This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft File: FfiJ_tAIX8IbCPy7slLDEG35mqg.mft (raw, json) Hash identifier: FHDZG+G8CgzfNW7sG0ka3B+mT5IpyX19Y8Ydhq4mE44= Subject key identifier: 02:A7:F6:B5:4B:29:50:04:98:C2:FA:C6:88:ED:79:42:EE:3A:85:C0 Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8 Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8 Certificate serial: 019B45139DB64CDDC33A1FAE948C1D9F6A24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 08:01:11 +0000 Manifest this update: Mon 22 Dec 2025 08:01:11 +0000 Manifest next update: Tue 23 Dec 2025 08:01:11 +0000 Files and hashes: 1: F-M_Dbb2L6tcSdeWJ7Oy2HrJOC4.roa (hash: BGnC69CpqiSAFUqMIgAkLbDOLnnsUTPqZ+RBKIpsT2E=) 2: FfiJ_tAIX8IbCPy7slLDEG35mqg.crl (hash: QR6P9XVA+4w4vSrPCQYXYMdgypY8zfq9kja3dcD02gU=) 3: c7aVec8wRWh2uY_ep7B9EB_Hd_8.roa (hash: IVR9qhn2n9gPQEgDnZi5eZBL8Hlmr2T2MC2szELxnvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:9d:b6:4c:dd:c3:3a:1f:ae:94:8c:1d:9f:6a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8 Validity Not Before: Dec 22 08:01:11 2025 GMT Not After : Dec 23 08:01:11 2025 GMT Subject: CN=02a7f6b54b29500498c2fac688ed7942ee3a85c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e9:3f:bf:d5:9b:b6:0e:49:59:b5:92:34:0e: d6:c5:8d:31:16:25:56:d3:63:d7:48:12:f3:45:48: 70:2c:c0:1e:ed:9d:83:4f:04:42:97:c0:2d:74:89: 19:86:db:c3:62:f3:fd:f7:51:af:a6:e5:34:17:52: b0:9d:07:8e:8b:5a:a7:96:6f:96:7f:84:ab:fd:4a: 64:3e:76:64:18:b3:3c:85:74:3a:a9:5b:fb:eb:d3: f1:7c:df:ae:1d:dc:00:13:cc:cc:65:78:3c:a2:fb: 6b:a9:5d:81:68:fe:3e:30:4c:ea:a3:c5:43:8e:74: 95:8a:56:f8:4c:2c:47:c4:e1:28:61:40:08:3f:c1: 76:52:5f:5b:50:2f:63:9a:57:dd:8e:72:86:f6:87: 9f:02:f1:15:34:98:15:51:e9:81:f7:b5:86:28:73: a2:d3:10:4c:22:5f:9e:14:50:9d:cf:af:49:81:f8: d0:3d:b3:a8:22:8c:10:25:75:58:84:8b:b6:8c:26: 01:07:3d:c8:9a:cf:89:97:2f:71:43:46:a5:95:56: 58:a6:e6:0e:e5:61:68:12:72:3d:7d:3c:5c:04:07: f7:a5:c3:73:20:f2:70:94:82:fe:f0:94:a9:13:6b: 16:54:49:a4:94:0f:7f:85:9d:18:ca:f4:9d:8b:f1: d8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A7:F6:B5:4B:29:50:04:98:C2:FA:C6:88:ED:79:42:EE:3A:85:C0 X509v3 Authority Key Identifier: keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:06:b0:e1:2e:c4:9b:71:90:de:91:23:3e:0f:60:03:a3:85: 