This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft File: 88t3pwdfknzEAY1W5s11xZjcOlE.mft (raw, json) Hash identifier: xXVgNhS6RoT39maLH64p18v6lVOMpwyaZ9odJUIMhVc= Subject key identifier: 09:56:5A:47:B5:FA:FF:39:95:8D:70:DE:A5:1E:66:C1:B0:0A:4F:41 Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51 Certificate issuer: /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51 Certificate serial: 019AF19AA3B7409C9E96DE2668556C7DCE1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 03:00:34 +0000 Manifest this update: Sat 06 Dec 2025 03:00:34 +0000 Manifest next update: Sun 07 Dec 2025 03:00:34 +0000 Files and hashes: 1: 88t3pwdfknzEAY1W5s11xZjcOlE.crl (hash: /+vKIzEFDhBzSjD1MXbUyfDvNHt+V4y9Jz/cxvuJ/iQ=) 2: HuqhC6vYeI3U9LbLd2vPzvJJgjY.roa (hash: wSYDAGLK1hTNyvlQrxhKmWYaQ0H+BBeF5/EeuiOBKAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a3:b7:40:9c:9e:96:de:26:68:55:6c:7d:ce:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51 Validity Not Before: Dec 6 03:00:34 2025 GMT Not After : Dec 7 03:00:34 2025 GMT Subject: CN=09565a47b5faff39958d70dea51e66c1b00a4f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0b:b5:61:58:99:51:f2:1e:4b:c2:b4:7d:02: 10:b8:45:e2:19:f4:d7:9a:1c:bb:89:1a:73:4a:91: 1d:91:62:88:ae:0f:8e:90:8d:96:c7:cc:30:ab:20: e6:6c:db:c3:0d:b9:42:b9:72:b5:88:e2:85:14:41: cf:ee:e9:f0:00:62:32:89:ff:a8:98:cf:b6:1f:f5: b2:7c:2d:a3:76:34:1c:ae:21:5f:43:b8:ac:8a:03: f1:a3:90:0f:97:27:35:8a:39:78:a5:d7:6f:75:0d: 52:eb:20:7e:6c:8a:46:70:5e:a6:33:e5:b5:db:dd: dc:14:98:ea:19:c4:51:3d:62:4d:54:b7:5c:05:5b: 49:fc:b6:6c:f9:cb:b8:e2:88:99:84:ac:b4:98:61: da:3d:70:96:28:06:82:51:52:fa:20:11:64:d9:57: 99:0f:11:c5:6e:32:3d:50:61:89:51:d0:30:f0:30: ab:4f:e9:d3:5b:cc:f7:b6:58:4f:b4:3d:57:59:a0: 23:20:d8:df:b7:4a:be:e7:a9:57:e2:6f:23:37:c8: d1:c0:31:70:de:2e:79:99:60:4c:1c:f8:d7:d4:d0: c2:1c:4a:5e:7f:5b:c6:49:0b:ca:04:16:11:c7:60: 92:79:65:41:84:03:37:71:13:a1:85:69:cf:d0:50: 5a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:56:5A:47:B5:FA:FF:39:95:8D:70:DE:A5:1E:66:C1:B0:0A:4F:41 X509v3 Authority Key Identifier: keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:36:3d:e5:b3:c8:13:c0:79:b9:c0:d9:e0:fb:56:7a:dd:b1: df:66:e9:83:33:86:55:1d:43:cc:8e:61:a0:3b:14:3b:3f:c2: 73:e2:0f:af:82:d6:32:45:6b:02:c5:f6:3e:21:e8:2e:cf:d2: 