This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft File: Ff04BOALngaoLO2fB7NP4_2AOU4.mft (raw, json) Hash identifier: oD9dBo7njIe6XZSXbjUD0wBsXdr3EsOc4yH1Q1XoeaM= Subject key identifier: AE:3E:D3:61:9B:BD:A6:3E:3A:17:5E:48:2B:C4:EB:3C:54:52:93:10 Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e Certificate serial: 019B2E54A81D8FC6A43044556547701AE95D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft Manifest number: 0F0B Signing time: Wed 17 Dec 2025 22:00:58 +0000 Manifest this update: Wed 17 Dec 2025 22:00:58 +0000 Manifest next update: Thu 18 Dec 2025 22:00:58 +0000 Files and hashes: 1: Ff04BOALngaoLO2fB7NP4_2AOU4.crl (hash: yOxaVv12jwTcL/rfQc6VYGBB6BoD3zk61b4kgwbOnBc=) 2: sD3TQhmqpMeiNDRMe_Cg9c8gcQg.roa (hash: YpFE/XWsvo+iSqItJdBs7pFneblfjbKHabl7GMSfsrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:a8:1d:8f:c6:a4:30:44:55:65:47:70:1a:e9:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e Validity Not Before: Dec 17 22:00:58 2025 GMT Not After : Dec 18 22:00:58 2025 GMT Subject: CN=ae3ed3619bbda63e3a175e482bc4eb3c54529310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dd:3d:6f:55:4c:3e:7d:96:9c:1a:5e:f8:cc: 5b:a3:2f:8a:e4:ae:f3:c0:00:a9:d3:17:d0:9d:dd: 4e:bc:d7:b9:67:88:0a:f3:46:ca:b0:4f:9c:7a:51: 98:1f:63:59:74:cd:fa:64:79:69:92:b7:d1:39:06: e0:37:7d:c5:40:56:29:56:cd:49:7d:de:e6:6c:d4: 6a:c4:36:0d:bd:25:63:31:a4:bf:2e:43:d4:a0:b1: 0d:79:aa:7d:b8:94:65:b0:c9:a2:99:c7:6c:31:33: f8:a9:c6:c6:c4:5e:93:22:db:33:3e:1f:53:eb:e5: da:61:32:c4:41:98:b5:10:d6:b6:f4:e7:7f:e7:cd: 1e:02:eb:18:8e:52:ea:3d:99:b9:51:e7:0e:75:e8: 03:93:92:13:b4:2c:d2:f2:b1:ea:82:e5:4b:15:d7: 6e:b2:e1:60:09:5a:91:e7:7e:af:21:7c:6e:3a:a7: 88:2c:0d:d3:a8:c7:44:a9:62:e9:76:ff:f9:64:fe: 75:a8:2b:11:d3:dc:72:22:ff:28:99:ba:ee:77:5d: 48:06:3d:90:6a:47:d4:e6:a2:b4:3c:a0:0c:86:e6: 86:23:9c:fa:47:20:b1:89:9c:e9:b6:e5:9b:d6:a4: cc:4c:77:1c:49:e2:12:1b:75:bc:f2:85:cb:c6:68: 94:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3E:D3:61:9B:BD:A6:3E:3A:17:5E:48:2B:C4:EB:3C:54:52:93:10 X509v3 Authority Key Identifier: keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:6b:db:65:c0:4e:44:c4:0a:5d:8d:cb:83:07:03:2b:39:40: d6:6d:87:7d:21:4a:8a:ac:7a:0e:04:a1:7d:b1:40:a8:6f:34: cf:32:2b:79:94:4d:62:88:d4:c3:21:00:11:55:ed:c2:0f:1f: 