This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft File: FFXKMFkjEziJJe4UQQCa0x1LtB8.mft (raw, json) Hash identifier: LzMMJGgT6rR/sErDq/oxNf2WJdJgl7ejYxX3Zb5M/CM= Subject key identifier: A3:36:70:B3:3A:1C:F9:6F:F5:9E:E2:7A:37:F8:4D:41:1E:23:AA:2D Authority key identifier: 14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F Certificate issuer: /CN=1455ca30592313388925ee1441009ad31d4bb41f Certificate serial: 019AF3C018D04B0946EA42C655340B84D11F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft Manifest number: 01AC Signing time: Sat 06 Dec 2025 13:00:43 +0000 Manifest this update: Sat 06 Dec 2025 13:00:43 +0000 Manifest next update: Sun 07 Dec 2025 13:00:43 +0000 Files and hashes: 1: C93S1dgJ4_A0KrqfhcJ2wbpt_r8.roa (hash: msQwNZJRyoBH47m4enHwmGpM3uJN0VQWiUcpw8JNFl4=) 2: FFXKMFkjEziJJe4UQQCa0x1LtB8.crl (hash: jQsaGtTtQfwtxDFaKUYElqPB45Ikdw+86oZfW6DEwHQ=) 3: ZF7hOmhYR1fn4ZYXkR49rskV2pI.roa (hash: mpzvhb4zXG8kDkRlZRViVkyq7QjZbW7JERwXznl7htk=) 4: wcv6Vtvj_8KzJMQubxYX_mtNkA0.roa (hash: 0NzmIEPG+guESJal/NU9sf3xAOXj6eL+XwYUVrhagog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:18:d0:4b:09:46:ea:42:c6:55:34:0b:84:d1:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1455ca30592313388925ee1441009ad31d4bb41f Validity Not Before: Dec 6 13:00:43 2025 GMT Not After : Dec 7 13:00:43 2025 GMT Subject: CN=a33670b33a1cf96ff59ee27a37f84d411e23aa2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:da:88:ba:75:cf:22:8d:8a:97:3e:54:87:a3: 44:3a:7c:18:50:64:90:1d:bd:15:76:09:b8:3c:8a: 95:8a:cd:7f:a7:dd:56:71:ef:23:ca:de:53:82:39: 8d:08:02:a3:60:07:9b:32:fa:c5:59:ef:11:91:46: 15:6c:a7:72:4c:d0:c8:f8:7a:9e:05:6f:a8:b9:95: 00:d0:be:55:69:e3:5a:77:2a:76:6c:42:6a:0b:43: de:b2:3a:04:52:d8:3d:8f:ff:0e:bd:33:86:cf:2f: 15:36:fa:f0:4b:46:38:e5:1f:2b:ee:b9:4f:fc:a1: 39:9c:66:6a:72:64:d2:85:73:82:6c:c7:63:82:59: 8c:65:04:d4:8d:2c:c8:49:22:cf:b4:37:ef:50:95: 9a:cd:5a:fe:a3:ad:00:d4:69:97:6e:1c:ef:22:3f: 6e:2e:36:e5:da:23:36:ee:55:37:8d:fc:a7:57:3a: 06:b8:e9:a9:8a:95:79:1c:55:85:10:b8:c8:98:24: 86:71:8e:01:a9:ba:8a:1e:75:c0:f7:c9:2b:6a:d9: 0c:f5:dc:df:10:be:86:fa:80:a2:5a:59:86:69:30: 34:a2:6a:52:ad:33:0b:06:37:a4:bd:b9:c9:70:00: 0a:67:1c:6b:24:60:e9:52:8e:d3:5d:de:9e:55:a4: 9b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:36:70:B3:3A:1C:F9:6F:F5:9E:E2:7A:37:F8:4D:41:1E:23:AA:2D X509v3 Authority Key