This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.mft File: ffgoIInih2ZRITPUI2r0FaN709I.mft (raw, json) Hash identifier: bOjziCa8t3QU8iHQZqq6LYiPwDtoXccK21IzGXO+Jmk= Subject key identifier: 9F:C5:18:0A:3A:09:95:05:9C:8E:A0:27:D6:43:8D:3B:CE:E8:03:F3 Authority key identifier: 7D:F8:28:20:89:E2:87:66:51:21:33:D4:23:6A:F4:15:A3:7B:D3:D2 Certificate issuer: /CN=7df8282089e28766512133d4236af415a37bd3d2 Certificate serial: 019AF2AD4DF72DB32977740E1B6E1124B210 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffgoIInih2ZRITPUI2r0FaN709I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.mft Manifest number: 04A2 Signing time: Sat 06 Dec 2025 08:00:35 +0000 Manifest this update: Sat 06 Dec 2025 08:00:35 +0000 Manifest next update: Sun 07 Dec 2025 08:00:35 +0000 Files and hashes: 1: ffgoIInih2ZRITPUI2r0FaN709I.crl (hash: Bu804JXQxAr0WHGYSFl6QxYo99youot/dJNagXxcjXw=) 2: ig1FgJHLmhVp1HtQnDRiBOwALfo.roa (hash: IlHHwWSfIB2n4wpeo6hZD+s1jPc54zsXsSO0r9HX6WY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.crl rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.mft rsync://rpki.ripe.net/repository/DEFAULT/ffgoIInih2ZRITPUI2r0FaN709I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:4d:f7:2d:b3:29:77:74:0e:1b:6e:11:24:b2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df8282089e28766512133d4236af415a37bd3d2 Validity Not Before: Dec 6 08:00:35 2025 GMT Not After : Dec 7 08:00:35 2025 GMT Subject: CN=9fc5180a3a0995059c8ea027d6438d3bcee803f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1c:34:1c:71:75:6e:8d:56:aa:1b:08:fe:2f: 3d:a2:cd:35:cb:69:53:ac:b3:ae:0e:af:30:9e:d1: f3:87:1d:11:9c:97:f3:17:f9:73:aa:c1:9b:b0:e6: 7c:f9:5a:df:0b:d2:a6:d3:14:e0:f0:f2:f1:3d:b2: 60:99:57:78:33:63:d3:cd:c0:10:7a:73:d8:be:8e: 03:c5:c8:13:57:86:fb:c8:6e:37:ed:6c:ed:8b:83: f8:31:00:2c:52:8f:4d:4a:3a:eb:a8:cf:1e:ed:49: d4:69:f5:6d:9f:60:e4:53:2d:95:d6:b2:20:af:ff: 28:0c:6a:f6:79:8c:8c:b3:0d:65:f9:9c:90:b1:98: 3b:32:a2:b2:e7:e9:b1:72:c6:80:c3:f2:f8:05:63: b8:88:0a:e9:89:11:22:e3:e1:b4:a9:4d:c0:c4:89: 3b:f4:46:d7:c1:7b:ce:1b:0e:ae:c4:ed:56:1a:b2: ad:ae:d8:42:d0:1e:c7:65:4b:61:c7:3b:1b:15:33: 3e:44:e7:69:48:9b:53:23:a7:f7:2f:46:96:2d:8e: c3:48:f1:53:a3:68:41:eb:87:ad:79:93:4a:d0:5c: 5c:b4:2d:27:cb:83:70:95:4e:44:bc:51:39:c8:93: ee:34:74:f0:8c:4b:11:d1:6d:b4:2c:65:73:5b:b5: 66:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C5:18:0A:3A:09:95:05:9C:8E:A0:27:D6:43:8D:3B:CE:E8:03:F3 X509v3 Authority Key Identifier: keyid:7D:F8:28:20:89:E2:87:66:51:21:33:D4:23:6A:F4:15:A3:7B:D3:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffgoIInih2ZRITPUI2r0FaN709I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:06:70:94:9e:21:1e:21:48:c5:6a:75:79:b6:e0:fc:3c:c7: 04:b3:a9:0c:57:85:18:c7:e4:53:a7:bc:ea:2f:54:11:09:bf: 73:2e:a1:8f:3b:c4:39:6d:88:c1:ee:fa:65:6f:8e:ac:67:f5: d6:86:a5:b4:ee:4a:fe:b0:31:b9:fd:54:d3:b1:e8:a2:14:fe: 91:32:75:dd:f0:bd:6d:cf:b8:82:03:c4:06:7f:a6:34:96:9f: 8e:dd:c7:a6:c9:a8:eb:34:f1:3d:4b:b8:a1:68:54:5f:fb:8b: c0:6a:73:62:45:3f:5d:fb:cf:11:3c:49:76:f0:98:f8:a0:1d: c9:73:aa:40:a8:9b:ac:d6:1e:e6:87:3b:4d:4c:88:be:9a:a2: 73:ee:82:e1:f6:18:8b:f9:4d:cf:e5:05:a4:f2:70:48:56:36: 8e:69:0c:b4:31:00:6f:d5:43:23:5a:73:ec:cc:d8:d1:6f:72: 12:68:a7:15:94:29:82:8d:b8:14:a2:ce:7d:1b:0e:4b:27:2b: ac:bb:2b:8f:f2:21:59:f7:f0:72:5b:d7:91:e5:66:11:f7:6c: 1e:35:1e:2e:f1:fb:4d:37:02:f2:1f:74:d0:ff:b0:7d:69:56: 3c:82:73:80:55:c5:c5:d9:8e:d2:d5:db:59:62:cb:61:47:b4: ce:67:d6:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrU33LbMpd3QOG24RJLIQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjgyODIwODllMjg3NjY1MTIxMzNkNDIzNmFmNDE1YTM3 YmQzZDIwHhcNMjUxMjA2MDgwMDM1WhcNMjUxMjA3MDgwMDM1WjAzMTEwLwYDVQQD Eyg5ZmM1MTgwYTNhMDk5NTA1OWM4ZWEwMjdkNjQzOGQzYmNlZTgwM2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRw0HHF1bo1WqhsI/i89os01y2lT rLOuDq8wntHzhx0RnJfzF/lzqsGbsOZ8+VrfC9Km0xTg8PLxPbJgmVd4M2PTzcAQ enPYvo4DxcgTV4b7yG437Wzti4P4MQAsUo9NSjrrqM8e7UnUafVtn2DkUy2V1rIg r/8oDGr2eYyMsw1l+ZyQsZg7MqKy5+mxcsaAw/L4BWO4iArpiREi4+G0qU3AxIk7 9EbXwXvOGw6uxO1WGrKtrthC0B7HZUthxzsbFTM+ROdpSJtTI6f3L0aWLY7DSPFT o2hB64eteZNK0FxctC0ny4NwlU5EvFE5yJPuNHTwjEsR0W20LGVzW7Vm1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/FGAo6CZUFnI6gJ9ZDjTvO6APzMB8GA1UdIwQY MBaAFH34KCCJ4odmUSEz1CNq9BWje9PSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZnb0lJbmloMlpSSVRQVUkycjBGYU43MDlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80NTJiYTctM2MxNS00YmJhLWFkMzMt MjU3MWY3YTJkMjVmLzEvZmZnb0lJbmloMlpSSVRQVUkycjBGYU43MDlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi80NTJiYTctM2MxNS00YmJhLWFkMzMtMjU3MWY3YTJkMjVm LzEvZmZnb0lJbmloMlpSSVRQVUkycjBGYU43MDlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQZwlJ4h HiFIxWp1ebbg/DzHBLOpDFeFGMfkU6e86i9UEQm/cy6hjzvEOW2Iwe76ZW+OrGf1 1oaltO5K/rAxuf1U07HoohT+kTJ13fC9bc+4ggPEBn+mNJafjt3Hpsmo6zTxPUu4 oWhUX/uLwGpzYkU/XfvPETxJdvCY+KAdyXOqQKibrNYe5oc7TUyIvpqic+6C4fYY i/lNz+UFpPJwSFY2jmkMtDEAb9VDI1pz7MzY0W9yEminFZQpgo24FKLOfRsOSycr rLsrj/IhWffwclvXkeVmEfdsHjUeLvH7TTcC8h900P+wfWlWPIJzgFXFxdmO0tXb WWLLYUe0zmfWjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:27 2025 by rpki-client