This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.mft File: FTB01_oopD5Ad4_0Vi9TT8OOH7A.mft (raw, json) Hash identifier: pEV9GXUe7eKrMn0W7aJWo+L7Sg2ShN4+E+6y0bwgf2U= Subject key identifier: D0:0D:8F:8A:F0:79:C3:76:D8:CA:8F:86:A4:70:B3:10:E7:48:29:0E Authority key identifier: 15:30:74:D7:FA:28:A4:3E:40:77:8F:F4:56:2F:53:4F:C3:8E:1F:B0 Certificate issuer: /CN=153074d7fa28a43e40778ff4562f534fc38e1fb0 Certificate serial: 019B31FA87FFC13B53321671F43762A0E8DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTB01_oopD5Ad4_0Vi9TT8OOH7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.mft Manifest number: 067C Signing time: Thu 18 Dec 2025 15:01:00 +0000 Manifest this update: Thu 18 Dec 2025 15:01:00 +0000 Manifest next update: Fri 19 Dec 2025 15:01:00 +0000 Files and hashes: 1: FTB01_oopD5Ad4_0Vi9TT8OOH7A.crl (hash: ESyLsw4KZEvw2AStDwELlOFGQDRjl77Kgi+yoIytOZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.mft rsync://rpki.ripe.net/repository/DEFAULT/FTB01_oopD5Ad4_0Vi9TT8OOH7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:87:ff:c1:3b:53:32:16:71:f4:37:62:a0:e8:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153074d7fa28a43e40778ff4562f534fc38e1fb0 Validity Not Before: Dec 18 15:01:00 2025 GMT Not After : Dec 19 15:01:00 2025 GMT Subject: CN=d00d8f8af079c376d8ca8f86a470b310e748290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8f:7c:2c:c8:3c:b7:69:e8:bc:66:13:9b:b2: 16:ab:17:05:63:2a:32:7e:9d:67:61:61:bb:91:a5: 73:ce:e8:89:a0:31:52:fe:6b:97:dd:c8:fa:a9:18: 61:79:4f:d2:c7:07:14:b5:17:cb:0b:16:10:a5:28: 41:8f:dd:b8:ce:c9:e8:71:11:48:c2:c3:d8:27:f8: 62:b7:d2:2f:41:af:e9:f8:c2:10:20:0d:a2:a6:b8: 9d:6c:43:e2:d6:1f:cc:7e:be:03:65:2f:14:de:a2: 57:21:48:98:a2:b5:01:eb:bc:03:d3:d3:8c:d8:b8: bb:d7:5f:45:f0:80:21:c2:9e:64:6a:22:a3:51:7a: b4:8e:3d:6d:dd:2b:fa:1b:e6:52:2b:c7:c1:7b:c4: a1:98:52:5f:4f:01:7d:00:a2:39:3d:bf:7b:31:1f: 1b:d6:fa:5a:79:b1:98:4e:66:10:27:3d:8d:02:41: 97:52:c3:4b:65:d4:a0:b5:02:6e:8d:1b:c9:77:f9: 66:9b:7b:ae:a7:70:51:0e:e8:fb:4f:17:07:c6:2c: d2:fa:b7:c9:6a:03:6c:9b:e4:99:05:4c:d0:db:c3: 1b:39:b8:89:0a:16:f0:b3:26:0f:df:a6:3c:1f:57: f2:f3:a1:31:91:3d:10:cb:f0:c5:18:4e:9e:34:29: 2d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0D:8F:8A:F0:79:C3:76:D8:CA:8F:86:A4:70:B3:10:E7:48:29:0E X509v3 Authority Key Identifier: keyid:15:30:74:D7:FA:28:A4:3E:40:77:8F:F4:56:2F:53:4F:C3:8E:1F:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTB01_oopD5Ad4_0Vi9TT8OOH7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:e9:2b:3c:55:16:f0:f5:f5:2c:e1:0a:36:77:24:34:77:c7: 