This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft File: FtQJAygYpijNKyg4OALXfnSUolI.mft (raw, json) Hash identifier: d1kNnuepChSp6VL+zoxe7ROOxbo8JMhNj8OCBhoiS4g= Subject key identifier: 4E:22:6F:33:91:CC:B0:5D:90:6F:87:D4:3D:DE:B1:30:A0:6B:7E:E2 Authority key identifier: 16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52 Certificate issuer: /CN=16d409032818a628cd2b28383802d77e7494a252 Certificate serial: 019B2A40C7FBBAD9DFD5BABD6BB35173ED41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft Manifest number: 0140 Signing time: Wed 17 Dec 2025 03:00:47 +0000 Manifest this update: Wed 17 Dec 2025 03:00:47 +0000 Manifest next update: Thu 18 Dec 2025 03:00:47 +0000 Files and hashes: 1: FtQJAygYpijNKyg4OALXfnSUolI.crl (hash: 2Kfb0ciyht7ENNradNB5DJSplOwWDclp30Jx5/fgvvE=) 2: X-F4EV-F2ag_5pD7ZZ_5QP_Tg_k.roa (hash: 1FxaidkVHdKLmVU/qFLpds7lpUrV/YLVa1N6wBCOD8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 03:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:40:c7:fb:ba:d9:df:d5:ba:bd:6b:b3:51:73:ed:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16d409032818a628cd2b28383802d77e7494a252 Validity Not Before: Dec 17 03:00:47 2025 GMT Not After : Dec 18 03:00:47 2025 GMT Subject: CN=4e226f3391ccb05d906f87d43ddeb130a06b7ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:32:7a:e6:a0:8c:0e:6e:62:25:20:cd:82:e8: 20:0f:cd:d7:fc:6a:9a:23:53:d0:8d:aa:a2:c4:44: 40:69:e9:6e:0d:88:29:3b:c4:3b:72:db:77:d9:8f: 10:87:60:f5:1a:90:97:ba:e9:d7:08:06:fb:13:8b: 63:49:2d:57:52:2e:f4:b0:b2:d7:70:3c:c2:73:f1: 12:f2:12:b0:0d:4f:57:66:4c:7b:6d:89:c8:f1:32: d1:42:d0:33:c9:ac:ba:1a:eb:0d:6e:30:39:4b:79: b9:c8:a8:c3:f8:06:3c:70:15:fe:73:4e:24:be:9d: 4e:8e:69:7e:50:90:7f:11:e9:bb:e8:9e:d6:8f:22: 6b:ec:14:21:0e:3a:12:fb:5b:64:fa:08:57:1e:54: 8f:d0:16:9b:2a:a9:16:34:32:fc:fd:1d:f4:14:f0: ac:ca:bb:a1:ea:5e:81:73:f3:df:5c:6f:1a:e2:92: 40:e7:b3:29:52:a7:6c:10:94:4a:87:9c:97:ae:5f: ef:fd:6d:18:61:d0:bd:c8:d6:77:e1:de:5a:e7:8f: ff:05:72:af:92:31:f7:c6:6d:08:4c:a6:48:86:b4: 4c:3d:c1:79:98:fc:f6:f4:1d:29:47:18:ac:f9:df: 76:3d:dc:4c:e6:12:61:84:68:49:7d:27:0d:13:6d: 62:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:22:6F:33:91:CC:B0:5D:90:6F:87:D4:3D:DE:B1:30:A0:6B:7E:E2 X509v3 Authority Key Identifier: