This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft File: fTssMztylVesC-AnQLIiltgCv4E.mft (raw, json) Hash identifier: WWDSQk8+PpziWF++Z+FKfMl8WgvF6pFbM0WTauSUPzQ= Subject key identifier: A6:DE:DA:88:F9:B1:72:7C:90:5F:3A:1A:BD:17:E2:D0:3A:EB:F7:D6 Authority key identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81 Certificate issuer: /CN=7d3b2c333b729557ac0be02740b22296d802bf81 Certificate serial: 019AF1D1B01248233A447E58651EFA28B70B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft Manifest number: 1739 Signing time: Sat 06 Dec 2025 04:00:42 +0000 Manifest this update: Sat 06 Dec 2025 04:00:42 +0000 Manifest next update: Sun 07 Dec 2025 04:00:42 +0000 Files and hashes: 1: WqjB7EtZkSL-ePfOxy2nv62eOkA.roa (hash: PG/xFOwvIaW9rUlAX7rZLKuzOPksgvVi2XmtGvzJW70=) 2: fTssMztylVesC-AnQLIiltgCv4E.crl (hash: p85K3a2eJEbzVYoDCDvSNAwUCDrIgXbmCECXbuphs44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:b0:12:48:23:3a:44:7e:58:65:1e:fa:28:b7:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d3b2c333b729557ac0be02740b22296d802bf81 Validity Not Before: Dec 6 04:00:42 2025 GMT Not After : Dec 7 04:00:42 2025 GMT Subject: CN=a6deda88f9b1727c905f3a1abd17e2d03aebf7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f5:5f:76:17:ab:3a:e2:2b:67:8d:c7:6f:4a: 1a:88:2b:41:5d:22:a4:fa:3f:71:07:9b:0d:7c:7e: f8:4f:9f:f1:6a:de:b5:f5:f2:ca:ee:71:eb:41:de: 3d:88:64:cd:96:d4:d8:58:bf:1c:5b:59:a9:bd:3f: a7:31:7f:eb:99:44:de:70:bc:a7:be:e2:3f:ec:37: 89:b0:42:9e:ec:8b:82:2e:3d:3f:13:b5:30:52:96: 1b:2e:e3:11:86:39:4c:fc:64:34:e0:4d:6b:08:65: 9e:44:6b:73:86:8a:75:b8:40:c8:41:19:80:ca:ce: 89:4e:2e:51:d5:c6:85:07:24:bd:d1:c0:e7:1c:3f: a0:da:2c:3f:0a:f4:a4:e3:f5:c7:87:fe:53:1c:2e: 7b:e5:15:d4:00:29:d1:e8:a3:7b:fc:29:83:32:34: 72:df:0e:b8:7d:88:c9:5e:84:55:12:07:15:a1:04: 75:f5:e3:94:1b:7f:c3:25:86:20:6d:36:f3:f7:40: 0b:10:47:3c:23:bb:e8:42:ae:33:f6:f6:39:f8:f8: e7:aa:46:d8:3e:65:c6:0d:74:be:7e:96:8c:0a:3c: be:75:b9:18:cf:46:63:be:95:2d:fa:61:89:9b:ea: 81:09:5d:e6:1e:fa:c0:c4:8b:02:ad:0a:2f:f4:3e: 66:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DE:DA:88:F9:B1:72:7C:90:5F:3A:1A:BD:17:E2:D0:3A:EB:F7:D6 X509v3 Authority Key Identifier: keyid:7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:57:40:64:c6:41:61:fc:80:b4:1d:aa:77:83:c7:84:26:b9: 5c:34:2d:1b:36:b2:1f:37:12:b1:70:9c:66:91:32:2e:b3:42: ba:30:67:3a:5c:21:7a:10:1f:15:0c:cd:00:4e:13:50:02:de: 9f:5d:ef:62:c9:d0:33:14:61:68:8d:58:7a:5b:f1:af:c3:09: dc:44:46:29:6c:7a:fc:b0:4f:3c:c1:9c:27:39:3a:5f:da:4f: 1b:ec:dd:33:71:0f:7d:12:46:ca:fe:65:70:83:00:64:aa:49: 6f:5a:b0:b9:1f:70:2b:3b:17:7b:75:bb:a5:cf:3a:9e:3d:92: 95:51:94:6f:f6:70:4e:66:04:ff:61:97:22:4b:1f:66:f4:c2: 38:a0:b7:fe:2c:7f:df:e0:e0:b6:50:63:0b:68:3c:ed:07:7c: 2e:ef:10:bb:8e:3d:0f:4b:34:58:2f:9c:26:7b:f2:85:88:f1: cc:45:3d:9c:2c:a1:02:ed:c6:d0:e1:23:39:c1:92:57:49:c1: c2:1d:07:95:39:b4:75:72:0d:b3:19:9f:ff:cc:b2:12:2b:d8: 80:a2:dd:98:47:49:81:0b:b0:d3:28:05:1d:89:a6:d3:64:d8: 57:20:cb:4d:e4:86:52:18:c5:08:6e:b0:69:32:c1:8a:34:5d: 25:55:8b:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0bASSCM6RH5YZR76KLcLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkM2IyYzMzM2I3Mjk1NTdhYzBiZTAyNzQwYjIyMjk2ZDgw MmJmODEwHhcNMjUxMjA2MDQwMDQyWhcNMjUxMjA3MDQwMDQyWjAzMTEwLwYDVQQD EyhhNmRlZGE4OGY5YjE3MjdjOTA1ZjNhMWFiZDE3ZTJkMDNhZWJmN2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/VfdherOuIrZ43Hb0oaiCtBXSKk +j9xB5sNfH74T5/xat619fLK7nHrQd49iGTNltTYWL8cW1mpvT+nMX/rmUTecLyn vuI/7DeJsEKe7IuCLj0/E7UwUpYbLuMRhjlM/GQ04E1rCGWeRGtzhop1uEDIQRmA ys6JTi5R1caFByS90cDnHD+g2iw/CvSk4/XHh/5THC575RXUACnR6KN7/CmDMjRy 3w64fYjJXoRVEgcVoQR19eOUG3/DJYYgbTbz90ALEEc8I7voQq4z9vY5+PjnqkbY PmXGDXS+fpaMCjy+dbkYz0ZjvpUt+mGJm+qBCV3mHvrAxIsCrQov9D5m7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbe2oj5sXJ8kF86Gr0X4tA66/fWMB8GA1UdIwQY MBaAFH07LDM7cpVXrAvgJ0CyIpbYAr+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlRzc016dHlsVmVzQy1BblFMSWlsdGdDdjRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82YjFiNjQtMjU2NC00N2E3LWIxYzEt NTI4MzVkYjY1MTJjLzEvZlRzc016dHlsVmVzQy1BblFMSWlsdGdDdjRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS82YjFiNjQtMjU2NC00N2E3LWIxYzEtNTI4MzVkYjY1MTJj LzEvZlRzc016dHlsVmVzQy1BblFMSWlsdGdDdjRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjldAZMZB YfyAtB2qd4PHhCa5XDQtGzayHzcSsXCcZpEyLrNCujBnOlwhehAfFQzNAE4TUALe n13vYsnQMxRhaI1Yelvxr8MJ3ERGKWx6/LBPPMGcJzk6X9pPG+zdM3EPfRJGyv5l cIMAZKpJb1qwuR9wKzsXe3W7pc86nj2SlVGUb/ZwTmYE/2GXIksfZvTCOKC3/ix/ 3+DgtlBjC2g87Qd8Lu8Qu449D0s0WC+cJnvyhYjxzEU9nCyhAu3G0OEjOcGSV0nB wh0HlTm0dXINsxmf/8yyEivYgKLdmEdJgQuw0ygFHYmm02TYVyDLTeSGUhjFCG6w aTLBijRdJVWLcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:26 2025 by rpki-client