This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft File: FRRT9ILNp468mWJdgLD_w2YPlfI.mft (raw, json) Hash identifier: joUCcjmkCv6JngB++UP1kbJ8SGT5IRLYHp0VfR0HDvY= Subject key identifier: 2A:D1:F3:89:54:EB:9E:0F:8D:CC:1A:8C:F8:F3:84:6E:89:D0:A6:09 Authority key identifier: 15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2 Certificate issuer: /CN=151453f482cda78ebc99625d80b0ffc3660f95f2 Certificate serial: 019B59765A9EC23CD613F2F7F7263ECEF0F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft Manifest number: 17A6 Signing time: Fri 26 Dec 2025 07:01:27 +0000 Manifest this update: Fri 26 Dec 2025 07:01:27 +0000 Manifest next update: Sat 27 Dec 2025 07:01:27 +0000 Files and hashes: 1: 1-lv-eyLkZwpQLTuJorHeKbcVMK8.roa (hash: tvNysXrHBHPZC5fymq/kQjA0jN47rS/9OLBH7USYU6E=) 2: FRRT9ILNp468mWJdgLD_w2YPlfI.crl (hash: RpvBbLSBUbCDw93aLuuK04Vr3wBjzV/TLFrgxKuiltY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:5a:9e:c2:3c:d6:13:f2:f7:f7:26:3e:ce:f0:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=151453f482cda78ebc99625d80b0ffc3660f95f2 Validity Not Before: Dec 26 07:01:27 2025 GMT Not After : Dec 27 07:01:27 2025 GMT Subject: CN=2ad1f38954eb9e0f8dcc1a8cf8f3846e89d0a609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:33:56:fe:00:e7:5e:f9:95:01:80:77:a1:86: a0:0c:45:66:4f:fa:ac:20:49:41:08:56:09:60:33: 3e:d9:60:c1:4c:85:9c:c2:a1:cb:27:74:3e:d9:80: 35:b6:6d:89:3f:ca:1c:0d:f1:b0:80:fd:44:d3:92: ee:17:d4:b1:55:c5:6e:98:5e:0b:ba:9a:fc:ba:17: aa:3a:1d:ff:eb:50:ba:a0:ce:0d:c0:ca:93:46:07: 3a:2b:3e:c9:3d:27:1a:e7:b6:76:a9:11:7e:84:94: ad:89:9c:9b:9d:c8:f9:a9:6c:fa:8c:10:09:a8:75: e8:c3:0d:44:17:1e:be:58:b5:ed:a8:2d:9c:29:be: 70:b5:ee:e4:da:45:5a:40:8a:74:11:9b:73:f5:e3: eb:ea:a3:da:bd:11:5d:27:3f:39:15:e6:32:4b:9d: 5c:2d:30:42:31:2e:68:84:25:93:13:9f:08:3f:20: e2:84:11:92:1c:80:f6:3c:37:08:41:e4:b2:06:62: 3f:72:93:0b:62:6d:d2:37:68:69:a3:14:e8:7b:03: e1:c4:ae:85:bb:32:b9:bf:77:65:ac:77:5e:c0:f8: 0d:c6:0a:07:50:11:6c:ce:10:b8:40:54:66:86:4f: ec:de:0c:71:48:73:e2:df:6b:09:06:24:f3:29:82: 6b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D1:F3:89:54:EB:9E:0F:8D:CC:1A:8C:F8:F3:84:6E:89:D0:A6:09 X509v3 Authority Key Identifier: keyid:15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:22:3d:da:c5:97:fc:1b:f9:1a:a4:a1:55:58:d9:8b:a1:25: 