This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft File: F88SpliemYyb7BOa-PznCsR1rXI.mft (raw, json) Hash identifier: DnpN439hp36MByyg9SXeOzUZ2a0Xd2PV9SFV3eBwrD4= Subject key identifier: 49:4A:E8:B2:D4:8E:0F:AB:AD:54:B8:F3:EC:55:E1:19:ED:37:04:2C Authority key identifier: 17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72 Certificate issuer: /CN=17cf12a6589e998c9bec139af8fce70ac475ad72 Certificate serial: 019AF1D243DC089190501B70AFE7206F4FA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:01:20 +0000 Manifest this update: Sat 06 Dec 2025 04:01:20 +0000 Manifest next update: Sun 07 Dec 2025 04:01:20 +0000 Files and hashes: 1: F88SpliemYyb7BOa-PznCsR1rXI.crl (hash: ya4y43wsxaN6rxDNlzEdvOHZfdU53V6od48cfex9t0o=) 2: dAIhcdZ8fwYvVo-M_emgqHoK7ZU.roa (hash: SjeXAqHoVFgHw2EHHXptMICe3kneOtC1TL1zW8otQdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:43:dc:08:91:90:50:1b:70:af:e7:20:6f:4f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17cf12a6589e998c9bec139af8fce70ac475ad72 Validity Not Before: Dec 6 04:01:20 2025 GMT Not After : Dec 7 04:01:20 2025 GMT Subject: CN=494ae8b2d48e0fabad54b8f3ec55e119ed37042c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3a:17:ff:ef:e7:73:6e:c3:0c:f7:55:69:ae: 1a:e3:3d:7c:89:b1:74:76:6f:10:af:63:76:05:70: dd:7b:1e:50:3c:91:0f:99:ae:1b:89:a2:9b:de:2a: d8:71:99:85:a2:26:19:b9:7c:87:2b:02:37:ad:0e: 73:2d:43:23:95:0a:2f:3c:47:4a:52:a2:9f:f7:29: 8e:69:34:c3:d4:de:70:95:5f:3b:ac:d9:55:7d:77: fe:71:85:f4:90:bc:9d:6f:63:84:c1:09:b6:a8:56: 3e:ec:25:6b:e4:fd:0a:c8:3d:be:c5:74:87:60:2e: 44:a4:46:07:b5:77:23:2d:4a:60:c2:d4:d2:84:7e: 7f:c6:79:13:26:a8:db:2b:46:65:27:2f:6a:77:e1: 3b:e3:93:30:57:da:b3:a0:56:6c:5a:5e:b7:ea:9d: 81:4e:87:2b:b3:a0:d6:07:ea:b3:2c:9e:04:ab:f0: b5:ce:dc:bb:73:b3:b6:38:88:ea:5b:b2:28:62:22: 24:8d:44:df:00:80:c2:b0:1b:8f:e1:f2:1e:3a:7b: 28:e5:91:2c:a7:47:f3:61:7b:39:cd:96:ba:1c:29: 75:98:5a:2c:3a:a6:e8:80:88:2a:3c:cd:32:21:5d: 2a:f8:07:38:38:4a:20:c3:9c:59:65:7e:8e:49:98: a6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4A:E8:B2:D4:8E:0F:AB:AD:54:B8:F3:EC:55:E1:19:ED:37:04:2C X509v3 Authority Key Identifier: keyid:17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:16:f4:4b:86:25:a6:ce:46:01:a9:60:2b:74:74:e0:1c:80: f7:8c:09:97:77:5c:81:f9:13:f1:a3:60:82:87:d5:90:95:21: