This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft File: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft (raw, json) Hash identifier: +X8w8SJarvpjzLacrOlN6Qhmm+ukK49b9xLoQeRmOy0= Subject key identifier: 3C:9D:9F:78:28:A0:C2:53:A3:56:3C:98:C2:DC:8E:FE:6A:8E:76:65 Authority key identifier: 15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9 Certificate issuer: /CN=15f6130d99af9320775ad60b0f4c989e3e5977c9 Certificate serial: 019AF12DB6CB8874D4B16C8D02C4726A684E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft Manifest number: 0A3A Signing time: Sat 06 Dec 2025 01:01:36 +0000 Manifest this update: Sat 06 Dec 2025 01:01:36 +0000 Manifest next update: Sun 07 Dec 2025 01:01:36 +0000 Files and hashes: 1: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl (hash: RJDBubKNnyQcdXZVOhvQIfuFxi9FvJ3yHGva6ufHCM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:b6:cb:88:74:d4:b1:6c:8d:02:c4:72:6a:68:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f6130d99af9320775ad60b0f4c989e3e5977c9 Validity Not Before: Dec 6 01:01:36 2025 GMT Not After : Dec 7 01:01:36 2025 GMT Subject: CN=3c9d9f7828a0c253a3563c98c2dc8efe6a8e7665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:39:00:7a:97:1e:41:c6:d5:bb:d9:9b:ef:dd: 2f:69:0a:4e:b8:54:f1:3b:f9:61:1c:62:dc:30:75: 71:8c:5e:e9:0a:48:04:9a:38:e4:35:df:70:c3:1f: 03:9b:78:04:2d:4b:92:d3:39:5b:a7:54:8d:50:93: 80:38:42:d3:b0:40:a3:ce:8e:06:be:3f:16:fc:0e: db:25:8a:49:56:40:be:0d:99:dc:61:b9:f2:ee:94: 9f:2d:0c:9a:d8:92:c3:c1:16:17:c0:51:9d:2a:d3: 53:2a:bd:9b:24:79:e0:a3:0f:6f:57:c0:b2:c5:be: a6:20:70:9b:2d:f1:76:cd:7e:fa:36:3d:0b:e8:eb: 58:33:5b:5c:59:65:9f:28:46:3a:02:0c:5d:aa:c2: d9:a1:7e:f0:de:84:64:9c:de:b2:ef:dc:2c:1e:c1: af:fb:69:60:b2:95:14:d4:ff:66:90:1c:a6:b6:6e: 2d:14:7c:30:03:fd:12:79:a6:b5:09:2b:99:fb:e3: 53:b8:89:cc:21:81:89:bb:16:0d:64:b6:e0:36:db: 90:cc:33:eb:08:63:c1:a6:26:4e:22:7f:47:60:cd: 13:44:53:70:08:78:27:8d:e1:96:bd:3d:a9:68:a9: c1:6f:7b:02:be:d0:7d:8c:a3:0b:f9:60:20:d1:b7: 71:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9D:9F:78:28:A0:C2:53:A3:56:3C:98:C2:DC:8E:FE:6A:8E:76:65 X509v3 Authority Key Identifier: keyid:15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:86:c0:34:f4:55:26:1f:90:8e:ab:12:c9:9f:2b:a2:16:63: 24:25:5f:6e:77:58:8a:3a:5d:50:25:b6:0c:4e:57:ab:86:9c: f2:7e:cd:20:ac:8b:b3:d2:c7:a0:99:4c:38:c4:6c:59:61:20: d2:f3:99:74:96:43:cc:10:49:09:a7:b8:49:2e:be:56:c4:fd: eb:92:fd:ae:02:2b:87:6d:a8:b6:f9:ba:62:b4:bd:54:c1:da: f4:34:10:94:fc:4f:dc:89:e2:93:d7:6b:9a:9f:1a:8e:ce:a7: eb:b1:65:2e:81:ee:93:c3:65:16:38:b2:c4:ba:fb:af:00:a7: fa:82:f0:ef:5d:cc:95:45:05:fc:bd:e7:36:61:9f:a7:d9:b1: f1:97:18:61:2e:e2:93:5d:54:30:f2:38:0f:28:8e:c5:f1:99: 85:a2:b6:0f:71:e5:3b:fc:ad:17:5c:f8:92:6d:b5:dc:ad:ce: a2:f6:21:a6:7a:67:72:4f:f6:13:3c:44:df:72:47:75:74:68: 8e:2a:d7:d5:83:c5:68:38:18:73:04:e9:91:a1:94:ae:43:0d: db:ef:7e:6a:ad:e3:b7:7d:fc:26:8a:bf:3f:bc:6a:e9:bd:ac: 2f:bc:9a:b5:57:df:30:b4:d2:27:25:a2:dc:d7:14:8a:92:61: b1:56:2f:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbbLiHTUsWyNAsRyamhOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjYxMzBkOTlhZjkzMjA3NzVhZDYwYjBmNGM5ODllM2U1 OTc3YzkwHhcNMjUxMjA2MDEwMTM2WhcNMjUxMjA3MDEwMTM2WjAzMTEwLwYDVQQD EygzYzlkOWY3ODI4YTBjMjUzYTM1NjNjOThjMmRjOGVmZTZhOGU3NjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzkAepceQcbVu9mb790vaQpOuFTx O/lhHGLcMHVxjF7pCkgEmjjkNd9wwx8Dm3gELUuS0zlbp1SNUJOAOELTsECjzo4G vj8W/A7bJYpJVkC+DZncYbny7pSfLQya2JLDwRYXwFGdKtNTKr2bJHngow9vV8Cy xb6mIHCbLfF2zX76Nj0L6OtYM1tcWWWfKEY6AgxdqsLZoX7w3oRknN6y79wsHsGv +2lgspUU1P9mkBymtm4tFHwwA/0Seaa1CSuZ++NTuInMIYGJuxYNZLbgNtuQzDPr CGPBpiZOIn9HYM0TRFNwCHgnjeGWvT2paKnBb3sCvtB9jKML+WAg0bdxBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDydn3gooMJTo1Y8mMLcjv5qjnZlMB8GA1UdIwQY MBaAFBX2Ew2Zr5Mgd1rWCw9MmJ4+WXfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZZVERabXZreUIzV3RZTEQweVluajVaZDhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lMDY0ZTctMThlNS00YjdlLWFhMWEt MWY4Njc2ZjRjMTdiLzEvRmZZVERabXZreUIzV3RZTEQweVluajVaZDhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9lMDY0ZTctMThlNS00YjdlLWFhMWEtMWY4Njc2ZjRjMTdi LzEvRmZZVERabXZreUIzV3RZTEQweVluajVaZDhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhobANPRV Jh+QjqsSyZ8rohZjJCVfbndYijpdUCW2DE5Xq4ac8n7NIKyLs9LHoJlMOMRsWWEg 0vOZdJZDzBBJCae4SS6+VsT965L9rgIrh22otvm6YrS9VMHa9DQQlPxP3Inik9dr mp8ajs6n67FlLoHuk8NlFjiyxLr7rwCn+oLw713MlUUF/L3nNmGfp9mx8ZcYYS7i k11UMPI4DyiOxfGZhaK2D3HlO/ytF1z4km213K3OovYhpnpnck/2EzxE33JHdXRo jirX1YPFaDgYcwTpkaGUrkMN2+9+aq3jt338Joq/P7xq6b2sL7yatVffMLTSJyWi 3NcUipJhsVYvfA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:11 2025 by rpki-client