This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft File: 88huoplek0tlBBkRy562WHLCKJ8.mft (raw, json) Hash identifier: qQhfq6VIJ89ckJgxXT4EMSntG0HHoOaTHTak9SRBrd4= Subject key identifier: 1D:A1:75:31:B6:B8:86:0F:FB:55:99:2D:5B:E2:AE:51:BA:53:1D:0C Authority key identifier: F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F Certificate issuer: /CN=f3c86ea2995e934b65041911cb9eb65872c2289f Certificate serial: 019AF31D185B87AE35F3C5698CD0475264E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft Manifest number: 1656 Signing time: Sat 06 Dec 2025 10:02:41 +0000 Manifest this update: Sat 06 Dec 2025 10:02:41 +0000 Manifest next update: Sun 07 Dec 2025 10:02:41 +0000 Files and hashes: 1: 88huoplek0tlBBkRy562WHLCKJ8.crl (hash: I2JW/h4HhN36pZMYDhbD6d93WZ0SI51pDccXu6Wx6BQ=) 2: hvBR5Lh2V5nBCkDL4kLbjgOv4x4.roa (hash: roHQdZzbDc98BWIijFr4uNTSgf0x5DY16Sjtlk2cSOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:18:5b:87:ae:35:f3:c5:69:8c:d0:47:52:64:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3c86ea2995e934b65041911cb9eb65872c2289f Validity Not Before: Dec 6 10:02:41 2025 GMT Not After : Dec 7 10:02:41 2025 GMT Subject: CN=1da17531b6b8860ffb55992d5be2ae51ba531d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:07:09:ec:71:73:7e:cf:27:ff:02:e9:ec:5a: 30:21:0c:20:46:9c:0e:00:b0:22:f4:a9:11:06:5d: 8f:30:f4:d5:6d:00:c9:5c:77:41:42:e6:93:b9:26: fe:17:71:36:cb:05:32:e4:8c:8b:8b:d3:24:38:b9: 45:3b:30:23:bc:19:b3:84:db:c6:d3:d2:d5:29:74: 2e:75:13:d9:ae:c3:e0:c1:92:38:91:ee:45:3f:df: e4:fb:73:79:e2:07:d8:9e:51:c0:19:c3:8a:7f:7e: 96:fa:9a:24:2b:d8:fe:4d:13:b7:3b:2b:9c:f7:b9: 38:b6:f4:e6:a4:5f:6d:e3:29:d5:50:4b:b6:2d:41: 81:ca:3a:2a:04:0d:dc:e7:85:39:35:ce:df:75:5d: 93:06:c4:87:b7:71:f6:af:08:b9:84:20:70:47:b8: 3a:e1:44:12:dd:4e:5e:a6:c9:d9:51:dd:b3:d5:48: a2:73:2e:c6:47:5d:47:f5:be:7e:e2:26:1f:43:bd: 4c:b1:cc:6a:c7:04:9a:6a:1e:92:81:2c:49:41:08: 42:da:1b:86:97:e9:3a:83:52:b1:36:5a:27:bc:a1: 25:3b:24:73:2c:e0:9d:d5:ce:02:85:b3:07:01:f6: 9f:aa:92:66:63:ae:a6:62:31:ad:8a:23:94:b6:d4: 8d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A1:75:31:B6:B8:86:0F:FB:55:99:2D:5B:E2:AE:51:BA:53:1D:0C X509v3 Authority Key Identifier: keyid:F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:2b:48:31:94:94:7e:02:59:4c:70:c8:4b:ed:c1:63:35:4d: 95:d1:fc:aa:b2:c2:9d:46:84:bb:fd:53:72:65:0e:d9:6e:5c: 