This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft File: FTXSThc2fkBbeA9xEEnl940QHxY.mft (raw, json) Hash identifier: noRucrfISK27PkWibgXeNbW6P/b/AwDWXCdwZN1y0+o= Subject key identifier: 1A:6E:44:4F:54:AB:97:1C:49:87:5F:43:66:87:7F:B2:7F:E2:B4:12 Authority key identifier: 15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16 Certificate issuer: /CN=1535d24e17367e405b780f711049e5f78d101f16 Certificate serial: 019AF31CBB51495343EEE16F35693BB97BA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft Manifest number: 133E Signing time: Sat 06 Dec 2025 10:02:17 +0000 Manifest this update: Sat 06 Dec 2025 10:02:17 +0000 Manifest next update: Sun 07 Dec 2025 10:02:17 +0000 Files and hashes: 1: 5ogK5Ex4CS4B5KsMhYCUM00RFfQ.roa (hash: ZPbDvWHExMztNeKcllyDlDkCaDogTJsh9sQhQBtO6xU=) 2: FTXSThc2fkBbeA9xEEnl940QHxY.crl (hash: OUFJrQ9oTO01Rkv667WGXTqjd6xf6T8uyv4nZ3lcOow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:bb:51:49:53:43:ee:e1:6f:35:69:3b:b9:7b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1535d24e17367e405b780f711049e5f78d101f16 Validity Not Before: Dec 6 10:02:17 2025 GMT Not After : Dec 7 10:02:17 2025 GMT Subject: CN=1a6e444f54ab971c49875f4366877fb27fe2b412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e0:5d:83:dc:8f:1c:d5:a4:81:08:57:02:4f: 92:7d:a5:26:53:b4:cf:35:b1:68:ba:bf:28:b7:7a: bd:e9:83:f1:d9:5f:93:9b:70:19:8f:99:a5:22:ef: 8e:c6:f4:a7:88:f3:96:5e:9c:62:f0:10:14:36:63: 34:97:8b:2a:b1:a5:81:a2:ba:4f:b1:b1:0a:09:29: c2:4a:2b:84:cd:01:9d:86:f9:a8:c4:7d:63:8b:49: 68:fe:25:d8:04:d9:06:2e:60:69:a2:57:58:92:d9: c2:77:71:bc:a0:2a:8c:8f:d3:59:78:7b:af:77:77: 4f:c0:51:88:cb:39:63:c6:1f:f6:e2:f4:bd:c3:ac: e0:e5:69:88:91:27:ca:2d:c9:c3:eb:67:c4:68:cd: 81:d0:eb:5e:34:82:71:82:86:da:40:a9:4f:b8:d9: 72:c9:99:59:2e:69:fb:3a:00:be:2a:d5:62:81:4c: 37:38:88:fb:85:7e:0a:cc:85:b3:ea:bb:fb:00:4f: 0d:3d:8d:df:45:fb:15:18:2c:dc:84:4b:b4:ef:9f: 02:5b:72:10:11:94:7b:0d:18:31:32:1a:1d:73:e7: 61:54:66:b1:48:63:96:89:5f:c8:48:9b:ca:75:56: 57:aa:b5:d2:01:60:15:b2:59:1d:39:b6:93:38:8b: dd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:6E:44:4F:54:AB:97:1C:49:87:5F:43:66:87:7F:B2:7F:E2:B4:12 X509v3 Authority Key Identifier: keyid:15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:68:4a:90:2a:d6:8a:ca:22:04:0b:1d:11:e1:69:fd:c7:07: d0:47:a3:3f:fc:d9:15:ed:48:2a:1b:f4:16:38:ce:90:54:be: 