This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft File: fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft (raw, json) Hash identifier: L35L2NQaQIDKzUClUgSUWhFj0TXqucBdRlUSKUmJhnc= Subject key identifier: 11:22:A4:57:9C:2A:7F:4F:C6:87:00:92:D1:DB:11:58:50:3F:4A:E3 Authority key identifier: 7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5 Certificate issuer: /CN=7d346ace4e652870f1687450d5c34e14cb0094b5 Certificate serial: 019B30431C2D750F743B7577B8D94C29D7F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft Manifest number: E8 Signing time: Thu 18 Dec 2025 07:01:02 +0000 Manifest this update: Thu 18 Dec 2025 07:01:02 +0000 Manifest next update: Fri 19 Dec 2025 07:01:02 +0000 Files and hashes: 1: fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl (hash: s7oAlTJRbYqnFwPSZI6PjkYjb6opzI1+C7y3+pp52eA=) 2: qfuhRedqUPpNTA86T-6bb6nkpoU.roa (hash: n2+GEGHXXGKkmerP/9dENHzgRYY7IxvI5R7IJ6va0DM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:43:1c:2d:75:0f:74:3b:75:77:b8:d9:4c:29:d7:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d346ace4e652870f1687450d5c34e14cb0094b5 Validity Not Before: Dec 18 07:01:02 2025 GMT Not After : Dec 19 07:01:02 2025 GMT Subject: CN=1122a4579c2a7f4fc6870092d1db1158503f4ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f3:fc:4d:48:28:4c:b2:c4:c1:a9:35:72:1e: 5e:d7:5e:36:72:84:25:1b:d7:24:dd:80:f3:47:44: 98:9f:e9:15:04:32:42:06:98:77:27:fb:7c:9f:cd: 00:5a:ce:79:af:11:97:ba:9e:37:0f:19:15:84:07: d5:5a:d1:3a:58:9d:85:c2:b1:24:22:63:a0:2b:85: a1:b9:fb:38:5b:a5:77:53:a8:f0:b0:60:68:7b:3e: 7f:3f:b5:7c:b4:cc:a0:4a:ff:9d:cc:8c:11:98:4e: c7:6c:a1:84:e3:ff:be:4d:77:e4:d6:74:16:2f:a0: 6e:52:27:ef:59:b8:43:4d:bf:6e:2b:7e:36:27:3b: e8:70:77:86:64:29:23:f2:30:5a:6a:66:f5:bc:94: 58:2d:8e:1c:81:f9:2f:c9:e8:d9:34:10:11:1d:85: f1:3a:dc:eb:4b:77:21:42:f7:da:d5:f8:b1:c3:5c: 12:60:ab:82:ad:4d:59:b9:25:22:8c:3f:94:c3:17: bf:5b:17:ac:0e:7a:8b:55:0a:2f:a2:e5:60:bf:02: 8b:95:da:f1:2e:d7:ac:12:2b:76:7d:90:51:fa:36: 8e:27:a3:be:ec:0a:18:1b:45:e5:a5:23:e5:74:ff: c0:c9:d1:75:79:71:b5:41:a7:2a:c9:e0:ad:a4:b6: 39:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:22:A4:57:9C:2A:7F:4F:C6:87:00:92:D1:DB:11:58:50:3F:4A:E3 X509v3 Authority Key Identifier: keyid:7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:e2:32:98:46:79:56:8a:2a:41:49:c3:45:56:4a:56:fc:00: 