This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft File: fTXAsgkTXCLMgAWnwuIixjwTbLA.mft (raw, json) Hash identifier: PhFCYa6g6HvnnxinmQiTcWhMW5N0XRLNvnF4aAd1a4I= Subject key identifier: A2:4F:48:A3:1B:91:C3:8C:FC:43:F5:0C:DE:29:5F:57:E8:10:11:18 Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0 Certificate issuer: /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0 Certificate serial: 019B288927782734C520EF5997471C5588B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 19:00:35 +0000 Manifest this update: Tue 16 Dec 2025 19:00:35 +0000 Manifest next update: Wed 17 Dec 2025 19:00:35 +0000 Files and hashes: 1: E008mlaZ-98yoVlxucj25N9tnVo.roa (hash: 7h9j4kfENIh6mVCwgI4OQBIMY0MBjmJwFr/fTNDIJFk=) 2: R2-GAax-KT1qCEjDDbUwaoUFHaY.roa (hash: DTrChNvAxi6mH07womaTROYkgqmDr0mKtOiNc7UHhPs=) 3: fTXAsgkTXCLMgAWnwuIixjwTbLA.crl (hash: 6eMmCfj0ni9X+6F6qtKTjKLqB4MgtsYjNvbsQQZA1uE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:89:27:78:27:34:c5:20:ef:59:97:47:1c:55:88:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0 Validity Not Before: Dec 16 19:00:35 2025 GMT Not After : Dec 17 19:00:35 2025 GMT Subject: CN=a24f48a31b91c38cfc43f50cde295f57e8101118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bb:ab:9c:43:d8:94:50:d0:37:81:f2:ff:c3: ca:99:b3:bb:3a:a7:a0:da:91:b7:4a:d4:5c:90:9a: bf:ff:49:69:e7:36:a6:92:fb:8d:c8:94:4a:ea:8f: e5:49:12:13:05:89:a5:93:ac:8d:1d:d7:25:be:9c: 8b:48:8c:9c:91:e5:da:9c:c8:dd:4f:90:ac:ac:9d: 51:1e:cb:e7:57:d5:c8:3d:73:b1:c3:90:b7:f1:05: b4:52:62:b0:30:d1:d3:8b:c2:f8:6d:4e:7f:f3:22: 6c:dc:93:1e:97:df:d9:db:21:bc:6d:cb:1f:8e:ce: 92:93:52:48:19:fd:48:46:70:07:cb:e6:aa:c9:32: 3d:37:25:75:51:af:62:d0:4e:ba:d9:f8:5d:26:96: 99:1d:c8:9c:71:56:c7:47:88:0d:e3:18:cc:95:c0: 90:6f:52:0c:90:44:0b:e2:e5:db:ec:d2:e2:ad:9d: 92:f8:6c:49:d5:65:2e:c6:15:6f:63:da:ea:b5:a9: da:2b:e8:e7:0b:49:b9:73:59:85:4c:aa:4a:19:35: d7:c0:92:3e:56:a9:e0:b3:16:a1:a9:27:db:4b:d6: 39:e2:da:e4:86:49:63:f8:db:f0:67:42:44:46:62: 98:20:86:c8:cb:af:07:41:d0:c0:3f:4c:20:4d:42: b8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4F:48:A3:1B:91:C3:8C:FC:43:F5:0C:DE:29:5F:57:E8:10:11:18 X509v3 Authority Key Identifier: keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:68:a4:af:db:84:fd:10:8a:f4:ef:13:d1:ef:17:5f:f4:15: 9a:be:67:46:a9:0c:b3:b3:8f:98:59:b4:58:b0:1f:35:8a:a9: