This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft File: b88Z734vchyq9pz4LUynxLVBU2Q.mft (raw, json) Hash identifier: dkX0UVRU68fVkLRp3J0JvBAfrnjNJNNsCe5kiJ9V9K0= Subject key identifier: B7:41:49:72:AF:3A:73:F7:2E:29:1C:2D:39:31:B1:06:62:54:89:23 Authority key identifier: 6F:CF:19:EF:7E:2F:72:1C:AA:F6:9C:F8:2D:4C:A7:C4:B5:41:53:64 Certificate issuer: /CN=6fcf19ef7e2f721caaf69cf82d4ca7c4b5415364 Certificate serial: 019AF31C414CC387A88768F38F75218CC488 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:01:46 +0000 Manifest this update: Sat 06 Dec 2025 10:01:46 +0000 Manifest next update: Sun 07 Dec 2025 10:01:46 +0000 Files and hashes: 1: WzJBeEEQzWYcl7q5TX6p0F9jB_8.roa (hash: fTX9dCvlUyS92mU9zMfvVFn7IN42FVvudIXSZvqnY2s=) 2: b88Z734vchyq9pz4LUynxLVBU2Q.crl (hash: RnXKhp+tGxGqSCOivxDFxTSVgS5nohb8eB8JaBpBhiw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:41:4c:c3:87:a8:87:68:f3:8f:75:21:8c:c4:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fcf19ef7e2f721caaf69cf82d4ca7c4b5415364 Validity Not Before: Dec 6 10:01:46 2025 GMT Not After : Dec 7 10:01:46 2025 GMT Subject: CN=b7414972af3a73f72e291c2d3931b10662548923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:97:c6:63:68:bd:cf:a7:18:12:00:56:1e:a3: 5a:ef:88:fc:a2:59:7d:17:1a:3e:99:b8:4f:e5:b5: 46:04:1b:cb:25:cc:d5:b6:51:92:7a:d1:d9:3e:d1: a5:d1:d6:55:0f:25:7f:d1:b6:58:3c:61:ef:1e:aa: ca:91:19:eb:28:42:9d:01:a1:9a:6e:21:9e:cf:03: b8:4d:ec:fd:e8:c6:70:5d:a5:9f:0d:6d:c1:52:6a: a6:41:b4:19:4e:b1:31:02:a3:97:38:43:c1:07:f2: c1:bc:b0:36:8a:e3:da:a2:7f:76:41:32:e8:cc:25: b4:de:61:d0:c6:3a:9b:6a:b9:c1:d4:b8:e4:f2:5a: 66:cd:99:eb:e6:56:c3:bb:d2:aa:c2:9d:83:3d:9a: bc:e5:9c:6b:5c:c7:f8:0e:65:2d:cd:34:b3:d3:7b: 7d:46:88:a1:de:92:42:de:a2:af:42:cc:f9:34:da: 38:80:c7:ac:8a:eb:95:3a:0e:05:fc:70:e1:7b:90: 69:95:62:c6:57:b9:a7:33:74:c7:0c:25:53:99:08: 79:41:fd:b6:c7:44:b4:97:fb:78:55:55:30:5d:e8: 23:b8:12:62:f2:03:6a:cf:90:d8:89:a2:0b:95:3e: 9a:a9:4b:40:df:72:c5:2e:cf:fc:5f:ae:55:c2:a2: 05:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:41:49:72:AF:3A:73:F7:2E:29:1C:2D:39:31:B1:06:62:54:89:23 X509v3 Authority Key Identifier: keyid:6F:CF:19:EF:7E:2F:72:1C:AA:F6:9C:F8:2D:4C:A7:C4:B5:41:53:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:05:0b:9a:c5:85:a4:21:95:a6:fd:f2:81:a3:23:d9:3c:34: 26:ae:3a:d9:7f:d0:5b:34:e8:3b:b5:69:d5:cd:c5:c2:87:6b: dc:84:38:22:7c:98:92:22:a6:23:6b:1f:3b:97:89:79:47:98: 87:7d:23:5e:66:98:0e:dd:c0:07:42:6e:aa:05:d6:db:a6:01: f7:35:90:bb:dc:27:0e:12:bc:08:a7:21:6b:b4:d8:eb:bd:8e: 77:fe:34:f4:22:ad:0d:ae:72:bd:1b:f0:61:0b:22:16:dc:9a: 9b:57:24:62:11:dc:bd:e6:ee:ee:6d:66:5d:af:50:3e:07:33: 86:50:4d:ce:37:02:b9:29:c1:e6:c0:01:90:b3:4c:22:e0:4c: 84:26:e8:e2:ff:14:7a:b8:64:51:90:21:a7:da:cf:02:c2:d6: 3f:b4:dc:64:bc:ad:93:c9:4f:be:a3:04:47:54:07:dd:ca:0f: 13:af:27:95:64:6b:16:f4:eb:e9:a9:24:07:8c:65:16:89:1f: f8:35:77:c8:fd:a8:ee:52:85:16:00:d2:df:5c:e7:ac:89:79: fc:0b:74:83:fa:d5:71:ca:e1:15:fd:8d:ca:7d:8b:58:99:8d: ad:55:6a:0f:bc:b8:cb:18:31:aa:36:05:98:45:ea:19:97:b0: 65:92:04:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHEFMw4eoh2jzj3UhjMSIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmY2YxOWVmN2UyZjcyMWNhYWY2OWNmODJkNGNhN2M0YjU0 MTUzNjQwHhcNMjUxMjA2MTAwMTQ2WhcNMjUxMjA3MTAwMTQ2WjAzMTEwLwYDVQQD EyhiNzQxNDk3MmFmM2E3M2Y3MmUyOTFjMmQzOTMxYjEwNjYyNTQ4OTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupfGY2i9z6cYEgBWHqNa74j8oll9 Fxo+mbhP5bVGBBvLJczVtlGSetHZPtGl0dZVDyV/0bZYPGHvHqrKkRnrKEKdAaGa biGezwO4Tez96MZwXaWfDW3BUmqmQbQZTrExAqOXOEPBB/LBvLA2iuPaon92QTLo zCW03mHQxjqbarnB1Ljk8lpmzZnr5lbDu9Kqwp2DPZq85ZxrXMf4DmUtzTSz03t9 Roih3pJC3qKvQsz5NNo4gMesiuuVOg4F/HDhe5BplWLGV7mnM3THDCVTmQh5Qf22 x0S0l/t4VVUwXegjuBJi8gNqz5DYiaILlT6aqUtA33LFLs/8X65VwqIFrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLdBSXKvOnP3LikcLTkxsQZiVIkjMB8GA1UdIwQY MBaAFG/PGe9+L3Icqvac+C1Mp8S1QVNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjg4WjczNHZjaHlxOXB6NExVeW54TFZCVTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC81ODQ2OTEtYTk3MS00NTg3LWE3YTUt OGNiYjZlNzgyMmQyLzEvYjg4WjczNHZjaHlxOXB6NExVeW54TFZCVTJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC81ODQ2OTEtYTk3MS00NTg3LWE3YTUtOGNiYjZlNzgyMmQy LzEvYjg4WjczNHZjaHlxOXB6NExVeW54TFZCVTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewULmsWF pCGVpv3ygaMj2Tw0Jq462X/QWzToO7Vp1c3Fwodr3IQ4InyYkiKmI2sfO5eJeUeY h30jXmaYDt3AB0JuqgXW26YB9zWQu9wnDhK8CKcha7TY672Od/409CKtDa5yvRvw YQsiFtyam1ckYhHcvebu7m1mXa9QPgczhlBNzjcCuSnB5sABkLNMIuBMhCbo4v8U erhkUZAhp9rPAsLWP7TcZLytk8lPvqMER1QH3coPE68nlWRrFvTr6akkB4xlFokf +DV3yP2o7lKFFgDS31znrIl5/At0g/rVccrhFf2Nyn2LWJmNrVVqD7y4yxgxqjYF mEXqGZewZZIEgA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:39:39 2025 by rpki-client