This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft File: FTCm61I5adqSyIRMDftA7YIL1sQ.mft (raw, json) Hash identifier: FmgYChkAL28fK1ToRbYtC+wCi1FWMjP/pLGDOa01Z00= Subject key identifier: 01:FB:E4:CD:C8:40:45:E3:88:14:46:C1:06:63:4E:79:5F:48:3B:15 Authority key identifier: 15:30:A6:EB:52:39:69:DA:92:C8:84:4C:0D:FB:40:ED:82:0B:D6:C4 Certificate issuer: /CN=1530a6eb523969da92c8844c0dfb40ed820bd6c4 Certificate serial: 019B5975C9E2DF90C241EE60362B5EE882A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft Manifest number: 0D93 Signing time: Fri 26 Dec 2025 07:00:50 +0000 Manifest this update: Fri 26 Dec 2025 07:00:50 +0000 Manifest next update: Sat 27 Dec 2025 07:00:50 +0000 Files and hashes: 1: FTCm61I5adqSyIRMDftA7YIL1sQ.crl (hash: NB3flZ9VbmOY9q7mK545N3Rm5o2Y7V3cfv3GiP1a24Q=) 2: b6c5zm72T5u0EfOAbDE3JGGhXtw.roa (hash: OJH5Z8arKXzNL0yoYBrj6T/yS9sFayIfKvyurf8IbEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.crl rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:c9:e2:df:90:c2:41:ee:60:36:2b:5e:e8:82:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1530a6eb523969da92c8844c0dfb40ed820bd6c4 Validity Not Before: Dec 26 07:00:50 2025 GMT Not After : Dec 27 07:00:50 2025 GMT Subject: CN=01fbe4cdc84045e3881446c106634e795f483b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2f:33:1e:60:e1:60:cd:c9:62:fd:dd:42:7c: 12:42:19:8f:2a:4d:cc:b8:f4:4d:b4:18:01:78:87: 02:ad:2c:64:20:a9:f5:06:97:c5:56:26:70:09:61: 9c:2b:b7:7d:46:a2:b9:23:85:30:66:e1:0f:87:f0: fc:e8:ff:da:95:ce:d6:50:f4:06:45:b6:29:20:bc: b2:a0:a5:f3:65:31:93:6d:8d:c4:94:75:b5:f2:b9: 63:7c:7d:54:4b:61:3c:fc:8f:5c:f5:9a:9f:6b:f4: 26:8b:71:e6:76:ad:a2:e5:b1:bb:58:74:6f:47:f7: 0b:d3:0e:70:a0:02:01:fe:c3:83:47:1f:c8:03:a6: 0d:bc:b5:31:7b:4c:80:e4:82:70:6f:e7:08:b5:22: 9f:85:9d:0b:73:69:19:b8:25:9a:d4:3e:8b:ab:9f: e4:13:34:69:fe:69:19:0e:4c:da:32:72:d4:5c:3c: 6f:82:e7:ee:28:99:69:c3:c8:a6:b3:54:ac:71:83: a7:59:6d:34:cf:5d:78:e5:a6:b3:74:f5:88:f1:fa: 3d:6b:b7:73:ff:6d:03:51:fd:01:59:bb:b2:ad:a5: d4:25:48:df:9b:a1:aa:73:33:54:0b:52:2a:93:8a: 11:0c:ea:e1:6e:45:52:8a:90:0c:b0:5a:88:08:d9: 24:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FB:E4:CD:C8:40:45:E3:88:14:46:C1:06:63:4E:79:5F:48:3B:15 X509v3 Authority Key Identifier: keyid:15:30:A6:EB:52:39:69:DA:92:C8:84:4C:0D:FB:40:ED:82:0B:D6:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:5c:c8:2a:a3:51:be:cb:04:91:1e:2b:af:13:d8:ba:98:87: 