This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft File: FTCm61I5adqSyIRMDftA7YIL1sQ.mft (raw, json) Hash identifier: r6rZjrguANIJTVsBbqcVxy9IQv4oST+SwnUFsXAEBYs= Subject key identifier: EC:9D:70:1A:3A:FC:BB:A7:DA:B0:D5:A2:73:49:03:D6:86:E6:82:92 Authority key identifier: 15:30:A6:EB:52:39:69:DA:92:C8:84:4C:0D:FB:40:ED:82:0B:D6:C4 Certificate issuer: /CN=1530a6eb523969da92c8844c0dfb40ed820bd6c4 Certificate serial: 019AF12CC18ECF3342D8CCEF4DFF82E1B9CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft Manifest number: 0D5D Signing time: Sat 06 Dec 2025 01:00:33 +0000 Manifest this update: Sat 06 Dec 2025 01:00:33 +0000 Manifest next update: Sun 07 Dec 2025 01:00:33 +0000 Files and hashes: 1: FTCm61I5adqSyIRMDftA7YIL1sQ.crl (hash: EhL7TBZ5v2jrnGlam0Il+jyl64a4kEy6q85jq2xLLg8=) 2: b6c5zm72T5u0EfOAbDE3JGGhXtw.roa (hash: OJH5Z8arKXzNL0yoYBrj6T/yS9sFayIfKvyurf8IbEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.crl rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c1:8e:cf:33:42:d8:cc:ef:4d:ff:82:e1:b9:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1530a6eb523969da92c8844c0dfb40ed820bd6c4 Validity Not Before: Dec 6 01:00:33 2025 GMT Not After : Dec 7 01:00:33 2025 GMT Subject: CN=ec9d701a3afcbba7dab0d5a2734903d686e68292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:71:eb:46:7d:51:7d:fb:13:8e:25:64:ca:47: 01:ba:b7:10:db:be:ef:ff:77:b1:37:ad:c8:f5:7c: 83:b0:a4:e5:1f:a0:bb:5e:af:e2:91:70:09:de:f4: 17:83:61:d8:38:ac:0f:f3:ac:f6:ba:ce:e6:eb:a2: 66:b1:aa:7e:b0:cc:6e:fb:a2:a5:b8:cc:32:b7:4d: 30:69:57:da:ea:49:63:fe:c4:8e:46:6d:92:54:ca: 01:f7:6e:98:f9:91:c3:11:f1:ec:87:3f:be:38:d5: c0:40:c6:48:67:eb:4e:ad:f1:30:f7:0d:b9:46:dc: d1:50:6f:c7:0e:62:e3:7f:22:c1:59:ef:7b:f3:0e: df:df:21:97:b4:c9:9c:2a:9a:5a:cb:51:9d:58:ab: ba:2e:30:64:32:c9:1b:b6:90:3f:47:ff:ac:9e:a6: ec:b3:c8:c0:81:c4:08:3d:aa:7a:34:c3:d8:33:cc: a8:cf:fd:cd:be:a0:8a:0e:db:9a:71:6e:bb:50:43: b2:86:cf:47:dc:bc:4b:5c:42:e1:42:0c:46:ce:cb: 48:1f:0b:a5:dd:dd:56:3a:33:fa:c0:a0:e1:76:e2: 36:a7:9d:e3:0c:04:3a:b1:08:04:0f:a1:eb:eb:3f: 15:d1:b0:d6:6a:05:c0:e3:bf:8c:d7:0d:e9:0c:e4: 05:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9D:70:1A:3A:FC:BB:A7:DA:B0:D5:A2:73:49:03:D6:86:E6:82:92 X509v3 Authority Key Identifier: keyid:15:30:A6:EB:52:39:69:DA:92:C8:84:4C:0D:FB:40:ED:82:0B:D6:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:c3:c7:92:1e:10:3a:19:45:dc:d3:f1:0a:bc:09:52:a4:73: e2:14:3e:fd:6d:48:36:26:e3:19:30:56:46:97:05:c7:d2:18: 74:97:df:36:9d:f0:c3:ed:b0:37:ec:59:a5:ab:1c:fe:51:49: 59:44:fe:64:83:05:1c:88:ca:43:2d:f3:6a:c0:ea:a1:e1:0c: 19:3d:a6:83:08:6e:58:66:7d:12:17:af:ec:b7:63:a5:a5:37: dd:b7:f6:54:2f:e3:ef:57:58:55:67:8a:5f:4d:17:d3:c5:6f: 10:6f:53:0c:10:fd:64:ca:ba:71:b7:8a:69:16:30:66:d5:26: 0a:70:83:a1:ed:98:48:7a:42:f7:fd:06:57:4a:3f:9f:be:d4: c0:19:dd:aa:14:a4:e0:fa:ca:8e:f1:2d:88:60:07:95:49:c1: ee:3a:bd:22:25:94:0b:22:e2:60:2b:ca:ca:ce:27:22:f6:68: e8:56:ee:6d:2e:9f:0a:6e:6b:21:3f:9a:e0:b0:55:53:af:26: ca:62:2d:e4:60:21:0c:9d:8b:3e:b4:9e:b9:49:33:0c:8c:7f: 8f:0a:ed:a4:9d:cc:3b:44:98:ad:33:83:a8:95:73:be:47:bb: 86:2e:62:bd:dd:c3:9c:e9:87:26:49:d4:e1:46:1f:ba:3b:4d: c3:09:22:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMGOzzNC2MzvTf+C4bnKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MzBhNmViNTIzOTY5ZGE5MmM4ODQ0YzBkZmI0MGVkODIw YmQ2YzQwHhcNMjUxMjA2MDEwMDMzWhcNMjUxMjA3MDEwMDMzWjAzMTEwLwYDVQQD EyhlYzlkNzAxYTNhZmNiYmE3ZGFiMGQ1YTI3MzQ5MDNkNjg2ZTY4MjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53HrRn1RffsTjiVkykcBurcQ277v /3exN63I9XyDsKTlH6C7Xq/ikXAJ3vQXg2HYOKwP86z2us7m66Jmsap+sMxu+6Kl uMwyt00waVfa6klj/sSORm2SVMoB926Y+ZHDEfHshz++ONXAQMZIZ+tOrfEw9w25 RtzRUG/HDmLjfyLBWe978w7f3yGXtMmcKppay1GdWKu6LjBkMskbtpA/R/+snqbs s8jAgcQIPap6NMPYM8yoz/3NvqCKDtuacW67UEOyhs9H3LxLXELhQgxGzstIHwul 3d1WOjP6wKDhduI2p53jDAQ6sQgED6Hr6z8V0bDWagXA47+M1w3pDOQFqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOydcBo6/Lun2rDVonNJA9aG5oKSMB8GA1UdIwQY MBaAFBUwputSOWnaksiETA37QO2CC9bEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlRDbTYxSTVhZHFTeUlSTURmdEE3WUlMMXNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8yZjEwZWUtNzUzMS00ZjIyLWIxYTgt ZDMyM2ZiZGJiNjg3LzEvRlRDbTYxSTVhZHFTeUlSTURmdEE3WUlMMXNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8yZjEwZWUtNzUzMS00ZjIyLWIxYTgtZDMyM2ZiZGJiNjg3 LzEvRlRDbTYxSTVhZHFTeUlSTURmdEE3WUlMMXNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZMPHkh4Q OhlF3NPxCrwJUqRz4hQ+/W1INibjGTBWRpcFx9IYdJffNp3ww+2wN+xZpasc/lFJ WUT+ZIMFHIjKQy3zasDqoeEMGT2mgwhuWGZ9Ehev7LdjpaU33bf2VC/j71dYVWeK X00X08VvEG9TDBD9ZMq6cbeKaRYwZtUmCnCDoe2YSHpC9/0GV0o/n77UwBndqhSk 4PrKjvEtiGAHlUnB7jq9IiWUCyLiYCvKys4nIvZo6FbubS6fCm5rIT+a4LBVU68m ymIt5GAhDJ2LPrSeuUkzDIx/jwrtpJ3MO0SYrTODqJVzvke7hi5ivd3DnOmHJknU 4UYfujtNwwkiFw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:08 2025 by rpki-client