This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft File: FT8kGD1slRhZGTSebpJTNzZDe5Q.mft (raw, json) Hash identifier: kUii6XO6MobCgc7UORhZ5pLHl/hZs6sr3NQ8etRguVY= Subject key identifier: 4D:09:91:D8:99:C5:4C:BB:71:BF:5C:58:52:8A:70:19:0B:63:32:1C Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94 Certificate issuer: /CN=153f24183d6c95185919349e6e92533736437b94 Certificate serial: 019AF0BEF57D15047CFEDB88F6EA642AAF46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft Manifest number: 085B Signing time: Fri 05 Dec 2025 23:00:37 +0000 Manifest this update: Fri 05 Dec 2025 23:00:37 +0000 Manifest next update: Sat 06 Dec 2025 23:00:37 +0000 Files and hashes: 1: 02srA_dodlsqHDgp--vASVvWX9E.roa (hash: lJ1KGWWna7XFX1YELq/QOjPK38+hDLl/0ZeJxdIW2VA=) 2: FT8kGD1slRhZGTSebpJTNzZDe5Q.crl (hash: GXNvFE/NxAqI21v25+h5Ps+TjesNWHtBItHUehaGBJc=) 3: MBq9_d6LT2vyQzQfNudTMEVPC5w.roa (hash: md4P7geg1tPk/NRWigzWi02Y2+T+SaZ3+I/C1pIam5U=) 4: w6nyjw8CCPdGWE2r0om0qvXFyXo.roa (hash: 1O15ZgeKf2Rbzxb6TQY0MNC2RDhbgVcfZUfdxbDgya4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:f5:7d:15:04:7c:fe:db:88:f6:ea:64:2a:af:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153f24183d6c95185919349e6e92533736437b94 Validity Not Before: Dec 5 23:00:37 2025 GMT Not After : Dec 6 23:00:37 2025 GMT Subject: CN=4d0991d899c54cbb71bf5c58528a70190b63321c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7f:15:74:0c:ee:3a:d4:00:fd:f6:3a:82:50: c1:97:0b:4c:eb:1f:e9:d2:3a:5b:6e:03:44:5e:53: 35:13:3e:9f:22:2a:9b:3e:a2:02:be:6b:9a:01:9f: ac:10:4d:df:28:e6:ca:b8:74:64:d3:8f:c3:b5:eb: 58:0f:9d:0a:51:52:21:24:6b:5d:3a:52:92:f2:e4: 66:cf:44:d0:9a:83:f1:af:b7:56:8c:ee:0c:58:42: a1:ee:99:e9:ad:44:2a:8d:3a:47:4e:36:65:9d:35: 26:13:a6:d8:d9:5a:10:1b:6a:8d:2b:ca:a0:33:3c: dc:a4:ae:b1:9b:3b:33:65:8c:11:88:26:2f:1a:e7: ac:ba:ab:33:30:98:57:ea:b3:ef:2b:9e:ab:0a:37: e6:23:ca:b5:d5:3d:72:ea:bb:9d:fc:e9:b2:86:e7: 56:2c:f1:8a:ce:da:5c:18:dd:39:16:77:06:58:4c: c7:fd:98:cc:09:07:cd:04:16:a3:93:ae:65:86:39: f5:ed:dd:95:05:0b:9c:47:eb:f7:53:06:e3:9e:88: 53:f7:f1:8e:91:61:39:d5:44:4f:a5:2d:5c:fb:af: b2:bc:19:38:b2:80:83:30:88:0f:0a:df:9a:81:fa: 90:7a:14:b9:70:fe:29:26:e7:44:11:a4:48:0b:e9: 7f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:09:91:D8:99:C5:4C:BB:71:BF:5C:58:52:8A:70:19:0B:63:32:1C X509v3 Authority Key Identifier: keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:b4:62:d7:ef:f1:f7:c0:ad:5f:35:d0:f8:72:79:32:4c:e3: 59:04:09:5f:82:25:8c:20:55:fd:16:56:a7:93:e1:ee:e7:6c: 56:77:e3:e7:56:bc:86:36:a8:9b:8c:11:1b:17:fc:ec:10:94: a5:a2:d5:ce:02:4b:7c:2a:bf:85:f9:ab:a0:75:8e:9f:ca:50: f3:44:bd:e9:c5:6a:de:63:a8:30:76:56:3c:b0:de:cf:3b:90: 76:39:5f:38:e6:fb:4b:40:a7:c0:0d:cd:48:fd:22:fb:06:0d: 77:b2:46:0b:6e:b4:9c:86:6f:8c:c2:02:a0:60:04:0a:a0:70: 2f:99:30:3c:0d:42:ff:6c:c9:9c:a5:df:36:7f:ab:3d:cd:b3: 86:55:7a:7c:ee:a8:a3:7b:fa:a9:ab:6f:e0:75:f0:4f:73:11: 21:1a:2c:9d:13:40:44:65:40:8f:87:c6:6c:0f:59:a3:8d:1c: a3:6f:32:78:9d:6f:01:16:ca:a3:19:80:0e:07:31:fe:72:26: ff:42:1b:43:88:d9:c5:32:31:f7:20:a0:a4:01:2b:f8:9f:d8: 83:20:8f:b6:c3:88:a7:1a:14:c5:1b:ec:92:d4:b7:45:0e:29: c6:89:13:bd:5c:f1:53:c3:4c:a4:8a:cc:fd:33:eb:ec:73:7d: 9f:52:bd:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvvV9FQR8/tuI9upkKq9GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1M2YyNDE4M2Q2Yzk1MTg1OTE5MzQ5ZTZlOTI1MzM3MzY0 MzdiOTQwHhcNMjUxMjA1MjMwMDM3WhcNMjUxMjA2MjMwMDM3WjAzMTEwLwYDVQQD Eyg0ZDA5OTFkODk5YzU0Y2JiNzFiZjVjNTg1MjhhNzAxOTBiNjMzMjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX8VdAzuOtQA/fY6glDBlwtM6x/p 0jpbbgNEXlM1Ez6fIiqbPqICvmuaAZ+sEE3fKObKuHRk04/DtetYD50KUVIhJGtd OlKS8uRmz0TQmoPxr7dWjO4MWEKh7pnprUQqjTpHTjZlnTUmE6bY2VoQG2qNK8qg MzzcpK6xmzszZYwRiCYvGuesuqszMJhX6rPvK56rCjfmI8q11T1y6rud/OmyhudW LPGKztpcGN05FncGWEzH/ZjMCQfNBBajk65lhjn17d2VBQucR+v3UwbjnohT9/GO kWE51URPpS1c+6+yvBk4soCDMIgPCt+agfqQehS5cP4pJudEEaRIC+l/aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0JkdiZxUy7cb9cWFKKcBkLYzIcMB8GA1UdIwQY MBaAFBU/JBg9bJUYWRk0nm6SUzc2Q3uUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iMDVlMDgtMDc2Mi00ZGM3LWE0YjAt NTgwNWQzZjNkYmIyLzEvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9iMDVlMDgtMDc2Mi00ZGM3LWE0YjAtNTgwNWQzZjNkYmIy LzEvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrRi1+/x 98CtXzXQ+HJ5MkzjWQQJX4IljCBV/RZWp5Ph7udsVnfj51a8hjaom4wRGxf87BCU paLVzgJLfCq/hfmroHWOn8pQ80S96cVq3mOoMHZWPLDezzuQdjlfOOb7S0CnwA3N SP0i+wYNd7JGC260nIZvjMICoGAECqBwL5kwPA1C/2zJnKXfNn+rPc2zhlV6fO6o o3v6qatv4HXwT3MRIRosnRNARGVAj4fGbA9Zo40co28yeJ1vARbKoxmADgcx/nIm /0IbQ4jZxTIx9yCgpAEr+J/YgyCPtsOIpxoUxRvsktS3RQ4pxokTvVzxU8NMpIrM /TPr7HN9n1K9GQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:13 2025 by rpki-client