This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft File: 88iZC9bpMHET6DgyxpFf2lys_C8.mft (raw, json) Hash identifier: seAr4hbqjaeRQaR+TFpvUnsCwIPGkV83VcvN3yrWMnY= Subject key identifier: ED:93:FA:3F:E4:2B:6A:60:E1:79:BF:97:38:BD:E8:FE:07:E9:82:83 Authority key identifier: F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F Certificate issuer: /CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f Certificate serial: 019B337AD6C37AB6CD146605EE982FEFB5C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 22:00:46 +0000 Manifest this update: Thu 18 Dec 2025 22:00:46 +0000 Manifest next update: Fri 19 Dec 2025 22:00:46 +0000 Files and hashes: 1: 88iZC9bpMHET6DgyxpFf2lys_C8.crl (hash: CXYCHA8kJG3t/NMWYRHiIPlY1OZT5j08JE9VXapnGyA=) 2: r1YhKFt6xgygnUNlQ8RZ7x72_gw.roa (hash: e219ZrluMTaPryCaTBAQMAezZgBHvQfx3T3Sk01I1mY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:d6:c3:7a:b6:cd:14:66:05:ee:98:2f:ef:b5:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f Validity Not Before: Dec 18 22:00:46 2025 GMT Not After : Dec 19 22:00:46 2025 GMT Subject: CN=ed93fa3fe42b6a60e179bf9738bde8fe07e98283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:eb:b7:74:bd:50:56:b3:e4:92:15:e6:fb:ff: 97:bd:9f:8a:d6:98:cc:6e:fc:ae:02:8f:ac:9e:6e: 1d:8e:38:01:d5:5b:1f:1d:71:64:ce:23:d9:aa:d1: 4d:25:fe:ea:65:92:9d:e5:e9:fa:6a:91:ff:9c:74: 20:0a:0d:4b:c7:23:a5:7b:97:84:6a:d9:fa:69:f3: a3:39:21:60:ec:aa:c1:7d:06:3d:47:b0:a0:a2:ca: dd:47:a7:35:f7:f9:e6:f1:cc:49:92:67:98:24:dd: a0:0d:1a:99:28:7d:a0:06:d8:ce:74:ea:84:13:e9: 3b:c8:eb:b5:f7:1a:64:c3:c5:fb:2d:84:45:bb:74: f9:da:dd:42:49:dd:ef:ea:64:ea:cf:33:83:ff:a7: 47:c1:b4:22:f1:d3:fc:7b:8e:8f:80:77:3b:28:fd: 66:33:dc:73:72:34:e7:22:ae:7a:d8:f1:6f:54:2c: c7:4d:c3:f6:3d:a8:3d:2a:3a:c1:1b:05:cc:26:aa: c7:5d:5f:df:62:e5:6d:b3:d6:81:4e:07:36:44:5b: 82:04:d6:99:bf:e9:a6:55:1e:9f:e1:2d:38:e4:0e: 33:4e:21:7b:3a:aa:90:e1:33:38:41:ae:0f:e1:f4: 52:98:59:48:26:75:2a:61:8b:34:5e:8b:35:3f:d6: 42:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:93:FA:3F:E4:2B:6A:60:E1:79:BF:97:38:BD:E8:FE:07:E9:82:83 X509v3 Authority Key Identifier: keyid:F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:2d:a6:40:60:81:62:11:02:f0:23:7f:a8:f1:2f:ac:08:03: 75:a2:52:42:e5:e8:d7:b1:99:29:fd:2e:d9:8b:c7:94:cc:69: f2:e8:cd:7d:32:42:49:61:fd:21:69:e0:fb:26:3b:4d:d8:38: f2:39:96:3a:98:52:4b:78:75:05:b5:90:2b:36:b3:39:1f:05: 70:85:5c:93:50:ec:5a:e4:4a:da:ef:88:fe:2c:7d:ea:2e:25: da:9e:ac:8b:2b:49:d2:28:21:d0:4f:1d:0b:40:8b:40:19:d3: 0f:c2:cb:de:b2:0c:ba:b8:45:e5:ab:b1:46:83:c0:75:43:99: ed:5e:c3:92:2f:9f:43:d7:5e:0e:1e:bb:41:1a:aa:b3:67:3f: 68:e4:08:c2:b2:14:fe:0d:65:f5:84:bf:b7:cf:e6:4c:36:81: e5:18:0d:17:8c:bb:9c:5a:56:4b:58:18:9b:f2:dd:a2:e6:5c: a1:b7:b5:fb:be:ff:8c:8b:d9:60:ad:e9:92:34:ae:19:4d:14: 29:5d:49:1b:ae:42:28:37:2a:50:ad:3c:f8:5c:72:71:10:53: 09:96:ee:a1:f3:14:35:ef:70:9b:31:b6:8a:5f:07:57:cd:ef: 8b:a7:4d:30:da:4d:c9:47:20:07:31:f9:c4:5e:26:5f:2a:4b: ee:5f:a0:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszetbDerbNFGYF7pgv77XEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYzg5OTBiZDZlOTMwNzExM2U4MzgzMmM2OTE1ZmRhNWNh Y2ZjMmYwHhcNMjUxMjE4MjIwMDQ2WhcNMjUxMjE5MjIwMDQ2WjAzMTEwLwYDVQQD EyhlZDkzZmEzZmU0MmI2YTYwZTE3OWJmOTczOGJkZThmZTA3ZTk4MjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruu3dL1QVrPkkhXm+/+XvZ+K1pjM bvyuAo+snm4djjgB1VsfHXFkziPZqtFNJf7qZZKd5en6apH/nHQgCg1LxyOle5eE atn6afOjOSFg7KrBfQY9R7CgosrdR6c19/nm8cxJkmeYJN2gDRqZKH2gBtjOdOqE E+k7yOu19xpkw8X7LYRFu3T52t1CSd3v6mTqzzOD/6dHwbQi8dP8e46PgHc7KP1m M9xzcjTnIq562PFvVCzHTcP2Pag9KjrBGwXMJqrHXV/fYuVts9aBTgc2RFuCBNaZ v+mmVR6f4S045A4zTiF7OqqQ4TM4Qa4P4fRSmFlIJnUqYYs0Xos1P9ZCywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO2T+j/kK2pg4Xm/lzi96P4H6YKDMB8GA1UdIwQY MBaAFPPImQvW6TBxE+g4MsaRX9pcrPwvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODhpWkM5YnBNSEVUNkRneXhwRmYybHlzX0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mZDczZDgtMTU0YS00MGNlLWFlYmMt ZTg4OWE2ZTZiZWFjLzEvODhpWkM5YnBNSEVUNkRneXhwRmYybHlzX0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mZDczZDgtMTU0YS00MGNlLWFlYmMtZTg4OWE2ZTZiZWFj LzEvODhpWkM5YnBNSEVUNkRneXhwRmYybHlzX0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPS2mQGCB YhEC8CN/qPEvrAgDdaJSQuXo17GZKf0u2YvHlMxp8ujNfTJCSWH9IWng+yY7Tdg4 8jmWOphSS3h1BbWQKzazOR8FcIVck1DsWuRK2u+I/ix96i4l2p6siytJ0igh0E8d C0CLQBnTD8LL3rIMurhF5auxRoPAdUOZ7V7Dki+fQ9deDh67QRqqs2c/aOQIwrIU /g1l9YS/t8/mTDaB5RgNF4y7nFpWS1gYm/LdouZcobe1+77/jIvZYK3pkjSuGU0U KV1JG65CKDcqUK08+FxycRBTCZbuofMUNe9wmzG2il8HV83vi6dNMNpNyUcgBzH5 xF4mXypL7l+gZg== -----END CERTIFICATE-----Generated at Fri Dec 19 04:49:00 2025 by rpki-client