This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft File: fTXAsgkTXCLMgAWnwuIixjwTbLA.mft (raw, json) Hash identifier: plWzdmDFbpcBXC5ZHWmaUj8CRuxEnYYuuQ2t/XgEi9g= Subject key identifier: C4:B9:25:FF:B4:BE:1A:84:CC:7C:43:DF:1B:22:A8:6C:74:41:0B:4C Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0 Certificate issuer: /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0 Certificate serial: 019B3231F203FD6718E653F32DEBA9625176 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 16:01:32 +0000 Manifest this update: Thu 18 Dec 2025 16:01:32 +0000 Manifest next update: Fri 19 Dec 2025 16:01:32 +0000 Files and hashes: 1: E008mlaZ-98yoVlxucj25N9tnVo.roa (hash: 7h9j4kfENIh6mVCwgI4OQBIMY0MBjmJwFr/fTNDIJFk=) 2: R2-GAax-KT1qCEjDDbUwaoUFHaY.roa (hash: DTrChNvAxi6mH07womaTROYkgqmDr0mKtOiNc7UHhPs=) 3: fTXAsgkTXCLMgAWnwuIixjwTbLA.crl (hash: GEenIM257ZcVgt1K7En0ZLMg7dNwJ+AVq+/rpnvglXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:f2:03:fd:67:18:e6:53:f3:2d:eb:a9:62:51:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0 Validity Not Before: Dec 18 16:01:32 2025 GMT Not After : Dec 19 16:01:32 2025 GMT Subject: CN=c4b925ffb4be1a84cc7c43df1b22a86c74410b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5e:14:e8:97:e1:bd:87:d8:91:c0:00:1a:d0: d6:97:1d:50:a9:bb:ba:0a:cf:91:23:2b:7b:85:42: 74:d4:bb:39:13:e5:2f:db:7e:49:17:6a:44:d4:91: 39:cd:0c:10:55:d6:fd:04:f8:35:80:b8:30:35:ef: 21:3c:5d:7b:3f:03:6b:91:c8:e6:2e:ff:eb:f8:a8: e2:12:67:cb:84:cc:4b:61:15:42:2f:38:19:8a:e8: f6:2b:af:46:71:af:0b:c9:9a:5a:60:38:bd:3e:58: 34:c1:db:fe:ba:6f:76:76:da:39:9b:ca:a7:24:5a: fb:7e:09:ef:1d:6a:42:9e:5d:52:3d:61:1b:99:62: ee:7c:6c:cc:41:b6:17:69:36:8e:05:3f:04:60:ed: d4:60:c2:8c:8d:01:d1:16:8f:7f:db:6b:04:90:a9: ce:22:31:c6:de:ed:26:e9:2f:13:be:7f:df:a3:9c: 35:6f:f9:b3:47:98:97:3f:27:a0:51:e9:19:5c:39: 7d:af:2c:ed:94:35:e3:45:78:8d:37:1b:a8:7c:d8: 42:b3:a3:55:4f:22:83:84:5e:cc:48:64:cb:13:ac: ff:c1:fb:fd:49:6b:fb:e6:b3:c3:d0:0b:f1:8e:9e: 7d:1a:eb:75:22:ab:17:cf:53:20:b6:17:ca:b9:e6: cf:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B9:25:FF:B4:BE:1A:84:CC:7C:43:DF:1B:22:A8:6C:74:41:0B:4C X509v3 Authority Key Identifier: keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:19:44:c0:9a:c8:95:01:4a:94:19:bb:10:dd:95:a6:68:65: b8:a1:c8:97:b3:47:a6:5c:89:9f:d1:57:36:37:fa:a7:c9:b1: 