This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft File: ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft (raw, json) Hash identifier: x+x2TE5rYS7UzVh4QLm+mfwGw98Lyhh1wiz1qJGJIKQ= Subject key identifier: DA:74:B0:29:29:BF:11:DF:27:05:3A:01:3C:5A:AC:C2:AA:64:1D:16 Authority key identifier: 7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52 Certificate issuer: /CN=7ed77eafdb387afd17574272c9374c8180370f52 Certificate serial: 019AF2AD5D63D3A7D1AF73C135C63C1E364F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft Manifest number: 0216 Signing time: Sat 06 Dec 2025 08:00:39 +0000 Manifest this update: Sat 06 Dec 2025 08:00:39 +0000 Manifest next update: Sun 07 Dec 2025 08:00:39 +0000 Files and hashes: 1: ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl (hash: MRj06Ug+S0WewGM0TXz8ZXXlDfoetuSx04DSZtxFpz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:5d:63:d3:a7:d1:af:73:c1:35:c6:3c:1e:36:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ed77eafdb387afd17574272c9374c8180370f52 Validity Not Before: Dec 6 08:00:39 2025 GMT Not After : Dec 7 08:00:39 2025 GMT Subject: CN=da74b02929bf11df27053a013c5aacc2aa641d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b8:2b:c1:ec:2c:53:72:6e:0c:75:8e:ae:c1: 79:72:79:57:e7:fa:3a:95:8f:67:42:19:1d:8b:80: dc:25:91:10:74:6d:67:3b:4b:79:5e:81:1d:33:19: 55:c8:1a:91:b8:b4:7d:ae:52:04:a4:96:c8:89:b0: 45:6c:b8:7f:35:98:ac:68:e0:32:b2:c8:5a:e3:a4: 65:0e:d2:80:4e:d1:e3:33:d5:82:ca:e4:ad:2e:c3: 4b:ba:a5:9b:66:e8:9a:37:b0:a0:8b:d4:b9:43:e7: 25:28:5a:f9:0f:7f:90:7b:ff:7f:df:d4:7d:b8:94: 62:5c:48:25:de:18:11:c7:1a:71:9a:e9:7a:01:05: f4:3b:f0:ec:1b:fc:2d:67:11:91:d6:6a:1e:59:b2: bf:e7:7a:9f:0f:0d:cb:e8:7b:3b:9e:52:c9:a3:17: 21:ab:ee:68:e7:90:33:56:b7:0b:1b:54:e1:6c:37: b4:de:1d:4d:85:34:d0:18:c6:56:00:bf:86:88:da: 40:01:63:49:9a:f8:14:7b:71:47:f9:9d:78:30:26: 64:63:a3:ca:78:15:71:48:2d:c4:8f:3a:79:16:f1: c8:c2:ce:59:64:de:eb:18:38:cd:f8:00:16:81:cc: 78:e6:dc:e3:90:e6:0b:c5:f7:77:1c:97:04:4c:b2: 2e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:74:B0:29:29:BF:11:DF:27:05:3A:01:3C:5A:AC:C2:AA:64:1D:16 X509v3 Authority Key Identifier: keyid:7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:59:e4:d7:b5:74:3d:3f:57:5d:00:b8:5b:c0:21:c9:41:3f: c4:0a:e8:fb:1a:3e:ae:59:ae:fd:0f:b1:9d:5f:ce:24:a2:11: 74:c2:a0:f6:d0:3b:fc:91:5a:c3:fb:d0:96:e3:7d:a7:8e:b8: fd:4f:af:10:7e:dd:e1:9c:07:28:ff:ed:2c:b9:82:6a:d0:38: 01:94:ff:fb:d3:77:24:47:2f:a7:49:73:ee:bf:bd:86:5c:4a: fe:43:af:66:62:81:b9:fc:c4:db:84:a4:ca:b7:21:f1:95:41: c1:82:6f:63:27:e0:f5:05:43:32:59:f8:92:21:05:05:0e:f8: 38:50:bb:d8:00:01:c8:af:d9:fe:7f:f2:dc:24:59:cd:8d:94: 21:4f:7a:b9:7d:b3:0e:dd:9a:87:2c:6c:41:7c:b2:97:bf:8b: 61:9c:7f:54:7a:5a:21:82:70:43:d0:b7:0f:70:7c:09:17:23: ac:06:4c:80:ca:80:17:92:45:70:2c:60:56:71:b8:ce:0e:15: a7:4d:8e:28:3b:cd:a0:cb:ff:61:48:36:ad:08:27:38:50:4a: 76:e3:f7:77:44:d3:2a:a3:ee:92:5d:5c:51:63:28:96:64:84: 19:15:27:be:9c:08:a0:ea:a2:bf:f1:7f:18:5a:43:1b:60:8f: 12:3b:aa:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrV1j06fRr3PBNcY8HjZPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlZDc3ZWFmZGIzODdhZmQxNzU3NDI3MmM5Mzc0YzgxODAz NzBmNTIwHhcNMjUxMjA2MDgwMDM5WhcNMjUxMjA3MDgwMDM5WjAzMTEwLwYDVQQD EyhkYTc0YjAyOTI5YmYxMWRmMjcwNTNhMDEzYzVhYWNjMmFhNjQxZDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbgrwewsU3JuDHWOrsF5cnlX5/o6 lY9nQhkdi4DcJZEQdG1nO0t5XoEdMxlVyBqRuLR9rlIEpJbIibBFbLh/NZisaOAy ssha46RlDtKATtHjM9WCyuStLsNLuqWbZuiaN7Cgi9S5Q+clKFr5D3+Qe/9/39R9 uJRiXEgl3hgRxxpxmul6AQX0O/DsG/wtZxGR1moeWbK/53qfDw3L6Hs7nlLJoxch q+5o55AzVrcLG1ThbDe03h1NhTTQGMZWAL+GiNpAAWNJmvgUe3FH+Z14MCZkY6PK eBVxSC3Ejzp5FvHIws5ZZN7rGDjN+AAWgcx45tzjkOYLxfd3HJcETLIugwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNp0sCkpvxHfJwU6ATxarMKqZB0WMB8GA1UdIwQY MBaAFH7Xfq/bOHr9F1dCcsk3TIGANw9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnRkLXI5czRldjBYVjBKeXlUZE1nWUEzRDFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYmM5ZTItNTBmNi00NjVhLTllY2Qt YmM0MDE3Yzk0NTliLzEvZnRkLXI5czRldjBYVjBKeXlUZE1nWUEzRDFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iYmM5ZTItNTBmNi00NjVhLTllY2QtYmM0MDE3Yzk0NTli LzEvZnRkLXI5czRldjBYVjBKeXlUZE1nWUEzRDFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVnk17V0 PT9XXQC4W8AhyUE/xAro+xo+rlmu/Q+xnV/OJKIRdMKg9tA7/JFaw/vQluN9p464 /U+vEH7d4ZwHKP/tLLmCatA4AZT/+9N3JEcvp0lz7r+9hlxK/kOvZmKBufzE24Sk yrch8ZVBwYJvYyfg9QVDMln4kiEFBQ74OFC72AAByK/Z/n/y3CRZzY2UIU96uX2z Dt2ahyxsQXyyl7+LYZx/VHpaIYJwQ9C3D3B8CRcjrAZMgMqAF5JFcCxgVnG4zg4V p02OKDvNoMv/YUg2rQgnOFBKduP3d0TTKqPukl1cUWMolmSEGRUnvpwIoOqiv/F/ GFpDG2CPEjuqwA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:23:47 2025 by rpki-client