This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft File: FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft (raw, json) Hash identifier: FcrbWmxZx89W9sa2dUHYh1GpZWNPeQVcUTMcBW3irsw= Subject key identifier: ED:E2:FF:30:73:B1:15:A5:1E:02:09:0E:D1:14:F3:59:79:39:FB:89 Authority key identifier: 15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C Certificate issuer: /CN=153d757b77067befd9446694748ad2b04e97b38c Certificate serial: 019B1A29888A2E9291D7E5CB1161E9ABA59B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 00:01:28 +0000 Manifest this update: Sun 14 Dec 2025 00:01:28 +0000 Manifest next update: Mon 15 Dec 2025 00:01:28 +0000 Files and hashes: 1: FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl (hash: dzYm9SDuWvcl/HL6TPJXLY7FD8sYHyJq4Y+tr4gkENQ=) 2: r7lFXPa807MfacPLjTifqcio5eE.roa (hash: uWVAVnCuqwCuf5rQTJ4k2G3R8ObiUvivLPLiht6CJGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:88:8a:2e:92:91:d7:e5:cb:11:61:e9:ab:a5:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153d757b77067befd9446694748ad2b04e97b38c Validity Not Before: Dec 14 00:01:28 2025 GMT Not After : Dec 15 00:01:28 2025 GMT Subject: CN=ede2ff3073b115a51e02090ed114f3597939fb89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:48:28:d0:d0:35:96:0e:ae:97:8b:d8:b7:7b: 1a:f0:0d:22:43:27:8f:f6:25:d6:d1:08:a3:bc:e2: ca:1f:76:6f:ac:f0:47:dd:6a:8c:de:2f:92:d7:a9: ca:2f:02:31:d7:c4:ef:90:35:22:bf:ae:16:8b:6c: 4c:9c:fc:5c:c9:90:46:2e:64:26:07:a3:80:f6:85: 14:76:dc:4c:bd:ce:71:1d:d0:2c:ed:be:44:2b:3b: d3:59:71:07:80:a5:5f:de:ca:95:4d:5c:84:c2:f2: 23:18:36:1b:4e:b3:2f:f1:46:e2:06:4e:f4:7c:0d: 56:80:5a:5d:20:14:7f:4d:ea:68:21:53:b1:8f:2d: 8e:75:96:31:88:3c:5f:a1:48:5b:43:9b:6d:50:3f: 3c:8d:72:52:51:9a:71:3d:00:b1:c0:4b:f3:c2:10: 89:c9:a2:06:4e:8b:31:db:3c:6e:0f:40:67:5f:29: 96:d2:a0:4d:a5:6b:f1:8b:0c:9a:83:4d:22:ed:dd: 48:a2:f4:1e:35:55:de:df:4d:61:a4:6e:b2:97:1e: c9:a6:f8:51:56:b1:3c:2c:7a:5f:86:71:80:07:2b: b9:1f:77:c5:8f:c2:ab:c1:19:c8:13:ff:0f:9e:6a: 05:b0:39:a8:f6:66:55:e8:64:94:03:a1:db:54:6a: a2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E2:FF:30:73:B1:15:A5:1E:02:09:0E:D1:14:F3:59:79:39:FB:89 X509v3 Authority Key Identifier: keyid:15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:bc:43:f6:85:d4:c2:e3:1e:b1:73:ab:64:25:4d:03:1c:66: 0c:a6:0d:e7:b5:fe:2d:83:76:a1:93:4d:82:53:12:1b:be:46: 