This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft File: FRRT9ILNp468mWJdgLD_w2YPlfI.mft (raw, json) Hash identifier: 0IUyVkBg3pazGapdml+7z8CPcw75qffhDygrLsT/4Go= Subject key identifier: 2D:5B:28:D9:68:3A:F2:4A:49:59:AC:98:DC:FD:47:D1:B0:42:CA:40 Authority key identifier: 15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2 Certificate issuer: /CN=151453f482cda78ebc99625d80b0ffc3660f95f2 Certificate serial: 019AF12DD6E834E7EBA99CDA840B04EFACB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft Manifest number: 1770 Signing time: Sat 06 Dec 2025 01:01:44 +0000 Manifest this update: Sat 06 Dec 2025 01:01:44 +0000 Manifest next update: Sun 07 Dec 2025 01:01:44 +0000 Files and hashes: 1: 1-lv-eyLkZwpQLTuJorHeKbcVMK8.roa (hash: tvNysXrHBHPZC5fymq/kQjA0jN47rS/9OLBH7USYU6E=) 2: FRRT9ILNp468mWJdgLD_w2YPlfI.crl (hash: YGF6w06JlpT5ZCvR5PN0AYSOza94VsThw6isy1iqOos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d6:e8:34:e7:eb:a9:9c:da:84:0b:04:ef:ac:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=151453f482cda78ebc99625d80b0ffc3660f95f2 Validity Not Before: Dec 6 01:01:44 2025 GMT Not After : Dec 7 01:01:44 2025 GMT Subject: CN=2d5b28d9683af24a4959ac98dcfd47d1b042ca40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:50:42:b6:78:96:36:30:85:3c:7e:16:cc:ed: c7:84:84:c9:71:3f:72:b7:6b:e0:16:70:88:9f:44: 7b:2a:f3:7d:2e:58:80:ca:ea:9c:11:fd:5e:52:98: 93:54:22:c6:ba:43:c0:67:24:2b:b9:78:43:79:76: 5a:a0:7b:9b:27:f1:09:b2:00:57:11:b0:2b:7a:35: d6:2d:7d:50:0c:a5:09:b1:cc:9d:7d:df:59:eb:7c: 05:e6:b3:ea:dc:e6:1f:f6:b5:2e:b7:f2:3a:39:02: 3f:d4:e7:7d:63:f2:07:d6:93:91:8f:f1:58:b6:54: 0c:9d:e6:dc:32:c7:3a:09:dc:8a:d8:93:b8:7d:93: 8e:dc:df:06:d3:c5:5a:88:e6:d8:a7:19:b9:7f:48: 9c:5e:f1:bc:53:4c:98:a5:a8:e8:ef:87:9d:b8:f7: 04:aa:8f:cf:ad:22:48:7a:94:45:e5:08:64:a6:16: 0d:5c:25:4d:0a:54:3f:b5:74:66:f4:e9:98:59:9c: 49:e8:24:99:a5:12:36:22:1b:af:a9:bb:74:4f:3d: fe:6c:22:63:1a:13:ab:9e:bb:25:55:07:2d:01:db: a9:b6:d7:ba:c0:09:f7:80:d7:df:b5:7c:41:43:c5: 6e:26:33:2a:6c:a9:c4:5f:3b:9b:3c:59:0f:0e:d2: 6a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5B:28:D9:68:3A:F2:4A:49:59:AC:98:DC:FD:47:D1:B0:42:CA:40 X509v3 Authority Key Identifier: keyid:15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c0:ce:7d:b2:6a:b2:33:60:be:40:04:ff:34:1d:83:f4:7e: 