This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft File: 88q2j7sMl5R2WUvfxWwZIEK43t8.mft (raw, json) Hash identifier: Y4ifLcIuqBIweZb98zBVqzCOunA8bgpX8kLWazNr5X0= Subject key identifier: 24:BA:0B:BA:58:4B:C8:B9:DA:54:C6:27:2B:57:2C:71:BF:F8:F4:4B Authority key identifier: F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF Certificate issuer: /CN=f3cab68fbb0c979476594bdfc56c192042b8dedf Certificate serial: 019AF5E586A0ABBE06DEB5D196AF1156FAF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft Manifest number: 12AA Signing time: Sat 06 Dec 2025 23:00:51 +0000 Manifest this update: Sat 06 Dec 2025 23:00:51 +0000 Manifest next update: Sun 07 Dec 2025 23:00:51 +0000 Files and hashes: 1: 88q2j7sMl5R2WUvfxWwZIEK43t8.crl (hash: hIy71bQmB5V9J8VMhLfbtWdN61T0pzHNArUNw82qZTo=) 2: KNMlxyQeEdYRctkDIdejdg3zlpc.roa (hash: caaA1CtisGeAWANFsuqIVTEldAW/K3YD22fTjAPbVs4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:86:a0:ab:be:06:de:b5:d1:96:af:11:56:fa:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3cab68fbb0c979476594bdfc56c192042b8dedf Validity Not Before: Dec 6 23:00:51 2025 GMT Not After : Dec 7 23:00:51 2025 GMT Subject: CN=24ba0bba584bc8b9da54c6272b572c71bff8f44b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fe:c6:7c:5b:40:2b:4a:7e:ab:15:01:ac:42: d7:e3:dd:0e:a0:22:62:cc:ca:3b:45:63:47:3d:92: 63:62:1b:52:35:07:67:ef:8c:2a:fb:02:6c:d6:50: a4:4c:67:61:14:f8:0e:cb:90:b9:0b:d3:3d:2e:06: 7c:fa:c8:49:fd:2b:18:18:44:3a:74:3a:7a:ba:98: f1:12:2f:9b:f5:b3:e9:f8:3a:fa:cc:e3:b9:1d:4f: b8:cb:c5:5a:16:ec:b8:ee:8d:c1:68:8e:dd:32:05: dd:36:d2:e1:59:06:dd:0d:46:d7:80:37:e5:cc:af: bc:ab:63:0e:22:5f:0d:50:24:d6:1d:9f:2a:06:fe: 0f:80:45:53:0b:7a:d6:e0:7d:f6:2a:f0:d4:fe:82: 20:c8:10:17:5a:d3:2e:8c:25:b3:14:dd:44:87:a7: f8:9b:d9:f0:a9:77:40:aa:2d:f2:30:4c:70:50:41: 79:ab:bf:bd:76:24:85:33:4b:7c:8c:3d:2d:f3:77: d0:3a:da:91:a2:43:3a:87:47:fe:c2:96:ae:c2:dd: 52:3d:35:83:f8:87:c5:3e:a6:82:14:f3:28:28:20: d2:ad:4d:d1:22:0b:a0:f2:85:46:1e:1e:d8:d6:8c: 2a:fb:68:e4:25:f9:a2:3b:1c:17:0c:97:12:c0:b5: db:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BA:0B:BA:58:4B:C8:B9:DA:54:C6:27:2B:57:2C:71:BF:F8:F4:4B X509v3 Authority Key Identifier: keyid:F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f4:33:fd:cf:4e:90:92:e9:8a:8c:14:70:7d:8b:0e:cf:25: 32:de:eb:ed:c6:c8:cb:cc:92:74:7f:5c:00:71:04:4f:c7:81: 