This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft File: FTtGcCg5p5W6uo2NFezcymN-M2w.mft (raw, json) Hash identifier: Sz/onWBp7Y1X4BzjpxUBWVv8SAofox7+9C13eIB/DZ0= Subject key identifier: 62:DA:32:43:8F:6A:BB:97:87:A7:09:28:11:61:37:B1:1A:E9:53:64 Authority key identifier: 15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C Certificate issuer: /CN=153b46702839a795baba8d8d15ecdcca637e336c Certificate serial: 019B383339964058E81ACADAFEB15B45B3EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 20:00:39 +0000 Manifest this update: Fri 19 Dec 2025 20:00:39 +0000 Manifest next update: Sat 20 Dec 2025 20:00:39 +0000 Files and hashes: 1: 7LfdpybXjkO1zp9O6nzu1fNfc88.roa (hash: QAPjHN/iZlfmzhgOwFaV5zDBEKY0r/wVKeB2R6gKrqA=) 2: FTtGcCg5p5W6uo2NFezcymN-M2w.crl (hash: htASWKM+xQCIhuOwGZHqkeT8nRYYGLmdRC6/VShuVIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:39:96:40:58:e8:1a:ca:da:fe:b1:5b:45:b3:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153b46702839a795baba8d8d15ecdcca637e336c Validity Not Before: Dec 19 20:00:39 2025 GMT Not After : Dec 20 20:00:39 2025 GMT Subject: CN=62da32438f6abb9787a70928116137b11ae95364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:89:b7:5b:7a:74:c6:31:c2:83:fe:fa:27: 3b:7d:d7:d1:88:5f:9c:30:a4:7f:26:cc:68:fb:e6: e9:90:4f:96:fb:bc:91:ed:c4:67:86:6a:a0:95:aa: d1:62:3d:df:48:85:0b:64:8c:a7:a9:32:1d:99:a1: 91:e7:28:8f:6f:68:14:b9:9f:73:45:86:c3:6c:7b: 0d:b2:a5:b4:ce:cf:bf:6c:69:78:f2:e7:ec:9c:63: 15:53:fe:a6:da:08:3c:fa:3f:e7:ba:45:bc:b7:d1: c3:0d:91:79:e8:3c:42:0c:4a:14:38:85:1e:2a:31: 41:c8:c7:9e:27:4b:4e:c0:c4:eb:b0:5c:16:bd:6f: a4:16:43:d7:a6:9e:0d:6c:a9:58:81:01:cb:e9:c2: 68:8f:a0:96:54:d5:82:0b:7d:b5:c4:a8:8a:11:74: 5e:c9:d9:5d:c9:c4:f0:90:d7:76:03:91:64:33:0f: bb:5d:d6:0d:22:ad:a0:99:18:e6:26:6b:93:a0:68: 85:e1:ca:8b:2d:7a:42:a0:d0:5d:ad:3a:ff:c7:7c: 29:0e:d3:08:08:15:42:bf:34:6f:11:f0:e0:34:71: 00:bd:8d:22:0a:8a:1d:da:d1:f9:23:4c:91:82:41: ed:39:5b:0a:f7:25:c5:ae:e8:0f:1e:92:53:20:c1: 33:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:DA:32:43:8F:6A:BB:97:87:A7:09:28:11:61:37:B1:1A:E9:53:64 X509v3 Authority Key Identifier: keyid:15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:77:fc:fb:50:f1:de:22:88:b0:a4:c3:f1:10:3d:a8:1d:71: 0f:3f:72:b5:c2:38:da:9e:92:79:7a:8e:cb:f9:46:09:3a:61: 