This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft File: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft (raw, json) Hash identifier: YhqxoR2hkEwErYixS5+NqO/HDSr1BzTyYaoyM5IF8DE= Subject key identifier: D2:B5:7F:24:50:AC:58:FA:AA:12:40:6D:D9:DB:01:49:52:8F:2A:AD Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37 Certificate issuer: /CN=145ceb292089e0df75719db3e96c509754f94837 Certificate serial: 019B2BC1A86FE0871EB27CD51CAA13E10130 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft Manifest number: 1788 Signing time: Wed 17 Dec 2025 10:01:10 +0000 Manifest this update: Wed 17 Dec 2025 10:01:10 +0000 Manifest next update: Thu 18 Dec 2025 10:01:10 +0000 Files and hashes: 1: 51NXVgAr2I1eXTe9a9kizTFuHJ4.roa (hash: 1iN5vxfuwXGFtbxcnMWPqsUykL0ZxXTKprGUJelmE44=) 2: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl (hash: e/Hdh7cl9UwZeE1rBRkD5lX5AoAL2KRyFz40nxMatEQ=) 3: bzGs0AfDNETTzCPGuhNEtlqP4Lk.roa (hash: W1PVimH7iIBpOpHAPclX+yhqZLE6KhqWf6pI/1uvpY0=) 4: sySDvKNNenjKTqJVkF08wLomsjM.asa (hash: +kidr1/LWB3zdQ+Hae9NW1Zctl0LMXwwKKQuCxYbKjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:a8:6f:e0:87:1e:b2:7c:d5:1c:aa:13:e1:01:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=145ceb292089e0df75719db3e96c509754f94837 Validity Not Before: Dec 17 10:01:10 2025 GMT Not After : Dec 18 10:01:10 2025 GMT Subject: CN=d2b57f2450ac58faaa12406dd9db0149528f2aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b3:40:59:f1:73:50:7f:f8:ee:a8:91:3f:46: cf:ae:9b:55:5f:87:f1:6c:0f:af:de:55:3f:a7:33: 67:3f:a8:6e:a3:35:60:81:d4:2a:d4:4f:99:9c:1f: 1c:69:89:c7:60:b0:c8:8d:ba:03:dc:99:11:18:48: 16:a3:9f:b2:65:09:07:24:0d:52:39:42:61:2f:09: ca:da:34:7c:90:48:03:e7:95:e5:00:5b:c9:ec:cf: 0f:29:2b:4a:64:bd:2a:2e:c8:dc:c5:1c:8b:ae:f7: 79:ad:a2:b1:d5:c8:5a:2d:b4:c1:9b:7f:8f:9d:1e: bc:ad:ca:da:14:04:09:24:aa:1c:bf:af:42:b5:a2: 16:9e:71:fb:98:a5:3b:82:46:de:53:25:06:e6:63: 12:67:ad:0b:0f:f6:59:86:27:d9:26:8b:39:e0:88: fa:0a:81:ac:10:ce:9f:bd:36:e2:43:80:8b:ba:1b: b9:83:5e:a8:2a:86:7f:95:a5:d2:6d:8d:c3:b2:47: f1:8d:c3:58:25:f6:40:26:17:3c:ba:d5:62:1a:97: 79:01:dd:27:e2:8b:b1:6e:98:15:72:b7:c4:21:8e: e9:55:31:6a:d7:a6:f7:75:f9:f6:d3:d1:75:25:95: f8:76:eb:4f:27:04:4d:85:4b:10:81:c3:ae:58:6e: e0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B5:7F:24:50:AC:58:FA:AA:12:40:6D:D9:DB:01:49:52:8F:2A:AD X509v3 Authority Key Identifier: keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:24:54:f8:90:47:f3:32:73:d3:cb:69:9a:35:54:65:1d:7f: 