c3:4b:e8:94:2a:31:64:80:07:fc:0b:88:43:74:8f:08:58:7a: 04:c5:79:51:ba:d4:49:8e:f3:b4:76:55:29:aa:d4:8f:d4:5d: be:b1:de:b3:c7:91:90:76:9d:43:4b:8f:80:f8:ec:2d:cf:6c: 3e:9c:3f:a7:e6:a2:3e:cd:a1:d2:00:1f:85:2c:bd:0f:97:c5: bf:50:d1:31:d6:16:c1:ca:70:b1:28:48:13:f4:cb:c7:dc:21: a1:9c:a3:71:21:9d:cb:b5:19:58:38:6f:15:de:b7:db:3a:2a: 4d:f3:14:23:07:db:44:cd:a3:b9:cf:b1:7d:39:3c:22:36:20: 17:f3:60:d1:57:43:7a:f5:ec:d5:85:4e:19:ac:8c:83:a6:70: e8:67:b0:19:b5:5f:10:85:e8:8b:40:3a:86:d2:a5:7e:3f:6b: 16:0a:6a:62:a2:b2:6d:dd:90:2e:f4:1d:2c:c3:b1:b8:c9:ce: a5:0b:26:df:f1:d3:26:c0:89:93:a7:9b:87:52:b9:46:4e:f6: 10:2b:b9:90:e1:2c:8b:f0:44:37:f3:e7:50:6f:28:3d:14:ce: 8e:98:07:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kPcCJGQUBtwr+cgb0+oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3Y2YxMmE2NTg5ZTk5OGM5YmVjMTM5YWY4ZmNlNzBhYzQ3 NWFkNzIwHhcNMjUxMjA2MDQwMTIwWhcNMjUxMjA3MDQwMTIwWjAzMTEwLwYDVQQD Eyg0OTRhZThiMmQ0OGUwZmFiYWQ1NGI4ZjNlYzU1ZTExOWVkMzcwNDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDoX/+/nc27DDPdVaa4a4z18ibF0 dm8Qr2N2BXDdex5QPJEPma4biaKb3irYcZmFoiYZuXyHKwI3rQ5zLUMjlQovPEdK UqKf9ymOaTTD1N5wlV87rNlVfXf+cYX0kLydb2OEwQm2qFY+7CVr5P0KyD2+xXSH YC5EpEYHtXcjLUpgwtTShH5/xnkTJqjbK0ZlJy9qd+E745MwV9qzoFZsWl636p2B Tocrs6DWB+qzLJ4Eq/C1zty7c7O2OIjqW7IoYiIkjUTfAIDCsBuP4fIeOnso5ZEs p0fzYXs5zZa6HCl1mFosOqbogIgqPM0yIV0q+Ac4OEogw5xZZX6OSZimiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFElK6LLUjg+rrVS48+xV4RntNwQsMB8GA1UdIwQY MBaAFBfPEqZYnpmMm+wTmvj85wrEda1yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjg4U3BsaWVtWXliN0JPYS1Qem5Dc1IxclhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85YmRmMzQtNzI5ZC00YmUwLWIxNWYt NWRlMDg3MTE4MmJhLzEvRjg4U3BsaWVtWXliN0JPYS1Qem5Dc1IxclhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS85YmRmMzQtNzI5ZC00YmUwLWIxNWYtNWRlMDg3MTE4MmJh LzEvRjg4U3BsaWVtWXliN0JPYS1Qem5Dc1IxclhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQxb0S4Yl ps5GAalgK3R04ByA94wJl3dcgfkT8aNggofVkJUhw0volCoxZIAH/AuIQ3SPCFh6 BMV5UbrUSY7ztHZVKarUj9RdvrHes8eRkHadQ0uPgPjsLc9sPpw/p+aiPs2h0gAf hSy9D5fFv1DRMdYWwcpwsShIE/TLx9whoZyjcSGdy7UZWDhvFd632zoqTfMUIwfb RM2juc+xfTk8IjYgF/Ng0VdDevXs1YVOGayMg6Zw6GewGbVfEIXoi0A6htKlfj9r FgpqYqKybd2QLvQdLMOxuMnOpQsm3/HTJsCJk6ebh1K5Rk72ECu5kOEsi/BEN/Pn UG8oPRTOjpgHEw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:14:53 2025 by rpki-client