This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft File: ftUAFk8HOBNbmuwE44_CTLkOD18.mft (raw, json) Hash identifier: KNSLvAqg9NLw67dr/aN92sh2xFH0hqsv5AGWUxWmFjM= Subject key identifier: FF:15:AA:FC:A5:CD:4A:78:AE:D6:6F:3D:42:2D:78:57:6D:E1:4F:63 Authority key identifier: 7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F Certificate issuer: /CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f Certificate serial: 019B3720B08DE60986C0B4141EAEDD41AB9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft Manifest number: 14D4 Signing time: Fri 19 Dec 2025 15:00:47 +0000 Manifest this update: Fri 19 Dec 2025 15:00:47 +0000 Manifest next update: Sat 20 Dec 2025 15:00:47 +0000 Files and hashes: 1: UpOdGPWJK0meS7Gh3_WX8w49CRw.roa (hash: Xe80koGnCIpEItaZAU3CBuIZI63oxsrazQvG2gOmx4M=) 2: YPpoO-eihLVjR6QWGuwlFSalldc.roa (hash: I2Yas9YEEPm9KZs3KYRfc07hbQQR2Q6lK14KBojWMnk=) 3: ftUAFk8HOBNbmuwE44_CTLkOD18.crl (hash: VIj936JZZMeuH8PXZIb2a0Uirk+lBjSFYWTCpLbvp/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:b0:8d:e6:09:86:c0:b4:14:1e:ae:dd:41:ab:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f Validity Not Before: Dec 19 15:00:47 2025 GMT Not After : Dec 20 15:00:47 2025 GMT Subject: CN=ff15aafca5cd4a78aed66f3d422d78576de14f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:53:5c:17:52:d4:25:25:1e:d8:50:18:d7:8c: 9b:27:e3:17:bc:26:05:fd:0b:44:63:de:06:4f:1f: 9e:0d:be:4e:2f:c9:2c:6d:d8:c7:c8:5f:7d:30:dc: 80:e3:07:26:cb:36:4e:1c:c8:79:e2:1b:83:b8:86: 02:a9:0b:47:a6:cd:1b:a1:ed:3f:25:67:84:c0:d3: 35:a6:05:07:da:86:8b:eb:c3:40:bc:5c:f3:86:b2: c2:20:ec:86:d3:33:e6:6c:3c:58:94:00:c5:2d:80: 00:d5:f7:d0:4e:e0:8b:1b:cb:88:66:21:d1:5f:1c: e6:a7:98:89:77:8c:e3:b3:b3:6b:86:dd:f9:f9:93: e6:04:75:77:68:3d:f4:9d:4b:45:09:8b:fb:17:50: ca:4d:00:d0:8e:7e:ad:4e:98:82:a0:51:63:40:e8: 56:82:ca:42:6a:65:9a:8a:48:90:34:d8:40:65:81: cb:fc:cd:4f:7b:31:75:93:cb:19:a1:4f:c2:b2:af: 66:c0:29:eb:38:9f:23:ef:a3:6c:0a:9a:62:24:33: fb:00:76:7f:6b:14:d8:5f:b6:be:e0:47:66:e6:ec: ec:79:4d:db:d5:3c:c7:8e:58:91:cf:a3:52:1c:a6: 62:5b:ef:3c:1b:fe:7e:3f:5c:b5:12:e4:df:d0:18: 1b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:15:AA:FC:A5:CD:4A:78:AE:D6:6F:3D:42:2D:78:57:6D:E1:4F:63 X509v3 Authority Key Identifier: keyid:7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e3:be:8c:03:ab:10:48:1d:d2:7c:50:a9:f1:59:2d:fd:07: 