57:3c:87:67:c1:d2:e7:99:72:19:27:aa:f1:8a:18:25:e8:f3: 46:83:0e:32:7f:80:f5:99:b8:72:8c:f6:a7:29:c9:82:3e:1d: 2f:35:b4:3a:da:2a:15:dc:ce:e0:b2:14:38:f5:f3:08:53:bd: 48:c7:ad:27:f7:6d:45:7c:30:10:b9:30:28:21:34:ab:47:62: 20:47:ac:05:12:0f:e6:f7:71:5b:1c:76:6e:a5:f0:6b:c0:26: b3:59:4b:e8:6e:25:2d:4c:d0:06:9c:d3:b5:39:a2:ce:d2:6c: 24:da:1c:6e:6b:6b:84:a5:b6:9e:a3:aa:74:d0:43:f2:8b:6c: d9:1b:cf:cd:01:6d:c7:fb:08:a4:1f:2e:dd:e2:25:fc:25:20: 5c:e4:24:49:42:d3:8a:2c:47:aa:d6:4a:8e:e4:ef:fc:8f:25: b5:3c:f9:cf:21:88:5b:0d:17:d9:3a:0c:63:30:c5:37:54:77: 0d:bd:69:20:af:a6:aa:7f:78:5a:0f:fb:53:a6:8f:16:e4:63: 15:3b:19:63:6e:49:21:14:7e:3f:8a:19:25:ff:0d:c1:77:d5: 0f:c7:05:e1:2d:60:b8:98:6a:8a:7c:9b:22:a5:e7:40:ef:0b: e2:0e:8f:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdlqewjzWE/L39yY+zvD3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MTQ1M2Y0ODJjZGE3OGViYzk5NjI1ZDgwYjBmZmMzNjYw Zjk1ZjIwHhcNMjUxMjI2MDcwMTI3WhcNMjUxMjI3MDcwMTI3WjAzMTEwLwYDVQQD EygyYWQxZjM4OTU0ZWI5ZTBmOGRjYzFhOGNmOGYzODQ2ZTg5ZDBhNjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TNW/gDnXvmVAYB3oYagDEVmT/qs IElBCFYJYDM+2WDBTIWcwqHLJ3Q+2YA1tm2JP8ocDfGwgP1E05LuF9SxVcVumF4L upr8uheqOh3/61C6oM4NwMqTRgc6Kz7JPSca57Z2qRF+hJStiZybncj5qWz6jBAJ qHXoww1EFx6+WLXtqC2cKb5wte7k2kVaQIp0EZtz9ePr6qPavRFdJz85FeYyS51c LTBCMS5ohCWTE58IPyDihBGSHID2PDcIQeSyBmI/cpMLYm3SN2hpoxToewPhxK6F uzK5v3dlrHdewPgNxgoHUBFszhC4QFRmhk/s3gxxSHPi32sJBiTzKYJrnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrR84lU654PjcwajPjzhG6J0KYJMB8GA1UdIwQY MBaAFBUUU/SCzaeOvJliXYCw/8NmD5XyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC81OWZjZjAtMWQ1Yy00ZWNiLWJmODct M2JjYjhiZjhiYmZlLzEvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC81OWZjZjAtMWQ1Yy00ZWNiLWJmODctM2JjYjhiZjhiYmZl LzEvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJiI92sWX /Bv5GqShVVjZi6ElVzyHZ8HS55lyGSeq8YoYJejzRoMOMn+A9Zm4coz2pynJgj4d LzW0OtoqFdzO4LIUOPXzCFO9SMetJ/dtRXwwELkwKCE0q0diIEesBRIP5vdxWxx2 bqXwa8Ams1lL6G4lLUzQBpzTtTmiztJsJNocbmtrhKW2nqOqdNBD8ots2RvPzQFt x/sIpB8u3eIl/CUgXOQkSULTiixHqtZKjuTv/I8ltTz5zyGIWw0X2ToMYzDFN1R3 Db1pIK+mqn94Wg/7U6aPFuRjFTsZY25JIRR+P4oZJf8NwXfVD8cF4S1guJhqinyb IqXnQO8L4g6PXg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:28 2025 by rpki-client