This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft File: ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft (raw, json) Hash identifier: NMqHwq9sxKmzjbdRdR6LxMwnZtzZcCR5rg/liav7PQ0= Subject key identifier: 5B:81:03:C5:66:41:E2:6E:F5:7F:D9:20:85:17:82:0E:A8:73:E9:2E Authority key identifier: 7E:D2:4C:5D:34:4F:B9:2B:CF:4C:F6:E1:E5:69:F5:1A:E4:1A:A8:7C Certificate issuer: /CN=7ed24c5d344fb92bcf4cf6e1e569f51ae41aa87c Certificate serial: 019AF12D2D7730E4CC2565CFF977D0A23F60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:01:00 +0000 Manifest this update: Sat 06 Dec 2025 01:01:00 +0000 Manifest next update: Sun 07 Dec 2025 01:01:00 +0000 Files and hashes: 1: agRUYODGUgcgQjP7ijxcZLYm3nc.roa (hash: f6YBLXl3ZPBgWVXG5y2MoTRUZ2l1iv1DIF9aPxpzV6M=) 2: ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl (hash: NdEXy4zzWkDv0BYIbi9AFzd2fnrRlsO4qA6ayHh1HFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:2d:77:30:e4:cc:25:65:cf:f9:77:d0:a2:3f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ed24c5d344fb92bcf4cf6e1e569f51ae41aa87c Validity Not Before: Dec 6 01:01:00 2025 GMT Not After : Dec 7 01:01:00 2025 GMT Subject: CN=5b8103c56641e26ef57fd9208517820ea873e92e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6b:b6:19:5b:dc:3d:02:33:04:5e:f1:ae:24: 11:68:dc:d0:5e:de:1f:d0:e1:ab:8e:ca:e6:75:94: 42:93:18:84:16:07:5a:f0:51:16:e3:17:ff:cd:38: 72:9c:a3:6f:30:22:37:97:43:7b:ed:b2:64:4e:06: 53:43:17:21:40:3a:15:b0:a0:da:93:36:c4:d0:4e: f0:72:ec:7b:65:f3:4f:3d:ef:47:d9:8a:2e:7a:b7: a4:57:2c:f7:b1:23:54:0c:7a:e8:b6:b2:ce:b5:ec: 9b:f9:f2:75:8e:da:23:23:5f:49:24:28:f7:71:76: 08:4a:f0:c1:e6:a2:33:fe:80:d1:bb:7e:d2:75:6c: 2b:b9:2a:90:eb:1c:07:0d:1c:2e:3f:24:5f:4b:fd: 45:89:8c:8a:c6:f6:35:c7:94:75:2f:c5:05:04:3a: 64:19:c0:cb:78:cc:20:7b:de:2b:cc:f2:40:f6:20: 46:61:c4:0c:46:56:bb:63:60:74:00:95:cf:80:d3: 68:79:d1:a6:4b:a2:1d:45:d5:24:83:ec:13:a2:c4: 5f:64:69:bb:55:70:cd:bd:c3:20:d9:b4:29:4d:58: de:72:3c:34:f6:57:1d:3a:b2:db:0a:7d:fd:a2:45: ff:c4:0a:11:83:3e:e9:d1:b7:3d:50:ff:cf:1d:86: e7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:81:03:C5:66:41:E2:6E:F5:7F:D9:20:85:17:82:0E:A8:73:E9:2E X509v3 Authority Key Identifier: keyid:7E:D2:4C:5D:34:4F:B9:2B:CF:4C:F6:E1:E5:69:F5:1A:E4:1A:A8:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:86:d1:dd:42:61:84:6d:53:e9:42:6a:bb:c0:17:cc:97:7a: 