This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft File: FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft (raw, json) Hash identifier: AEzSGVonuIAiNRauvaAF6/zXCb7a+ptWEAv49wj3bGs= Subject key identifier: C8:F5:5A:C3:35:28:DD:8D:6F:23:3C:11:16:F4:96:B6:F6:AB:3C:EC Authority key identifier: 15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C Certificate issuer: /CN=153d757b77067befd9446694748ad2b04e97b38c Certificate serial: 019AF5782EB4486483E107ABEA06759728E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 21:01:25 +0000 Manifest this update: Sat 06 Dec 2025 21:01:25 +0000 Manifest next update: Sun 07 Dec 2025 21:01:25 +0000 Files and hashes: 1: FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl (hash: u2VQdq+NiI6VAWZts5ZdKkAuQvnTImc3Cw7ZnOzJLbQ=) 2: r7lFXPa807MfacPLjTifqcio5eE.roa (hash: uWVAVnCuqwCuf5rQTJ4k2G3R8ObiUvivLPLiht6CJGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:2e:b4:48:64:83:e1:07:ab:ea:06:75:97:28:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153d757b77067befd9446694748ad2b04e97b38c Validity Not Before: Dec 6 21:01:25 2025 GMT Not After : Dec 7 21:01:25 2025 GMT Subject: CN=c8f55ac33528dd8d6f233c1116f496b6f6ab3cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:74:bf:77:55:99:92:40:39:5e:5c:ac:15:8f: 8b:ed:f6:70:7a:8a:05:33:5e:c5:5a:18:a2:28:02: a8:05:e7:6b:60:a7:84:87:92:35:42:c6:89:79:cc: a8:60:bd:c6:42:a5:9b:63:7c:d5:c2:96:a6:df:d5: 4b:b2:be:d0:1d:1e:bb:c5:98:1d:b5:bc:a2:64:61: 85:b1:e7:1f:66:22:e5:71:67:c8:66:31:dd:5f:67: ee:8e:ac:88:9f:99:0a:e1:6c:83:7b:dc:97:71:96: 4e:0e:6d:72:84:de:af:e7:60:e8:bd:a4:c7:c2:d4: ee:6d:17:61:92:00:33:2c:65:f8:eb:d6:72:de:f0: 45:95:31:5d:b0:4f:fa:12:c6:1c:51:1c:2e:eb:84: 79:97:fd:1a:59:68:0b:8f:c8:b4:35:13:bf:84:d2: 2b:cc:8d:cc:e6:aa:89:ac:47:ec:08:f7:65:d8:a2: 0b:36:5d:c5:74:0a:aa:a1:44:3b:56:e5:1c:0a:82: 10:71:71:2e:82:32:60:51:6d:f8:2d:54:15:ef:33: 79:38:f1:02:36:bc:6c:96:bb:14:59:d8:ad:a9:17: 57:65:97:df:f1:d1:93:19:48:36:1f:d9:2e:70:05: 18:ca:c3:e0:73:75:0e:97:cc:ae:72:69:72:b5:75: 69:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F5:5A:C3:35:28:DD:8D:6F:23:3C:11:16:F4:96:B6:F6:AB:3C:EC X509v3 Authority Key Identifier: keyid:15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:e0:04:43:d3:07:83:d8:f4:0c:48:9d:b5:34:b0:9d:d1:2b: 1a:a3:89:75:47:f3:90:88:5b:3f:2b:18:d8:2d:1f:17:0a:d3: db:28:63:91:5b:44:5b:a2:2b:6e:51:a4:15:2d:3e:6a:61:50: 0c:cf:f6:5f:5f:ef:0f:68:8e:ec:86:52:00:ea:96:7b:31:60: 39:d4:8d:73:ad:2c:80:6b:b9:71:65:84:cb:37:5a:81:88:e2: 2d:d1:50:0b:08:1b:5a:5e:49:0c:27:a1:af:5d:cc:29:52:c0: 03:42:22:07:65:42:ee:f3:a3:1c:1b:d1:06:01:33:c9:23:ab: 1a:1b:a2:fe:f4:b9:66:39:b3:54:d4:18:ac:32:a2:34:c7:24: f2:41:a7:50:0e:ba:b7:ce:4f:28:2e:b2:86:8f:76:d5:c6:50: e2:2d:b4:79:23:5a:37:2e:40:74:5f:99:77:70:55:f6:4c:60: 75:ea:b6:36:1c:d4:51:14:80:e2:6e:a0:0b:dd:3b:03:d0:de: a8:3c:86:1f:49:a1:ce:47:b4:3b:95:e2:cb:cc:ab:31:f6:f6: 56:cd:67:2b:71:5b:c4:ba:f8:2b:b1:ce:6c:05:2a:53:cf:0f: cc:e1:ea:e2:00:0b:57:75:99:b1:8a:63:e9:cb:61:8b:47:8e: 47:84:a0:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eC60SGSD4Qer6gZ1lyjmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1M2Q3NTdiNzcwNjdiZWZkOTQ0NjY5NDc0OGFkMmIwNGU5 N2IzOGMwHhcNMjUxMjA2MjEwMTI1WhcNMjUxMjA3MjEwMTI1WjAzMTEwLwYDVQQD EyhjOGY1NWFjMzM1MjhkZDhkNmYyMzNjMTExNmY0OTZiNmY2YWIzY2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHS/d1WZkkA5XlysFY+L7fZweooF M17FWhiiKAKoBedrYKeEh5I1QsaJecyoYL3GQqWbY3zVwpam39VLsr7QHR67xZgd tbyiZGGFsecfZiLlcWfIZjHdX2fujqyIn5kK4WyDe9yXcZZODm1yhN6v52DovaTH wtTubRdhkgAzLGX469Zy3vBFlTFdsE/6EsYcURwu64R5l/0aWWgLj8i0NRO/hNIr zI3M5qqJrEfsCPdl2KILNl3FdAqqoUQ7VuUcCoIQcXEugjJgUW34LVQV7zN5OPEC NrxslrsUWditqRdXZZff8dGTGUg2H9kucAUYysPgc3UOl8yucmlytXVpSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMj1WsM1KN2NbyM8ERb0lrb2qzzsMB8GA1UdIwQY MBaAFBU9dXt3Bnvv2URmlHSK0rBOl7OMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlQxMWUzY0dlLV9aUkdhVWRJclNzRTZYczR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi84YTk0YjktNzBmZS00NmZmLWE0ZTYt MDE5ZTFmODQwM2RkLzEvRlQxMWUzY0dlLV9aUkdhVWRJclNzRTZYczR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi84YTk0YjktNzBmZS00NmZmLWE0ZTYtMDE5ZTFmODQwM2Rk LzEvRlQxMWUzY0dlLV9aUkdhVWRJclNzRTZYczR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOAEQ9MH g9j0DEidtTSwndErGqOJdUfzkIhbPysY2C0fFwrT2yhjkVtEW6IrblGkFS0+amFQ DM/2X1/vD2iO7IZSAOqWezFgOdSNc60sgGu5cWWEyzdagYjiLdFQCwgbWl5JDCeh r13MKVLAA0IiB2VC7vOjHBvRBgEzySOrGhui/vS5ZjmzVNQYrDKiNMck8kGnUA66 t85PKC6yho921cZQ4i20eSNaNy5AdF+Zd3BV9kxgdeq2NhzUURSA4m6gC907A9De qDyGH0mhzke0O5Xiy8yrMfb2Vs1nK3FbxLr4K7HObAUqU88PzOHq4gALV3WZsYpj 6cthi0eOR4Sgtg== -----END CERTIFICATE-----Generated at Sun Dec 7 07:33:53 2025 by rpki-client