This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft File: 88iZC9bpMHET6DgyxpFf2lys_C8.mft (raw, json) Hash identifier: u2cCVQXwCjc/RssDIvAvc0Aaa6hslG2hnV18HXZBfgo= Subject key identifier: 90:32:51:E9:76:79:E4:11:8E:41:73:64:02:75:A4:CB:9F:22:39:C1 Authority key identifier: F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F Certificate issuer: /CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f Certificate serial: 019AF3BFE4DD9E53C097C64281523A56CA61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 13:00:30 +0000 Manifest this update: Sat 06 Dec 2025 13:00:30 +0000 Manifest next update: Sun 07 Dec 2025 13:00:30 +0000 Files and hashes: 1: 88iZC9bpMHET6DgyxpFf2lys_C8.crl (hash: 5vkcR7UBbGwb+IHIekNH/V1GeuyG7IA1T6iDrDJAFEE=) 2: r1YhKFt6xgygnUNlQ8RZ7x72_gw.roa (hash: e219ZrluMTaPryCaTBAQMAezZgBHvQfx3T3Sk01I1mY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:e4:dd:9e:53:c0:97:c6:42:81:52:3a:56:ca:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f Validity Not Before: Dec 6 13:00:30 2025 GMT Not After : Dec 7 13:00:30 2025 GMT Subject: CN=903251e97679e4118e4173640275a4cb9f2239c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fa:3e:17:55:2d:87:54:98:57:d6:f6:22:a0: 40:8c:5d:2d:58:59:8c:75:90:12:1e:1d:e3:7f:b0: 67:ea:57:c8:e2:36:2f:d6:20:68:28:9e:0a:47:7f: 0a:de:29:c2:1f:6c:13:20:bb:cf:d6:f7:88:5c:ab: c8:ae:92:74:c2:68:ed:c4:0c:39:8c:dd:bb:68:ae: 23:c7:b3:28:83:2d:20:15:9e:dc:6e:34:0a:cb:c5: a1:a4:57:f3:d4:3f:f8:e2:20:96:50:83:21:51:ca: 79:7a:90:48:95:1a:96:93:f1:f5:dc:4c:c1:1e:5f: 47:21:f5:6c:f8:87:a6:81:14:fb:a4:4a:35:a9:e6: 80:47:fa:29:e8:4e:53:03:62:85:55:b1:8d:45:5d: d2:dc:40:4e:bd:94:b5:41:f8:fb:ee:88:e3:b4:41: 68:5d:44:31:51:b9:d1:85:85:db:c8:37:f4:75:a0: 57:d1:aa:1e:00:c6:1c:ec:81:5e:c0:85:b0:1c:04: 3e:c3:1e:2c:b7:3f:ba:65:70:c9:7d:b9:1e:16:a0: 7e:2b:9b:73:27:88:1f:58:36:db:8d:90:da:17:31: b3:fd:9e:95:37:47:94:fa:56:3a:c0:fa:46:3b:56: 4d:ff:46:06:d9:78:f1:36:2c:77:f1:21:97:89:cb: 22:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:32:51:E9:76:79:E4:11:8E:41:73:64:02:75:A4:CB:9F:22:39:C1 X509v3 Authority Key Identifier: keyid:F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:73:e1:24:f8:bf:1e:4b:e2:ec:df:26:66:d5:eb:0a:66:e8: 01:a0:8f:b0:61:ba:b3:81:af:ad:59:55:67:2b:06:ee:9b:99: 25:eb:8b:ea:78:22:02:d1:2f:98:dd:eb:da:76:93:66:7a:ca: 90:fc:e6:9b:c3:91:8d:54:34:46:bd:9c:83:3f:e8:31:32:96: 38:87:01:a0:8a:50:1a:6d:8a:75:99:40:e5:e8:f0:4c:1e:b1: 13:3f:a4:bd:c6:3a:51:ae:08:87:1c:94:08:c4:74:7a:46:88: 9e:57:68:72:d7:68:94:04:51:7a:cc:6b:fb:c9:4a:0c:01:62: d1:32:d8:c1:0e:b5:f1:29:69:c3:27:ce:10:f7:45:9f:56:41: 6f:33:0c:56:77:6a:d6:ce:e6:73:21:6d:84:23:d0:fe:3b:4a: e7:c5:c3:ec:6c:b8:68:e1:78:c3:e5:bb:a1:a8:ff:26:2d:54: ba:1e:a3:86:92:fd:51:52:67:5c:65:ee:75:83:41:14:ca:9d: 7a:0e:69:b0:32:c3:02:f5:25:f7:ca:df:6b:18:5a:86:cf:a5: ca:48:ef:f4:47:d3:0f:22:98:c2:c3:5d:f8:a8:40:50:7a:c3: 2a:80:89:c4:4b:f7:6f:29:71:a1:fe:dd:88:2b:09:77:38:25: 78:30:63:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv+TdnlPAl8ZCgVI6VsphMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYzg5OTBiZDZlOTMwNzExM2U4MzgzMmM2OTE1ZmRhNWNh Y2ZjMmYwHhcNMjUxMjA2MTMwMDMwWhcNMjUxMjA3MTMwMDMwWjAzMTEwLwYDVQQD Eyg5MDMyNTFlOTc2NzllNDExOGU0MTczNjQwMjc1YTRjYjlmMjIzOWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/o+F1Uth1SYV9b2IqBAjF0tWFmM dZASHh3jf7Bn6lfI4jYv1iBoKJ4KR38K3inCH2wTILvP1veIXKvIrpJ0wmjtxAw5 jN27aK4jx7Mogy0gFZ7cbjQKy8WhpFfz1D/44iCWUIMhUcp5epBIlRqWk/H13EzB Hl9HIfVs+IemgRT7pEo1qeaAR/op6E5TA2KFVbGNRV3S3EBOvZS1Qfj77ojjtEFo XUQxUbnRhYXbyDf0daBX0aoeAMYc7IFewIWwHAQ+wx4stz+6ZXDJfbkeFqB+K5tz J4gfWDbbjZDaFzGz/Z6VN0eU+lY6wPpGO1ZN/0YG2XjxNix38SGXicsiPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAyUel2eeQRjkFzZAJ1pMufIjnBMB8GA1UdIwQY MBaAFPPImQvW6TBxE+g4MsaRX9pcrPwvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODhpWkM5YnBNSEVUNkRneXhwRmYybHlzX0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mZDczZDgtMTU0YS00MGNlLWFlYmMt ZTg4OWE2ZTZiZWFjLzEvODhpWkM5YnBNSEVUNkRneXhwRmYybHlzX0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mZDczZDgtMTU0YS00MGNlLWFlYmMtZTg4OWE2ZTZiZWFj LzEvODhpWkM5YnBNSEVUNkRneXhwRmYybHlzX0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnPhJPi/ Hkvi7N8mZtXrCmboAaCPsGG6s4GvrVlVZysG7puZJeuL6ngiAtEvmN3r2naTZnrK kPzmm8ORjVQ0Rr2cgz/oMTKWOIcBoIpQGm2KdZlA5ejwTB6xEz+kvcY6Ua4IhxyU CMR0ekaInldoctdolARResxr+8lKDAFi0TLYwQ618SlpwyfOEPdFn1ZBbzMMVndq 1s7mcyFthCPQ/jtK58XD7Gy4aOF4w+W7oaj/Ji1Uuh6jhpL9UVJnXGXudYNBFMqd eg5psDLDAvUl98rfaxhahs+lykjv9EfTDyKYwsNd+KhAUHrDKoCJxEv3bylxof7d iCsJdzgleDBjHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:55:58 2025 by rpki-client