This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft File: FTJBXDGfrWWHW9GqA1pViIzrcz4.mft (raw, json) Hash identifier: 2AKSNwkkVHYiBy+SGrlIVnfDcG+Y78xOWyW4pd/gmvU= Subject key identifier: FB:78:2F:BA:6E:FC:35:27:3E:C2:E6:99:F9:29:D3:62:D5:CB:81:9C Authority key identifier: 15:32:41:5C:31:9F:AD:65:87:5B:D1:AA:03:5A:55:88:8C:EB:73:3E Certificate issuer: /CN=1532415c319fad65875bd1aa035a55888ceb733e Certificate serial: 019AF276A8E3BE25E2162AE5522717DCA9D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft Manifest number: 173C Signing time: Sat 06 Dec 2025 07:00:53 +0000 Manifest this update: Sat 06 Dec 2025 07:00:53 +0000 Manifest next update: Sun 07 Dec 2025 07:00:53 +0000 Files and hashes: 1: FTJBXDGfrWWHW9GqA1pViIzrcz4.crl (hash: F4UVdA8lenCzV+gL5MOiSHkuiJ9+WggWYSbBaH0kVNo=) 2: _QEsBnvbshc1c-Oa6SonU64QEfk.roa (hash: yLyPG52nHMG7xe0cgh96djTLDEljXisJslyJOhCNEoc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.crl rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:a8:e3:be:25:e2:16:2a:e5:52:27:17:dc:a9:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1532415c319fad65875bd1aa035a55888ceb733e Validity Not Before: Dec 6 07:00:53 2025 GMT Not After : Dec 7 07:00:53 2025 GMT Subject: CN=fb782fba6efc35273ec2e699f929d362d5cb819c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8b:e9:1a:29:3c:42:5c:78:3e:b1:91:60:e2: 9b:fe:95:97:30:15:81:0d:95:69:52:6d:5a:c8:b0: ee:7d:6b:15:f4:c3:f4:be:eb:24:76:18:16:20:45: 57:28:4e:38:4d:74:19:ab:8f:ee:8f:8f:57:3e:7e: 45:2b:ea:a4:aa:af:ec:9e:d8:0d:7c:98:bf:87:be: 18:ce:a7:ed:aa:d4:03:2d:06:6c:be:69:d4:0a:27: 0b:a0:83:58:b9:a8:55:28:3d:9a:12:7b:c5:43:ca: 87:27:86:20:10:bc:4b:88:df:ea:6d:81:d1:bd:80: c4:4a:98:77:e4:49:af:57:d1:68:e6:9f:45:12:e7: 05:86:83:b3:a9:68:8d:9a:94:56:dd:51:25:d4:ce: a3:d5:a4:3f:ec:fd:e9:b5:bb:7e:a8:75:9f:e3:ba: c7:64:99:6c:04:fc:1d:7c:ad:dd:c1:2c:8d:bb:9a: be:28:17:f5:18:26:14:2f:21:84:db:5d:5f:7e:59: 70:eb:d9:1f:6c:17:ff:85:a2:e3:e0:4f:59:ed:11: a8:75:06:4d:91:bc:dd:94:0e:0d:c4:46:c6:da:60: 71:7d:dc:3d:c7:da:ba:1d:24:ce:10:8f:1b:75:67: cb:4b:b5:26:55:ec:6f:f8:39:aa:4c:8e:66:12:4d: 52:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:78:2F:BA:6E:FC:35:27:3E:C2:E6:99:F9:29:D3:62:D5:CB:81:9C X509v3 Authority Key Identifier: keyid:15:32:41:5C:31:9F:AD:65:87:5B:D1:AA:03:5A:55:88:8C:EB:73:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:a0:0c:7e:f3:77:fd:61:12:6d:34:d3:8a:b2:27:42:f3:40: 