d0:1a:0d:cb:0d:33:e7:64:17:ca:a1:95:9d:35:43:84:f6:b9: 12:e3:a2:b0:b1:87:7c:95:1c:68:2d:7d:35:d5:27:c6:55:5e: 4e:f7:49:3c:ac:4f:63:84:d9:f0:69:01:bb:8a:9e:ce:36:9b: fb:ce:60:08:c3:73:67:66:96:33:0d:ad:5a:5a:55:72:49:e9: ef:7e:66:f4:4f:b8:63:8f:c8:21:66:21:1c:6f:dd:db:91:ed: d5:f1:38:af:e5:fc:5c:74:e9:22:d7:42:61:c7:6f:29:d5:ce: cf:31:b4:0e:99:2d:1e:7c:f9:fd:d2:98:45:af:4b:95:4d:0f: 1e:eb:94:34:d3:ad:c2:7b:a6:57:3e:51:21:57:b3:f1:a9:1a: 12:c4:50:dc:61:ed:d1:3a:2f:af:ef:16:e2:e5:6e:2d:0c:f4: 6f:da:3d:02:78:23:c9:5a:f0:fc:b3:14:72:75:2e:56:88:28: 0f:3c:3b:b9:73:31:2e:2c:9e:14:f2:5b:9f:93:63:71:58:71: 4b:a8:13:a3:ae:10:fd:ef:15:22:f3:b2:71:f7:c5:a8:79:62: 80:69:9c:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoiSd4JzTFIO9Zl0ccVYiyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMzVjMGIyMDkxMzVjMjJjYzgwMDVhN2MyZTIyMmM2M2Mx MzZjYjAwHhcNMjUxMjE2MTkwMDM1WhcNMjUxMjE3MTkwMDM1WjAzMTEwLwYDVQQD EyhhMjRmNDhhMzFiOTFjMzhjZmM0M2Y1MGNkZTI5NWY1N2U4MTAxMTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLurnEPYlFDQN4Hy/8PKmbO7Oqeg 2pG3StRckJq//0lp5zamkvuNyJRK6o/lSRITBYmlk6yNHdclvpyLSIyckeXanMjd T5CsrJ1RHsvnV9XIPXOxw5C38QW0UmKwMNHTi8L4bU5/8yJs3JMel9/Z2yG8bcsf js6Sk1JIGf1IRnAHy+aqyTI9NyV1Ua9i0E662fhdJpaZHciccVbHR4gN4xjMlcCQ b1IMkEQL4uXb7NLirZ2S+GxJ1WUuxhVvY9rqtanaK+jnC0m5c1mFTKpKGTXXwJI+ VqngsxahqSfbS9Y54trkhklj+NvwZ0JERmKYIIbIy68HQdDAP0wgTUK4LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJPSKMbkcOM/EP1DN4pX1foEBEYMB8GA1UdIwQY MBaAFH01wLIJE1wizIAFp8LiIsY8E2ywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlRYQXNna1RYQ0xNZ0FXbnd1SWl4andUYkxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iOWM5MDYtMWU4NS00NTczLThmNjIt ODI1N2Q1MTkyOGE5LzEvZlRYQXNna1RYQ0xNZ0FXbnd1SWl4andUYkxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9iOWM5MDYtMWU4NS00NTczLThmNjItODI1N2Q1MTkyOGE5 LzEvZlRYQXNna1RYQ0xNZ0FXbnd1SWl4andUYkxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWikr9uE /RCK9O8T0e8XX/QVmr5nRqkMs7OPmFm0WLAfNYqp0BoNyw0z52QXyqGVnTVDhPa5 EuOisLGHfJUcaC19NdUnxlVeTvdJPKxPY4TZ8GkBu4qezjab+85gCMNzZ2aWMw2t WlpVcknp735m9E+4Y4/IIWYhHG/d25Ht1fE4r+X8XHTpItdCYcdvKdXOzzG0Dpkt Hnz5/dKYRa9LlU0PHuuUNNOtwnumVz5RIVez8akaEsRQ3GHt0Tovr+8W4uVuLQz0 b9o9AngjyVrw/LMUcnUuVogoDzw7uXMxLiyeFPJbn5NjcVhxS6gTo64Q/e8VIvOy cffFqHligGmcQQ== -----END CERTIFICATE-----Generated at Tue Dec 16 23:02:10 2025 by rpki-client