This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft File: ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft (raw, json) Hash identifier: Pz5q2nnYEcT3wwKTRNy90WJWFKEfN8yIKrdW1F52l/E= Subject key identifier: 50:F5:7A:CD:97:D5:DC:8C:C5:86:E3:CD:53:96:D3:39:79:B6:D4:BD Authority key identifier: 7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52 Certificate issuer: /CN=7ed77eafdb387afd17574272c9374c8180370f52 Certificate serial: 019B5907C2A8109330EFF4310B286A194BD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft Manifest number: 024B Signing time: Fri 26 Dec 2025 05:00:39 +0000 Manifest this update: Fri 26 Dec 2025 05:00:39 +0000 Manifest next update: Sat 27 Dec 2025 05:00:39 +0000 Files and hashes: 1: ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl (hash: n7yTCOXXNtwjGPorJPUOlym3SovVNq9aqfW6EZhTkFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:07:c2:a8:10:93:30:ef:f4:31:0b:28:6a:19:4b:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ed77eafdb387afd17574272c9374c8180370f52 Validity Not Before: Dec 26 05:00:39 2025 GMT Not After : Dec 27 05:00:39 2025 GMT Subject: CN=50f57acd97d5dc8cc586e3cd5396d33979b6d4bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:61:b7:85:4c:17:e9:fe:90:fa:51:9d:79:ac: 64:c9:c9:36:82:11:7f:9c:09:5f:90:c2:a3:10:e5: c5:0f:f5:12:14:b8:c4:0a:86:65:00:e0:6b:c9:6d: a8:53:2e:90:49:ab:e6:f0:7c:c8:32:4f:98:83:70: fc:1a:84:80:3d:27:f5:3d:d2:dd:e2:b8:66:a7:71: 5d:0e:32:5e:2d:d0:29:c8:bb:e2:b5:26:b9:52:6d: 5f:bb:3b:4e:b9:e4:67:c0:d8:f4:e0:32:ee:b0:5d: 0c:81:78:41:4f:5c:db:ba:7b:50:64:81:e9:b2:5e: c4:c6:29:45:b1:bb:0e:08:e4:d4:77:34:0e:26:b4: 51:1d:63:de:ff:8f:fb:e6:a7:55:a5:e7:d0:8e:1e: 92:a7:57:e2:26:22:a4:7f:a9:5f:c0:d0:e9:b5:58: 04:57:52:ff:7d:dc:c9:85:5c:4d:14:76:0d:83:c6: 21:d3:f7:09:49:88:24:64:61:42:2e:ac:63:3d:9b: f1:e5:e7:64:88:c4:90:55:3c:0f:88:ad:71:d8:66: 76:c9:9c:c4:03:59:17:aa:7a:27:9b:53:96:7b:13: c0:ed:3a:f2:3d:7c:16:30:37:ee:c3:21:8a:b9:6a: da:d7:f0:c4:f0:db:ed:c3:d7:45:b8:36:47:cb:48: b8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F5:7A:CD:97:D5:DC:8C:C5:86:E3:CD:53:96:D3:39:79:B6:D4:BD X509v3 Authority Key Identifier: keyid:7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:55:32:8f:d8:92:21:6d:7c:f0:3f:33:0f:72:6c:4d:32:79: 09:1f:81:17:70:49:2c:42:76:80:2a:6f:50:c5:0c:a7:cb:78: ba:d7:fe:aa:11:87:a7:fe:39:66:14:e6:f9:45:84:9a:15:4d: a7:77:55:cc:9d:5a:0d:ea:07:2e:1f:52:4a:fa:54:91:f8:30: 12:ce:3c:5c:a1:0a:84:ab:ef:09:69:b1:bd:3e:ef:9d:b2:cc: 00:b2:53:7f:3b:4c:26:32:b9:04:c4:90:24:a2:8c:23:cf:0f: 77:43:17:5c:87:4b:e0:1e:4e:a1:44:79:9c:eb:d4:db:78:2a: eb:68:e5:88:6c:09:c0:17:c5:88:c8:c1:6f:11:20:49:4d:95: 58:a6:0c:56:96:18:52:2f:33:8a:ae:ca:f7:33:c5:ca:31:43: 2c:fb:89:df:6f:ce:e3:29:58:9a:8e:f7:44:6b:88:24:71:0e: 3a:4b:25:57:ae:8b:d7:57:d9:3d:b5:2d:dd:86:3b:cd:c4:58: df:4e:8a:0d:e4:b8:46:a5:b9:d6:cd:01:98:ad:b4:65:7b:dd: 31:b0:74:33:fd:07:a2:8b:8f:f4:9e:9f:9f:43:f3:fb:0c:2a: 67:dd:b1:a9:81:ff:72:1c:21:f0:2d:50:a7:c1:2a:b9:f5:31: 7f:57:ed:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZB8KoEJMw7/QxCyhqGUvZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlZDc3ZWFmZGIzODdhZmQxNzU3NDI3MmM5Mzc0YzgxODAz NzBmNTIwHhcNMjUxMjI2MDUwMDM5WhcNMjUxMjI3MDUwMDM5WjAzMTEwLwYDVQQD Eyg1MGY1N2FjZDk3ZDVkYzhjYzU4NmUzY2Q1Mzk2ZDMzOTc5YjZkNGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGG3hUwX6f6Q+lGdeaxkyck2ghF/ nAlfkMKjEOXFD/USFLjECoZlAOBryW2oUy6QSavm8HzIMk+Yg3D8GoSAPSf1PdLd 4rhmp3FdDjJeLdApyLvitSa5Um1fuztOueRnwNj04DLusF0MgXhBT1zbuntQZIHp sl7ExilFsbsOCOTUdzQOJrRRHWPe/4/75qdVpefQjh6Sp1fiJiKkf6lfwNDptVgE V1L/fdzJhVxNFHYNg8Yh0/cJSYgkZGFCLqxjPZvx5edkiMSQVTwPiK1x2GZ2yZzE A1kXqnonm1OWexPA7TryPXwWMDfuwyGKuWra1/DE8Nvtw9dFuDZHy0i4awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFD1es2X1dyMxYbjzVOW0zl5ttS9MB8GA1UdIwQY MBaAFH7Xfq/bOHr9F1dCcsk3TIGANw9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnRkLXI5czRldjBYVjBKeXlUZE1nWUEzRDFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYmM5ZTItNTBmNi00NjVhLTllY2Qt YmM0MDE3Yzk0NTliLzEvZnRkLXI5czRldjBYVjBKeXlUZE1nWUEzRDFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iYmM5ZTItNTBmNi00NjVhLTllY2QtYmM0MDE3Yzk0NTli LzEvZnRkLXI5czRldjBYVjBKeXlUZE1nWUEzRDFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL1Uyj9iS IW188D8zD3JsTTJ5CR+BF3BJLEJ2gCpvUMUMp8t4utf+qhGHp/45ZhTm+UWEmhVN p3dVzJ1aDeoHLh9SSvpUkfgwEs48XKEKhKvvCWmxvT7vnbLMALJTfztMJjK5BMSQ JKKMI88Pd0MXXIdL4B5OoUR5nOvU23gq62jliGwJwBfFiMjBbxEgSU2VWKYMVpYY Ui8ziq7K9zPFyjFDLPuJ32/O4ylYmo73RGuIJHEOOkslV66L11fZPbUt3YY7zcRY 306KDeS4RqW51s0BmK20ZXvdMbB0M/0HoouP9J6fn0Pz+wwqZ92xqYH/chwh8C1Q p8EqufUxf1ftuw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:12 2025 by rpki-client