Identifier: keyid:14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:45:15:83:a1:85:b6:af:a6:16:ce:70:81:3c:60:03:57:83: 6d:08:a5:d5:fa:89:a1:c4:39:ab:80:88:7e:86:bb:38:dc:97: 05:84:9c:d5:66:5a:ea:6d:b9:c7:f5:34:5d:1e:e5:da:4d:d2: cd:43:70:3b:2e:1c:2f:1e:64:1f:db:70:22:fe:a9:bc:44:65: a4:e7:e1:61:dc:69:d9:64:01:6c:29:92:c4:c9:ea:24:ee:a7: be:19:2b:f3:98:26:26:c3:a4:eb:cc:48:77:83:77:3d:e3:bb: fa:de:ba:8a:ee:4c:05:72:31:dd:b7:4d:00:cd:95:e4:6c:93: 03:27:88:3c:ea:bb:a0:75:3d:f1:8d:bc:59:a2:b3:e1:f0:9c: 57:00:49:d4:24:21:fc:74:30:14:7e:f1:11:c2:b2:b3:c2:43: 80:fd:1b:63:2c:0e:3a:02:45:90:5f:2d:9f:59:ae:c3:37:92: a3:41:d8:cc:41:63:7b:70:29:c5:60:33:dc:75:04:a4:1a:2c: 32:96:fe:88:8e:f2:7d:9d:e3:1d:40:3a:fd:57:77:5e:bd:e7: 33:e4:89:c7:85:b7:e7:e5:1e:51:a1:90:04:6a:ce:3d:fe:f6: 0f:06:55:a0:05:90:de:b4:81:a6:8f:dc:37:8a:04:f2:1d:8a: c6:0f:d7:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwBjQSwlG6kLGVTQLhNEfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NTVjYTMwNTkyMzEzMzg4OTI1ZWUxNDQxMDA5YWQzMWQ0 YmI0MWYwHhcNMjUxMjA2MTMwMDQzWhcNMjUxMjA3MTMwMDQzWjAzMTEwLwYDVQQD EyhhMzM2NzBiMzNhMWNmOTZmZjU5ZWUyN2EzN2Y4NGQ0MTFlMjNhYTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdqIunXPIo2Klz5Uh6NEOnwYUGSQ Hb0Vdgm4PIqVis1/p91Wce8jyt5TgjmNCAKjYAebMvrFWe8RkUYVbKdyTNDI+Hqe BW+ouZUA0L5VaeNadyp2bEJqC0PesjoEUtg9j/8OvTOGzy8VNvrwS0Y45R8r7rlP /KE5nGZqcmTShXOCbMdjglmMZQTUjSzISSLPtDfvUJWazVr+o60A1GmXbhzvIj9u Ljbl2iM27lU3jfynVzoGuOmpipV5HFWFELjImCSGcY4BqbqKHnXA98kratkM9dzf EL6G+oCiWlmGaTA0ompSrTMLBjekvbnJcAAKZxxrJGDpUo7TXd6eVaSbIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKM2cLM6HPlv9Z7iejf4TUEeI6otMB8GA1UdIwQY MBaAFBRVyjBZIxM4iSXuFEEAmtMdS7QfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMDgzMmUtNjc1Yi00ZWMyLWE4MDIt OWIyNmNhYjc5NDUxLzEvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9mMDgzMmUtNjc1Yi00ZWMyLWE4MDItOWIyNmNhYjc5NDUx LzEvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAokUVg6GF tq+mFs5wgTxgA1eDbQil1fqJocQ5q4CIfoa7ONyXBYSc1WZa6m25x/U0XR7l2k3S zUNwOy4cLx5kH9twIv6pvERlpOfhYdxp2WQBbCmSxMnqJO6nvhkr85gmJsOk68xI d4N3PeO7+t66iu5MBXIx3bdNAM2V5GyTAyeIPOq7oHU98Y28WaKz4fCcVwBJ1CQh /HQwFH7xEcKys8JDgP0bYywOOgJFkF8tn1muwzeSo0HYzEFje3ApxWAz3HUEpBos Mpb+iI7yfZ3jHUA6/Vd3Xr3nM+SJx4W35+UeUaGQBGrOPf72DwZVoAWQ3rSBpo/c N4oE8h2Kxg/XTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:57:36 2025 by rpki-client