7e:44:13:cd:b7:1c:79:7e:6e:6e:f7:21:8c:f6:dc:89:4c:b6: a4:12:be:bc:1a:d7:dd:30:ef:f8:8b:cb:28:fe:de:66:5c:35: f0:57:e3:59:3f:f7:23:9a:75:d9:43:a7:2a:35:44:20:85:1b: d2:64:c1:cf:18:4b:48:cc:a6:cf:1a:38:a5:30:d1:62:d4:d6: 23:3f:67:2e:d4:4c:af:4b:f2:95:5d:39:9f:83:9d:d4:5f:12: 99:91:0e:76:cc:6c:32:79:c3:c6:eb:ff:ea:cb:6e:5c:9b:07: 8b:f4:e9:7d:c1:5a:95:b4:83:3a:bc:f3:5f:40:98:b9:14:85: cf:db:6a:37:f0:e2:4c:9e:94:0f:d3:e2:42:7f:c8:34:03:1f: d8:e7:ce:02:27:30:76:03:ff:59:af:bd:62:84:5b:79:b1:85: 84:30:0c:d0:15:a0:b5:52:96:00:d3:46:91:a8:a4:93:5c:32: ff:c4:a7:3b:1d:b5:71:b1:6d:74:4f:d9:a3:65:79:b4:5f:a9: f6:39:42:dc:ce:ac:a3:23:4b:2b:76:e2:ba:90:bf:3a:a6:d5: 7d:c8:60:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4MzmWQFjoGsra/rFbRbPvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1M2I0NjcwMjgzOWE3OTViYWJhOGQ4ZDE1ZWNkY2NhNjM3 ZTMzNmMwHhcNMjUxMjE5MjAwMDM5WhcNMjUxMjIwMjAwMDM5WjAzMTEwLwYDVQQD Eyg2MmRhMzI0MzhmNmFiYjk3ODdhNzA5MjgxMTYxMzdiMTFhZTk1MzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ6Jt1t6dMYxwoP++ic7fdfRiF+c MKR/Jsxo++bpkE+W+7yR7cRnhmqglarRYj3fSIULZIynqTIdmaGR5yiPb2gUuZ9z RYbDbHsNsqW0zs+/bGl48ufsnGMVU/6m2gg8+j/nukW8t9HDDZF56DxCDEoUOIUe KjFByMeeJ0tOwMTrsFwWvW+kFkPXpp4NbKlYgQHL6cJoj6CWVNWCC321xKiKEXRe ydldycTwkNd2A5FkMw+7XdYNIq2gmRjmJmuToGiF4cqLLXpCoNBdrTr/x3wpDtMI CBVCvzRvEfDgNHEAvY0iCood2tH5I0yRgkHtOVsK9yXFrugPHpJTIMEzrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLaMkOParuXh6cJKBFhN7Ea6VNkMB8GA1UdIwQY MBaAFBU7RnAoOaeVurqNjRXs3MpjfjNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlR0R2NDZzVwNVc2dW8yTkZlemN5bU4tTTJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNTZkN2YtMWI3OC00NDUzLTgxZTct YmE1NjM3OGE2NDc2LzEvRlR0R2NDZzVwNVc2dW8yTkZlemN5bU4tTTJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9mNTZkN2YtMWI3OC00NDUzLTgxZTctYmE1NjM3OGE2NDc2 LzEvRlR0R2NDZzVwNVc2dW8yTkZlemN5bU4tTTJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHf8+1Dx 3iKIsKTD8RA9qB1xDz9ytcI42p6SeXqOy/lGCTphfkQTzbcceX5ubvchjPbciUy2 pBK+vBrX3TDv+IvLKP7eZlw18FfjWT/3I5p12UOnKjVEIIUb0mTBzxhLSMymzxo4 pTDRYtTWIz9nLtRMr0vylV05n4Od1F8SmZEOdsxsMnnDxuv/6stuXJsHi/TpfcFa lbSDOrzzX0CYuRSFz9tqN/DiTJ6UD9PiQn/INAMf2OfOAicwdgP/Wa+9YoRbebGF hDAM0BWgtVKWANNGkaikk1wy/8SnOx21cbFtdE/Zo2V5tF+p9jlC3M6soyNLK3bi upC/OqbVfchgHg== -----END CERTIFICATE-----Generated at Sat Dec 20 00:19:33 2025 by rpki-client