keyid:16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6f:e1:aa:a7:87:e8:c7:49:ca:bc:fd:14:9f:f3:e0:69:16: d0:f7:55:82:67:4d:53:fb:87:b0:de:36:40:dc:de:63:7a:5a: 04:ef:e8:01:56:86:c5:cc:ad:cc:51:cd:79:3d:46:62:14:85: 46:45:49:3e:0d:35:b6:de:1a:3c:d2:e2:a3:0b:64:fc:60:10: f1:39:50:a7:62:cc:a6:5d:87:8e:3d:1f:8c:cb:a7:a3:72:23: d5:b1:3a:47:f7:df:fc:f8:42:e3:f8:72:ed:83:31:9a:7b:fa: a3:31:da:5a:9f:99:9d:dc:a4:ae:4c:b2:f0:9b:62:29:1a:b3: 43:b1:58:50:49:ce:a1:5b:5b:95:2b:9f:2a:22:6f:5f:f4:9a: bf:e8:cc:56:77:6f:ae:c4:a3:c1:d9:7a:d8:83:46:cc:49:5e: 02:84:21:c9:1f:93:23:6a:3c:25:b4:7b:e8:ca:5c:53:e7:bb: 79:ea:6c:c1:ee:af:83:2e:2a:03:81:17:6c:8b:93:0f:ff:b4: c2:fb:55:cb:b3:09:45:31:13:68:79:cc:8e:8a:56:e1:10:50: 35:d6:66:14:15:4c:bf:a6:4f:80:3a:06:91:35:35:e8:68:9a: 32:da:2a:6b:ab:fd:66:7c:2c:1c:9b:86:88:b4:f2:6c:25:81: da:9e:5f:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqQMf7utnf1bq9a7NRc+1BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZDQwOTAzMjgxOGE2MjhjZDJiMjgzODM4MDJkNzdlNzQ5 NGEyNTIwHhcNMjUxMjE3MDMwMDQ3WhcNMjUxMjE4MDMwMDQ3WjAzMTEwLwYDVQQD Eyg0ZTIyNmYzMzkxY2NiMDVkOTA2Zjg3ZDQzZGRlYjEzMGEwNmI3ZWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zJ65qCMDm5iJSDNguggD83X/Gqa I1PQjaqixERAaeluDYgpO8Q7ctt32Y8Qh2D1GpCXuunXCAb7E4tjSS1XUi70sLLX cDzCc/ES8hKwDU9XZkx7bYnI8TLRQtAzyay6GusNbjA5S3m5yKjD+AY8cBX+c04k vp1Ojml+UJB/Eem76J7WjyJr7BQhDjoS+1tk+ghXHlSP0BabKqkWNDL8/R30FPCs yruh6l6Bc/PfXG8a4pJA57MpUqdsEJRKh5yXrl/v/W0YYdC9yNZ34d5a54//BXKv kjH3xm0ITKZIhrRMPcF5mPz29B0pRxis+d92PdxM5hJhhGhJfScNE21ilQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4ibzORzLBdkG+H1D3esTCga37iMB8GA1UdIwQY MBaAFBbUCQMoGKYozSsoODgC1350lKJSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ODYzNzUtYmM4ZC00MDY1LTgzZGMt MGFlYjlkMzc3ODdlLzEvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS81ODYzNzUtYmM4ZC00MDY1LTgzZGMtMGFlYjlkMzc3ODdl LzEvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmm/hqqeH 6MdJyrz9FJ/z4GkW0PdVgmdNU/uHsN42QNzeY3paBO/oAVaGxcytzFHNeT1GYhSF RkVJPg01tt4aPNLiowtk/GAQ8TlQp2LMpl2Hjj0fjMuno3Ij1bE6R/ff/PhC4/hy 7YMxmnv6ozHaWp+Zndykrkyy8JtiKRqzQ7FYUEnOoVtblSufKiJvX/Sav+jMVndv rsSjwdl62INGzEleAoQhyR+TI2o8JbR76MpcU+e7eepswe6vgy4qA4EXbIuTD/+0 wvtVy7MJRTETaHnMjopW4RBQNdZmFBVMv6ZPgDoGkTU16GiaMtoqa6v9ZnwsHJuG iLTybCWB2p5fLg== -----END CERTIFICATE-----Generated at Wed Dec 17 10:42:38 2025 by rpki-client