This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft File: FFXKMFkjEziJJe4UQQCa0x1LtB8.mft (raw, json) Hash identifier: U+OXUD84yAcEmZ8kIjlbn0E6ec0ZyeZYQZF8/99lLaY= Subject key identifier: 18:9E:9B:69:63:D4:F6:FE:2A:22:F4:CB:4A:E9:73:7E:95:2A:F3:5A Authority key identifier: 14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F Certificate issuer: /CN=1455ca30592313388925ee1441009ad31d4bb41f Certificate serial: 019B3F11CE4B77820E44FBD9E2432DA7C75E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft Manifest number: 01D3 Signing time: Sun 21 Dec 2025 04:01:30 +0000 Manifest this update: Sun 21 Dec 2025 04:01:30 +0000 Manifest next update: Mon 22 Dec 2025 04:01:30 +0000 Files and hashes: 1: C93S1dgJ4_A0KrqfhcJ2wbpt_r8.roa (hash: msQwNZJRyoBH47m4enHwmGpM3uJN0VQWiUcpw8JNFl4=) 2: FFXKMFkjEziJJe4UQQCa0x1LtB8.crl (hash: RQOEthUUCV3TU7bpYIaEy5Qvqja0iO4GIaY5q/onY0w=) 3: ZF7hOmhYR1fn4ZYXkR49rskV2pI.roa (hash: mpzvhb4zXG8kDkRlZRViVkyq7QjZbW7JERwXznl7htk=) 4: wcv6Vtvj_8KzJMQubxYX_mtNkA0.roa (hash: 0NzmIEPG+guESJal/NU9sf3xAOXj6eL+XwYUVrhagog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:ce:4b:77:82:0e:44:fb:d9:e2:43:2d:a7:c7:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1455ca30592313388925ee1441009ad31d4bb41f Validity Not Before: Dec 21 04:01:30 2025 GMT Not After : Dec 22 04:01:30 2025 GMT Subject: CN=189e9b6963d4f6fe2a22f4cb4ae9737e952af35a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4f:8f:96:ac:c8:f0:8f:2b:86:a1:c4:b6:ea: 3f:81:62:d0:73:37:fd:74:bc:ff:13:c7:68:12:f7: 84:15:ed:33:36:ed:34:50:a0:ba:b4:99:87:7e:60: 4d:ef:63:bf:05:da:ba:c9:c2:9d:e4:91:b0:87:76: 5b:fc:ad:bd:f0:65:e0:00:2b:a6:24:40:fb:3a:a6: 41:ae:2c:69:ba:9c:ce:a8:28:f9:7b:82:ca:b0:b2: 72:0b:54:e0:de:19:de:98:7f:f4:f3:11:3f:62:da: 11:a8:b0:77:92:16:27:c0:9d:04:1a:ef:37:b4:38: 3e:7e:65:72:6c:cc:ed:78:b9:8a:6c:57:1e:cd:ab: 13:4b:30:d2:6c:23:d9:d2:36:6a:13:c5:aa:61:4e: a5:1a:3a:01:8e:d8:d1:43:9f:dd:83:22:a8:e4:64: 4e:02:bb:39:bd:49:15:08:f1:e3:f8:c6:0b:61:90: 5b:db:fa:df:60:f3:c7:65:08:04:f6:59:ad:15:69: fe:1d:54:4f:84:98:b0:58:e6:8d:66:38:c6:a9:03: ed:e5:d8:28:9e:9f:5b:eb:66:6b:97:fd:5c:37:ff: 1d:1d:54:9a:48:65:f2:65:7d:af:46:c9:55:fb:42: 34:8e:9b:5e:07:9a:16:22:cb:1f:29:df:42:d3:93: 55:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:9E:9B:69:63:D4:F6:FE:2A:22:F4:CB:4A:E9:73:7E:95:2A:F3:5A X509v3 Authority Key