This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft File: FFXKMFkjEziJJe4UQQCa0x1LtB8.mft (raw, json) Hash identifier: zf+6D1gjwpQFdLNIeqqehE3+c3WGM856qcZecJfOq9c= Subject key identifier: 86:28:96:71:95:EC:17:C3:C0:15:3A:DF:C3:C4:10:95:08:E7:50:6B Authority key identifier: 14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F Certificate issuer: /CN=1455ca30592313388925ee1441009ad31d4bb41f Certificate serial: 019B10B81D026D31066371D0BAF7ED052A92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft Manifest number: 01BB Signing time: Fri 12 Dec 2025 04:00:59 +0000 Manifest this update: Fri 12 Dec 2025 04:00:59 +0000 Manifest next update: Sat 13 Dec 2025 04:00:59 +0000 Files and hashes: 1: C93S1dgJ4_A0KrqfhcJ2wbpt_r8.roa (hash: msQwNZJRyoBH47m4enHwmGpM3uJN0VQWiUcpw8JNFl4=) 2: FFXKMFkjEziJJe4UQQCa0x1LtB8.crl (hash: nhPiYxJEXeqJ09VTI4ZM9lC1KsPAZmO1m6DIjgbCRIg=) 3: ZF7hOmhYR1fn4ZYXkR49rskV2pI.roa (hash: mpzvhb4zXG8kDkRlZRViVkyq7QjZbW7JERwXznl7htk=) 4: wcv6Vtvj_8KzJMQubxYX_mtNkA0.roa (hash: 0NzmIEPG+guESJal/NU9sf3xAOXj6eL+XwYUVrhagog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:1d:02:6d:31:06:63:71:d0:ba:f7:ed:05:2a:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1455ca30592313388925ee1441009ad31d4bb41f Validity Not Before: Dec 12 04:00:59 2025 GMT Not After : Dec 13 04:00:59 2025 GMT Subject: CN=8628967195ec17c3c0153adfc3c4109508e7506b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c3:cc:c1:f4:14:a6:7f:63:84:aa:16:45:b9: 85:61:2d:91:ee:0f:b4:34:13:da:7d:8d:a4:4c:25: c7:f1:11:45:ee:7c:17:ac:de:c2:35:fe:fd:96:1f: bd:f2:6f:b1:b8:0a:c7:b0:9d:56:19:42:0e:64:43: b4:5b:7e:bd:e3:28:a3:a6:99:47:54:87:d9:e0:5e: 62:bf:23:0b:dc:e5:5b:8e:97:7b:f7:ae:00:ae:44: 71:d8:4c:53:25:ec:b4:27:1a:c6:71:0b:fa:31:51: ad:99:78:12:2d:f0:d4:c4:de:03:4a:fc:f5:3f:37: 48:4b:69:fa:9b:68:d3:53:dd:7b:1a:bc:fe:53:dc: 31:d0:47:c8:81:8d:1e:db:38:ba:1a:8d:67:93:52: 39:b1:67:38:14:00:d0:e6:d4:e6:81:0e:72:aa:3c: f6:bd:e1:65:d4:4f:1a:3f:69:88:5c:76:ef:d2:fb: 09:14:64:5c:57:5e:b6:37:6c:de:59:7f:d7:1d:6e: bb:5a:97:25:c5:31:5c:ce:7f:99:58:4f:cf:bc:d5: 43:28:07:71:e7:19:28:35:da:5f:5b:c1:cc:06:3a: e6:15:52:c2:98:75:7d:7c:c8:50:a1:ac:cd:b3:31: 39:c0:6d:1b:2e:5d:32:dd:ee:c0:1f:b4:b1:c3:34: ef:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:28:96:71:95:EC:17:C3:C0:15:3A:DF:C3:C4:10:95:08:E7:50:6B X509v3 Authority Key