92:2c:82:58:28:76:d0:b8:e1:fe:dd:f0:4a:00:1a:81:b0:1c: 7b:8f:d3:14:1b:ab:aa:27:e5:7f:bc:1b:1d:44:7d:a5:3e:85: 85:a9:ad:a1:5c:41:06:c0:42:b0:73:a9:94:90:bc:c4:25:17: 19:04:00:e7:52:d7:cb:0a:16:d9:0b:e9:36:f0:4f:f5:b5:23: 84:a9:04:12:e7:6d:88:f8:62:d5:d2:94:d6:d6:8d:78:6c:c9: 30:50:d7:7e:8d:15:67:4e:c5:a5:90:43:1a:19:32:ac:90:e2: c9:ea:ec:c2:db:ab:3e:dd:7b:26:6f:95:84:a6:37:ba:02:e4: 8c:93:57:01:a3:a2:5c:76:39:44:f8:e5:9f:fe:a8:a4:9d:aa: f4:db:5e:63:fc:5e:4f:f3:49:88:07:33:70:69:14:1b:7c:c8: 70:37:5c:6a:c2:1e:9d:1a:13:19:d6:4b:ac:df:f9:9a:0d:b3: 98:2d:9b:ce:9f:da:61:69:64:14:c7:bb:f5:d0:a3:36:05:0c: 1b:d1:17:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVKgdj8akMERVZUdwGuldMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZmQzODA0ZTAwYjllMDZhODJjZWQ5ZjA3YjM0ZmUzZmQ4 MDM5NGUwHhcNMjUxMjE3MjIwMDU4WhcNMjUxMjE4MjIwMDU4WjAzMTEwLwYDVQQD EyhhZTNlZDM2MTliYmRhNjNlM2ExNzVlNDgyYmM0ZWIzYzU0NTI5MzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq909b1VMPn2WnBpe+Mxboy+K5K7z wACp0xfQnd1OvNe5Z4gK80bKsE+celGYH2NZdM36ZHlpkrfROQbgN33FQFYpVs1J fd7mbNRqxDYNvSVjMaS/LkPUoLENeap9uJRlsMmimcdsMTP4qcbGxF6TItszPh9T 6+XaYTLEQZi1ENa29Od/580eAusYjlLqPZm5UecOdegDk5ITtCzS8rHqguVLFddu suFgCVqR536vIXxuOqeILA3TqMdEqWLpdv/5ZP51qCsR09xyIv8ombrud11IBj2Q akfU5qK0PKAMhuaGI5z6RyCxiZzptuWb1qTMTHccSeISG3W88oXLxmiUsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4+02GbvaY+OhdeSCvE6zxUUpMQMB8GA1UdIwQY MBaAFBX9OATgC54GqCztnwezT+P9gDlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmYwNEJPQUxuZ2FvTE8yZkI3TlA0XzJBT1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iZTNjNDAtMTIxMC00MjcyLWE1ZWEt NzgzNWQzMjA4Mzk2LzEvRmYwNEJPQUxuZ2FvTE8yZkI3TlA0XzJBT1U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9iZTNjNDAtMTIxMC00MjcyLWE1ZWEtNzgzNWQzMjA4Mzk2 LzEvRmYwNEJPQUxuZ2FvTE8yZkI3TlA0XzJBT1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2vbZcBO RMQKXY3LgwcDKzlA1m2HfSFKiqx6DgShfbFAqG80zzIreZRNYojUwyEAEVXtwg8f kiyCWCh20Ljh/t3wSgAagbAce4/TFBurqiflf7wbHUR9pT6FhamtoVxBBsBCsHOp lJC8xCUXGQQA51LXywoW2QvpNvBP9bUjhKkEEudtiPhi1dKU1taNeGzJMFDXfo0V Z07FpZBDGhkyrJDiyerswturPt17Jm+VhKY3ugLkjJNXAaOiXHY5RPjln/6opJ2q 9NteY/xeT/NJiAczcGkUG3zIcDdcasIenRoTGdZLrN/5mg2zmC2bzp/aYWlkFMe7 9dCjNgUMG9EXNw== -----END CERTIFICATE-----Generated at Thu Dec 18 06:59:49 2025 by rpki-client