This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft File: 88t3pwdfknzEAY1W5s11xZjcOlE.mft (raw, json) Hash identifier: 9w4Hog6bFZjdDRRsSf77LHvIsmLzaNuNuteVa2zCH4w= Subject key identifier: C7:56:29:7A:0B:9E:B6:7A:05:F6:77:10:A7:35:80:3B:F7:AA:08:68 Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51 Certificate issuer: /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51 Certificate serial: 019B3CEBA6FB0B281A7C8D2C70270004AF32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 18:00:35 +0000 Manifest this update: Sat 20 Dec 2025 18:00:35 +0000 Manifest next update: Sun 21 Dec 2025 18:00:35 +0000 Files and hashes: 1: 88t3pwdfknzEAY1W5s11xZjcOlE.crl (hash: TdGByds3JWYt9uH2tX2S7i5v/UzwCFz4p9qZTtrb8Mc=) 2: HuqhC6vYeI3U9LbLd2vPzvJJgjY.roa (hash: wSYDAGLK1hTNyvlQrxhKmWYaQ0H+BBeF5/EeuiOBKAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:a6:fb:0b:28:1a:7c:8d:2c:70:27:00:04:af:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51 Validity Not Before: Dec 20 18:00:35 2025 GMT Not After : Dec 21 18:00:35 2025 GMT Subject: CN=c756297a0b9eb67a05f67710a735803bf7aa0868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f9:6b:fa:ed:83:7c:ee:73:3b:a2:fd:7f:42: 0e:ee:a5:f1:5d:d9:84:68:35:7d:f6:f7:f7:db:fd: 20:78:9d:9f:92:c4:d0:b4:64:05:5e:7e:49:74:b1: c3:a6:50:69:e1:c7:86:4a:91:35:68:75:18:a5:42: 29:39:27:aa:ac:26:a1:51:fc:a4:26:57:25:9c:3e: be:08:5b:0b:72:f7:fe:ef:11:dd:41:b3:94:0e:e3: d4:a8:90:0e:d4:a8:0b:c4:e6:9f:61:34:72:04:72: 94:ba:9f:cc:7e:f2:55:d7:f0:fa:0a:cf:9b:16:f1: 49:68:58:4a:22:a4:f0:92:97:31:06:cf:b7:28:1a: d4:14:f1:a8:63:f8:f4:c2:90:e1:40:79:b5:be:59: 53:24:6c:ab:e3:25:6f:89:41:ed:65:97:11:3a:e3: 79:83:4a:a7:08:de:e2:24:8f:a6:89:06:83:f1:b3: fe:4b:54:09:47:be:37:81:d1:3b:b8:71:17:55:ce: f2:46:e2:24:9e:5e:33:8f:73:51:2b:84:35:f8:ec: c3:cf:88:db:de:09:bb:d1:13:f6:8a:e7:26:84:c2: c9:f7:60:14:fe:96:d6:06:45:5d:6f:40:4d:4a:f8: 32:68:53:e2:7c:36:7a:fe:d9:86:ab:ca:d3:2f:4a: cf:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:56:29:7A:0B:9E:B6:7A:05:F6:77:10:A7:35:80:3B:F7:AA:08:68 X509v3 Authority Key Identifier: keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:21:21:d0:52:72:32:48:f5:68:48:98:11:e5:e0:a5:6c:8b: fe:e9:1d:93:11:2e:ca:ef:a7:e6:38:16:2c:52:2b:24:16:2d: ab:25:da:c2:44:9a:dd:1d:6c:b1:e3:f9:ab:e6:c6:0c:f1:3a: 