59:aa:74:4b:a5:ea:b8:e8:ca:9f:0a:72:eb:2f:ba:14:f2:35: af:15:2f:42:01:fd:54:bb:f2:93:0a:57:ee:39:2e:31:d1:1a: 7d:ad:14:d7:f3:57:82:7f:19:79:6f:d5:4f:e6:47:27:93:9e: 7f:68:9b:9b:b9:76:ab:eb:79:38:69:e4:f1:d6:9e:e4:b5:c9: f6:98:fe:3f:f0:f3:6b:f1:f4:bc:39:9b:f3:60:95:1f:1f:0b: 97:3f:ab:9c:8e:7b:28:15:e1:44:ac:65:5f:44:89:b4:cc:6d: 0c:38:40:08:a9:ea:4d:65:db:a3:1d:2c:41:58:ef:b2:c9:3b: 42:e4:e5:6c:08:46:db:0c:37:4f:0f:8b:f4:1f:b4:60:75:c3: 82:1c:dc:78:d4:7a:e5:82:4d:95:3c:85:3c:86:e1:df:d7:0a: 6a:e7:0d:a2:85:72:fe:4a:ac:d5:59:82:3d:be:09:f6:f0:32: e5:0d:bd:bb:0f:58:76:07:70:16:cf:a7:32:8c:35:13:0f:d8: 6f:66:5a:37:d0:9f:da:54:2b:24:89:18:99:aa:b8:8d:2c:16: 34:19:81:ca:98:24:f3:ab:53:8a:77:09:7f:aa:39:05:c3:ae: 81:7a:20:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdboNOfrqZzahAsE76y0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MTQ1M2Y0ODJjZGE3OGViYzk5NjI1ZDgwYjBmZmMzNjYw Zjk1ZjIwHhcNMjUxMjA2MDEwMTQ0WhcNMjUxMjA3MDEwMTQ0WjAzMTEwLwYDVQQD EygyZDViMjhkOTY4M2FmMjRhNDk1OWFjOThkY2ZkNDdkMWIwNDJjYTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylBCtniWNjCFPH4WzO3HhITJcT9y t2vgFnCIn0R7KvN9LliAyuqcEf1eUpiTVCLGukPAZyQruXhDeXZaoHubJ/EJsgBX EbArejXWLX1QDKUJscydfd9Z63wF5rPq3OYf9rUut/I6OQI/1Od9Y/IH1pORj/FY tlQMnebcMsc6CdyK2JO4fZOO3N8G08VaiObYpxm5f0icXvG8U0yYpajo74eduPcE qo/PrSJIepRF5QhkphYNXCVNClQ/tXRm9OmYWZxJ6CSZpRI2Ihuvqbt0Tz3+bCJj GhOrnrslVQctAduptte6wAn3gNfftXxBQ8VuJjMqbKnEXzubPFkPDtJqFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1bKNloOvJKSVmsmNz9R9GwQspAMB8GA1UdIwQY MBaAFBUUU/SCzaeOvJliXYCw/8NmD5XyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC81OWZjZjAtMWQ1Yy00ZWNiLWJmODct M2JjYjhiZjhiYmZlLzEvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC81OWZjZjAtMWQ1Yy00ZWNiLWJmODctM2JjYjhiZjhiYmZl LzEvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcDOfbJq sjNgvkAE/zQdg/R+Wap0S6XquOjKnwpy6y+6FPI1rxUvQgH9VLvykwpX7jkuMdEa fa0U1/NXgn8ZeW/VT+ZHJ5Oef2ibm7l2q+t5OGnk8dae5LXJ9pj+P/Dza/H0vDmb 82CVHx8Llz+rnI57KBXhRKxlX0SJtMxtDDhACKnqTWXbox0sQVjvssk7QuTlbAhG 2ww3Tw+L9B+0YHXDghzceNR65YJNlTyFPIbh39cKaucNooVy/kqs1VmCPb4J9vAy 5Q29uw9YdgdwFs+nMow1Ew/Yb2ZaN9Cf2lQrJIkYmaq4jSwWNBmBypgk86tTincJ f6o5BcOugXogWA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:37 2025 by rpki-client