This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft File: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft (raw, json) Hash identifier: EgXq8ABOCslN5fzGFB17Fyii/8heomOOkw7qGFm0qNw= Subject key identifier: 53:F3:88:A8:76:3F:CB:7F:FF:97:EF:B5:3F:18:62:D5:27:F2:78:C6 Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37 Certificate issuer: /CN=145ceb292089e0df75719db3e96c509754f94837 Certificate serial: 019AF49BFA1501D571A743F2FD5DD59E3C77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft Manifest number: 176B Signing time: Sat 06 Dec 2025 17:00:53 +0000 Manifest this update: Sat 06 Dec 2025 17:00:53 +0000 Manifest next update: Sun 07 Dec 2025 17:00:53 +0000 Files and hashes: 1: 51NXVgAr2I1eXTe9a9kizTFuHJ4.roa (hash: 1iN5vxfuwXGFtbxcnMWPqsUykL0ZxXTKprGUJelmE44=) 2: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl (hash: zO9okRyttX62bAG9NzTRKP6g9QgX17zTIIVHP+VW8jc=) 3: bzGs0AfDNETTzCPGuhNEtlqP4Lk.roa (hash: W1PVimH7iIBpOpHAPclX+yhqZLE6KhqWf6pI/1uvpY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:fa:15:01:d5:71:a7:43:f2:fd:5d:d5:9e:3c:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=145ceb292089e0df75719db3e96c509754f94837 Validity Not Before: Dec 6 17:00:53 2025 GMT Not After : Dec 7 17:00:53 2025 GMT Subject: CN=53f388a8763fcb7fff97efb53f1862d527f278c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b2:a4:c9:c0:5b:51:fb:f4:42:12:5f:7d:c7: ef:1d:b5:ad:b0:18:ac:30:44:42:f1:da:41:c8:2d: 03:01:d7:7b:4c:51:4a:c6:41:c6:ca:5d:72:a5:25: 85:8b:04:ce:85:00:5f:48:cd:d5:cb:57:5d:86:e6: 52:02:3b:82:11:e1:eb:a3:20:03:c0:30:31:59:8d: 6e:ea:7c:7b:30:22:31:40:bf:e2:a0:80:ee:1a:48: 94:b1:6c:fa:06:62:11:47:62:44:2f:30:e8:a0:6b: 30:d7:2c:d3:b5:31:88:c6:af:36:c1:a1:98:aa:b4: af:b7:79:03:0d:75:53:75:94:02:3a:5e:99:e7:25: b9:92:54:eb:54:ad:a9:7f:0a:80:96:35:e4:cf:79: 5a:f4:7a:10:6d:ac:61:ee:1e:9b:45:80:c8:aa:22: 11:07:a4:2e:45:5c:1f:bb:49:5c:b0:13:73:a2:95: 23:a8:39:49:87:23:85:16:a9:b8:e9:40:ff:42:c8: 0f:62:69:3f:3c:66:a2:42:2e:63:d3:ba:df:3c:8a: d1:b8:55:9e:70:3a:67:f2:c4:3a:61:cc:5b:40:51: 61:80:0b:04:fc:98:b8:b4:a8:2a:4d:d4:56:4e:08: 04:6f:f3:5e:3a:ca:be:ba:e2:8a:0f:1a:ac:ee:90: f6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F3:88:A8:76:3F:CB:7F:FF:97:EF:B5:3F:18:62:D5:27:F2:78:C6 X509v3 Authority Key Identifier: keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:32:d3:98:1f:58:91:e2:81:15:b8:2d:e2:6d:c7:bf:6e:53: 