79:90:f8:d2:77:e9:4d:ec:e6:7f:f3:55:b8:88:4a:b1:e5:36: fc:62:4a:42:11:7f:98:62:fc:c9:5a:ef:ec:d9:f9:bb:ca:41: 68:b3:57:d4:c7:e9:1d:66:07:d4:af:91:9c:8c:1b:c4:08:81: d2:82:bd:f2:7d:fc:fd:b5:db:36:cf:2f:60:0a:27:9c:e1:25: 52:4d:13:00:f6:3f:a3:a6:ac:7b:35:42:f5:cf:96:f8:01:b3: bd:63:79:1b:f5:a2:2a:6f:58:6b:0c:b8:ae:57:55:59:38:5d: cd:29:35:37:c6:02:45:75:78:59:49:ed:8f:4f:35:bf:cc:21: a9:ae:50:12:43:e7:6d:1a:fc:2a:5d:f0:ac:4f:11:e8:a9:5e: 67:37:86:f7:54:47:d9:e6:7e:31:2f:79:66:ff:06:4d:6a:fe: e3:19:a6:f9:ef:21:a2:ef:92:ae:bf:81:03:00:c5:57:ad:17: b1:e3:e6:13:e4:47:dc:70:47:d3:40:83:df:95:08:4a:45:23: 59:fc:a4:fe:0f:70:da:ea:72:26:39:2c:d6:5e:7e:40:04:ac: 21:c4:65:74:1f:37:3f:56:5c:4b:38:d3:3d:81:ec:1d:8f:f4: a7:d9:79:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3ILCN5gmGwLQUHq7dQaucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlZDUwMDE2NGYwNzM4MTM1YjlhZWMwNGUzOGZjMjRjYjkw ZTBmNWYwHhcNMjUxMjE5MTUwMDQ3WhcNMjUxMjIwMTUwMDQ3WjAzMTEwLwYDVQQD EyhmZjE1YWFmY2E1Y2Q0YTc4YWVkNjZmM2Q0MjJkNzg1NzZkZTE0ZjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulNcF1LUJSUe2FAY14ybJ+MXvCYF /QtEY94GTx+eDb5OL8ksbdjHyF99MNyA4wcmyzZOHMh54huDuIYCqQtHps0boe0/ JWeEwNM1pgUH2oaL68NAvFzzhrLCIOyG0zPmbDxYlADFLYAA1ffQTuCLG8uIZiHR Xxzmp5iJd4zjs7Nrht35+ZPmBHV3aD30nUtFCYv7F1DKTQDQjn6tTpiCoFFjQOhW gspCamWaikiQNNhAZYHL/M1PezF1k8sZoU/Csq9mwCnrOJ8j76NsCppiJDP7AHZ/ axTYX7a+4Edm5uzseU3b1TzHjliRz6NSHKZiW+88G/5+P1y1EuTf0BgbdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8VqvylzUp4rtZvPUIteFdt4U9jMB8GA1UdIwQY MBaAFH7VABZPBzgTW5rsBOOPwky5Dg9fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnRVQUZrOEhPQk5ibXV3RTQ0X0NUTGtPRDE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YzUzNTktMzQ1Mi00MmYzLTg4MGIt ODJkOWE5ZWI0MzBjLzEvZnRVQUZrOEhPQk5ibXV3RTQ0X0NUTGtPRDE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC85YzUzNTktMzQ1Mi00MmYzLTg4MGItODJkOWE5ZWI0MzBj LzEvZnRVQUZrOEhPQk5ibXV3RTQ0X0NUTGtPRDE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKuO+jAOr EEgd0nxQqfFZLf0HeZD40nfpTezmf/NVuIhKseU2/GJKQhF/mGL8yVrv7Nn5u8pB aLNX1MfpHWYH1K+RnIwbxAiB0oK98n38/bXbNs8vYAonnOElUk0TAPY/o6asezVC 9c+W+AGzvWN5G/WiKm9Yawy4rldVWThdzSk1N8YCRXV4WUntj081v8whqa5QEkPn bRr8Kl3wrE8R6KleZzeG91RH2eZ+MS95Zv8GTWr+4xmm+e8hou+Srr+BAwDFV60X sePmE+RH3HBH00CD35UISkUjWfyk/g9w2upyJjks1l5+QASsIcRldB83P1ZcSzjT PYHsHY/0p9l5mg== -----END CERTIFICATE-----Generated at Sat Dec 20 00:23:48 2025 by rpki-client