This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft File: ftjlhnV1ut-0FwacbZAaCR2EvzE.mft (raw, json) Hash identifier: EhgZsSo7gUVwpoUtkfHYnXA4T0FDjPighmY/Uz0RUSI= Subject key identifier: 9D:4F:E0:DE:7F:E7:43:AC:AF:AD:CF:F5:C3:5F:29:E4:B7:06:24:A8 Authority key identifier: 7E:D8:E5:86:75:75:BA:DF:B4:17:06:9C:6D:90:1A:09:1D:84:BF:31 Certificate issuer: /CN=7ed8e5867575badfb417069c6d901a091d84bf31 Certificate serial: 019AF3F7C0B8FC921F49211DDF5DC69E4E96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft Manifest number: 0256 Signing time: Sat 06 Dec 2025 14:01:31 +0000 Manifest this update: Sat 06 Dec 2025 14:01:31 +0000 Manifest next update: Sun 07 Dec 2025 14:01:31 +0000 Files and hashes: 1: ftjlhnV1ut-0FwacbZAaCR2EvzE.crl (hash: nMe5OMJ1J0zRYGbrmhd0adrM2m/PF77ZHHcADO1v+QY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:c0:b8:fc:92:1f:49:21:1d:df:5d:c6:9e:4e:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ed8e5867575badfb417069c6d901a091d84bf31 Validity Not Before: Dec 6 14:01:31 2025 GMT Not After : Dec 7 14:01:31 2025 GMT Subject: CN=9d4fe0de7fe743acafadcff5c35f29e4b70624a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:8c:76:a4:15:2f:be:de:cc:ae:4b:43:2b:fe: 7c:4a:78:b1:8f:06:d9:5f:92:0d:cb:62:b9:66:4b: 58:65:56:bf:9c:d2:37:5d:33:72:ae:d0:c1:f7:52: e8:9b:c4:73:bb:b4:df:3b:e6:f8:17:e8:86:d5:6e: a5:fc:c8:a2:a4:77:8c:a1:0d:77:fc:93:b6:03:f9: 2f:25:0b:97:eb:b3:e8:33:5e:77:12:05:5d:ac:e8: 14:43:42:cc:4a:59:a6:44:63:0a:9a:e4:61:19:51: b0:3e:89:31:ef:41:08:37:53:68:6c:4c:e9:94:be: 5c:91:43:9e:f0:4b:9c:82:34:64:a6:6c:fd:77:31: ea:ee:d1:55:6c:78:b8:a6:c2:3d:ab:dd:e8:07:2a: 0a:ea:18:96:bd:1b:48:b8:21:a9:9b:96:3f:e2:06: 27:39:be:c1:e2:76:15:c7:27:55:2d:a1:22:e9:37: f3:da:d5:6e:e0:ca:fa:87:21:8f:6a:34:77:0b:ad: 0d:06:c0:d1:f2:da:6a:de:8b:db:00:49:d3:2b:a6: 72:dd:06:5f:07:18:1e:62:b1:7b:ab:c6:ad:2c:65: 4e:ca:d0:4a:c4:01:37:49:1c:d1:66:a8:8c:f2:55: 2d:e9:24:76:18:8e:3b:2a:6c:5e:9d:5c:d4:4c:65: 09:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4F:E0:DE:7F:E7:43:AC:AF:AD:CF:F5:C3:5F:29:E4:B7:06:24:A8 X509v3 Authority Key Identifier: keyid:7E:D8:E5:86:75:75:BA:DF:B4:17:06:9C:6D:90:1A:09:1D:84:BF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b9:02:7c:c1:7a:3e:d2:01:fb:e3:e9:26:3a:a1:d2:1b:ea: a8:cd:03:b7:57:d3:73:4e:c3:28:28:3b:23:fd:98:9d:5a:ef: 