This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft File: FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft (raw, json) Hash identifier: 8hGTPYnNygkzDjqxFpkOPnI82T0KfRGe6bZoi/WVIbM= Subject key identifier: 9A:4D:1A:54:E5:A6:F2:53:F1:75:38:19:8D:52:B7:8C:B5:DA:E5:25 Authority key identifier: 15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3 Certificate issuer: /CN=153831c16635161c4dbd18ec5a72b99c4ee519e3 Certificate serial: 019AF2773055A471AC8082F9A08EEC4DA09E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft Manifest number: 13D4 Signing time: Sat 06 Dec 2025 07:01:28 +0000 Manifest this update: Sat 06 Dec 2025 07:01:28 +0000 Manifest next update: Sun 07 Dec 2025 07:01:28 +0000 Files and hashes: 1: FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl (hash: ntWpsaSNG/JEaZVYhczsWoXG0PoZZ5V9pAF1VaGBG9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:30:55:a4:71:ac:80:82:f9:a0:8e:ec:4d:a0:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153831c16635161c4dbd18ec5a72b99c4ee519e3 Validity Not Before: Dec 6 07:01:28 2025 GMT Not After : Dec 7 07:01:28 2025 GMT Subject: CN=9a4d1a54e5a6f253f17538198d52b78cb5dae525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:52:26:5f:18:fd:80:d2:60:af:4f:55:92:07: de:4e:9a:61:48:64:21:f0:2f:f9:eb:b0:ab:c8:04: 64:24:25:78:47:df:4c:23:d3:d5:2c:f5:f9:61:00: 4f:d0:57:2d:0d:7c:41:2c:33:64:34:a2:46:8f:b5: eb:26:4c:6f:be:66:61:6c:cc:2a:54:ec:ff:bb:01: d6:fb:4a:47:f9:f3:1b:cc:73:e0:47:90:b5:77:f9: b5:e3:9c:e0:c3:45:ac:60:ff:87:d6:63:30:8c:90: 5d:fe:94:a6:7f:73:81:e9:bf:84:f5:87:c6:f4:14: fe:9c:2b:9e:3f:e1:3c:ef:d9:cc:28:8b:c0:4d:33: db:71:de:73:76:fe:9b:9b:fe:5b:16:68:be:87:a3: 3a:50:d4:54:a2:a6:2b:01:69:9c:59:78:0f:96:cf: a9:c3:d3:03:fa:4d:eb:ad:62:d7:d7:11:3c:37:28: 02:7a:a8:16:24:fc:35:f3:f8:30:2d:b0:2d:17:62: 68:77:fa:3e:ea:5f:0d:eb:02:9a:34:a9:4e:7f:28: 21:7c:4c:19:33:53:80:cc:c6:98:31:bf:80:49:67: 56:49:2e:2c:31:1f:81:27:f7:bd:84:34:2f:73:7c: 18:bc:91:5c:ff:77:4a:ab:a1:cf:20:3d:58:2e:80: 21:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4D:1A:54:E5:A6:F2:53:F1:75:38:19:8D:52:B7:8C:B5:DA:E5:25 X509v3 Authority Key Identifier: keyid:15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:53:16:91:e7:12:be:59:dc:5b:9a:b9:45:69:55:1a:43:e4: 26:d8:91:4b:47:7f:ee:32:b6:3e:a1:29:74:d7:82:95:dd:ac: cc:83:e0:7e:7c:fc:d2:ea:c8:df:70:06:a0:39:5c:ed:a3:ec: 52:40:94:48:33:bc:63:66:1e:5d:aa:d1:d1:ff:f3:98:32:93: 23:aa:20:0b:d1:5c:bf:41:f0:1e:98:8f:6b:ea:b8:8f:f6:aa: 88:be:62:25:78:dc:71:99:e1:0e:da:15:37:02:1a:92:91:c7: bd:c4:e5:83:81:73:a5:2e:18:a5:01:d0:ca:a1:e5:31:0c:42: a3:c2:8a:d9:04:3a:96:e3:3e:e6:b8:fd:dd:45:fe:cd:3c:66: ec:8a:82:5b:3e:58:f5:05:a7:3a:93:b5:c6:3e:a0:04:c4:f6: 9a:e6:ce:1d:74:16:2b:2c:4d:b2:33:97:17:07:94:43:7d:50: 29:b1:0e:7a:7c:1a:47:ba:66:a3:48:23:c0:d3:ba:37:1a:ff: 9c:f6:10:6f:54:25:68:1e:5d:77:64:bc:2c:98:2f:b1:83:73: 73:df:20:d7:4d:3a:23:a8:6f:32:ec:c2:30:46:4c:21:55:44: f0:ef:a2:1c:76:ce:6e:bb:47:d4:ca:14:ff:ca:78:8b:d6:38: 1b:4f:f7:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzBVpHGsgIL5oI7sTaCeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MzgzMWMxNjYzNTE2MWM0ZGJkMThlYzVhNzJiOTljNGVl NTE5ZTMwHhcNMjUxMjA2MDcwMTI4WhcNMjUxMjA3MDcwMTI4WjAzMTEwLwYDVQQD Eyg5YTRkMWE1NGU1YTZmMjUzZjE3NTM4MTk4ZDUyYjc4Y2I1ZGFlNTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFImXxj9gNJgr09VkgfeTpphSGQh 8C/567CryARkJCV4R99MI9PVLPX5YQBP0FctDXxBLDNkNKJGj7XrJkxvvmZhbMwq VOz/uwHW+0pH+fMbzHPgR5C1d/m145zgw0WsYP+H1mMwjJBd/pSmf3OB6b+E9YfG 9BT+nCueP+E879nMKIvATTPbcd5zdv6bm/5bFmi+h6M6UNRUoqYrAWmcWXgPls+p w9MD+k3rrWLX1xE8NygCeqgWJPw18/gwLbAtF2Jod/o+6l8N6wKaNKlOfyghfEwZ M1OAzMaYMb+ASWdWSS4sMR+BJ/e9hDQvc3wYvJFc/3dKq6HPID1YLoAhNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpNGlTlpvJT8XU4GY1St4y12uUlMB8GA1UdIwQY MBaAFBU4McFmNRYcTb0Y7FpyuZxO5RnjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlRneHdXWTFGaHhOdlJqc1duSzVuRTdsR2VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85NTQ1NTctMmE1Zi00ODI2LWFiMTYt Y2Q1MTdiMTY5Zjg5LzEvRlRneHdXWTFGaHhOdlJqc1duSzVuRTdsR2VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS85NTQ1NTctMmE1Zi00ODI2LWFiMTYtY2Q1MTdiMTY5Zjg5 LzEvRlRneHdXWTFGaHhOdlJqc1duSzVuRTdsR2VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVMWkecS vlncW5q5RWlVGkPkJtiRS0d/7jK2PqEpdNeCld2szIPgfnz80urI33AGoDlc7aPs UkCUSDO8Y2YeXarR0f/zmDKTI6ogC9Fcv0HwHpiPa+q4j/aqiL5iJXjccZnhDtoV NwIakpHHvcTlg4FzpS4YpQHQyqHlMQxCo8KK2QQ6luM+5rj93UX+zTxm7IqCWz5Y 9QWnOpO1xj6gBMT2mubOHXQWKyxNsjOXFweUQ31QKbEOenwaR7pmo0gjwNO6Nxr/ nPYQb1QlaB5dd2S8LJgvsYNzc98g1006I6hvMuzCMEZMIVVE8O+iHHbObrtH1MoU /8p4i9Y4G0/3yg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:27:23 2025 by rpki-client