This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft File: FT8kGD1slRhZGTSebpJTNzZDe5Q.mft (raw, json) Hash identifier: Om7tfMgiLwXFsPY/DcpxEKf0gGaVV9g3pg4V80Mfa/g= Subject key identifier: C8:C6:07:2F:3C:8E:9D:63:31:B5:FE:58:76:A7:8C:BE:B0:E0:C2:50 Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94 Certificate issuer: /CN=153f24183d6c95185919349e6e92533736437b94 Certificate serial: 019B5907BB6C9CADD3D3D9177A8D152F73F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft Manifest number: 0891 Signing time: Fri 26 Dec 2025 05:00:37 +0000 Manifest this update: Fri 26 Dec 2025 05:00:37 +0000 Manifest next update: Sat 27 Dec 2025 05:00:37 +0000 Files and hashes: 1: 02srA_dodlsqHDgp--vASVvWX9E.roa (hash: lJ1KGWWna7XFX1YELq/QOjPK38+hDLl/0ZeJxdIW2VA=) 2: FT8kGD1slRhZGTSebpJTNzZDe5Q.crl (hash: PHPHniHJIPc52jcM6Uez8urlMSU9VMf0Tuj2DBrLSyA=) 3: MBq9_d6LT2vyQzQfNudTMEVPC5w.roa (hash: md4P7geg1tPk/NRWigzWi02Y2+T+SaZ3+I/C1pIam5U=) 4: w6nyjw8CCPdGWE2r0om0qvXFyXo.roa (hash: 1O15ZgeKf2Rbzxb6TQY0MNC2RDhbgVcfZUfdxbDgya4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:07:bb:6c:9c:ad:d3:d3:d9:17:7a:8d:15:2f:73:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153f24183d6c95185919349e6e92533736437b94 Validity Not Before: Dec 26 05:00:37 2025 GMT Not After : Dec 27 05:00:37 2025 GMT Subject: CN=c8c6072f3c8e9d6331b5fe5876a78cbeb0e0c250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d7:2e:a5:ac:d3:45:0b:ed:bf:52:8b:ec:87: 2a:0b:fe:f3:f4:6b:fc:aa:ba:94:45:94:6b:99:e6: ee:2c:90:a5:4a:03:6d:26:55:d7:19:a3:0a:21:85: df:d1:b8:e5:1d:7c:a6:2a:d0:f8:8f:3a:7c:19:74: 4a:42:76:7c:a4:16:34:f1:1e:ad:06:a5:8c:6f:8d: c1:7f:c2:a3:b8:28:e6:ef:11:f5:6a:e6:e9:ce:c4: d9:bd:81:60:8a:ec:f9:0f:82:32:30:07:e4:5d:69: d5:2f:62:bc:29:ea:23:f8:0d:0f:61:b9:d5:94:d8: 5a:f9:c3:31:e7:c0:f4:b6:cd:e3:e9:01:4e:81:f6: 6b:b4:55:48:c8:0b:f9:04:02:b6:10:3f:18:e3:13: 7c:37:a7:9f:71:e9:49:25:ab:1f:6a:ae:c6:c5:46: 06:2c:fa:ab:cd:0c:e2:03:f1:3c:57:f1:35:77:8a: 62:b7:8b:ea:e3:df:a3:7b:6c:57:dc:a8:10:23:ea: 65:bd:97:e0:ee:48:ed:32:73:2a:03:f8:f1:0d:d2: c3:f9:5a:df:a2:4a:68:d6:02:f3:28:57:36:ed:e7: d6:ba:37:72:67:2c:a5:1e:45:ff:4d:37:95:2e:02: 96:ac:2e:93:46:75:12:d0:59:d8:bb:2f:98:54:62: d6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C6:07:2F:3C:8E:9D:63:31:B5:FE:58:76:A7:8C:BE:B0:E0:C2:50 X509v3 Authority Key Identifier: keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:74:15:91:8b:b2:9b:b7:29:31:ae:ce:5a:c5:68:68:b5:e9: 6a:4c:12:b2:58:ec:31:80:9e:ae:29:2d:6e:9d:c6:7a:03:32: b8:63:66:9b:6d:fa:8f:64:f8:e1:db:14:73:35:c7:73:7a:90: 47:61:1c:90:11:3e:27:2e:48:c4:14:1a:70:b5:b4:c0:7d:c3: d3:26:98:41:b9:7b:d1:2d:33:13:13:c7:45:51:2f:30:5b:ee: f6:9c:ae:b4:5e:3b:05:7b:cf:2c:df:e1:18:80:8e:6d:f7:df: ee:a3:c9:0e:7d:ef:32:61:b3:db:72:35:33:b2:f0:f5:6f:0f: 50:0a:7c:d2:a5:41:75:c8:26:6c:ed:5d:e1:9d:f6:07:ef:ea: 5b:93:35:d3:9b:eb:94:96:b1:00:9b:b2:9f:d7:52:43:b1:89: eb:e8:5b:68:a1:ea:54:bf:89:91:98:22:34:f9:8f:cb:03:68: a6:58:54:65:d0:d6:d2:0d:f5:1b:2c:7f:3e:c7:49:96:4f:33: d4:4b:e5:68:d7:17:e6:db:41:8d:1d:51:e9:a7:23:1f:ef:c6: ae:e8:1b:9e:c8:72:38:96:c9:5f:28:56:17:a4:19:30:c5:a8: e5:5a:91:f2:25:cf:2a:60:f2:d6:06:c3:43:6a:29:a7:b0:82: 39:1c:eb:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZB7tsnK3T09kXeo0VL3P3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1M2YyNDE4M2Q2Yzk1MTg1OTE5MzQ5ZTZlOTI1MzM3MzY0 MzdiOTQwHhcNMjUxMjI2MDUwMDM3WhcNMjUxMjI3MDUwMDM3WjAzMTEwLwYDVQQD EyhjOGM2MDcyZjNjOGU5ZDYzMzFiNWZlNTg3NmE3OGNiZWIwZTBjMjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9cupazTRQvtv1KL7IcqC/7z9Gv8 qrqURZRrmebuLJClSgNtJlXXGaMKIYXf0bjlHXymKtD4jzp8GXRKQnZ8pBY08R6t BqWMb43Bf8KjuCjm7xH1aubpzsTZvYFgiuz5D4IyMAfkXWnVL2K8Keoj+A0PYbnV lNha+cMx58D0ts3j6QFOgfZrtFVIyAv5BAK2ED8Y4xN8N6efcelJJasfaq7GxUYG LPqrzQziA/E8V/E1d4pit4vq49+je2xX3KgQI+plvZfg7kjtMnMqA/jxDdLD+Vrf okpo1gLzKFc27efWujdyZyylHkX/TTeVLgKWrC6TRnUS0FnYuy+YVGLWdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjGBy88jp1jMbX+WHanjL6w4MJQMB8GA1UdIwQY MBaAFBU/JBg9bJUYWRk0nm6SUzc2Q3uUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iMDVlMDgtMDc2Mi00ZGM3LWE0YjAt NTgwNWQzZjNkYmIyLzEvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9iMDVlMDgtMDc2Mi00ZGM3LWE0YjAtNTgwNWQzZjNkYmIy LzEvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxHQVkYuy m7cpMa7OWsVoaLXpakwSsljsMYCeriktbp3GegMyuGNmm236j2T44dsUczXHc3qQ R2EckBE+Jy5IxBQacLW0wH3D0yaYQbl70S0zExPHRVEvMFvu9pyutF47BXvPLN/h GICObfff7qPJDn3vMmGz23I1M7Lw9W8PUAp80qVBdcgmbO1d4Z32B+/qW5M105vr lJaxAJuyn9dSQ7GJ6+hbaKHqVL+JkZgiNPmPywNoplhUZdDW0g31Gyx/PsdJlk8z 1EvlaNcX5ttBjR1R6acjH+/GrugbnshyOJbJXyhWF6QZMMWo5VqR8iXPKmDy1gbD Q2opp7CCORzrEw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:08 2025 by rpki-client