This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft File: d88I7pookZe3EQCl8AsZUB2UwJM.mft (raw, json) Hash identifier: 9FvJcIRAvE43kxWtsbtr1SXi8F2MVQZwysUAKl4xJDM= Subject key identifier: 01:4C:74:ED:F5:97:FD:D3:D7:9F:0C:44:70:5D:A0:5C:BC:CA:9B:68 Authority key identifier: 77:CF:08:EE:9A:28:91:97:B7:11:00:A5:F0:0B:19:50:1D:94:C0:93 Certificate issuer: /CN=77cf08ee9a289197b71100a5f00b19501d94c093 Certificate serial: 019AF19AF017B9546B7002DDC0909E2298FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft Manifest number: 0369 Signing time: Sat 06 Dec 2025 03:00:54 +0000 Manifest this update: Sat 06 Dec 2025 03:00:54 +0000 Manifest next update: Sun 07 Dec 2025 03:00:54 +0000 Files and hashes: 1: WecqEhgOSAbXZ3Im_QJkisWYch0.roa (hash: yP0d2DYh05Kav8sMdEFhk832MGjVh6BaMrRs10W9wIw=) 2: d88I7pookZe3EQCl8AsZUB2UwJM.crl (hash: HrW2cOhkAlfYxkh5mO3Bgrsf3SUPdVKqIxsKSBol/mc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.crl rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f0:17:b9:54:6b:70:02:dd:c0:90:9e:22:98:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77cf08ee9a289197b71100a5f00b19501d94c093 Validity Not Before: Dec 6 03:00:54 2025 GMT Not After : Dec 7 03:00:54 2025 GMT Subject: CN=014c74edf597fdd3d79f0c44705da05cbcca9b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b8:85:b1:a5:8f:82:98:47:aa:ed:38:db:6b: f1:5e:d6:a8:d3:40:98:66:29:a9:dd:67:01:58:b6: e0:e0:f6:f1:ce:cf:07:cb:8a:b1:b6:f3:d0:f0:7e: 08:16:39:92:46:87:6e:02:ca:32:9c:1b:70:e3:b4: e7:d6:25:f3:ee:da:a6:91:f7:83:23:e0:0e:8e:56: 1f:4c:cf:d1:8f:75:de:5e:03:28:72:51:11:ec:2a: 45:46:ef:43:66:b7:14:8c:7d:16:f3:68:0d:69:7e: bb:cd:aa:cf:94:e3:9b:70:a7:c8:4d:0f:66:8e:b9: 65:c2:f8:5b:64:dc:a2:5d:c2:57:83:6c:03:26:01: a9:da:51:94:49:ea:88:e2:0d:b5:f5:07:dd:eb:fa: 79:e2:4e:10:fa:eb:3b:6b:b5:e6:45:15:63:d7:50: 8c:59:57:31:b9:3f:14:77:9b:32:89:4b:f3:a2:a1: ab:b5:f4:d5:7e:a0:31:d5:cb:c0:28:02:2e:1a:80: 73:c5:3a:40:f4:5e:e2:4e:5a:c2:8f:29:12:a7:46: 0d:91:33:f1:7d:f9:b1:0c:71:ac:06:c0:30:78:d6: 85:19:d8:81:9e:74:82:d4:2f:53:8c:5f:02:07:c3: 20:56:67:53:b1:e9:3e:1b:2c:b4:eb:b6:73:58:1b: 2b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:4C:74:ED:F5:97:FD:D3:D7:9F:0C:44:70:5D:A0:5C:BC:CA:9B:68 X509v3 Authority Key Identifier: keyid:77:CF:08:EE:9A:28:91:97:B7:11:00:A5:F0:0B:19:50:1D:94:C0:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f2:2f:71:0f:d7:a8:7d:4b:78:37:1e:38:b5:5a:30:2f:97: 