96:d9:69:8d:4b:fc:a7:fd:e3:d0:d1:87:ba:38:99:c1:32:c6: 13:1e:43:b0:0a:77:bf:bd:e9:73:71:f4:f6:6b:97:1b:00:2a: 95:e4:47:2a:ba:b4:7b:5d:c5:b3:c9:46:d0:08:38:23:6b:12: 32:ea:ed:40:d1:fe:a9:71:55:a7:6c:6e:32:81:10:c1:76:7b: f8:f8:7d:5c:41:9c:51:33:df:37:e8:83:40:01:81:66:2f:3f: 6b:a4:9c:b9:7c:44:d4:67:4c:1f:97:0e:78:9f:88:8b:4a:6a: c0:91:8f:8f:9c:c7:1a:03:64:f9:2f:4d:6b:62:45:a1:7b:9f: ce:2e:f8:ca:2c:15:9a:64:75:47:3b:76:9b:38:02:cf:1b:15: 43:30:7d:56:d8:99:7c:64:e0:8f:0f:13:a7:e0:b4:a0:ab:32: fa:06:b7:1e:cf:ed:99:d4:09:52:1d:2c:87:6c:32:6e:53:21: 08:13:50:b9:79:62:92:f5:bc:68:ca:4b:1a:44:1f:0f:d0:d1: f4:c2:38:13:c8:6c:ed:bd:8d:0d:59:a6:65:be:2b:d4:41:db: 5a:14:dc:08:87:b4:f8:5d:b5:1f:e6:38:2a:ed:f8:bc:8d:c9: eb:a9:16:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwahv4IcesnzVHKoT4QEwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NWNlYjI5MjA4OWUwZGY3NTcxOWRiM2U5NmM1MDk3NTRm OTQ4MzcwHhcNMjUxMjE3MTAwMTEwWhcNMjUxMjE4MTAwMTEwWjAzMTEwLwYDVQQD EyhkMmI1N2YyNDUwYWM1OGZhYWExMjQwNmRkOWRiMDE0OTUyOGYyYWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLNAWfFzUH/47qiRP0bPrptVX4fx bA+v3lU/pzNnP6huozVggdQq1E+ZnB8caYnHYLDIjboD3JkRGEgWo5+yZQkHJA1S OUJhLwnK2jR8kEgD55XlAFvJ7M8PKStKZL0qLsjcxRyLrvd5raKx1chaLbTBm3+P nR68rcraFAQJJKocv69CtaIWnnH7mKU7gkbeUyUG5mMSZ60LD/ZZhifZJos54Ij6 CoGsEM6fvTbiQ4CLuhu5g16oKoZ/laXSbY3DskfxjcNYJfZAJhc8utViGpd5Ad0n 4ouxbpgVcrfEIY7pVTFq16b3dfn209F1JZX4dutPJwRNhUsQgcOuWG7g9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNK1fyRQrFj6qhJAbdnbAUlSjyqtMB8GA1UdIwQY MBaAFBRc6ykgieDfdXGds+lsUJdU+Ug3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkZ6cktTQ0o0TjkxY1oyejZXeFFsMVQ1U0RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jNzFmZGUtM2VmMi00YmY3LTg2NDEt MTI3MTljMjYxY2MwLzEvRkZ6cktTQ0o0TjkxY1oyejZXeFFsMVQ1U0RjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9jNzFmZGUtM2VmMi00YmY3LTg2NDEtMTI3MTljMjYxY2Mw LzEvRkZ6cktTQ0o0TjkxY1oyejZXeFFsMVQ1U0RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdiRU+JBH 8zJz08tpmjVUZR1/ltlpjUv8p/3j0NGHujiZwTLGEx5DsAp3v73pc3H09muXGwAq leRHKrq0e13Fs8lG0Ag4I2sSMurtQNH+qXFVp2xuMoEQwXZ7+Ph9XEGcUTPfN+iD QAGBZi8/a6ScuXxE1GdMH5cOeJ+Ii0pqwJGPj5zHGgNk+S9Na2JFoXufzi74yiwV mmR1Rzt2mzgCzxsVQzB9VtiZfGTgjw8Tp+C0oKsy+ga3Hs/tmdQJUh0sh2wyblMh CBNQuXlikvW8aMpLGkQfD9DR9MI4E8hs7b2NDVmmZb4r1EHbWhTcCIe0+F21H+Y4 Ku34vI3J66kWWA== -----END CERTIFICATE-----Generated at Wed Dec 17 17:06:40 2025 by rpki-client