This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft File: FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft (raw, json) Hash identifier: 0rFHn4fA2NTjYbAQygfw7ZtiPdoV3/KkuZLzCyXs2tk= Subject key identifier: AE:F7:63:BC:16:19:32:C2:62:0B:34:80:EF:34:ED:C8:85:4B:F3:90 Authority key identifier: 16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C Certificate issuer: /CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c Certificate serial: 019AF1643ED6F993FBA3081306C6E68A03A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft Manifest number: 0A81 Signing time: Sat 06 Dec 2025 02:01:09 +0000 Manifest this update: Sat 06 Dec 2025 02:01:09 +0000 Manifest next update: Sun 07 Dec 2025 02:01:09 +0000 Files and hashes: 1: FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl (hash: VRgB5Mrcj/tb0fydhZlx/mFBKzTk1su9UPY/LFOUyAc=) 2: g3b-X86nv3p6U9DOq4hCU_Dnmdo.roa (hash: 2YoEPjb/mUp/HqQp7Qak5HkOS9XgXc9API514lfVQEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:3e:d6:f9:93:fb:a3:08:13:06:c6:e6:8a:03:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c Validity Not Before: Dec 6 02:01:09 2025 GMT Not After : Dec 7 02:01:09 2025 GMT Subject: CN=aef763bc161932c2620b3480ef34edc8854bf390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:48:c8:db:d2:9d:95:f3:a2:95:a8:b3:fc:61: d4:c6:18:7e:56:a1:bb:c5:5d:e9:e2:92:5e:ca:06: 43:bd:ab:47:58:7e:6b:5b:f0:c4:bd:89:72:9b:68: 03:29:f1:26:8f:fa:04:88:04:f4:60:18:27:07:a2: e3:ae:0f:ad:26:d9:82:45:87:99:46:97:ab:01:c2: d3:61:25:99:3f:69:f3:3a:04:ec:79:9f:74:03:db: de:7e:c5:d6:25:f6:04:67:fd:e8:80:4b:c8:16:49: 43:11:d1:b8:00:0f:2f:b8:b9:36:b6:3c:34:29:02: 76:7a:87:64:c6:bb:8a:1f:3d:2a:e0:f0:5f:2a:95: 8d:d3:e3:15:d9:3e:b3:fd:cd:6a:ed:ed:f7:c0:a5: c3:8f:6f:85:ad:1e:e0:c7:ef:6f:4a:4d:96:22:cf: c5:3f:f4:16:a0:0f:ac:54:8c:a3:08:42:69:f2:fc: 86:45:d1:c6:61:92:d8:6f:a6:4b:49:d2:19:c5:c0: fc:7c:db:71:28:32:af:66:35:38:c8:c8:35:ad:2f: f0:d6:52:18:16:3f:1a:90:70:03:76:e5:c0:2c:d5: 46:31:a7:04:92:6d:71:3d:c8:39:cf:8a:00:ba:0e: 0f:1f:12:35:92:81:9d:40:c2:76:dd:ef:bb:11:f2: d8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F7:63:BC:16:19:32:C2:62:0B:34:80:EF:34:ED:C8:85:4B:F3:90 X509v3 Authority Key Identifier: keyid:16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:73:3a:6c:e7:35:f5:7b:3d:0c:a3:bd:60:f6:db:7d:ba:60: eb:93:c3:de:b0:16:63:5d:13:a0:60:c8:33:5a:7b:34:da:ba: 2b:9e:d5:a2:6b:10:18:48:0d:90:50:9e:be:4b:17:e4:fa:46: 4e:1c:07:1a:42:9e:dc:6f:27:89:ba:9b:9b:80:19:ec:31:ac: 77:05:ea:8b:79:7c:4d:63:b7:ac:fd:38:15:c9:88:51:d3:7e: 9d:cb:8c:40:3c:2e:20:fd:a2:c8:ff:98:39:af:d3:ac:18:fd: bf:af:18:88:ad:ad:67:37:a5:a3:77:2d:46:b4:c8:8d:35:8d: 6d:35:1b:ed:77:22:6d:6b:fc:2d:62:85:eb:72:e1:4b:f2:79: 3c:c6:15:bf:5c:a3:f2:cb:3c:59:a3:bc:99:a7:f7:ae:cb:f8: 05:33:4b:f7:bd:f4:09:78:5f:76:37:8a:7e:6b:46:82:3d:9b: e8:41:97:8e:a3:ce:22:3d:be:fb:81:ab:74:6b:ef:c0:6c:e6: 3a:7a:74:86:1e:c7:b6:8e:c4:1d:12:20:60:37:9f:61:76:9c: 2e:9c:98:3b:9e:94:7e:a0:34:c9:ae:bc:3f:f9:06:b2:56:79: b6:7e:57:3e:ac:4b:42:3e:6a:56:7c:b6:8b:b8:71:12:94:c6: 9e:5d:55:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZD7W+ZP7owgTBsbmigOpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZDMxYjJkODk5ZDZlYjJiY2I3YTRkNzhjYzMxMDBkY2Uz MGM5MGMwHhcNMjUxMjA2MDIwMTA5WhcNMjUxMjA3MDIwMTA5WjAzMTEwLwYDVQQD EyhhZWY3NjNiYzE2MTkzMmMyNjIwYjM0ODBlZjM0ZWRjODg1NGJmMzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EjI29KdlfOilaiz/GHUxhh+VqG7 xV3p4pJeygZDvatHWH5rW/DEvYlym2gDKfEmj/oEiAT0YBgnB6Ljrg+tJtmCRYeZ RperAcLTYSWZP2nzOgTseZ90A9vefsXWJfYEZ/3ogEvIFklDEdG4AA8vuLk2tjw0 KQJ2eodkxruKHz0q4PBfKpWN0+MV2T6z/c1q7e33wKXDj2+FrR7gx+9vSk2WIs/F P/QWoA+sVIyjCEJp8vyGRdHGYZLYb6ZLSdIZxcD8fNtxKDKvZjU4yMg1rS/w1lIY Fj8akHADduXALNVGMacEkm1xPcg5z4oAug4PHxI1koGdQMJ23e+7EfLY9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK73Y7wWGTLCYgs0gO807ciFS/OQMB8GA1UdIwQY MBaAFBbTGy2JnW6yvLek14zDEA3OMMkMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnRNYkxZbWRicks4dDZUWGpNTVFEYzR3eVF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83YzNhMTgtMGVjOS00MTU3LWJmNWEt NTIwN2Y2NjRkZjIxLzEvRnRNYkxZbWRicks4dDZUWGpNTVFEYzR3eVF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS83YzNhMTgtMGVjOS00MTU3LWJmNWEtNTIwN2Y2NjRkZjIx LzEvRnRNYkxZbWRicks4dDZUWGpNTVFEYzR3eVF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3M6bOc1 9Xs9DKO9YPbbfbpg65PD3rAWY10ToGDIM1p7NNq6K57VomsQGEgNkFCevksX5PpG ThwHGkKe3G8nibqbm4AZ7DGsdwXqi3l8TWO3rP04FcmIUdN+ncuMQDwuIP2iyP+Y Oa/TrBj9v68YiK2tZzelo3ctRrTIjTWNbTUb7XcibWv8LWKF63LhS/J5PMYVv1yj 8ss8WaO8maf3rsv4BTNL9730CXhfdjeKfmtGgj2b6EGXjqPOIj2++4GrdGvvwGzm Onp0hh7Hto7EHRIgYDefYXacLpyYO56UfqA0ya68P/kGslZ5tn5XPqxLQj5qVny2 i7hxEpTGnl1VxA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:27:26 2025 by rpki-client