76:1d:8f:a8:25:14:fe:1b:0f:1b:7f:a6:e4:39:39:b7:b4:59: 5f:1b:a5:97:4a:70:da:a8:12:06:a9:02:2d:d4:99:c2:19:c8: d2:73:b4:7a:0b:bb:e8:dd:7f:71:31:db:d1:1a:67:0d:1c:b2: a8:dc:2c:2e:43:1d:fc:99:33:fe:32:46:05:40:29:39:d8:6b: f1:4c:82:7e:36:af:6f:58:82:59:8c:f5:5f:7a:9c:e3:e8:10: 8d:3d:e9:c6:07:36:15:30:e1:ca:49:bd:44:4c:8d:46:a8:16: 35:ba:6e:2d:b5:2e:eb:f5:73:c0:39:ab:13:24:b2:98:82:36: 29:cc:dd:c7:c3:cf:8b:98:98:5e:29:29:01:a2:bf:ff:60:ad: 30:83:c1:e0:c9:ca:ef:e9:ec:81:15:d0:94:e3:34:e0:56:4d: 3b:18:5e:78:76:45:16:cb:95:05:25:5a:e7:fd:4a:e7:7f:f8: cc:78:18:ae:6d:4f:9a:99:d9:c5:01:ea:ad:62:eb:6a:2c:5f: c9:3b:43:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs866b7CygafI0scCcABK8yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzY2I3N2E3MDc1ZjkyN2NjNDAxOGQ1NmU2Y2Q3NWM1OThk YzNhNTEwHhcNMjUxMjIwMTgwMDM1WhcNMjUxMjIxMTgwMDM1WjAzMTEwLwYDVQQD EyhjNzU2Mjk3YTBiOWViNjdhMDVmNjc3MTBhNzM1ODAzYmY3YWEwODY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvlr+u2DfO5zO6L9f0IO7qXxXdmE aDV99vf32/0geJ2fksTQtGQFXn5JdLHDplBp4ceGSpE1aHUYpUIpOSeqrCahUfyk JlclnD6+CFsLcvf+7xHdQbOUDuPUqJAO1KgLxOafYTRyBHKUup/MfvJV1/D6Cs+b FvFJaFhKIqTwkpcxBs+3KBrUFPGoY/j0wpDhQHm1vllTJGyr4yVviUHtZZcROuN5 g0qnCN7iJI+miQaD8bP+S1QJR743gdE7uHEXVc7yRuIknl4zj3NRK4Q1+OzDz4jb 3gm70RP2iucmhMLJ92AU/pbWBkVdb0BNSvgyaFPifDZ6/tmGq8rTL0rPiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdWKXoLnrZ6BfZ3EKc1gDv3qghoMB8GA1UdIwQY MBaAFPPLd6cHX5J8xAGNVubNdcWY3DpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODh0M3B3ZGZrbnpFQVkxVzVzMTF4WmpjT2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kZDAxYWQtNmMyNy00NTdmLWIwNjQt NzA3NzExYjgxZWY3LzEvODh0M3B3ZGZrbnpFQVkxVzVzMTF4WmpjT2xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9kZDAxYWQtNmMyNy00NTdmLWIwNjQtNzA3NzExYjgxZWY3 LzEvODh0M3B3ZGZrbnpFQVkxVzVzMTF4WmpjT2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCEh0FJy Mkj1aEiYEeXgpWyL/ukdkxEuyu+n5jgWLFIrJBYtqyXawkSa3R1sseP5q+bGDPE6 dh2PqCUU/hsPG3+m5Dk5t7RZXxull0pw2qgSBqkCLdSZwhnI0nO0egu76N1/cTHb 0RpnDRyyqNwsLkMd/Jkz/jJGBUApOdhr8UyCfjavb1iCWYz1X3qc4+gQjT3pxgc2 FTDhykm9REyNRqgWNbpuLbUu6/VzwDmrEySymII2Kczdx8PPi5iYXikpAaK//2Ct MIPB4MnK7+nsgRXQlOM04FZNOxheeHZFFsuVBSVa5/1K53/4zHgYrm1PmpnZxQHq rWLraixfyTtDbQ== -----END CERTIFICATE-----Generated at Sat Dec 20 19:58:17 2025 by rpki-client