This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft File: R88nFPKduANS6fMJ6i6MUoyUa9k.mft (raw, json) Hash identifier: VvOaw9B/v3NtsTwhy4RtPDOwPDV/lITgPQay5h7IYt4= Subject key identifier: 5B:56:4D:DC:98:F3:F7:A1:F6:9D:0D:29:7C:A0:AC:EC:71:B1:7A:57 Authority key identifier: 47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9 Certificate issuer: /CN=47cf2714f29db80352e9f309ea2e8c528c946bd9 Certificate serial: 019B35322F6D013E4A20B0DFAB22B06F703C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft Manifest number: 1745 Signing time: Fri 19 Dec 2025 06:00:39 +0000 Manifest this update: Fri 19 Dec 2025 06:00:39 +0000 Manifest next update: Sat 20 Dec 2025 06:00:39 +0000 Files and hashes: 1: R88nFPKduANS6fMJ6i6MUoyUa9k.crl (hash: 5ylHAEH4K2aIHvAkfNpmv3U2wLkhnagplaztdCklfVc=) 2: jHbOO-v3l--J7LgIxP9_M8wQbrA.roa (hash: FeF1DOYHjXY3CVPpoNeujItbqTAw7Wp1ChNuqHrFnss=) 3: zmA_4zxXMcTORxmCgPEyljXw27c.roa (hash: 566gwzLgN6mZch94CNNtXeQSmmj7Ao7jmOLhB0MgKkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:2f:6d:01:3e:4a:20:b0:df:ab:22:b0:6f:70:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47cf2714f29db80352e9f309ea2e8c528c946bd9 Validity Not Before: Dec 19 06:00:39 2025 GMT Not After : Dec 20 06:00:39 2025 GMT Subject: CN=5b564ddc98f3f7a1f69d0d297ca0acec71b17a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:62:8d:c6:53:7d:9f:f6:ea:12:c2:88:95:c0: 6c:a2:49:fb:6b:9c:d1:e9:85:cc:09:94:6a:19:d7: 88:aa:a9:0b:ff:0e:a2:1a:fa:a9:47:8a:7e:9f:13: b2:41:b0:f6:e5:fc:e5:69:18:71:d4:a6:c2:b0:8d: 62:69:93:90:96:7f:90:c8:fa:23:fd:9d:37:f5:9b: 45:ce:39:a6:1d:04:d0:f4:28:8c:bb:3b:87:58:e5: 43:90:d2:3e:d6:cc:16:7a:56:1c:23:d0:d6:d7:4f: 5c:22:8a:b9:97:fa:19:28:1b:14:45:9f:a9:80:ce: 90:b6:9e:af:8f:d7:f7:1d:6e:83:01:20:1a:e6:c5: 0f:0c:4f:64:f7:a6:aa:a3:7d:be:74:8b:4d:aa:78: 24:5a:64:1b:ff:a5:0f:00:e3:9b:69:c5:cb:4f:1d: 2e:62:1a:7c:46:e0:33:20:f9:8f:01:b3:12:58:d6: 98:b6:77:56:a6:cf:39:f5:46:91:50:b5:0d:72:de: c7:3b:17:53:fa:e7:27:ff:b2:7d:de:11:01:e5:cf: 1b:85:19:40:e4:73:4d:53:95:57:f8:bc:08:9c:33: 30:0f:56:e7:2e:c6:8b:d8:65:e9:3c:57:03:7b:c5: b3:29:3e:11:dd:51:d8:5b:a6:75:72:99:52:f0:f3: 4b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:56:4D:DC:98:F3:F7:A1:F6:9D:0D:29:7C:A0:AC:EC:71:B1:7A:57 X509v3 Authority Key Identifier: keyid:47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:62:05:a6:6e:c5:34:38:2c:c1:30:45:98:e5:22:14:65:de: 18:df:30:aa:85:de:b0:b7:94:fe:67:a3:6c:f2:3b:43:f1:4d: ea:98:e4:e7:dd:c9:78:b4:51:c5:8b:bd:e1:8f:b3:32:b5:2c: 35:87:35:30:95:ad:54:b4:6e:c8:dc:ee:be:39:91:32:25:77: 5e:87:5f:c4:9e:57:8f:cf:96:29:93:7a:7c:d5:5c:e9:e1:b2: ca:6f:f6:5d:91:2b:4e:af:91:b9:eb:ce:10:52:2d:16:7e:09: 1e:fe:95:3e:b1:64:c9:01:d1:ee:2f:03:90:c5:c2:3a:b9:68: 47:a4:c4:68:bf:05:d8:53:bc:12:b5:8b:e4:85:22:71:76:87: 7b:4b:40:6b:4b:19:62:82:ad:f1:36:8c:81:5f:3d:4f:a1:b6: bf:45:d8:9c:4e:df:cf:1d:ed:eb:2e:46:95:d3:1e:8b:02:4f: fb:26:fc:cb:60:7c:75:59:b3:d5:75:d3:01:8c:de:23:fb:88: 24:5c:46:5d:3f:3c:af:29:b6:eb:66:7f:4d:fb:99:b8:45:77: 6b:3b:21:f3:82:72:f9:ef:dd:8f:a0:37:6c:6f:96:1d:1e:ba: a6:5d:3d:b3:f7:6c:7a:e8:11:58:f3:e1:30:0f:6a:93:ad:07: f2:bc:04:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mi9tAT5KILDfqyKwb3A8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3Y2YyNzE0ZjI5ZGI4MDM1MmU5ZjMwOWVhMmU4YzUyOGM5 NDZiZDkwHhcNMjUxMjE5MDYwMDM5WhcNMjUxMjIwMDYwMDM5WjAzMTEwLwYDVQQD Eyg1YjU2NGRkYzk4ZjNmN2ExZjY5ZDBkMjk3Y2EwYWNlYzcxYjE3YTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GKNxlN9n/bqEsKIlcBsokn7a5zR 6YXMCZRqGdeIqqkL/w6iGvqpR4p+nxOyQbD25fzlaRhx1KbCsI1iaZOQln+QyPoj /Z039ZtFzjmmHQTQ9CiMuzuHWOVDkNI+1swWelYcI9DW109cIoq5l/oZKBsURZ+p gM6Qtp6vj9f3HW6DASAa5sUPDE9k96aqo32+dItNqngkWmQb/6UPAOObacXLTx0u Yhp8RuAzIPmPAbMSWNaYtndWps859UaRULUNct7HOxdT+ucn/7J93hEB5c8bhRlA 5HNNU5VX+LwInDMwD1bnLsaL2GXpPFcDe8WzKT4R3VHYW6Z1cplS8PNLxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtWTdyY8/eh9p0NKXygrOxxsXpXMB8GA1UdIwQY MBaAFEfPJxTynbgDUunzCeoujFKMlGvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yYjE5MmYtNmNlZS00N2ZhLTgzOTUt NThhZGY3OGQ4Mjc4LzEvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yYjE5MmYtNmNlZS00N2ZhLTgzOTUtNThhZGY3OGQ4Mjc4 LzEvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWIFpm7F NDgswTBFmOUiFGXeGN8wqoXesLeU/mejbPI7Q/FN6pjk593JeLRRxYu94Y+zMrUs NYc1MJWtVLRuyNzuvjmRMiV3XodfxJ5Xj8+WKZN6fNVc6eGyym/2XZErTq+RuevO EFItFn4JHv6VPrFkyQHR7i8DkMXCOrloR6TEaL8F2FO8ErWL5IUicXaHe0tAa0sZ YoKt8TaMgV89T6G2v0XYnE7fzx3t6y5GldMeiwJP+yb8y2B8dVmz1XXTAYzeI/uI JFxGXT88rym262Z/TfuZuEV3azsh84Jy+e/dj6A3bG+WHR66pl09s/dseugRWPPh MA9qk60H8rwENg== -----END CERTIFICATE-----Generated at Fri Dec 19 13:32:49 2025 by rpki-client