4f:a0:fd:de:e9:9b:cd:dd:2c:c5:5c:b3:88:d6:e9:72:e6:b6: 99:ac:e1:b5:11:9c:03:27:23:bf:30:e2:f1:ec:a6:cd:af:c3: f7:02:a1:67:55:57:56:16:b9:85:ef:ab:94:c1:80:0a:97:b4: 81:74:79:57:b0:9e:0b:a3:d8:68:2f:5b:f9:89:c7:a3:80:eb: bb:2b:6a:49:cb:6b:dc:00:24:e7:6f:2e:1f:bb:41:99:63:3c: bf:84:23:64:bd:bd:4c:55:0e:17:99:48:c4:23:29:85:05:6c: 8c:23:27:4d:c4:47:87:8c:52:fe:d8:83:f0:10:f2:3d:9a:f0: cc:67:0e:2b:b7:b4:1a:c5:08:39:62:ae:46:38:f9:50:fb:b9: 33:08:4f:de:7e:fb:cd:e2:ac:0a:53:f0:a7:af:3a:27:fb:8c: a3:96:c6:d8:42:14:7d:ae:64:a6:1e:89:e2:ad:fe:05:2b:77: b1:39:b6:57:67:66:29:07:18:c1:3a:d9:00:75:09:7e:87:7e: cf:40:f7:4c:14:54:80:0b:84:20:c8:98:ab:47:18:aa:b7:28: 14:91:47:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15Yagq74G3rXRlq8RVvrxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzY2FiNjhmYmIwYzk3OTQ3NjU5NGJkZmM1NmMxOTIwNDJi OGRlZGYwHhcNMjUxMjA2MjMwMDUxWhcNMjUxMjA3MjMwMDUxWjAzMTEwLwYDVQQD EygyNGJhMGJiYTU4NGJjOGI5ZGE1NGM2MjcyYjU3MmM3MWJmZjhmNDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv7GfFtAK0p+qxUBrELX490OoCJi zMo7RWNHPZJjYhtSNQdn74wq+wJs1lCkTGdhFPgOy5C5C9M9LgZ8+shJ/SsYGEQ6 dDp6upjxEi+b9bPp+Dr6zOO5HU+4y8VaFuy47o3BaI7dMgXdNtLhWQbdDUbXgDfl zK+8q2MOIl8NUCTWHZ8qBv4PgEVTC3rW4H32KvDU/oIgyBAXWtMujCWzFN1Eh6f4 m9nwqXdAqi3yMExwUEF5q7+9diSFM0t8jD0t83fQOtqRokM6h0f+wpauwt1SPTWD +IfFPqaCFPMoKCDSrU3RIgug8oVGHh7Y1owq+2jkJfmiOxwXDJcSwLXbDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCS6C7pYS8i52lTGJytXLHG/+PRLMB8GA1UdIwQY MBaAFPPKto+7DJeUdllL38VsGSBCuN7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODhxMmo3c01sNVIyV1V2ZnhXd1pJRUs0M3Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9hNDQzMzUtNDE0Zi00NDc5LWE3ZmUt YWE0YTgxYTJlYjIzLzEvODhxMmo3c01sNVIyV1V2ZnhXd1pJRUs0M3Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9hNDQzMzUtNDE0Zi00NDc5LWE3ZmUtYWE0YTgxYTJlYjIz LzEvODhxMmo3c01sNVIyV1V2ZnhXd1pJRUs0M3Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvQz/c9O kJLpiowUcH2LDs8lMt7r7cbIy8ySdH9cAHEET8eBT6D93umbzd0sxVyziNbpcua2 mazhtRGcAycjvzDi8eymza/D9wKhZ1VXVha5he+rlMGACpe0gXR5V7CeC6PYaC9b +YnHo4DruytqSctr3AAk528uH7tBmWM8v4QjZL29TFUOF5lIxCMphQVsjCMnTcRH h4xS/tiD8BDyPZrwzGcOK7e0GsUIOWKuRjj5UPu5MwhP3n77zeKsClPwp686J/uM o5bG2EIUfa5kph6J4q3+BSt3sTm2V2dmKQcYwTrZAHUJfod+z0D3TBRUgAuEIMiY q0cYqrcoFJFHGg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:09:10 2025 by rpki-client