This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft File: fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft (raw, json) Hash identifier: 6D3R/pIlhHoTL4LZB0paBv7b8D4RPFLCKPyKGPMXxWw= Subject key identifier: DA:AC:24:02:3D:AF:B3:68:13:F1:54:97:A5:A3:5E:D9:F5:14:6F:95 Authority key identifier: 7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5 Certificate issuer: /CN=7d346ace4e652870f1687450d5c34e14cb0094b5 Certificate serial: 019AF464E3A0D89EF466D1BAF1566C80B755 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft Manifest number: C9 Signing time: Sat 06 Dec 2025 16:00:43 +0000 Manifest this update: Sat 06 Dec 2025 16:00:43 +0000 Manifest next update: Sun 07 Dec 2025 16:00:43 +0000 Files and hashes: 1: fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl (hash: utw8eMtWTBaxrQ/VDkjro40Essj6UfkW98E3aaTGRW4=) 2: qfuhRedqUPpNTA86T-6bb6nkpoU.roa (hash: n2+GEGHXXGKkmerP/9dENHzgRYY7IxvI5R7IJ6va0DM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:e3:a0:d8:9e:f4:66:d1:ba:f1:56:6c:80:b7:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d346ace4e652870f1687450d5c34e14cb0094b5 Validity Not Before: Dec 6 16:00:43 2025 GMT Not After : Dec 7 16:00:43 2025 GMT Subject: CN=daac24023dafb36813f15497a5a35ed9f5146f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e9:d4:9b:07:2f:1e:ed:a0:b8:97:f2:c8:d7: 16:3a:76:8b:fa:4c:f9:08:80:30:7d:29:04:fa:b9: 72:ff:2d:1e:ad:0d:af:12:32:ec:4f:45:7a:c4:61: ec:10:c5:08:bc:b4:a8:ca:6e:70:be:12:fe:6a:3e: bf:9b:65:4e:d3:0f:ea:f2:99:1e:ac:0e:a0:21:4f: b8:ba:d6:da:8b:2d:24:7d:40:31:39:89:19:ab:75: f4:21:6d:a3:ae:7e:ea:df:0f:da:75:cc:3d:47:59: 38:67:d8:9c:b9:b4:5e:b8:da:e2:68:4f:d2:52:cd: 6d:cb:cd:8a:ad:45:df:42:4b:6c:0c:80:5d:58:45: 71:19:8c:ba:94:bf:33:e9:ed:c0:82:31:c9:c2:fa: e5:66:b4:f4:0f:c8:76:d8:0d:bf:e6:c9:df:61:f4: 04:69:da:b4:83:b0:16:fe:56:b1:85:58:0b:73:ca: 8b:03:0b:8d:ac:03:a7:62:d3:36:91:d0:93:cb:39: f3:fc:a8:6a:a0:97:9a:09:db:3c:04:c5:96:0b:fd: c3:77:99:3e:42:8d:7f:40:84:37:97:2a:2d:1a:fe: 1f:51:57:45:b2:90:18:47:33:e0:21:6a:9c:b2:ec: d8:70:d0:e0:3f:63:e1:40:84:b5:2f:43:5c:af:51: 04:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AC:24:02:3D:AF:B3:68:13:F1:54:97:A5:A3:5E:D9:F5:14:6F:95 X509v3 Authority Key Identifier: keyid:7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:23:19:fe:2a:94:14:81:fc:79:dd:04:62:6b:e6:e4:0d:0f: fe:a3:a9:e1:b7:ce:15:9e:86:36:04:c2:98:e9:1d:fa:42:1f: f5:51:9a:35:36:08:34:2c:52:d8:72:43:7d:d7:bf:e8:91:00: f0:d5:05:eb:06:8e:c6:e2:21:8f:95:cd:65:6e:4a:15:fb:2c: 21:23:c0:9b:08:e5:1b:44:2b:79:13:e8:d2:c2:e4:d7:ec:16: 76:1b:32:68:45:37:dc:69:50:20:15:ed:22:12:73:37:1c:a0: a8:f2:3d:c2:7e:d9:c8:37:d5:77:05:83:9e:56:ee:a6:25:95: 2c:d2:5c:56:d8:55:5f:c9:a9:46:1c:fd:c7:58:bd:17:0c:f0: 41:4f:b8:a8:99:95:41:8a:81:e3:41:fe:92:7a:ef:8a:04:35: 8c:77:8c:f4:2b:c4:ff:88:51:96:ee:65:83:78:16:67:0c:3f: 33:b6:7d:7f:31:4e:32:51:56:52:08:c7:c8:9e:2b:ae:d9:c3: 44:11:94:85:2c:cf:c4:6d:f8:61:a0:e4:b9:34:08:29:36:d3: 32:3b:ec:b4:90:54:ad:36:9b:1b:10:db:28:83:ed:de:89:ab: ac:ff:69:02:0d:a0:f5:ad:84:64:ad:99:22:3f:c8:ec:36:19: d1:4c:3c:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZOOg2J70ZtG68VZsgLdVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMzQ2YWNlNGU2NTI4NzBmMTY4NzQ1MGQ1YzM0ZTE0Y2Iw MDk0YjUwHhcNMjUxMjA2MTYwMDQzWhcNMjUxMjA3MTYwMDQzWjAzMTEwLwYDVQQD EyhkYWFjMjQwMjNkYWZiMzY4MTNmMTU0OTdhNWEzNWVkOWY1MTQ2Zjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkenUmwcvHu2guJfyyNcWOnaL+kz5 CIAwfSkE+rly/y0erQ2vEjLsT0V6xGHsEMUIvLSoym5wvhL+aj6/m2VO0w/q8pke rA6gIU+4utbaiy0kfUAxOYkZq3X0IW2jrn7q3w/adcw9R1k4Z9icubReuNriaE/S Us1ty82KrUXfQktsDIBdWEVxGYy6lL8z6e3AgjHJwvrlZrT0D8h22A2/5snfYfQE adq0g7AW/laxhVgLc8qLAwuNrAOnYtM2kdCTyznz/KhqoJeaCds8BMWWC/3Dd5k+ Qo1/QIQ3lyotGv4fUVdFspAYRzPgIWqcsuzYcNDgP2PhQIS1L0Ncr1EEjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqsJAI9r7NoE/FUl6WjXtn1FG+VMB8GA1UdIwQY MBaAFH00as5OZShw8Wh0UNXDThTLAJS1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlRScXprNWxLSER4YUhSUTFjTk9GTXNBbExVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jNjc2ZDctZmJmZS00YWU2LWJlNTEt MzI3YWNjMWIxZTU5LzEvZlRScXprNWxLSER4YUhSUTFjTk9GTXNBbExVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jNjc2ZDctZmJmZS00YWU2LWJlNTEtMzI3YWNjMWIxZTU5 LzEvZlRScXprNWxLSER4YUhSUTFjTk9GTXNBbExVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCMZ/iqU FIH8ed0EYmvm5A0P/qOp4bfOFZ6GNgTCmOkd+kIf9VGaNTYINCxS2HJDfde/6JEA 8NUF6waOxuIhj5XNZW5KFfssISPAmwjlG0QreRPo0sLk1+wWdhsyaEU33GlQIBXt IhJzNxygqPI9wn7ZyDfVdwWDnlbupiWVLNJcVthVX8mpRhz9x1i9FwzwQU+4qJmV QYqB40H+knrvigQ1jHeM9CvE/4hRlu5lg3gWZww/M7Z9fzFOMlFWUgjHyJ4rrtnD RBGUhSzPxG34YaDkuTQIKTbTMjvstJBUrTabGxDbKIPt3omrrP9pAg2g9a2EZK2Z Ij/I7DYZ0Uw8Zg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:34:53 2025 by rpki-client