70:c1:39:b5:a3:ef:c8:14:ed:b4:67:0e:74:4d:9b:f6:7b:5d: d7:4c:f9:25:4d:d0:75:66:f3:cf:27:bb:93:72:61:5f:5c:b6: b4:c2:42:c6:6c:d8:df:5e:d8:82:78:ed:b5:fe:b9:7a:2b:e6: c4:4a:9b:a1:98:0f:0a:83:71:9b:8d:2c:c2:b3:0c:89:f1:7a: 37:ce:30:d4:9d:02:82:e2:df:ff:f7:3e:19:38:6f:21:aa:8f: 78:f8:bc:8e:50:68:86:28:e7:76:a7:7c:e3:4e:43:55:0c:4f: 9e:df:45:69:39:42:57:83:9a:bd:bb:82:6f:1b:83:e5:3f:d4: 47:b7:e9:d9:c1:a7:cc:66:28:a7:8f:13:c6:d7:89:09:05:de: 46:bc:bb:32:8b:ac:7c:e6:e4:2b:78:55:37:e0:d8:04:a9:6a: 53:c7:9c:f7:a9:16:57:21:d9:75:6e:33:cd:fa:5e:26:ae:d5: c4:3c:0e:da:01:56:95:25:2d:d0:5f:bc:0f:59:43:40:c4:8e: 27:44:de:55:16:a7:86:c1:8e:36:d4:5b:cb:89:a3:d8:f1:7b: 83:43:4b:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHLtRSVND7uFvNWk7uXugMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MzVkMjRlMTczNjdlNDA1Yjc4MGY3MTEwNDllNWY3OGQx MDFmMTYwHhcNMjUxMjA2MTAwMjE3WhcNMjUxMjA3MTAwMjE3WjAzMTEwLwYDVQQD EygxYTZlNDQ0ZjU0YWI5NzFjNDk4NzVmNDM2Njg3N2ZiMjdmZTJiNDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+Bdg9yPHNWkgQhXAk+SfaUmU7TP NbFour8ot3q96YPx2V+Tm3AZj5mlIu+OxvSniPOWXpxi8BAUNmM0l4sqsaWBorpP sbEKCSnCSiuEzQGdhvmoxH1ji0lo/iXYBNkGLmBpoldYktnCd3G8oCqMj9NZeHuv d3dPwFGIyzljxh/24vS9w6zg5WmIkSfKLcnD62fEaM2B0OteNIJxgobaQKlPuNly yZlZLmn7OgC+KtVigUw3OIj7hX4KzIWz6rv7AE8NPY3fRfsVGCzchEu0758CW3IQ EZR7DRgxMhodc+dhVGaxSGOWiV/ISJvKdVZXqrXSAWAVslkdObaTOIvdtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpuRE9Uq5ccSYdfQ2aHf7J/4rQSMB8GA1UdIwQY MBaAFBU10k4XNn5AW3gPcRBJ5feNEB8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlRYU1RoYzJma0JiZUE5eEVFbmw5NDBRSHhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82YTg5ZjAtMGIyMi00NTJjLWE2NTkt NDJhN2FmODgyZTA5LzEvRlRYU1RoYzJma0JiZUE5eEVFbmw5NDBRSHhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82YTg5ZjAtMGIyMi00NTJjLWE2NTktNDJhN2FmODgyZTA5 LzEvRlRYU1RoYzJma0JiZUE5eEVFbmw5NDBRSHhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWhKkCrW isoiBAsdEeFp/ccH0EejP/zZFe1IKhv0FjjOkFS+cME5taPvyBTttGcOdE2b9ntd 10z5JU3QdWbzzye7k3JhX1y2tMJCxmzY317Ygnjttf65eivmxEqboZgPCoNxm40s wrMMifF6N84w1J0CguLf//c+GThvIaqPePi8jlBohijndqd8405DVQxPnt9FaTlC V4OavbuCbxuD5T/UR7fp2cGnzGYop48TxteJCQXeRry7MousfObkK3hVN+DYBKlq U8ec96kWVyHZdW4zzfpeJq7VxDwO2gFWlSUt0F+8D1lDQMSOJ0TeVRanhsGONtRb y4mj2PF7g0NL3g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:41 2025 by rpki-client