This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft File: F88SpliemYyb7BOa-PznCsR1rXI.mft (raw, json) Hash identifier: wzoyJKaLN5SDiMIU0fmIoUT1Kexzq9GibNHh8/c6RHA= Subject key identifier: B7:BE:45:7F:FE:23:BB:72:84:2E:33:39:70:AE:81:78:5D:36:8D:1A Authority key identifier: 17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72 Certificate issuer: /CN=17cf12a6589e998c9bec139af8fce70ac475ad72 Certificate serial: 019B3569E314E9DBBD223184ECB48C847F6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 07:01:30 +0000 Manifest this update: Fri 19 Dec 2025 07:01:30 +0000 Manifest next update: Sat 20 Dec 2025 07:01:30 +0000 Files and hashes: 1: F88SpliemYyb7BOa-PznCsR1rXI.crl (hash: VaZMiP4JKlJKs0WqZpaZ45viOp7nx3dFf5zqgt1BPQI=) 2: dAIhcdZ8fwYvVo-M_emgqHoK7ZU.roa (hash: SjeXAqHoVFgHw2EHHXptMICe3kneOtC1TL1zW8otQdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:e3:14:e9:db:bd:22:31:84:ec:b4:8c:84:7f:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17cf12a6589e998c9bec139af8fce70ac475ad72 Validity Not Before: Dec 19 07:01:30 2025 GMT Not After : Dec 20 07:01:30 2025 GMT Subject: CN=b7be457ffe23bb72842e333970ae81785d368d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:11:31:4a:72:61:71:dc:69:56:b5:04:36:e0: 28:52:c2:47:1a:8e:99:a1:47:e9:2b:5f:e8:a7:b3: 65:4f:3e:e1:ea:4a:fa:97:1e:86:ff:9e:40:51:ec: dc:9c:f3:cb:d1:ce:1e:89:41:07:74:28:5e:e8:10: 3d:0b:6d:75:3f:94:ef:92:2a:91:b9:53:0a:e6:c2: dc:fd:d1:0b:a2:8c:6a:86:92:15:80:7c:70:bc:e1: 1b:3f:7e:b7:f2:a2:0e:f5:6e:38:04:1c:38:01:e8: e6:0b:d8:2f:4f:95:9c:0d:fb:53:a1:91:3c:85:11: 69:ce:44:ca:f6:b7:9b:bc:f6:bc:07:d3:6c:24:c0: 36:69:20:b5:cd:e3:3b:1b:d4:b8:23:4f:49:c9:10: c6:55:e4:66:da:92:c2:16:f5:bf:c9:15:76:b9:21: 9e:c3:f9:ba:a5:e5:ff:2d:79:58:c1:79:aa:cf:0d: 30:a7:0a:96:89:5b:c5:24:11:a7:e3:d7:5a:ea:ab: 42:69:97:33:90:eb:30:9e:3c:19:89:5b:c1:ab:af: 44:b8:26:84:96:ef:1c:75:bc:b4:27:b4:3f:da:08: eb:f6:ca:97:6b:62:76:7b:99:10:19:44:a5:ee:04: 40:c3:7c:6a:24:2d:2d:d1:2f:e3:09:29:d0:98:44: 14:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BE:45:7F:FE:23:BB:72:84:2E:33:39:70:AE:81:78:5D:36:8D:1A X509v3 Authority Key Identifier: keyid:17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:76:a4:1a:21:3b:7b:4d:24:d5:06:ed:1c:20:25:1c:78:93: 76:23:a9:6e:79:ab:10:98:43:f1:e3:dc:60:c7:1f:02:0d:72: 