Identifier: keyid:14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:69:55:c4:6e:b4:f3:d7:cf:6a:a7:75:19:10:f0:40:2b:f5: 48:4e:4b:cf:55:c8:f4:a4:83:fd:2a:04:d7:b8:8a:e6:f1:5d: ba:39:ee:6a:36:5a:47:20:64:96:d8:b0:b3:50:10:9c:f4:f3: 14:18:3a:26:44:43:a4:20:30:cc:58:c5:5a:c9:23:1a:8a:36: 70:82:06:a6:1a:93:a9:b0:ce:98:f9:89:6c:81:59:6c:1d:96: 68:d6:b1:6f:73:3a:66:02:95:37:2a:ec:f9:82:98:54:58:48: 82:66:70:2d:2b:74:d1:d1:58:ba:2f:7f:3f:79:b3:5d:d2:84: 29:a4:26:80:7b:e8:da:bc:e4:95:37:c5:05:2b:80:93:08:db: e0:dd:d9:7e:0f:09:e0:38:1f:f9:82:4b:ed:fd:26:97:39:c7: d3:3f:44:11:a0:a0:2a:23:94:ed:ac:4a:b2:74:56:36:3d:9b: 6c:ed:90:07:29:be:fc:2e:f1:97:55:ad:29:95:51:1b:54:92: d7:9c:e5:14:2c:75:fa:3c:7a:7f:d6:d9:2d:96:39:d7:cf:63: 99:09:2e:c9:33:8f:7e:35:e5:00:cc:ff:65:20:9e:5d:73:f3: 47:73:fa:70:99:1b:5c:0a:49:fa:2f:3c:e0:6c:f7:0e:76:70: ce:e6:4a:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/Ec5Ld4IORPvZ4kMtp8deMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NTVjYTMwNTkyMzEzMzg4OTI1ZWUxNDQxMDA5YWQzMWQ0 YmI0MWYwHhcNMjUxMjIxMDQwMTMwWhcNMjUxMjIyMDQwMTMwWjAzMTEwLwYDVQQD EygxODllOWI2OTYzZDRmNmZlMmEyMmY0Y2I0YWU5NzM3ZTk1MmFmMzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10+PlqzI8I8rhqHEtuo/gWLQczf9 dLz/E8doEveEFe0zNu00UKC6tJmHfmBN72O/Bdq6ycKd5JGwh3Zb/K298GXgACum JED7OqZBrixpupzOqCj5e4LKsLJyC1Tg3hnemH/08xE/YtoRqLB3khYnwJ0EGu83 tDg+fmVybMzteLmKbFcezasTSzDSbCPZ0jZqE8WqYU6lGjoBjtjRQ5/dgyKo5GRO Ars5vUkVCPHj+MYLYZBb2/rfYPPHZQgE9lmtFWn+HVRPhJiwWOaNZjjGqQPt5dgo np9b62Zrl/1cN/8dHVSaSGXyZX2vRslV+0I0jpteB5oWIssfKd9C05NVeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiem2lj1Pb+KiL0y0rpc36VKvNaMB8GA1UdIwQY MBaAFBRVyjBZIxM4iSXuFEEAmtMdS7QfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMDgzMmUtNjc1Yi00ZWMyLWE4MDIt OWIyNmNhYjc5NDUxLzEvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9mMDgzMmUtNjc1Yi00ZWMyLWE4MDItOWIyNmNhYjc5NDUx LzEvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWlVxG60 89fPaqd1GRDwQCv1SE5Lz1XI9KSD/SoE17iK5vFdujnuajZaRyBkltiws1AQnPTz FBg6JkRDpCAwzFjFWskjGoo2cIIGphqTqbDOmPmJbIFZbB2WaNaxb3M6ZgKVNyrs +YKYVFhIgmZwLSt00dFYui9/P3mzXdKEKaQmgHvo2rzklTfFBSuAkwjb4N3Zfg8J 4Dgf+YJL7f0mlznH0z9EEaCgKiOU7axKsnRWNj2bbO2QBym+/C7xl1WtKZVRG1SS 15zlFCx1+jx6f9bZLZY5189jmQkuyTOPfjXlAMz/ZSCeXXPzR3P6cJkbXApJ+i88 4Gz3DnZwzuZK/A== -----END CERTIFICATE-----Generated at Sun Dec 21 05:37:24 2025 by rpki-client