9e:74:d2:5d:bd:13:84:2c:39:81:6f:bd:0e:83:f9:96:cf:cf: 6c:7c:7e:24:69:f3:15:98:6f:a9:d3:bf:67:cd:88:8a:6a:34: c9:42:3d:d5:e8:1c:ca:33:e5:69:c9:56:c3:14:68:5e:b6:93: 6f:a7:ce:fb:55:1b:0b:6a:1f:8c:63:70:84:ee:0a:a1:84:4e: 8e:1a:79:32:1c:fd:6f:94:50:b5:23:01:ce:81:50:62:8b:3d: d7:73:7f:59:67:97:62:05:5d:2c:72:13:36:83:7d:cd:71:79: 58:72:3d:e8:67:35:f1:fb:d2:41:1c:79:9b:57:a9:a0:f4:fc: 0c:a1:af:4e:72:6e:ae:f5:2a:c6:cf:63:0d:3c:b8:9d:c0:3f: 54:ef:79:e3:e5:31:db:e5:f1:d9:25:52:b7:3a:f7:72:3e:4a: 16:0c:d8:fa:7f:7c:81:82:c5:27:2c:96:d2:9f:9d:d1:75:af: e1:bf:a7:12:65:8e:73:4e:1e:34:af:9b:b6:6a:6e:59:ec:9c: 00:9b:7a:77:da:c7:00:c3:fe:1c:44:77:ea:95:bc:d6:52:33: 94:9a:58:0d:fb:ea:9b:ee:ef:c3:8c:4f:b3:4d:a0:ba:63:c7: 03:1e:05:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQxwtdQ90O3V3uNlMKdf0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMzQ2YWNlNGU2NTI4NzBmMTY4NzQ1MGQ1YzM0ZTE0Y2Iw MDk0YjUwHhcNMjUxMjE4MDcwMTAyWhcNMjUxMjE5MDcwMTAyWjAzMTEwLwYDVQQD EygxMTIyYTQ1NzljMmE3ZjRmYzY4NzAwOTJkMWRiMTE1ODUwM2Y0YWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvP8TUgoTLLEwak1ch5e1142coQl G9ck3YDzR0SYn+kVBDJCBph3J/t8n80AWs55rxGXup43DxkVhAfVWtE6WJ2FwrEk ImOgK4Whufs4W6V3U6jwsGBoez5/P7V8tMygSv+dzIwRmE7HbKGE4/++TXfk1nQW L6BuUifvWbhDTb9uK342JzvocHeGZCkj8jBaamb1vJRYLY4cgfkvyejZNBARHYXx OtzrS3chQvfa1fixw1wSYKuCrU1ZuSUijD+Uwxe/WxesDnqLVQovouVgvwKLldrx LtesEit2fZBR+jaOJ6O+7AoYG0XlpSPldP/AydF1eXG1QacqyeCtpLY50wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEipFecKn9PxocAktHbEVhQP0rjMB8GA1UdIwQY MBaAFH00as5OZShw8Wh0UNXDThTLAJS1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlRScXprNWxLSER4YUhSUTFjTk9GTXNBbExVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jNjc2ZDctZmJmZS00YWU2LWJlNTEt MzI3YWNjMWIxZTU5LzEvZlRScXprNWxLSER4YUhSUTFjTk9GTXNBbExVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jNjc2ZDctZmJmZS00YWU2LWJlNTEtMzI3YWNjMWIxZTU5 LzEvZlRScXprNWxLSER4YUhSUTFjTk9GTXNBbExVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOIymEZ5 VooqQUnDRVZKVvwAnnTSXb0ThCw5gW+9DoP5ls/PbHx+JGnzFZhvqdO/Z82Iimo0 yUI91egcyjPlaclWwxRoXraTb6fO+1UbC2ofjGNwhO4KoYROjhp5Mhz9b5RQtSMB zoFQYos913N/WWeXYgVdLHITNoN9zXF5WHI96Gc18fvSQRx5m1epoPT8DKGvTnJu rvUqxs9jDTy4ncA/VO954+Ux2+Xx2SVStzr3cj5KFgzY+n98gYLFJyyW0p+d0XWv 4b+nEmWOc04eNK+btmpuWeycAJt6d9rHAMP+HER36pW81lIzlJpYDfvqm+7vw4xP s02gumPHAx4F+w== -----END CERTIFICATE-----Generated at Thu Dec 18 08:49:21 2025 by rpki-client