This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft File: Ftmm_lJPhujQhO3I1kpg361S3xM.mft (raw, json) Hash identifier: sIjEEEuTMS1crUSEOPZQy6ylRaPlhMdu4h6BOj0/+4I= Subject key identifier: 0D:A0:78:78:69:31:09:95:E4:DC:EE:98:7C:01:B9:50:10:88:E2:E5 Authority key identifier: 16:D9:A6:FE:52:4F:86:E8:D0:84:ED:C8:D6:4A:60:DF:AD:52:DF:13 Certificate issuer: /CN=16d9a6fe524f86e8d084edc8d64a60dfad52df13 Certificate serial: 019AF509845BE8A7A258CA18177474007B48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft Manifest number: 06D8 Signing time: Sat 06 Dec 2025 19:00:32 +0000 Manifest this update: Sat 06 Dec 2025 19:00:32 +0000 Manifest next update: Sun 07 Dec 2025 19:00:32 +0000 Files and hashes: 1: Ftmm_lJPhujQhO3I1kpg361S3xM.crl (hash: 3U4BFv/JKN2nrm96wujU2ila50Af1w+r7qyPUHqwHpQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.crl rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:84:5b:e8:a7:a2:58:ca:18:17:74:74:00:7b:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16d9a6fe524f86e8d084edc8d64a60dfad52df13 Validity Not Before: Dec 6 19:00:32 2025 GMT Not After : Dec 7 19:00:32 2025 GMT Subject: CN=0da0787869310995e4dcee987c01b9501088e2e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f3:e8:6b:1e:e7:c5:38:30:60:d9:0e:d0:49: 3c:08:33:4b:1c:e0:2f:ad:0c:f6:46:35:e1:cb:28: 4a:9d:4a:fc:bf:0d:6c:e0:e1:6d:f5:cf:ac:1c:a8: ea:bc:54:04:e9:b7:5c:ab:d6:1d:c9:b0:d9:58:dc: b7:f1:82:12:f6:48:0e:bf:ce:e4:da:1e:44:98:a9: f3:7d:9d:eb:22:6f:19:39:75:56:e0:a1:03:27:78: b4:ad:2b:47:11:11:b1:90:e1:54:5a:e9:6d:4b:21: a7:0a:d3:6c:38:a5:fa:40:28:a8:08:d5:69:e5:26: 09:25:8a:fb:20:5d:f6:c7:2d:03:bd:0d:35:d7:12: ea:9a:e9:fd:7a:39:d3:4a:12:08:05:65:ba:22:e0: 6d:fd:0d:41:62:0c:71:4b:1e:67:07:a0:c7:10:a2: 0d:25:63:a8:0d:0b:32:88:37:ad:fb:1d:44:a9:b5: a4:03:a5:00:b3:ac:65:12:da:25:87:f3:d4:e3:2c: 72:23:38:25:47:c7:76:bd:e3:ec:20:b5:45:bf:b1: 0c:c4:29:1f:3a:01:3a:2b:9f:8e:88:30:7d:99:f8: 68:c9:6f:ed:7e:1a:1f:3e:6b:03:c9:e7:f4:d4:f1: 4d:12:ab:58:73:c1:7d:78:15:0d:3d:ee:b1:83:c7: 46:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A0:78:78:69:31:09:95:E4:DC:EE:98:7C:01:B9:50:10:88:E2:E5 X509v3 Authority Key Identifier: keyid:16:D9:A6:FE:52:4F:86:E8:D0:84:ED:C8:D6:4A:60:DF:AD:52:DF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:5d:45:43:c5:7c:8b:1a:9b:9f:09:ea:84:b4:47:7c:3c:58: 29:de:54:20:da:0b:04:28:5c:89:c6:36:ca:14:7e:49:b4:37: 