9f:81:0e:8f:86:61:c2:e1:38:c4:8a:6a:8c:0b:9f:e7:85:2b: 26:27:1f:e1:3a:a1:ad:6d:05:73:d7:60:a3:57:98:35:71:be: c0:1d:28:ba:6a:d0:a3:ec:d3:66:e9:f6:cd:38:da:69:72:b1: 3d:b6:16:b9:76:c5:e6:59:a1:fd:d8:a9:7c:ce:56:30:0f:ba: ce:8a:36:0c:8a:d4:59:d4:4d:d5:c3:12:b7:0f:21:88:60:e5: be:90:ee:50:88:c4:14:2c:95:83:bd:d2:01:46:3e:29:6d:f3: 1e:b6:97:b0:3d:39:55:a0:68:03:f3:98:45:bf:9f:f6:a3:e9: df:02:8d:ba:c6:e6:ba:8e:58:bf:3a:0a:57:e9:07:e2:9d:4e: 69:e5:b0:df:7d:ff:d5:2b:23:78:e4:88:2d:e4:de:16:f2:a4: f8:ee:60:8b:6c:d7:31:35:92:c2:8b:64:2f:9d:bd:fa:c3:ca: 65:41:20:a5:b3:4c:2d:4a:33:48:89:15:0f:ef:4f:d3:c6:33: 11:2d:d4:81:dc:ac:9f:ad:09:fe:ac:31:bd:35:cb:8c:a7:c9: 8c:d8:c8:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aeMU6du9IjGE7LSMhH9uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3Y2YxMmE2NTg5ZTk5OGM5YmVjMTM5YWY4ZmNlNzBhYzQ3 NWFkNzIwHhcNMjUxMjE5MDcwMTMwWhcNMjUxMjIwMDcwMTMwWjAzMTEwLwYDVQQD EyhiN2JlNDU3ZmZlMjNiYjcyODQyZTMzMzk3MGFlODE3ODVkMzY4ZDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhExSnJhcdxpVrUENuAoUsJHGo6Z oUfpK1/op7NlTz7h6kr6lx6G/55AUezcnPPL0c4eiUEHdChe6BA9C211P5TvkiqR uVMK5sLc/dELooxqhpIVgHxwvOEbP3638qIO9W44BBw4AejmC9gvT5WcDftToZE8 hRFpzkTK9rebvPa8B9NsJMA2aSC1zeM7G9S4I09JyRDGVeRm2pLCFvW/yRV2uSGe w/m6peX/LXlYwXmqzw0wpwqWiVvFJBGn49da6qtCaZczkOswnjwZiVvBq69EuCaE lu8cdby0J7Q/2gjr9sqXa2J2e5kQGUSl7gRAw3xqJC0t0S/jCSnQmEQUBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLe+RX/+I7tyhC4zOXCugXhdNo0aMB8GA1UdIwQY MBaAFBfPEqZYnpmMm+wTmvj85wrEda1yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjg4U3BsaWVtWXliN0JPYS1Qem5Dc1IxclhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85YmRmMzQtNzI5ZC00YmUwLWIxNWYt NWRlMDg3MTE4MmJhLzEvRjg4U3BsaWVtWXliN0JPYS1Qem5Dc1IxclhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS85YmRmMzQtNzI5ZC00YmUwLWIxNWYtNWRlMDg3MTE4MmJh LzEvRjg4U3BsaWVtWXliN0JPYS1Qem5Dc1IxclhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHakGiE7 e00k1QbtHCAlHHiTdiOpbnmrEJhD8ePcYMcfAg1yn4EOj4ZhwuE4xIpqjAuf54Ur Jicf4TqhrW0Fc9dgo1eYNXG+wB0oumrQo+zTZun2zTjaaXKxPbYWuXbF5lmh/dip fM5WMA+6zoo2DIrUWdRN1cMStw8hiGDlvpDuUIjEFCyVg73SAUY+KW3zHraXsD05 VaBoA/OYRb+f9qPp3wKNusbmuo5YvzoKV+kH4p1OaeWw333/1SsjeOSILeTeFvKk +O5gi2zXMTWSwotkL529+sPKZUEgpbNMLUozSIkVD+9P08YzES3Ugdysn60J/qwx vTXLjKfJjNjIpQ== -----END CERTIFICATE-----Generated at Fri Dec 19 12:55:04 2025 by rpki-client