This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft File: ftCMDM2oAs8gznq97qICFOBeR68.mft (raw, json) Hash identifier: Uzu8chOWOVmS6cxVPlRHSQg5iKbPkTxnaVStTr56yM4= Subject key identifier: 0C:A3:44:C1:7D:FA:49:C7:C8:99:E2:9E:3F:FA:F5:8E:F2:22:CA:2F Authority key identifier: 7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF Certificate issuer: /CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af Certificate serial: 019AF209A899920564DC479AA3BDADC727BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:50 +0000 Manifest this update: Sat 06 Dec 2025 05:01:50 +0000 Manifest next update: Sun 07 Dec 2025 05:01:50 +0000 Files and hashes: 1: P79ilXjNNqLG_ABRYWZBAk8XzIM.roa (hash: z414yhHihxRqPfk1ej5lxFnTCRyHE+z/dZVS4h4vn3A=) 2: ftCMDM2oAs8gznq97qICFOBeR68.crl (hash: tcqz5mDZrxu/km6mDODZHLIgWb7tahF/UVoJCeO4jfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a8:99:92:05:64:dc:47:9a:a3:bd:ad:c7:27:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af Validity Not Before: Dec 6 05:01:50 2025 GMT Not After : Dec 7 05:01:50 2025 GMT Subject: CN=0ca344c17dfa49c7c899e29e3ffaf58ef222ca2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:08:fe:89:d9:1d:b8:a7:fb:2c:a9:01:0f:2e: 1b:cc:9e:78:99:39:06:5b:9a:ac:82:c1:81:02:b1: 14:e2:fc:f0:c9:52:5b:68:f6:57:d4:7c:f5:88:52: dc:03:bc:37:fe:38:5f:30:08:c0:86:df:57:e1:e1: 04:e2:c6:31:26:a7:ca:02:0f:59:6d:d7:3e:c9:6a: bf:a1:b3:23:ee:2b:6f:86:83:cf:71:c3:59:45:64: 0d:c5:39:19:9d:2d:ff:47:f0:96:6c:98:f2:8a:d2: 5a:ad:27:ec:53:e9:64:3c:62:06:ab:bd:9a:c1:b1: 3a:15:e4:21:96:cd:cc:7e:01:e0:7e:ed:5d:06:b8: cc:d4:7b:9e:ef:07:c0:56:f1:0e:c5:db:ab:e3:5b: 18:30:de:03:76:d7:b1:18:a6:c4:84:81:1f:7a:a6: 76:d8:c0:7b:b1:ec:aa:a2:48:7f:21:6a:bb:10:64: a3:33:cd:f3:5d:99:55:c9:21:c5:54:2a:a5:0b:e7: 00:14:e7:88:13:04:dd:e2:3b:93:b6:6b:b4:56:a5: b7:71:f2:b3:43:5a:e5:16:31:03:31:57:26:c7:ff: e6:6f:69:06:ae:57:63:d8:63:e6:ab:bc:1a:6e:37: c6:38:9b:48:af:a7:5f:3e:4c:fe:80:cc:ab:2c:f8: 68:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A3:44:C1:7D:FA:49:C7:C8:99:E2:9E:3F:FA:F5:8E:F2:22:CA:2F X509v3 Authority Key Identifier: keyid:7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:ca:d3:a6:cb:f7:df:c1:9f:3d:66:17:67:29:44:a1:63:96: cb:22:7e:73:fc:f2:e4:9b:9e:21:95:7c:6a:21:00:b9:9f:45: fc:8e:15:9d:52:c7:db:88:87:08:39:dd:20:77:07:d5:01:3e: f4:c7:d0:3d:94:84:55:95:9f:1a:3c:58:a8:4b:5a:59:2b:9e: 46:77:5b:06:a9:73:ec:bb:3a:f3:05:8c:6f:ac:e2:9d:b9:37: 89:77:92:d1:79:56:ed:1f:8d:b8:74:51:b6:35:90:20:24:d5: 6a:92:7d:86:c5:d7:b1:0d:55:d9:61:f1:2b:3d:3d:a7:8c:e5: 10:03:65:7f:a4:32:d7:fe:51:2e:1f:8a:30:42:1d:88:6d:39: 3c:09:af:d5:5a:2d:e5:39:05:ed:cc:94:9f:aa:44:74:e3:0a: e3:cb:f5:c2:73:6d:30:d1:59:8e:ea:c0:4a:5a:fe:1a:9a:d7: aa:e9:38:4c:9c:8e:7c:ff:25:98:91:11:e8:e1:b2:8b:5b:58: 93:82:e1:1f:9d:c0:78:c7:42:30:b0:5b:03:96:08:91:39:1d: 90:56:f2:de:4a:82:e6:dc:60:3a:82:18:38:26:d8:53:66:4f: 76:d4:1f:19:8c:af:3c:64:d5:70:a0:dd:9d:c9:9d:5c:0c:7b: 16:d4:1f:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaiZkgVk3Eeao72txye7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlZDA4YzBjY2RhODAyY2YyMGNlN2FiZGVlYTIwMjE0ZTA1 ZTQ3YWYwHhcNMjUxMjA2MDUwMTUwWhcNMjUxMjA3MDUwMTUwWjAzMTEwLwYDVQQD EygwY2EzNDRjMTdkZmE0OWM3Yzg5OWUyOWUzZmZhZjU4ZWYyMjJjYTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Aj+idkduKf7LKkBDy4bzJ54mTkG W5qsgsGBArEU4vzwyVJbaPZX1Hz1iFLcA7w3/jhfMAjAht9X4eEE4sYxJqfKAg9Z bdc+yWq/obMj7itvhoPPccNZRWQNxTkZnS3/R/CWbJjyitJarSfsU+lkPGIGq72a wbE6FeQhls3MfgHgfu1dBrjM1Hue7wfAVvEOxdur41sYMN4DdtexGKbEhIEfeqZ2 2MB7seyqokh/IWq7EGSjM83zXZlVySHFVCqlC+cAFOeIEwTd4juTtmu0VqW3cfKz Q1rlFjEDMVcmx//mb2kGrldj2GPmq7wabjfGOJtIr6dfPkz+gMyrLPhofwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyjRMF9+knHyJninj/69Y7yIsovMB8GA1UdIwQY MBaAFH7QjAzNqALPIM56ve6iAhTgXkevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnRDTURNMm9Bczhnem5xOTdxSUNGT0JlUjY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zYTIwZDgtZTkwMi00MWY1LWJlZmEt YWI1ZjM5ZmI4ZDM2LzEvZnRDTURNMm9Bczhnem5xOTdxSUNGT0JlUjY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zYTIwZDgtZTkwMi00MWY1LWJlZmEtYWI1ZjM5ZmI4ZDM2 LzEvZnRDTURNMm9Bczhnem5xOTdxSUNGT0JlUjY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAicrTpsv3 38GfPWYXZylEoWOWyyJ+c/zy5JueIZV8aiEAuZ9F/I4VnVLH24iHCDndIHcH1QE+ 9MfQPZSEVZWfGjxYqEtaWSueRndbBqlz7Ls68wWMb6zinbk3iXeS0XlW7R+NuHRR tjWQICTVapJ9hsXXsQ1V2WHxKz09p4zlEANlf6Qy1/5RLh+KMEIdiG05PAmv1Vot 5TkF7cyUn6pEdOMK48v1wnNtMNFZjurASlr+GprXquk4TJyOfP8lmJER6OGyi1tY k4LhH53AeMdCMLBbA5YIkTkdkFby3kqC5txgOoIYOCbYU2ZPdtQfGYyvPGTVcKDd ncmdXAx7FtQfog== -----END CERTIFICATE-----Generated at Sat Dec 6 08:59:14 2025 by rpki-client