3a:3a:4e:c7:36:8b:c4:f3:5f:76:c1:a7:86:c6:06:e7:ca:e9: d8:6d:bb:24:a6:2d:e7:4f:45:ff:ed:76:49:fb:5c:04:72:6f: f8:ee:cb:6b:1f:a5:76:96:11:90:fd:c0:04:ff:52:f6:20:a1: 52:ae:e4:37:9e:0f:05:7a:d7:d9:91:f6:e8:39:c6:30:14:98: ef:3c:63:0d:48:a2:a2:fe:4e:a6:04:ae:35:cb:d8:55:8d:4f: 43:2d:82:c7:fb:7f:11:45:2d:cf:60:e2:ec:e9:1d:de:58:a7: 58:a1:73:39:04:4f:83:0c:64:19:bd:f7:fa:f1:4d:34:97:f6: 9f:ae:d6:6d:92:c1:c6:44:a7:c4:ff:80:a8:ba:43:6a:38:11: e9:a1:62:72:1b:6c:24:81:8f:a9:d8:96:68:22:42:92:50:c8: d2:34:77:0a:17:5e:b8:80:09:a3:c3:a0:4f:78:6b:ba:95:8b: 04:de:b8:b2:0d:0c:d8:5d:4a:75:b3:06:7c:db:56:dc:39:8f: 35:c3:6d:a1:9e:0b:21:0e:ca:c6:db:f3:f9:e1:55:74:25:b9: e4:b3:e9:f6:ba:4b:2b:8b:1d:b3:15:0b:72:89:fe:82:48:b5: b7:eb:b7:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqjjviXiFirlUicX3KnXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MzI0MTVjMzE5ZmFkNjU4NzViZDFhYTAzNWE1NTg4OGNl YjczM2UwHhcNMjUxMjA2MDcwMDUzWhcNMjUxMjA3MDcwMDUzWjAzMTEwLwYDVQQD EyhmYjc4MmZiYTZlZmMzNTI3M2VjMmU2OTlmOTI5ZDM2MmQ1Y2I4MTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIvpGik8Qlx4PrGRYOKb/pWXMBWB DZVpUm1ayLDufWsV9MP0vuskdhgWIEVXKE44TXQZq4/uj49XPn5FK+qkqq/sntgN fJi/h74YzqftqtQDLQZsvmnUCicLoINYuahVKD2aEnvFQ8qHJ4YgELxLiN/qbYHR vYDESph35EmvV9Fo5p9FEucFhoOzqWiNmpRW3VEl1M6j1aQ/7P3ptbt+qHWf47rH ZJlsBPwdfK3dwSyNu5q+KBf1GCYULyGE211ffllw69kfbBf/haLj4E9Z7RGodQZN kbzdlA4NxEbG2mBxfdw9x9q6HSTOEI8bdWfLS7UmVexv+DmqTI5mEk1SmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPt4L7pu/DUnPsLmmfkp02LVy4GcMB8GA1UdIwQY MBaAFBUyQVwxn61lh1vRqgNaVYiM63M+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlRKQlhER2ZyV1dIVzlHcUExcFZpSXpyY3o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81ZDVkNDItZTg0My00NDExLTkwZjkt MDE1Zjc2NjRiOWQ3LzEvRlRKQlhER2ZyV1dIVzlHcUExcFZpSXpyY3o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS81ZDVkNDItZTg0My00NDExLTkwZjktMDE1Zjc2NjRiOWQ3 LzEvRlRKQlhER2ZyV1dIVzlHcUExcFZpSXpyY3o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE6AMfvN3 /WESbTTTirInQvNAOjpOxzaLxPNfdsGnhsYG58rp2G27JKYt509F/+12SftcBHJv +O7Lax+ldpYRkP3ABP9S9iChUq7kN54PBXrX2ZH26DnGMBSY7zxjDUiiov5OpgSu NcvYVY1PQy2Cx/t/EUUtz2Di7Okd3linWKFzOQRPgwxkGb33+vFNNJf2n67WbZLB xkSnxP+AqLpDajgR6aFichtsJIGPqdiWaCJCklDI0jR3ChdeuIAJo8OgT3hrupWL BN64sg0M2F1KdbMGfNtW3DmPNcNtoZ4LIQ7Kxtvz+eFVdCW55LPp9rpLK4sdsxUL con+gki1t+u37g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:53 2025 by rpki-client