8e:94:52:11:b4:35:6e:3f:01:7c:c3:2e:f4:ca:42:dc:27:2b: fc:3e:84:c8:ff:c2:2b:0e:4e:81:88:70:56:65:ba:3d:d6:04: 87:7b:4f:1b:a1:4c:0e:68:01:30:0c:58:fb:7e:7c:dd:cc:46: 73:3e:c9:1c:a3:ea:b1:dd:bb:85:84:dd:15:22:ce:92:aa:40: 61:dc:b6:b2:34:3c:0a:20:1b:52:a1:9c:da:f8:77:d0:a9:08: f1:49:16:2d:4f:7c:18:0d:d1:9d:b1:e7:bb:bf:27:3a:93:e8: 33:93:fa:c9:9e:2e:16:e5:a1:1b:57:41:05:41:86:30:5c:34: 19:f3:7d:8f:d8:db:5b:a5:bf:e7:f0:2d:85:04:fe:f6:55:85: 1a:7e:3c:ce:4d:7b:f7:67:e1:60:6d:1f:ab:51:da:9e:c6:3a: f5:21:b8:f6:fb:46:10:62:9b:f5:40:a6:5d:b8:0b:af:72:88: be:5f:86:a8:1e:75:77:40:c9:49:95:3d:12:e9:78:f8:6b:f9: bc:c0:2f:e9:c9:bc:e7:93:66:65:7b:a7:0b:d2:b1:34:1a:77: 2c:f4:69:45:14:09:80:db:0e:6c:77:77:32:27:b0:a3:ef:1e: f8:c6:9e:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvAXuVRrcALdwJCeIpj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3Y2YwOGVlOWEyODkxOTdiNzExMDBhNWYwMGIxOTUwMWQ5 NGMwOTMwHhcNMjUxMjA2MDMwMDU0WhcNMjUxMjA3MDMwMDU0WjAzMTEwLwYDVQQD EygwMTRjNzRlZGY1OTdmZGQzZDc5ZjBjNDQ3MDVkYTA1Y2JjY2E5YjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyriFsaWPgphHqu0422vxXtao00CY Zimp3WcBWLbg4Pbxzs8Hy4qxtvPQ8H4IFjmSRoduAsoynBtw47Tn1iXz7tqmkfeD I+AOjlYfTM/Rj3XeXgMoclER7CpFRu9DZrcUjH0W82gNaX67zarPlOObcKfITQ9m jrllwvhbZNyiXcJXg2wDJgGp2lGUSeqI4g219Qfd6/p54k4Q+us7a7XmRRVj11CM WVcxuT8Ud5syiUvzoqGrtfTVfqAx1cvAKAIuGoBzxTpA9F7iTlrCjykSp0YNkTPx ffmxDHGsBsAweNaFGdiBnnSC1C9TjF8CB8MgVmdTsek+Gyy067ZzWBsr1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFMdO31l/3T158MRHBdoFy8yptoMB8GA1UdIwQY MBaAFHfPCO6aKJGXtxEApfALGVAdlMCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDg4STdwb29rWmUzRVFDbDhBc1pVQjJVd0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85Y2VlYTYtMzIxOC00YjM5LTk3YTct Y2ZhZjZlZjg0OWQ2LzEvZDg4STdwb29rWmUzRVFDbDhBc1pVQjJVd0pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85Y2VlYTYtMzIxOC00YjM5LTk3YTctY2ZhZjZlZjg0OWQ2 LzEvZDg4STdwb29rWmUzRVFDbDhBc1pVQjJVd0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvIvcQ/X qH1LeDceOLVaMC+XjpRSEbQ1bj8BfMMu9MpC3Ccr/D6EyP/CKw5OgYhwVmW6PdYE h3tPG6FMDmgBMAxY+3583cxGcz7JHKPqsd27hYTdFSLOkqpAYdy2sjQ8CiAbUqGc 2vh30KkI8UkWLU98GA3RnbHnu78nOpPoM5P6yZ4uFuWhG1dBBUGGMFw0GfN9j9jb W6W/5/AthQT+9lWFGn48zk1792fhYG0fq1HansY69SG49vtGEGKb9UCmXbgLr3KI vl+GqB51d0DJSZU9Eul4+Gv5vMAv6cm855NmZXunC9KxNBp3LPRpRRQJgNsObHd3 Miewo+8e+MaewQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:56 2025 by rpki-client