72:df:6a:83:1a:70:08:b8:72:1f:c3:09:3c:e8:86:f8:9a:78: 01:8d:0e:2d:a2:2a:f9:d5:66:36:ef:45:66:ce:e8:c3:53:4a: cc:1b:85:5f:2c:3f:e6:a3:4b:77:60:9e:0a:27:65:1a:c4:9b: 78:fe:bc:2b:44:3c:12:5a:81:2e:45:46:4b:47:6c:8e:10:7f: a6:e2:55:c3:d2:58:8a:bf:ed:87:dd:21:b1:4d:b7:59:43:42: 77:37:6f:9c:fd:2d:04:10:65:4e:25:b3:c8:74:46:ff:f5:15: b2:64:4b:d4:fd:6e:fa:d2:2a:7e:82:aa:91:57:63:68:e9:b1: ff:01:c5:7e:e7:24:ef:a6:16:c9:5d:2b:11:c9:71:b4:26:d2: dd:7a:a6:49:fc:3b:49:d0:6e:2d:19:5e:9c:22:f5:f5:b7:1a: f7:9d:66:45:d4:cb:d2:7c:5a:d6:88:65:ac:c3:51:7b:ef:d9: 34:5d:12:84:25:4d:c2:01:63:c1:c4:50:b0:b5:9d:3d:86:2b: 61:de:9c:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqO3QJyelt4maFVsfc4fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzY2I3N2E3MDc1ZjkyN2NjNDAxOGQ1NmU2Y2Q3NWM1OThk YzNhNTEwHhcNMjUxMjA2MDMwMDM0WhcNMjUxMjA3MDMwMDM0WjAzMTEwLwYDVQQD EygwOTU2NWE0N2I1ZmFmZjM5OTU4ZDcwZGVhNTFlNjZjMWIwMGE0ZjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wu1YViZUfIeS8K0fQIQuEXiGfTX mhy7iRpzSpEdkWKIrg+OkI2Wx8wwqyDmbNvDDblCuXK1iOKFFEHP7unwAGIyif+o mM+2H/WyfC2jdjQcriFfQ7isigPxo5APlyc1ijl4pddvdQ1S6yB+bIpGcF6mM+W1 293cFJjqGcRRPWJNVLdcBVtJ/LZs+cu44oiZhKy0mGHaPXCWKAaCUVL6IBFk2VeZ DxHFbjI9UGGJUdAw8DCrT+nTW8z3tlhPtD1XWaAjINjft0q+56lX4m8jN8jRwDFw 3i55mWBMHPjX1NDCHEpef1vGSQvKBBYRx2CSeWVBhAM3cROhhWnP0FBatwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAlWWke1+v85lY1w3qUeZsGwCk9BMB8GA1UdIwQY MBaAFPPLd6cHX5J8xAGNVubNdcWY3DpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODh0M3B3ZGZrbnpFQVkxVzVzMTF4WmpjT2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kZDAxYWQtNmMyNy00NTdmLWIwNjQt NzA3NzExYjgxZWY3LzEvODh0M3B3ZGZrbnpFQVkxVzVzMTF4WmpjT2xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9kZDAxYWQtNmMyNy00NTdmLWIwNjQtNzA3NzExYjgxZWY3 LzEvODh0M3B3ZGZrbnpFQVkxVzVzMTF4WmpjT2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzY95bPI E8B5ucDZ4PtWet2x32bpgzOGVR1DzI5hoDsUOz/Cc+IPr4LWMkVrAsX2PiHoLs/S ct9qgxpwCLhyH8MJPOiG+Jp4AY0OLaIq+dVmNu9FZs7ow1NKzBuFXyw/5qNLd2Ce CidlGsSbeP68K0Q8ElqBLkVGS0dsjhB/puJVw9JYir/th90hsU23WUNCdzdvnP0t BBBlTiWzyHRG//UVsmRL1P1u+tIqfoKqkVdjaOmx/wHFfuck76YWyV0rEclxtCbS 3XqmSfw7SdBuLRlenCL19bca951mRdTL0nxa1ohlrMNRe+/ZNF0ShCVNwgFjwcRQ sLWdPYYrYd6cQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:36 2025 by rpki-client