6b:55:05:4c:fe:ab:94:62:de:0e:0f:8a:59:3f:4e:56:d1:1c: 0a:5f:2d:78:99:93:70:29:b2:f0:eb:b1:e0:b3:b0:33:76:3d: b2:63:71:e2:66:50:a4:9d:fd:a4:97:b3:97:1a:a0:c3:5e:aa: 31:df:3e:73:58:27:c0:03:d2:1f:30:9d:75:6e:25:74:f5:cc: 18:a3:17:93:7f:9e:ea:bb:31:85:fa:fb:ad:7c:b4:25:83:80: 4d:c0:83:2d:03:f1:0b:2b:fb:06:ed:f3:30:ca:db:4d:4c:32: 10:d6:7b:07:8a:92:03:0b:01:06:1c:e2:ef:b0:52:6e:1f:96: b0:0b:a3:01:f0:72:05:95:e1:c8:1c:0f:ba:89:f1:3d:e2:05: 4f:5d:3e:71:ae:f8:9d:52:08:7f:ae:64:29:8b:7f:ca:a1:b8: 5c:27:03:56:9a:e3:5f:3f:de:c8:cc:86:b8:da:08:c1:f2:81: 51:c0:b4:d3:66:18:e4:65:3b:92:65:15:6c:bb:28:db:3a:63: 88:a7:09:8a:ca:f5:1e:74:a8:20:03:2c:18:72:02:32:4a:3c: 38:12:e6:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CYRb6KeiWMoYF3R0AHtIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZDlhNmZlNTI0Zjg2ZThkMDg0ZWRjOGQ2NGE2MGRmYWQ1 MmRmMTMwHhcNMjUxMjA2MTkwMDMyWhcNMjUxMjA3MTkwMDMyWjAzMTEwLwYDVQQD EygwZGEwNzg3ODY5MzEwOTk1ZTRkY2VlOTg3YzAxYjk1MDEwODhlMmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfPoax7nxTgwYNkO0Ek8CDNLHOAv rQz2RjXhyyhKnUr8vw1s4OFt9c+sHKjqvFQE6bdcq9YdybDZWNy38YIS9kgOv87k 2h5EmKnzfZ3rIm8ZOXVW4KEDJ3i0rStHERGxkOFUWultSyGnCtNsOKX6QCioCNVp 5SYJJYr7IF32xy0DvQ011xLqmun9ejnTShIIBWW6IuBt/Q1BYgxxSx5nB6DHEKIN JWOoDQsyiDet+x1EqbWkA6UAs6xlEtolh/PU4yxyIzglR8d2vePsILVFv7EMxCkf OgE6K5+OiDB9mfhoyW/tfhofPmsDyef01PFNEqtYc8F9eBUNPe6xg8dGnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2geHhpMQmV5NzumHwBuVAQiOLlMB8GA1UdIwQY MBaAFBbZpv5ST4bo0ITtyNZKYN+tUt8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnRtbV9sSlBodWpRaE8zSTFrcGczNjFTM3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9lMjQ1NDQtOTUzMy00ZDg2LWEyNzkt NmZiZmNlYzRmNTA1LzEvRnRtbV9sSlBodWpRaE8zSTFrcGczNjFTM3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9lMjQ1NDQtOTUzMy00ZDg2LWEyNzktNmZiZmNlYzRmNTA1 LzEvRnRtbV9sSlBodWpRaE8zSTFrcGczNjFTM3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdl1FQ8V8 ixqbnwnqhLRHfDxYKd5UINoLBChcicY2yhR+SbQ3a1UFTP6rlGLeDg+KWT9OVtEc Cl8teJmTcCmy8Oux4LOwM3Y9smNx4mZQpJ39pJezlxqgw16qMd8+c1gnwAPSHzCd dW4ldPXMGKMXk3+e6rsxhfr7rXy0JYOATcCDLQPxCyv7Bu3zMMrbTUwyENZ7B4qS AwsBBhzi77BSbh+WsAujAfByBZXhyBwPuonxPeIFT10+ca74nVIIf65kKYt/yqG4 XCcDVprjXz/eyMyGuNoIwfKBUcC002YY5GU7kmUVbLso2zpjiKcJisr1HnSoIAMs GHICMko8OBLmOg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:04:37 2025 by rpki-client