5e:67:14:55:08:15:74:d2:08:7b:0c:65:eb:12:df:75:91:46: de:95:ee:59:99:4d:51:e8:8d:7d:b2:f3:19:5c:ac:e4:1f:3d: 58:4c:c1:2f:42:18:f6:f8:cb:fa:57:b5:ab:1b:e7:d8:f7:ae: a1:30:bf:b4:9e:be:ca:53:3f:b8:ce:92:5d:67:1a:a4:32:26: a1:1e:89:75:00:c8:93:4a:a2:94:1b:3c:5a:81:07:9d:d7:b1: 7a:f4:43:a0:54:26:aa:71:03:42:b1:22:90:e4:b9:5e:c0:e3: 52:59:ec:68:89:a0:42:ca:2f:6c:6c:35:2d:11:2d:b6:ea:fb: 54:b5:33:2d:b9:3f:c9:a7:f9:3c:e2:03:86:77:10:b0:5b:44: 3a:1d:c4:17:1d:8f:69:78:ba:0e:5f:68:34:3d:c5:04:38:f5: 7d:a1:0f:d9:0f:c1:61:af:ed:e4:c8:41:98:d4:03:47:c5:a0: c7:22:f8:4a:f9:d9:64:32:5f:2f:eb:d5:e4:8d:71:23:08:8d: 54:84:13:16:69:11:97:27:c0:f0:37:c8:ba:94:91:e1:da:0f: 7e:14:49:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHRhbh64188VpjNBHUmTkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYzg2ZWEyOTk1ZTkzNGI2NTA0MTkxMWNiOWViNjU4NzJj MjI4OWYwHhcNMjUxMjA2MTAwMjQxWhcNMjUxMjA3MTAwMjQxWjAzMTEwLwYDVQQD EygxZGExNzUzMWI2Yjg4NjBmZmI1NTk5MmQ1YmUyYWU1MWJhNTMxZDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AcJ7HFzfs8n/wLp7FowIQwgRpwO ALAi9KkRBl2PMPTVbQDJXHdBQuaTuSb+F3E2ywUy5IyLi9MkOLlFOzAjvBmzhNvG 09LVKXQudRPZrsPgwZI4ke5FP9/k+3N54gfYnlHAGcOKf36W+pokK9j+TRO3Oyuc 97k4tvTmpF9t4ynVUEu2LUGByjoqBA3c54U5Nc7fdV2TBsSHt3H2rwi5hCBwR7g6 4UQS3U5epsnZUd2z1Uiicy7GR11H9b5+4iYfQ71MscxqxwSaah6SgSxJQQhC2huG l+k6g1KxNlonvKElOyRzLOCd1c4ChbMHAfafqpJmY66mYjGtiiOUttSNawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2hdTG2uIYP+1WZLVvirlG6Ux0MMB8GA1UdIwQY MBaAFPPIbqKZXpNLZQQZEcuetlhywiifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODhodW9wbGVrMHRsQkJrUnk1NjJXSExDS0o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lNTU0YWEtZTRlZC00OTQ4LWI2ZmMt YzYzNWQ4ZWVkNDQ3LzEvODhodW9wbGVrMHRsQkJrUnk1NjJXSExDS0o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9lNTU0YWEtZTRlZC00OTQ4LWI2ZmMtYzYzNWQ4ZWVkNDQ3 LzEvODhodW9wbGVrMHRsQkJrUnk1NjJXSExDS0o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdytIMZSU fgJZTHDIS+3BYzVNldH8qrLCnUaEu/1TcmUO2W5cXmcUVQgVdNIIewxl6xLfdZFG 3pXuWZlNUeiNfbLzGVys5B89WEzBL0IY9vjL+le1qxvn2PeuoTC/tJ6+ylM/uM6S XWcapDImoR6JdQDIk0qilBs8WoEHndexevRDoFQmqnEDQrEikOS5XsDjUlnsaImg QsovbGw1LREttur7VLUzLbk/yaf5POIDhncQsFtEOh3EFx2PaXi6Dl9oND3FBDj1 faEP2Q/BYa/t5MhBmNQDR8WgxyL4SvnZZDJfL+vV5I1xIwiNVIQTFmkRlyfA8DfI upSR4doPfhRJ3A== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:25 2025 by rpki-client