This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft File: FtQJAygYpijNKyg4OALXfnSUolI.mft (raw, json) Hash identifier: ibzm0lnEETCbkDx3L8eUmCUCeOM8cmXm8S2VUCiUhEU= Subject key identifier: E9:09:DD:5B:D9:9A:6B:4E:94:F7:9D:F8:58:54:19:0C:B4:91:AE:67 Authority key identifier: 16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52 Certificate issuer: /CN=16d409032818a628cd2b28383802d77e7494a252 Certificate serial: 019AF24008A382B76EEDB67BD2EB7184649D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft Manifest number: 0123 Signing time: Sat 06 Dec 2025 06:01:13 +0000 Manifest this update: Sat 06 Dec 2025 06:01:13 +0000 Manifest next update: Sun 07 Dec 2025 06:01:13 +0000 Files and hashes: 1: FtQJAygYpijNKyg4OALXfnSUolI.crl (hash: APqOmIGaMsdtI08RFpYmfxZoRTFQvyLDdsVO+inoq5k=) 2: X-F4EV-F2ag_5pD7ZZ_5QP_Tg_k.roa (hash: 1FxaidkVHdKLmVU/qFLpds7lpUrV/YLVa1N6wBCOD8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:08:a3:82:b7:6e:ed:b6:7b:d2:eb:71:84:64:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16d409032818a628cd2b28383802d77e7494a252 Validity Not Before: Dec 6 06:01:13 2025 GMT Not After : Dec 7 06:01:13 2025 GMT Subject: CN=e909dd5bd99a6b4e94f79df85854190cb491ae67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fe:d7:dc:7a:cc:62:eb:60:43:d4:8d:3d:92: 27:3f:dd:a4:c0:fe:6f:3f:91:e5:69:be:4a:78:ee: fd:1a:91:b0:f9:c2:3a:09:42:75:ed:7c:30:98:57: 6a:6d:af:1d:a7:40:db:00:6f:e8:93:8f:83:32:b9: 77:aa:ce:89:f4:aa:e8:07:e0:e7:b1:6a:5e:8e:09: 6c:f4:e3:07:42:4a:58:d0:fe:5e:e4:e3:d7:f5:a0: d0:64:35:05:c7:37:c1:55:14:df:08:0c:a2:53:c0: 8a:39:94:b3:cb:5f:b6:0e:46:cb:51:61:57:ce:19: 27:74:9a:0d:d9:f7:35:83:9b:b4:17:4b:92:8c:20: d2:fc:8c:02:f3:ba:fc:f0:d6:d8:da:10:9f:2d:26: e5:4f:08:8e:ff:8c:fd:10:5b:63:63:46:e6:f9:91: b5:72:c4:58:dd:89:76:67:dd:d8:8c:92:ba:fc:16: 44:23:0b:cc:30:58:f4:be:af:41:8b:9f:5e:11:1b: 4b:1f:27:f7:77:83:88:5b:95:96:a6:46:9f:43:99: f5:a9:8b:a7:3d:58:8c:d9:58:d9:e9:a7:64:56:50: 2e:41:95:b3:9d:f2:fe:00:a8:80:c5:62:d9:96:08: 3d:49:32:30:0b:04:96:9f:e0:4d:50:ca:cd:2d:75: 10:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:09:DD:5B:D9:9A:6B:4E:94:F7:9D:F8:58:54:19:0C:B4:91:AE:67 X509v3 Authority Key Identifier: keyid:16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:15:8a:73:4b:2d:6e:e7:e5:34:6c:3a:2d:19:58:a0:dc:1b: b9:fc:5d:63:f1:51:40:69:5d:f4:3e:64:ed:71:6a:91:49:b3: d7:42:b2:eb:ec:9b:cb:5b:9a:d7:d6:77:89:b5:02:68:f2:c6: 91:41:12:8e:ff:df:f0:bd:3d:3f:9e:a0:aa:f5:12:e9:96:7a: 8f:f9:a2:3d:48:7e:50:cf:99:5b:d5:e5:c0:2d:05:f2:fc:7f: 7a:e2:f6:a6:fc:54:9a:c9:e6:3b:4f:c1:df:3e:46:81:c1:29: 09:45:58:75:bc:ff:e6:6b:0a:3c:dd:85:7b:04:e7:7b:ae:ef: 6f:ed:64:3a:13:c9:50:95:82:ac:52:2d:d0:76:96:16:47:48: b2:4a:82:b1:6a:48:d3:84:42:99:ec:15:44:d8:26:e1:18:ec: e4:bb:0a:6a:c0:51:c0:51:4b:53:b3:4e:f6:a1:87:4c:e4:29: a5:42:24:72:68:24:e2:be:00:0b:39:58:06:3f:f7:f6:28:56: 32:9e:8d:97:26:91:90:22:7e:e5:c5:ac:8e:7e:fa:cb:e7:41: 50:a4:66:39:29:b4:b8:c7:1e:66:67:55:60:a9:74:99:86:d4: 01:24:d8:bf:df:1a:8f:91:cc:48:5f:ee:2d:7f:6b:83:94:9c: 7b:25:39:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAijgrdu7bZ70utxhGSdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZDQwOTAzMjgxOGE2MjhjZDJiMjgzODM4MDJkNzdlNzQ5 NGEyNTIwHhcNMjUxMjA2MDYwMTEzWhcNMjUxMjA3MDYwMTEzWjAzMTEwLwYDVQQD EyhlOTA5ZGQ1YmQ5OWE2YjRlOTRmNzlkZjg1ODU0MTkwY2I0OTFhZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv7X3HrMYutgQ9SNPZInP92kwP5v P5Hlab5KeO79GpGw+cI6CUJ17XwwmFdqba8dp0DbAG/ok4+DMrl3qs6J9KroB+Dn sWpejgls9OMHQkpY0P5e5OPX9aDQZDUFxzfBVRTfCAyiU8CKOZSzy1+2DkbLUWFX zhkndJoN2fc1g5u0F0uSjCDS/IwC87r88NbY2hCfLSblTwiO/4z9EFtjY0bm+ZG1 csRY3Yl2Z93YjJK6/BZEIwvMMFj0vq9Bi59eERtLHyf3d4OIW5WWpkafQ5n1qYun PViM2VjZ6adkVlAuQZWznfL+AKiAxWLZlgg9STIwCwSWn+BNUMrNLXUQ/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkJ3VvZmmtOlPed+FhUGQy0ka5nMB8GA1UdIwQY MBaAFBbUCQMoGKYozSsoODgC1350lKJSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ODYzNzUtYmM4ZC00MDY1LTgzZGMt MGFlYjlkMzc3ODdlLzEvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS81ODYzNzUtYmM4ZC00MDY1LTgzZGMtMGFlYjlkMzc3ODdl LzEvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRWKc0st buflNGw6LRlYoNwbufxdY/FRQGld9D5k7XFqkUmz10Ky6+yby1ua19Z3ibUCaPLG kUESjv/f8L09P56gqvUS6ZZ6j/miPUh+UM+ZW9XlwC0F8vx/euL2pvxUmsnmO0/B 3z5GgcEpCUVYdbz/5msKPN2FewTne67vb+1kOhPJUJWCrFIt0HaWFkdIskqCsWpI 04RCmewVRNgm4Rjs5LsKasBRwFFLU7NO9qGHTOQppUIkcmgk4r4ACzlYBj/39ihW Mp6NlyaRkCJ+5cWsjn76y+dBUKRmOSm0uMceZmdVYKl0mYbUASTYv98aj5HMSF/u LX9rg5SceyU5KQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:43 2025 by rpki-client