42:7c:a0:d0:37:53:84:25:d4:60:c3:66:92:bc:73:9b:8f:c3: f9:50:b5:f7:cf:23:0c:22:ad:78:6e:2e:9d:16:42:a6:1a:02: c4:c6:4d:d4:5a:e5:ae:59:f9:cb:e4:35:3f:75:f2:26:62:2f: ce:84:1a:6e:3d:d8:87:d7:eb:12:8d:43:93:43:42:b8:de:96: 90:48:fe:ad:fd:81:d9:b0:45:36:3b:60:0b:a7:4a:3a:37:d8: a2:bf:59:24:5e:94:a0:4f:aa:69:83:e6:58:92:96:b0:ec:3c: 72:ed:02:a3:b1:c3:8b:18:ab:af:33:cc:99:8c:a4:08:57:4a: 92:b4:0d:23:dd:d4:dd:96:fc:1a:15:dc:d9:71:f8:47:f5:ed: 79:06:95:df:ab:b7:52:76:c0:49:0e:e8:f9:3a:50:cb:b9:72: dd:28:83:82:e7:78:b2:74:ef:90:4a:de:75:52:d4:3e:ff:5b: e6:7b:e7:d4:c6:11:7f:6b:58:e4:e0:73:41:b8:49:4d:f8:42: 68:19:b9:d1:fe:33:02:11:9f:0d:64:dc:78:2d:20:af:32:d5: b7:a5:a2:6c:66:9d:b1:cb:9d:58:b3:15:e4:1c:42:c6:91:20: 93:b2:97:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m/oVAdVxp0Py/V3Vnjx3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NWNlYjI5MjA4OWUwZGY3NTcxOWRiM2U5NmM1MDk3NTRm OTQ4MzcwHhcNMjUxMjA2MTcwMDUzWhcNMjUxMjA3MTcwMDUzWjAzMTEwLwYDVQQD Eyg1M2YzODhhODc2M2ZjYjdmZmY5N2VmYjUzZjE4NjJkNTI3ZjI3OGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LKkycBbUfv0QhJffcfvHbWtsBis MERC8dpByC0DAdd7TFFKxkHGyl1ypSWFiwTOhQBfSM3Vy1ddhuZSAjuCEeHroyAD wDAxWY1u6nx7MCIxQL/ioIDuGkiUsWz6BmIRR2JELzDooGsw1yzTtTGIxq82waGY qrSvt3kDDXVTdZQCOl6Z5yW5klTrVK2pfwqAljXkz3la9HoQbaxh7h6bRYDIqiIR B6QuRVwfu0lcsBNzopUjqDlJhyOFFqm46UD/QsgPYmk/PGaiQi5j07rfPIrRuFWe cDpn8sQ6YcxbQFFhgAsE/Ji4tKgqTdRWTggEb/NeOsq+uuKKDxqs7pD2gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPziKh2P8t//5fvtT8YYtUn8njGMB8GA1UdIwQY MBaAFBRc6ykgieDfdXGds+lsUJdU+Ug3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkZ6cktTQ0o0TjkxY1oyejZXeFFsMVQ1U0RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jNzFmZGUtM2VmMi00YmY3LTg2NDEt MTI3MTljMjYxY2MwLzEvRkZ6cktTQ0o0TjkxY1oyejZXeFFsMVQ1U0RjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9jNzFmZGUtM2VmMi00YmY3LTg2NDEtMTI3MTljMjYxY2Mw LzEvRkZ6cktTQ0o0TjkxY1oyejZXeFFsMVQ1U0RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjLTmB9Y keKBFbgt4m3Hv25TQnyg0DdThCXUYMNmkrxzm4/D+VC1988jDCKteG4unRZCphoC xMZN1Frlrln5y+Q1P3XyJmIvzoQabj3Yh9frEo1Dk0NCuN6WkEj+rf2B2bBFNjtg C6dKOjfYor9ZJF6UoE+qaYPmWJKWsOw8cu0Co7HDixirrzPMmYykCFdKkrQNI93U 3Zb8GhXc2XH4R/XteQaV36u3UnbASQ7o+TpQy7ly3SiDgud4snTvkEredVLUPv9b 5nvn1MYRf2tY5OBzQbhJTfhCaBm50f4zAhGfDWTceC0grzLVt6WibGadscudWLMV 5BxCxpEgk7KXzg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:18 2025 by rpki-client