:ca:ed:fc:e7:c9:fb:9c: c4:bf:df:3a:8b:c4:6c:d9:70:4d:74:90:f6:4f:dc: 7f:41:5b:f3:f5:ee:ca:bf:b4:93:33:81:a1:e5:11: de:ab:ce:ed:9f:4e:38:d4:78:4e:6a:cc:e0:a1:8d: c4:3b:93:1c:19:c6:8e:ac:58:6c:6d:0e:49:56:b3: c5:07:92:a1:81:42:95:b5:3d:44:f3:3e:61:68:8e: b6:92:fc:cf:08:5f:ce:20:dd:3c:17:82:4f:96:84: e8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1E:4A:1E:50:B2:BC:7F:6E:2A:A3:2D:0A:DF:52:C0:51:0D:2C:F0 X509v3 Authority Key Identifier: keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:6b:24:9a:bd:00:b8:6c:de:84:02:03:73:61:64:b1:96:ee: 88:a5:8b:3a:9c:7e:70:60:c9:60:3b:48:41:13:e8:10:23:24: 16:10:5b:c2:8c:c2:b4:b5:74:be:be:ad:6a:01:03:3f:9d:08: 3c:31:3c:d7:da:d0:6f:88:e2:5d:fd:a9:ef:67:78:6a:12:da: ed:e6:d3:c2:79:08:26:cc:bb:49:8f:6a:85:73:62:b2:ef:86: 73:3f:f8:46:4f:39:da:d2:8f:f0:28:7f:17:c3:49:69:57:dd: d5:7a:e5:dd:06:fe:b5:69:a6:13:01:28:c4:ef:46:32:1d:23: 2b:db:a9:58:7b:88:31:d8:09:21:ae:f8:f1:15:08:fd:6f:a7: 29:65:16:57:2e:99:8d:7e:49:49:6f:84:37:bd:5c:b5:d0:d3: 8a:2f:52:b3:8b:69:bf:7d:26:76:02:ea:4c:b2:30:b3:98:0e: 54:99:c4:35:89:09:29:45:c6:ce:36:49:fe:c4:82:19:96:d6: 9c:0c:38:3a:9e:90:37:ba:91:b6:39:f0:61:58:5a:82:c6:6a: 8f:74:cb:a4:2e:ea:15:dd:84:b6:62:b9:e0:b7:76:f9:c8:e0: 58:31:2e:85:f6:64:13:a4:cd:d7:b4:fd:2f:6b:99:0b:94:eb: f2:05:85:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72Qww7RW4ZCCkK2vumSLJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMzJkZWRhMzFmZThlYWZjZGFkNmUyYTA2ZmRlMjM2ZTdk MTFkNjEwHhcNMjUxMjIwMTMwMDM4WhcNMjUxMjIxMTMwMDM4WjAzMTEwLwYDVQQD EyhlYjFlNGExZTUwYjJiYzdmNmUyYWEzMmQwYWRmNTJjMDUxMGQyY2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudN48IeNjQhzYwsQiTFuJFADMPzM Ac9/AXLR7X/xXtHCa9OIqh2IDvLyRLLa/YxS5eb6SNphwj7JWwl9j7JP9nf71Apc +wp5x48VKn0TThYo7JWbOpSxi7eFOczAqloEttXsFSJgUycL+5tFpjIG1pZTt1tj rZMnuF9FI9Y2Sq6iUFqJHlZhzd56h8cFDRhp0CsWeAk+3k33FLTn5srt/OfJ+5zE v986i8Rs2XBNdJD2T9x/QVvz9e7Kv7STM4Gh5RHeq87tn0441HhOaszgoY3EO5Mc GcaOrFhsbQ5JVrPFB5KhgUKVtT1E8z5haI62kvzPCF/OIN08F4JPloTogwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOseSh5Qsrx/biqjLQrfUsBRDSzwMB8GA1UdIwQY MBaAFH0y3tox/o6vza1uKgb94jbn0R1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jNDNlZDItNzBiMy00NWQ4LWFhMjgt NTNmYjAxOGE4YzBlLzEvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jNDNlZDItNzBiMy00NWQ4LWFhMjgtNTNmYjAxOGE4YzBl LzEvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGskmr0A uGzehAIDc2FksZbuiKWLOpx+cGDJYDtIQRPoECMkFhBbwozCtLV0vr6tagEDP50I PDE819rQb4jiXf2p72d4ahLa7ebTwnkIJsy7SY9qhXNisu+Gcz/4Rk852tKP8Ch/ F8NJaVfd1Xrl3Qb+tWmmEwEoxO9GMh0jK9upWHuIMdgJIa748RUI/W+nKWUWVy6Z jX5JSW+EN71ctdDTii9Ss4tpv30mdgLqTLIws5gOVJnENYkJKUXGzjZJ/sSCGZbW nAw4Op6QN7qRtjnwYVhagsZqj3TLpC7qFd2EtmK54Ld2+cjgWDEuhfZkE6TN17T9 L2uZC5Tr8gWFNA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:55:02 2025 by rpki-client