This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.mft File: FTB01_oopD5Ad4_0Vi9TT8OOH7A.mft (raw, json) Hash identifier: DIaNivCkZtVmRXd21f1Ajpyl2NMkcJ6/Xto8QOXlpDI= Subject key identifier: 10:1E:4A:9D:21:89:48:CF:B3:C8:82:9A:86:6F:CF:25:C7:78:6E:9D Authority key identifier: 15:30:74:D7:FA:28:A4:3E:40:77:8F:F4:56:2F:53:4F:C3:8E:1F:B0 Certificate issuer: /CN=153074d7fa28a43e40778ff4562f534fc38e1fb0 Certificate serial: 019B1EAA84D8223F7D742C94F2EB4E250DAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTB01_oopD5Ad4_0Vi9TT8OOH7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.mft Manifest number: 0672 Signing time: Sun 14 Dec 2025 21:00:50 +0000 Manifest this update: Sun 14 Dec 2025 21:00:50 +0000 Manifest next update: Mon 15 Dec 2025 21:00:50 +0000 Files and hashes: 1: FTB01_oopD5Ad4_0Vi9TT8OOH7A.crl (hash: BDE5dDsy5mF2zjnHWCJ83DJlzY17n6ynO5dREUCikDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.mft rsync://rpki.ripe.net/repository/DEFAULT/FTB01_oopD5Ad4_0Vi9TT8OOH7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 21:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:aa:84:d8:22:3f:7d:74:2c:94:f2:eb:4e:25:0d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153074d7fa28a43e40778ff4562f534fc38e1fb0 Validity Not Before: Dec 14 21:00:50 2025 GMT Not After : Dec 15 21:00:50 2025 GMT Subject: CN=101e4a9d218948cfb3c8829a866fcf25c7786e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e8:20:c3:d4:88:35:3f:94:8c:52:52:2e:00: 3e:42:67:08:d5:3d:54:34:cd:c3:7b:7c:66:e9:a1: 5f:4e:33:8c:6e:61:d2:44:64:90:52:35:0e:96:50: 11:16:35:30:de:ec:3d:19:36:ae:b6:f6:cc:57:c0: 45:44:c9:9a:e2:ff:49:c9:bc:cc:a6:2c:b2:d8:89: 7b:ff:f8:2c:b5:40:85:90:cb:d1:2d:bf:74:5c:79: cb:f8:db:53:15:fe:a0:b5:f9:0b:66:43:c9:7d:ca: 79:55:68:8f:1a:81:84:c0:c8:55:c8:d4:93:a6:5e: a1:66:1e:3a:37:ae:b1:50:b2:77:bb:59:aa:ec:6b: ce:6a:d8:47:99:c0:fb:d1:e2:44:c5:c9:61:bc:2a: ee:89:a7:34:f1:d7:fa:1a:00:85:3e:e6:37:ed:4e: 0f:e3:9a:43:07:89:58:73:fe:29:ef:58:06:47:1b: 12:4d:72:4c:bc:7d:28:0c:3b:2a:42:4e:7a:10:1f: a7:23:39:62:15:41:2c:37:98:17:39:e5:9a:3b:3e: 33:f5:13:2a:95:20:51:d5:7b:30:f0:e7:8f:79:cd: 24:1f:47:f0:ca:7a:ac:25:5e:a7:78:83:b0:af:58: b1:64:ef:f2:84:4f:4b:56:28:a7:46:58:ad:6f:e9: 1c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1E:4A:9D:21:89:48:CF:B3:C8:82:9A:86:6F:CF:25:C7:78:6E:9D X509v3 Authority Key Identifier: keyid:15:30:74:D7:FA:28:A4:3E:40:77:8F:F4:56:2F:53:4F:C3:8E:1F:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTB01_oopD5Ad4_0Vi9TT8OOH7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:db:cc:5f:a1:91:8e:37:a8:34:4f:ab:6b:32:f8:73:ae:6f: b7:dc:3f:ac:67:29:ee:73:21:6c:52:39:fd:15:3a:4e:99:63: 98:b1:d6:56:cc:b4:c2:b4:12:50:d1:79:c4:17:3b:89:1c:2c: ef:4d:72:af:4d:de:9d:f6:67:af:ea:55:65:2b:00:57:26:5e: a9:d2:e8:85:84:bb:ec:3c:c9:81:2e:6b:a9:a0:c8:13:dd:d0: 4f:1a:6f:4e:47:2e:8a:a3:8e:9e:76:a5:31:cf:07:e7:94:d9: ca:fd:68:3f:eb:ac:42:e1:d6:4e:d2:4a:0e:65:87:43:c4:bb: 46:9f:9b:f0:3b:53:6c:4e:2e:a5:d6:cb:12:7f:68:33:07:fa: 4d:11:cd:e4:7a:71:01:18:3f:83:92:8e:74:bd:c7:b7:ee:fb: 69:05:5d:c3:98:bf:4b:f8:11:42:37:b5:37:be:ce:2f:25:5a: ec:82:9f:26:bc:10:83:eb:8e:90:b4:67:20:a4:21:8a:b1:4a: b9:8d:cf:4d:f6:9b:ef:37:49:aa:e8:32:26:e0:48:e4:6c:e6: b3:5b:0c:bc:31:14:dd:76:b8:77:cc:13:b4:32:0e:3e:d9:18: 06:78:40:31:04:92:bd:56:c5:b4:91:d7:8a:b9:6d:98:d2:cf: e3:21:d3:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseqoTYIj99dCyU8utOJQ2uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MzA3NGQ3ZmEyOGE0M2U0MDc3OGZmNDU2MmY1MzRmYzM4 ZTFmYjAwHhcNMjUxMjE0MjEwMDUwWhcNMjUxMjE1MjEwMDUwWjAzMTEwLwYDVQQD EygxMDFlNGE5ZDIxODk0OGNmYjNjODgyOWE4NjZmY2YyNWM3Nzg2ZTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8eggw9SINT+UjFJSLgA+QmcI1T1U NM3De3xm6aFfTjOMbmHSRGSQUjUOllARFjUw3uw9GTautvbMV8BFRMma4v9JybzM piyy2Il7//gstUCFkMvRLb90XHnL+NtTFf6gtfkLZkPJfcp5VWiPGoGEwMhVyNST pl6hZh46N66xULJ3u1mq7GvOathHmcD70eJExclhvCruiac08df6GgCFPuY37U4P 45pDB4lYc/4p71gGRxsSTXJMvH0oDDsqQk56EB+nIzliFUEsN5gXOeWaOz4z9RMq lSBR1Xsw8OePec0kH0fwynqsJV6neIOwr1ixZO/yhE9LViinRlitb+kcUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAeSp0hiUjPs8iCmoZvzyXHeG6dMB8GA1UdIwQY MBaAFBUwdNf6KKQ+QHeP9FYvU0/Djh+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlRCMDFfb29wRDVBZDRfMFZpOVRUOE9PSDdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xNzYwYWYtZGMxYy00MDhjLTg2ZGQt M2RjMzVlNTQ0YWFmLzEvRlRCMDFfb29wRDVBZDRfMFZpOVRUOE9PSDdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xNzYwYWYtZGMxYy00MDhjLTg2ZGQtM2RjMzVlNTQ0YWFm LzEvRlRCMDFfb29wRDVBZDRfMFZpOVRUOE9PSDdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtvMX6GR jjeoNE+razL4c65vt9w/rGcp7nMhbFI5/RU6TpljmLHWVsy0wrQSUNF5xBc7iRws 701yr03enfZnr+pVZSsAVyZeqdLohYS77DzJgS5rqaDIE93QTxpvTkcuiqOOnnal Mc8H55TZyv1oP+usQuHWTtJKDmWHQ8S7Rp+b8DtTbE4updbLEn9oMwf6TRHN5Hpx ARg/g5KOdL3Ht+77aQVdw5i/S/gRQje1N77OLyVa7IKfJrwQg+uOkLRnIKQhirFK uY3PTfab7zdJqugyJuBI5Gzms1sMvDEU3Xa4d8wTtDIOPtkYBnhAMQSSvVbFtJHX irltmNLP4yHTOg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:53:23 2025 by rpki-client