91:05:72:d7:b3:2b:6f:b2:a7:48:b6:d8:48:38:27:e4:92:7c: f3:fc:35:31:1c:20:f5:84:b8:67:40:d4:79:3d:61:e4:41:44: 7a:58:4f:b7:0a:e7:ae:ab:57:00:f8:56:6d:bd:cf:d0:70:bc: 2a:75:b4:2c:1c:b5:93:00:3b:c0:34:f3:c0:fa:e3:1d:21:5f: 7b:ea:61:39:18:7c:e2:b2:27:09:15:c8:f0:3c:40:30:41:88: 56:53:bc:df:38:28:a8:d0:72:0d:b5:6e:96:67:92:12:ed:54: c8:ce:96:55:4e:b1:ab:23:0d:6c:e6:6a:82:7c:a8:52:83:43: 69:64:0d:06:42:45:73:73:c3:2d:14:d4:5c:1d:92:ea:50:d0: 7f:17:9b:63:f1:fe:d0:9d:58:98:7f:8f:32:dd:63:28:ab:8f: ae:b0:b4:2e:08:b9:8b:52:ac:cf:23:42:5c:1e:fe:f2:07:ee: d7:59:10:dc:f5:5e:60:60:02:0d:23:08:d0:ec:e4:e2:ed:ba: 9a:76:e9:62:08:72:70:cc:7b:4c:05:9f:f9:48:06:98:97:44: 08:db:a8:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz98C4/JIfSSEd313Gnk6WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlZDhlNTg2NzU3NWJhZGZiNDE3MDY5YzZkOTAxYTA5MWQ4 NGJmMzEwHhcNMjUxMjA2MTQwMTMxWhcNMjUxMjA3MTQwMTMxWjAzMTEwLwYDVQQD Eyg5ZDRmZTBkZTdmZTc0M2FjYWZhZGNmZjVjMzVmMjllNGI3MDYyNGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ox2pBUvvt7MrktDK/58SnixjwbZ X5INy2K5ZktYZVa/nNI3XTNyrtDB91Lom8Rzu7TfO+b4F+iG1W6l/MiipHeMoQ13 /JO2A/kvJQuX67PoM153EgVdrOgUQ0LMSlmmRGMKmuRhGVGwPokx70EIN1NobEzp lL5ckUOe8EucgjRkpmz9dzHq7tFVbHi4psI9q93oByoK6hiWvRtIuCGpm5Y/4gYn Ob7B4nYVxydVLaEi6Tfz2tVu4Mr6hyGPajR3C60NBsDR8tpq3ovbAEnTK6Zy3QZf BxgeYrF7q8atLGVOytBKxAE3SRzRZqiM8lUt6SR2GI47KmxenVzUTGUJ5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1P4N5/50Osr63P9cNfKeS3BiSoMB8GA1UdIwQY MBaAFH7Y5YZ1dbrftBcGnG2QGgkdhL8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnRqbGhuVjF1dC0wRndhY2JaQWFDUjJFdnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi82ZGU2MTgtNjczMC00ZDI5LWJkODct NmRlOTM1NWVkYjNhLzEvZnRqbGhuVjF1dC0wRndhY2JaQWFDUjJFdnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi82ZGU2MTgtNjczMC00ZDI5LWJkODctNmRlOTM1NWVkYjNh LzEvZnRqbGhuVjF1dC0wRndhY2JaQWFDUjJFdnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLkCfMF6 PtIB++PpJjqh0hvqqM0Dt1fTc07DKCg7I/2YnVrvkQVy17Mrb7KnSLbYSDgn5JJ8 8/w1MRwg9YS4Z0DUeT1h5EFEelhPtwrnrqtXAPhWbb3P0HC8KnW0LBy1kwA7wDTz wPrjHSFfe+phORh84rInCRXI8DxAMEGIVlO83zgoqNByDbVulmeSEu1UyM6WVU6x qyMNbOZqgnyoUoNDaWQNBkJFc3PDLRTUXB2S6lDQfxebY/H+0J1YmH+PMt1jKKuP rrC0Lgi5i1KszyNCXB7+8gfu11kQ3PVeYGACDSMI0Ozk4u26mnbpYghycMx7TAWf +UgGmJdECNuoVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:24:23 2025 by rpki-client