81:75:5f:de:a3:87:d5:50:6c:e4:de:dd:db:d6:41:a2:a3:48: ac:f4:9f:7a:e1:f7:d1:8e:2d:71:d1:83:06:b1:1e:9b:38:9d: f0:0b:5b:18:82:73:a4:b8:b2:4f:a8:5a:6c:ac:df:a7:8f:8c: 07:84:aa:3c:85:6b:d3:5f:8a:b2:ee:05:66:f9:78:5b:47:da: bb:5a:0b:ce:80:8d:22:0c:34:ea:b9:e5:f1:54:1a:05:e4:3d: e9:eb:45:2e:ad:14:74:c4:08:18:dc:73:c2:8c:77:a9:6e:7f: 49:4f:6e:64:00:7e:97:01:52:a6:68:88:05:2d:50:bb:23:8a: 13:4d:bd:ec:30:c4:66:22:19:41:3f:c8:4f:73:01:fc:73:1c: 91:52:75:83:b2:ca:34:a0:a7:f8:d7:f5:d5:2d:1e:30:0e:94: 0f:70:5b:10:7e:ee:bd:c3:32:97:ab:91:d3:f9:3e:dd:ad:6d: 1a:c1:b8:9a:29:b8:fc:45:5a:58:4c:03:dd:39:67:21:90:58: f0:10:c8:97:2f:68:96:8b:f3:88:b6:a6:59:4a:b4:9b:18:91: 54:b4:c2:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKYiKLpKR1+XLEWHpq6WbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1M2Q3NTdiNzcwNjdiZWZkOTQ0NjY5NDc0OGFkMmIwNGU5 N2IzOGMwHhcNMjUxMjE0MDAwMTI4WhcNMjUxMjE1MDAwMTI4WjAzMTEwLwYDVQQD EyhlZGUyZmYzMDczYjExNWE1MWUwMjA5MGVkMTE0ZjM1OTc5MzlmYjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0go0NA1lg6ul4vYt3sa8A0iQyeP 9iXW0QijvOLKH3ZvrPBH3WqM3i+S16nKLwIx18TvkDUiv64Wi2xMnPxcyZBGLmQm B6OA9oUUdtxMvc5xHdAs7b5EKzvTWXEHgKVf3sqVTVyEwvIjGDYbTrMv8UbiBk70 fA1WgFpdIBR/TepoIVOxjy2OdZYxiDxfoUhbQ5ttUD88jXJSUZpxPQCxwEvzwhCJ yaIGTosx2zxuD0BnXymW0qBNpWvxiwyag00i7d1IovQeNVXe301hpG6ylx7JpvhR VrE8LHpfhnGAByu5H3fFj8KrwRnIE/8PnmoFsDmo9mZV6GSUA6HbVGqibwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3i/zBzsRWlHgIJDtEU81l5OfuJMB8GA1UdIwQY MBaAFBU9dXt3Bnvv2URmlHSK0rBOl7OMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlQxMWUzY0dlLV9aUkdhVWRJclNzRTZYczR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi84YTk0YjktNzBmZS00NmZmLWE0ZTYt MDE5ZTFmODQwM2RkLzEvRlQxMWUzY0dlLV9aUkdhVWRJclNzRTZYczR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi84YTk0YjktNzBmZS00NmZmLWE0ZTYtMDE5ZTFmODQwM2Rk LzEvRlQxMWUzY0dlLV9aUkdhVWRJclNzRTZYczR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7xD9oXU wuMesXOrZCVNAxxmDKYN57X+LYN2oZNNglMSG75GgXVf3qOH1VBs5N7d29ZBoqNI rPSfeuH30Y4tcdGDBrEemzid8AtbGIJzpLiyT6habKzfp4+MB4SqPIVr01+Ksu4F Zvl4W0fau1oLzoCNIgw06rnl8VQaBeQ96etFLq0UdMQIGNxzwox3qW5/SU9uZAB+ lwFSpmiIBS1QuyOKE0297DDEZiIZQT/IT3MB/HMckVJ1g7LKNKCn+Nf11S0eMA6U D3BbEH7uvcMyl6uR0/k+3a1tGsG4mim4/EVaWEwD3TlnIZBY8BDIly9olovziLam WUq0mxiRVLTCTA== -----END CERTIFICATE-----Generated at Sun Dec 14 01:57:04 2025 by rpki-client