Identifier: keyid:14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:76:23:a1:63:f8:43:a7:85:16:e8:67:4a:14:f3:c8:da:9f: aa:a2:19:59:60:6c:65:76:92:09:2e:c6:0f:40:32:07:e7:15: d2:41:ef:59:7f:c6:1a:26:b0:f6:24:fa:f6:da:42:5e:c4:35: 5e:54:f7:84:96:a5:42:ad:80:8c:63:f7:86:71:b3:f3:eb:be: 3b:4f:20:a8:be:45:16:96:cc:8a:55:95:0b:db:d1:db:f9:f5: c0:18:50:60:9e:1c:08:56:8b:4b:70:3d:df:ec:25:88:8b:d1: a5:20:d6:eb:72:ba:ed:88:d7:16:07:81:b9:66:0a:5c:84:b3: 08:8e:4a:77:9c:b8:11:f9:84:9d:7d:f4:9b:f3:e4:70:9f:5f: 60:35:a4:e2:5d:74:52:82:e8:19:41:61:b5:28:22:92:fb:9c: df:a3:2a:dd:c6:87:6d:9f:a3:e6:e2:3b:5e:17:ea:6d:4e:62: 3b:3a:18:dc:ac:bc:65:63:0f:05:47:d5:7b:23:14:e0:54:ef: 33:13:f7:84:ff:cc:48:67:dd:9b:47:c3:8f:ce:1e:d7:02:b6: 90:93:0b:2b:b9:0d:ef:5b:76:9d:01:e4:b6:06:bf:54:6e:ff: 1f:7e:88:b7:18:37:70:a7:f9:3b:ab:58:f2:21:b4:8f:0c:11: 6f:0f:f9:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuB0CbTEGY3HQuvftBSqSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NTVjYTMwNTkyMzEzMzg4OTI1ZWUxNDQxMDA5YWQzMWQ0 YmI0MWYwHhcNMjUxMjEyMDQwMDU5WhcNMjUxMjEzMDQwMDU5WjAzMTEwLwYDVQQD Eyg4NjI4OTY3MTk1ZWMxN2MzYzAxNTNhZGZjM2M0MTA5NTA4ZTc1MDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsPMwfQUpn9jhKoWRbmFYS2R7g+0 NBPafY2kTCXH8RFF7nwXrN7CNf79lh+98m+xuArHsJ1WGUIOZEO0W3694yijpplH VIfZ4F5ivyML3OVbjpd7964ArkRx2ExTJey0JxrGcQv6MVGtmXgSLfDUxN4DSvz1 PzdIS2n6m2jTU917Grz+U9wx0EfIgY0e2zi6Go1nk1I5sWc4FADQ5tTmgQ5yqjz2 veFl1E8aP2mIXHbv0vsJFGRcV162N2zeWX/XHW67WpclxTFczn+ZWE/PvNVDKAdx 5xkoNdpfW8HMBjrmFVLCmHV9fMhQoazNszE5wG0bLl0y3e7AH7SxwzTvmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYolnGV7BfDwBU638PEEJUI51BrMB8GA1UdIwQY MBaAFBRVyjBZIxM4iSXuFEEAmtMdS7QfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMDgzMmUtNjc1Yi00ZWMyLWE4MDIt OWIyNmNhYjc5NDUxLzEvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9mMDgzMmUtNjc1Yi00ZWMyLWE4MDItOWIyNmNhYjc5NDUx LzEvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXYjoWP4 Q6eFFuhnShTzyNqfqqIZWWBsZXaSCS7GD0AyB+cV0kHvWX/GGiaw9iT69tpCXsQ1 XlT3hJalQq2AjGP3hnGz8+u+O08gqL5FFpbMilWVC9vR2/n1wBhQYJ4cCFaLS3A9 3+wliIvRpSDW63K67YjXFgeBuWYKXISzCI5Kd5y4EfmEnX30m/PkcJ9fYDWk4l10 UoLoGUFhtSgikvuc36Mq3caHbZ+j5uI7XhfqbU5iOzoY3Ky8ZWMPBUfVeyMU4FTv MxP3hP/MSGfdm0fDj84e1wK2kJMLK7kN71t2nQHktga/VG7/H36Itxg3cKf5O6tY 8iG0jwwRbw/5Gw== -----END CERTIFICATE-----Generated at Fri Dec 12 12:45:47 2025 by rpki-client