9d:6f:03:5a:98:d6:1e:28:9b:a7:c9:64:7f:2e:e9:12:f6:ea: 8b:82:c5:60:02:ad:f0:a9:97:fd:a8:f7:ed:d4:e3:15:7b:95: ca:a1:fb:00:b5:46:73:d8:7d:d5:17:1c:2c:63:b1:7b:2b:58: bd:7b:1e:43:f3:77:08:b9:ef:f2:9e:33:d4:d1:52:e2:0d:dc: 93:47:a7:65:e9:5a:06:2c:66:9a:12:b1:ad:7f:b4:0c:0c:d0: 3f:76:d7:08:eb:69:63:7e:d8:67:6c:32:f4:87:39:e4:f8:5d: aa:64:6b:9e:39:15:6b:84:c0:01:bc:7d:cd:78:2e:b1:ea:80: c2:ed:9e:c8:f2:92:ee:78:14:c3:93:e4:b6:32:a6:6f:97:01: ef:d1:18:e6:e8:bf:e1:38:ff:56:00:5a:d5:80:31:62:a6:77: d2:af:ea:1b:fd:00:69:a5:e1:a8:45:bb:0d:8e:6f:97:11:32: fe:82:1b:ca:e2:c6:87:31:4d:54:7b:bf:6b:c8:1d:75:b9:06: 87:6a:b0:ec:58:ab:9c:12:3d:3c:32:60:7a:f3:26:09:cd:50: 20:25:f7:a2:f2:7b:cc:24:d5:63:7e:16:d1:c7:c1:69:0e:ea: 9d:96:2f:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE522TN3DOh+ulIwdn2okMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Zjg4OWZlZDAwODVmYzIxYjA4ZmNiYmIyNTJjMzEwNmRm OTlhYTgwHhcNMjUxMjIyMDgwMTExWhcNMjUxMjIzMDgwMTExWjAzMTEwLwYDVQQD EygwMmE3ZjZiNTRiMjk1MDA0OThjMmZhYzY4OGVkNzk0MmVlM2E4NWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwek/v9Wbtg5JWbWSNA7WxY0xFiVW 02PXSBLzRUhwLMAe7Z2DTwRCl8AtdIkZhtvDYvP991GvpuU0F1KwnQeOi1qnlm+W f4Sr/UpkPnZkGLM8hXQ6qVv769PxfN+uHdwAE8zMZXg8ovtrqV2BaP4+MEzqo8VD jnSVilb4TCxHxOEoYUAIP8F2Ul9bUC9jmlfdjnKG9oefAvEVNJgVUemB97WGKHOi 0xBMIl+eFFCdz69JgfjQPbOoIowQJXVYhIu2jCYBBz3Ims+Jly9xQ0allVZYpuYO 5WFoEnI9fTxcBAf3pcNzIPJwlIL+8JSpE2sWVEmklA9/hZ0YyvSdi/HYOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKn9rVLKVAEmML6xojteULuOoXAMB8GA1UdIwQY MBaAFBX4if7QCF/CGwj8u7JSwxBt+ZqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mOTUyZmItOTMxOC00OWI2LWI5NDYt MWUzYTE5NTQ3OGUwLzEvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9mOTUyZmItOTMxOC00OWI2LWI5NDYtMWUzYTE5NTQ3OGUw LzEvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQaw4S7E m3GQ3pEjPg9gA6OFnW8DWpjWHiibp8lkfy7pEvbqi4LFYAKt8KmX/aj37dTjFXuV yqH7ALVGc9h91RccLGOxeytYvXseQ/N3CLnv8p4z1NFS4g3ck0enZelaBixmmhKx rX+0DAzQP3bXCOtpY37YZ2wy9Ic55PhdqmRrnjkVa4TAAbx9zXguseqAwu2eyPKS 7ngUw5PktjKmb5cB79EY5ui/4Tj/VgBa1YAxYqZ30q/qG/0AaaXhqEW7DY5vlxEy /oIbyuLGhzFNVHu/a8gddbkGh2qw7FirnBI9PDJgevMmCc1QICX3ovJ7zCTVY34W 0cfBaQ7qnZYvmQ== -----END CERTIFICATE-----Generated at Mon Dec 22 12:57:58 2025 by rpki-client