1c:88:34:f9:e9:14:21:0c:48:d6:bc:fb:67:77:ff:34:6b:e1: 49:fe:cd:bd:fc:9d:da:ba:a4:f0:74:53:e0:5b:fb:60:0e:28: 8d:18:f6:8c:46:5e:ce:0b:b7:93:a3:03:76:99:e0:18:8b:cf: d3:21:38:bb:15:06:3d:17:a5:f2:30:c4:bc:86:a6:d6:8a:51: fe:b0:eb:72:20:17:ae:dc:3d:27:bb:1e:80:68:a6:68:e8:69: f9:fa:56:f3:92:5a:e4:28:d7:7a:c4:e3:84:65:fc:9a:7c:16: ed:83:af:0a:0b:39:ad:ea:2f:8c:dc:7c:2e:c5:e3:27:79:27: 32:82:91:f9:0d:50:d2:48:4f:d8:84:3c:98:fc:3a:f8:df:28: 15:af:e4:94:df:1f:be:76:e6:35:9e:81:53:77:b8:7f:66:9a: 45:26:26:3a:b7:d6:0b:db:3a:68:4e:32:52:f9:23:c5:37:ea: 99:2e:b5:68:ae:35:98:a0:1a:7e:62:ae:f3:88:73:91:58:5f: 2f:d7:cc:de:99:a2:bf:a9:cb:f8:69:7f:74:b1:60:3b:6a:65: aa:0e:4d:83:18:ce:a7:8d:34:34:1c:2a:27:97:18:62:80:4c: da:ed:2a:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdcni35DCQe5gNite6IKnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MzBhNmViNTIzOTY5ZGE5MmM4ODQ0YzBkZmI0MGVkODIw YmQ2YzQwHhcNMjUxMjI2MDcwMDUwWhcNMjUxMjI3MDcwMDUwWjAzMTEwLwYDVQQD EygwMWZiZTRjZGM4NDA0NWUzODgxNDQ2YzEwNjYzNGU3OTVmNDgzYjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S8zHmDhYM3JYv3dQnwSQhmPKk3M uPRNtBgBeIcCrSxkIKn1BpfFViZwCWGcK7d9RqK5I4UwZuEPh/D86P/alc7WUPQG RbYpILyyoKXzZTGTbY3ElHW18rljfH1US2E8/I9c9Zqfa/Qmi3Hmdq2i5bG7WHRv R/cL0w5woAIB/sODRx/IA6YNvLUxe0yA5IJwb+cItSKfhZ0Lc2kZuCWa1D6Lq5/k EzRp/mkZDkzaMnLUXDxvgufuKJlpw8ims1SscYOnWW00z1145aazdPWI8fo9a7dz /20DUf0BWbuyraXUJUjfm6GqczNUC1Iqk4oRDOrhbkVSipAMsFqICNkkGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAH75M3IQEXjiBRGwQZjTnlfSDsVMB8GA1UdIwQY MBaAFBUwputSOWnaksiETA37QO2CC9bEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlRDbTYxSTVhZHFTeUlSTURmdEE3WUlMMXNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8yZjEwZWUtNzUzMS00ZjIyLWIxYTgt ZDMyM2ZiZGJiNjg3LzEvRlRDbTYxSTVhZHFTeUlSTURmdEE3WUlMMXNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8yZjEwZWUtNzUzMS00ZjIyLWIxYTgtZDMyM2ZiZGJiNjg3 LzEvRlRDbTYxSTVhZHFTeUlSTURmdEE3WUlMMXNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmFzIKqNR vssEkR4rrxPYupiHHIg0+ekUIQxI1rz7Z3f/NGvhSf7Nvfyd2rqk8HRT4Fv7YA4o jRj2jEZezgu3k6MDdpngGIvP0yE4uxUGPRel8jDEvIam1opR/rDrciAXrtw9J7se gGimaOhp+fpW85Ja5CjXesTjhGX8mnwW7YOvCgs5reovjNx8LsXjJ3knMoKR+Q1Q 0khP2IQ8mPw6+N8oFa/klN8fvnbmNZ6BU3e4f2aaRSYmOrfWC9s6aE4yUvkjxTfq mS61aK41mKAafmKu84hzkVhfL9fM3pmiv6nL+Gl/dLFgO2plqg5NgxjOp400NBwq J5cYYoBM2u0qiQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:27 2025 by rpki-client