47:79:44:2d:ae:2a:27:ba:08:2f:e2:20:f1:e5:ea:03:1e:ec: f8:19:7b:68:23:0c:15:07:bd:97:69:fe:04:a2:d1:42:4c:b3: 68:c8:da:43:1c:0b:27:57:a0:35:c7:8c:20:c6:92:3d:6f:91: df:0e:7d:68:e8:62:b6:90:83:e6:3b:16:d0:29:92:97:13:01: 9c:b9:ce:36:f2:53:3b:b7:e8:09:ac:b5:a4:e8:8d:6d:b5:a0: e9:01:1d:04:a7:72:82:45:7e:71:cb:6f:39:18:46:47:ac:b9: 06:74:0e:f3:28:b2:88:c0:14:de:b9:32:8b:43:3e:49:1a:9e: d5:ba:88:74:eb:04:98:a6:cf:8b:15:6e:45:dd:12:c4:1a:1b: 25:ea:30:c0:27:c6:b5:a2:51:ba:78:22:dd:2b:67:3e:bb:14: 39:41:00:02:94:2c:fa:3d:b1:71:20:ad:b3:b7:9c:d5:70:66: 09:ac:3a:22:71:78:ce:17:e2:f0:00:5d:d6:1f:6b:2f:b6:15: e0:46:8e:df:8a:2d:33:1c:dc:9f:e7:e3:3c:a3:0a:9c:32:29: fb:f2:87:55:9d:3f:ee:8e:18:a3:87:07:a2:e2:44:25:56:5e: e0:a7:02:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLS13MOTMJWXP+XfQoj9gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlZDI0YzVkMzQ0ZmI5MmJjZjRjZjZlMWU1NjlmNTFhZTQx YWE4N2MwHhcNMjUxMjA2MDEwMTAwWhcNMjUxMjA3MDEwMTAwWjAzMTEwLwYDVQQD Eyg1YjgxMDNjNTY2NDFlMjZlZjU3ZmQ5MjA4NTE3ODIwZWE4NzNlOTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2u2GVvcPQIzBF7xriQRaNzQXt4f 0OGrjsrmdZRCkxiEFgda8FEW4xf/zThynKNvMCI3l0N77bJkTgZTQxchQDoVsKDa kzbE0E7wcux7ZfNPPe9H2YouerekVyz3sSNUDHrotrLOteyb+fJ1jtojI19JJCj3 cXYISvDB5qIz/oDRu37SdWwruSqQ6xwHDRwuPyRfS/1FiYyKxvY1x5R1L8UFBDpk GcDLeMwge94rzPJA9iBGYcQMRla7Y2B0AJXPgNNoedGmS6IdRdUkg+wTosRfZGm7 VXDNvcMg2bQpTVjecjw09lcdOrLbCn39okX/xAoRgz7p0bc9UP/PHYbnywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFuBA8VmQeJu9X/ZIIUXgg6oc+kuMB8GA1UdIwQY MBaAFH7STF00T7krz0z24eVp9RrkGqh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnRKTVhUUlB1U3ZQVFBiaDVXbjFHdVFhcUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9jOGFlNzktNmQ3Yi00Nzc2LTgwYjct NDIwNDkyY2QxYWZkLzEvZnRKTVhUUlB1U3ZQVFBiaDVXbjFHdVFhcUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9jOGFlNzktNmQ3Yi00Nzc2LTgwYjctNDIwNDkyY2QxYWZk LzEvZnRKTVhUUlB1U3ZQVFBiaDVXbjFHdVFhcUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANIbR3UJh hG1T6UJqu8AXzJd6R3lELa4qJ7oIL+Ig8eXqAx7s+Bl7aCMMFQe9l2n+BKLRQkyz aMjaQxwLJ1egNceMIMaSPW+R3w59aOhitpCD5jsW0CmSlxMBnLnONvJTO7foCay1 pOiNbbWg6QEdBKdygkV+cctvORhGR6y5BnQO8yiyiMAU3rkyi0M+SRqe1bqIdOsE mKbPixVuRd0SxBobJeowwCfGtaJRungi3StnPrsUOUEAApQs+j2xcSCts7ec1XBm Caw6InF4zhfi8ABd1h9rL7YV4EaO34otMxzcn+fjPKMKnDIp+/KHVZ0/7o4Yo4cH ouJEJVZe4KcCAw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:37 2025 by rpki-client