This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft File: FRRT9ILNp468mWJdgLD_w2YPlfI.mft (raw, json) Hash identifier: ik3yJK/AoX2KaLcgyZ6WB/zMaOx7AzyHUkrXJHP5gaQ= Subject key identifier: E0:BC:78:29:E5:67:B4:27:DC:1C:53:92:7D:4F:35:18:BE:51:AA:FB Authority key identifier: 15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2 Certificate issuer: /CN=151453f482cda78ebc99625d80b0ffc3660f95f2 Certificate serial: 019B30E8DFE5CB44B4D231AC6B64A1EB9051 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft Manifest number: 1791 Signing time: Thu 18 Dec 2025 10:02:06 +0000 Manifest this update: Thu 18 Dec 2025 10:02:06 +0000 Manifest next update: Fri 19 Dec 2025 10:02:06 +0000 Files and hashes: 1: 1-lv-eyLkZwpQLTuJorHeKbcVMK8.roa (hash: tvNysXrHBHPZC5fymq/kQjA0jN47rS/9OLBH7USYU6E=) 2: FRRT9ILNp468mWJdgLD_w2YPlfI.crl (hash: wtUReH3rlVDfnHtjBjnduyaGmqoVKB00hKQ2ldkXn9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:df:e5:cb:44:b4:d2:31:ac:6b:64:a1:eb:90:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=151453f482cda78ebc99625d80b0ffc3660f95f2 Validity Not Before: Dec 18 10:02:06 2025 GMT Not After : Dec 19 10:02:06 2025 GMT Subject: CN=e0bc7829e567b427dc1c53927d4f3518be51aafb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:03:98:6d:6a:37:d1:69:50:19:e4:1c:fc:d3: b0:2d:54:17:dc:d0:e4:64:c1:d5:5c:df:6e:32:7e: 38:b8:70:3f:c8:99:7e:d4:2f:11:84:6f:28:b3:e7: eb:6b:4e:64:c7:dc:19:cd:a3:80:3f:e1:70:be:98: 07:91:44:2a:39:e7:b9:df:b5:59:64:aa:6b:bd:5e: 9b:d1:e4:9a:13:75:40:93:6f:24:b5:b8:e1:60:66: 55:db:ff:75:0d:48:ef:62:27:9c:7c:21:ea:ca:37: ff:13:cf:1a:ba:42:5b:59:19:04:58:2b:92:6a:10: 3b:1d:94:d7:24:7a:c3:62:dc:97:91:17:bb:75:37: 58:aa:cc:74:c4:ad:95:a0:f5:da:2f:25:35:ed:43: 62:ff:25:14:9d:92:ca:04:7a:91:c2:59:18:8a:f0: 4b:c6:31:3a:bd:f7:e7:d1:8f:76:b0:2a:a2:21:e3: 6c:cc:0e:77:54:38:c6:25:a5:7d:26:e5:31:0e:55: e5:f3:6c:94:1d:6c:43:4e:ff:c4:e7:4a:de:b4:d2: 2d:e1:8a:57:43:9e:37:77:83:a7:2d:9c:77:00:70: e8:89:ca:26:78:ad:23:60:da:e9:bb:8e:01:b4:fc: c6:62:2e:43:17:cd:ea:91:7b:bb:e3:17:90:38:9d: b4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BC:78:29:E5:67:B4:27:DC:1C:53:92:7D:4F:35:18:BE:51:AA:FB X509v3 Authority Key Identifier: keyid:15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:d4:b0:bc:bb:08:cc:fc:2c:0c:7e:cc:b8:76:eb:f8:0e:c8: e4:29:e3:97:68:e5:1e:08:57:0f:e7:1f:2a:79:88:1c:ca:00: 2f:00:79:04:75:59:dc:5a:bc:97:63:84:32:76:4f:27:20:2c: 96:32:23:33:ea:07:4c:03:1c:dc:0d:d5:61:c0:75:25:7a:18: 8a:fe:94:b6:26:50:d3:3d:2f:38:47:57:ba:f6:53:2f:e7:12: 71:b2:ff:cf:dd:d5:1c:0c:ae:b1:25:e1:d8:d1:0a:9f:9b:b7: 89:06:42:cd:1b:a2:31:df:c1:4d:5f:48:84:6f:08:92:6e:5e: d4:88:29:8b:22:d2:2c:a7:05:45:00:a9:6e:fa:e8:91:b6:40: 0e:3c:15:78:22:fb:19:b3:54:01:41:4e:91:34:63:57:48:2a: d3:2b:bb:06:5c:a5:a2:b9:41:74:70:6a:04:86:a5:dd:49:fb: 7d:cc:5d:06:ac:ee:6c:c9:9f:2d:9e:3c:ed:77:32:dc:c6:70: a6:06:4b:42:f8:ac:02:f4:31:b8:25:13:14:0f:fa:7d:6c:06: 34:5c:41:81:cf:9a:ae:79:7c:e5:95:e2:97:5b:19:48:ed:84: 0c:20:71:c7:93:bd:2c:09:08:6f:2e:2a:39:84:51:20:27:16: 94:31:75:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6N/ly0S00jGsa2Sh65BRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MTQ1M2Y0ODJjZGE3OGViYzk5NjI1ZDgwYjBmZmMzNjYw Zjk1ZjIwHhcNMjUxMjE4MTAwMjA2WhcNMjUxMjE5MTAwMjA2WjAzMTEwLwYDVQQD EyhlMGJjNzgyOWU1NjdiNDI3ZGMxYzUzOTI3ZDRmMzUxOGJlNTFhYWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAOYbWo30WlQGeQc/NOwLVQX3NDk ZMHVXN9uMn44uHA/yJl+1C8RhG8os+fra05kx9wZzaOAP+FwvpgHkUQqOee537VZ ZKprvV6b0eSaE3VAk28ktbjhYGZV2/91DUjvYiecfCHqyjf/E88aukJbWRkEWCuS ahA7HZTXJHrDYtyXkRe7dTdYqsx0xK2VoPXaLyU17UNi/yUUnZLKBHqRwlkYivBL xjE6vffn0Y92sCqiIeNszA53VDjGJaV9JuUxDlXl82yUHWxDTv/E50retNIt4YpX Q543d4OnLZx3AHDoicomeK0jYNrpu44BtPzGYi5DF83qkXu74xeQOJ201QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOC8eCnlZ7Qn3BxTkn1PNRi+Uar7MB8GA1UdIwQY MBaAFBUUU/SCzaeOvJliXYCw/8NmD5XyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC81OWZjZjAtMWQ1Yy00ZWNiLWJmODct M2JjYjhiZjhiYmZlLzEvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC81OWZjZjAtMWQ1Yy00ZWNiLWJmODctM2JjYjhiZjhiYmZl LzEvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD9SwvLsI zPwsDH7MuHbr+A7I5Cnjl2jlHghXD+cfKnmIHMoALwB5BHVZ3Fq8l2OEMnZPJyAs ljIjM+oHTAMc3A3VYcB1JXoYiv6UtiZQ0z0vOEdXuvZTL+cScbL/z93VHAyusSXh 2NEKn5u3iQZCzRuiMd/BTV9IhG8Ikm5e1IgpiyLSLKcFRQCpbvrokbZADjwVeCL7 GbNUAUFOkTRjV0gq0yu7BlylorlBdHBqBIal3Un7fcxdBqzubMmfLZ487Xcy3MZw pgZLQvisAvQxuCUTFA/6fWwGNFxBgc+arnl85ZXil1sZSO2EDCBxx5O9LAkIby4q OYRRICcWlDF1Iw== -----END CERTIFICATE-----Generated at Thu Dec 18 12:45:27 2025 by rpki-client