54:e0:57:89:2b:a2:9e:a0:f4:ab:e4:db:d1:ab:c2:b8:a7:5c: 43:b5:b8:a1:84:10:27:d4:a1:d0:cb:03:6b:4a:6c:3e:43:a7: 84:ac:13:3e:c9:4b:fe:25:00:ff:6c:b2:37:89:48:8c:ce:f0: 8e:a1:2d:14:0b:33:41:8a:c9:33:3d:f9:70:96:6d:a3:4a:39: f1:e3:00:93:5b:01:f4:e1:f5:98:bd:2f:90:18:70:6b:72:78: a7:a9:df:05:3b:97:66:70:6e:5b:88:ab:44:8c:49:ad:c9:47: 42:a6:d9:80:8f:a5:37:f4:3a:f7:31:6e:85:87:26:98:c5:4c: a3:92:90:67:4b:c5:28:7c:c3:d6:3e:c2:89:13:6f:96:6d:cd: 62:73:d2:b7:52:6a:ea:b9:98:d1:51:6d:74:f6:04:65:87:1f: 0f:c5:fd:ce:54:eb:0b:97:dd:ec:f6:32:57:4c:c2:6a:71:c9: da:cf:89:30:f7:a2:81:6b:20:a2:3d:3f:02:75:99:3d:16:46: 46:11:a4:30:69:42:3e:42:5b:a3:2d:fa:44:de:0e:d6:ae:e7: 4f:13:60:7a:a9:4f:bc:5f:d7:cb:9e:8b:33:e7:1f:56:10:51: 9e:87:ba:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+of/wTtTMhZx9DdioOjaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MzA3NGQ3ZmEyOGE0M2U0MDc3OGZmNDU2MmY1MzRmYzM4 ZTFmYjAwHhcNMjUxMjE4MTUwMTAwWhcNMjUxMjE5MTUwMTAwWjAzMTEwLwYDVQQD EyhkMDBkOGY4YWYwNzljMzc2ZDhjYThmODZhNDcwYjMxMGU3NDgyOTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY98LMg8t2novGYTm7IWqxcFYyoy fp1nYWG7kaVzzuiJoDFS/muX3cj6qRhheU/SxwcUtRfLCxYQpShBj924zsnocRFI wsPYJ/hit9IvQa/p+MIQIA2ipridbEPi1h/Mfr4DZS8U3qJXIUiYorUB67wD09OM 2Li7119F8IAhwp5kaiKjUXq0jj1t3Sv6G+ZSK8fBe8ShmFJfTwF9AKI5Pb97MR8b 1vpaebGYTmYQJz2NAkGXUsNLZdSgtQJujRvJd/lmm3uup3BRDuj7TxcHxizS+rfJ agNsm+SZBUzQ28MbObiJChbwsyYP36Y8H1fy86ExkT0Qy/DFGE6eNCkt8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNANj4rwecN22MqPhqRwsxDnSCkOMB8GA1UdIwQY MBaAFBUwdNf6KKQ+QHeP9FYvU0/Djh+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlRCMDFfb29wRDVBZDRfMFZpOVRUOE9PSDdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xNzYwYWYtZGMxYy00MDhjLTg2ZGQt M2RjMzVlNTQ0YWFmLzEvRlRCMDFfb29wRDVBZDRfMFZpOVRUOE9PSDdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xNzYwYWYtZGMxYy00MDhjLTg2ZGQtM2RjMzVlNTQ0YWFm LzEvRlRCMDFfb29wRDVBZDRfMFZpOVRUOE9PSDdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJukrPFUW 8PX1LOEKNnckNHfHVOBXiSuinqD0q+Tb0avCuKdcQ7W4oYQQJ9Sh0MsDa0psPkOn hKwTPslL/iUA/2yyN4lIjM7wjqEtFAszQYrJMz35cJZto0o58eMAk1sB9OH1mL0v kBhwa3J4p6nfBTuXZnBuW4irRIxJrclHQqbZgI+lN/Q69zFuhYcmmMVMo5KQZ0vF KHzD1j7CiRNvlm3NYnPSt1Jq6rmY0VFtdPYEZYcfD8X9zlTrC5fd7PYyV0zCanHJ 2s+JMPeigWsgoj0/AnWZPRZGRhGkMGlCPkJboy36RN4O1q7nTxNgeqlPvF/Xy56L M+cfVhBRnoe6mw== -----END CERTIFICATE-----Generated at Thu Dec 18 18:30:25 2025 by rpki-client