53:ac:2b:3f:6e:5e:d5:91:39:d1:5d:94:9e:0a:43:99:48:8e: 58:06:b6:88:7e:f7:e7:16:79:73:e4:98:3f:7b:a7:17:3b:95: b4:23:ca:48:dc:39:e2:fc:b2:09:ac:b5:d3:6f:31:0b:41:24: 65:f8:6c:ce:88:d6:bd:d7:32:b6:25:4d:f1:23:5d:a1:f7:27: 7c:1e:0a:5a:a7:57:72:c7:e9:44:74:83:37:99:71:af:c9:c8: fd:93:93:77:9c:5b:13:1f:5c:ac:5e:90:ce:bb:ed:fb:7c:92: 65:86:e7:b1:51:7d:7b:eb:e4:32:44:44:08:b0:78:fc:fb:39: 59:81:9d:f0:54:31:9e:62:ab:47:60:21:9a:4e:44:bb:db:1e: 1c:e1:bd:e4:54:8b:cb:47:5d:32:b1:5e:a8:85:d1:43:1b:0d: 0b:63:a9:f2:10:45:32:6c:27:8b:83:f3:02:04:95:a9:9f:04: 02:4a:3d:8d:bf:4f:78:df:9d:d2:18:58:b3:0a:da:52:4e:e0: 84:b6:24:92:53:f4:ea:c9:21:43:6e:9e:50:f6:78:9e:57:6b: 56:c4:60:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMfID/WcY5lPzLeupYlF2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMzVjMGIyMDkxMzVjMjJjYzgwMDVhN2MyZTIyMmM2M2Mx MzZjYjAwHhcNMjUxMjE4MTYwMTMyWhcNMjUxMjE5MTYwMTMyWjAzMTEwLwYDVQQD EyhjNGI5MjVmZmI0YmUxYTg0Y2M3YzQzZGYxYjIyYTg2Yzc0NDEwYjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq14U6JfhvYfYkcAAGtDWlx1Qqbu6 Cs+RIyt7hUJ01Ls5E+Uv235JF2pE1JE5zQwQVdb9BPg1gLgwNe8hPF17PwNrkcjm Lv/r+KjiEmfLhMxLYRVCLzgZiuj2K69Gca8LyZpaYDi9Plg0wdv+um92dto5m8qn JFr7fgnvHWpCnl1SPWEbmWLufGzMQbYXaTaOBT8EYO3UYMKMjQHRFo9/22sEkKnO IjHG3u0m6S8Tvn/fo5w1b/mzR5iXPyegUekZXDl9ryztlDXjRXiNNxuofNhCs6NV TyKDhF7MSGTLE6z/wfv9SWv75rPD0Avxjp59Gut1IqsXz1MgthfKuebPaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMS5Jf+0vhqEzHxD3xsiqGx0QQtMMB8GA1UdIwQY MBaAFH01wLIJE1wizIAFp8LiIsY8E2ywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlRYQXNna1RYQ0xNZ0FXbnd1SWl4andUYkxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iOWM5MDYtMWU4NS00NTczLThmNjIt ODI1N2Q1MTkyOGE5LzEvZlRYQXNna1RYQ0xNZ0FXbnd1SWl4andUYkxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9iOWM5MDYtMWU4NS00NTczLThmNjItODI1N2Q1MTkyOGE5 LzEvZlRYQXNna1RYQ0xNZ0FXbnd1SWl4andUYkxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhlEwJrI lQFKlBm7EN2VpmhluKHIl7NHplyJn9FXNjf6p8mxU6wrP25e1ZE50V2UngpDmUiO WAa2iH735xZ5c+SYP3unFzuVtCPKSNw54vyyCay1028xC0EkZfhszojWvdcytiVN 8SNdofcnfB4KWqdXcsfpRHSDN5lxr8nI/ZOTd5xbEx9crF6Qzrvt+3ySZYbnsVF9 e+vkMkRECLB4/Ps5WYGd8FQxnmKrR2Ahmk5Eu9seHOG95FSLy0ddMrFeqIXRQxsN C2Op8hBFMmwni4PzAgSVqZ8EAko9jb9PeN+d0hhYswraUk7ghLYkklP06skhQ26e UPZ4nldrVsRgkg== -----END CERTIFICATE-----Generated at Fri Dec 19 00:55:39 2025 by rpki-client