This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft File: 88huoplek0tlBBkRy562WHLCKJ8.mft (raw, json) Hash identifier: KlUapAphU1uMhnaT0eVy2yl0W9SXLSLnATI+4AnnAew= Subject key identifier: 67:96:D6:63:26:8A:08:A5:14:55:42:88:72:65:47:71:72:CA:05:65 Authority key identifier: F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F Certificate issuer: /CN=f3c86ea2995e934b65041911cb9eb65872c2289f Certificate serial: 019B34C5E87D447D8E13F593DE1EA5C73198 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft Manifest number: 1678 Signing time: Fri 19 Dec 2025 04:02:23 +0000 Manifest this update: Fri 19 Dec 2025 04:02:23 +0000 Manifest next update: Sat 20 Dec 2025 04:02:23 +0000 Files and hashes: 1: 88huoplek0tlBBkRy562WHLCKJ8.crl (hash: NGzoNEQLdgcQt3ruFo5J97v0rlArrexsOv/USMoENCA=) 2: hvBR5Lh2V5nBCkDL4kLbjgOv4x4.roa (hash: roHQdZzbDc98BWIijFr4uNTSgf0x5DY16Sjtlk2cSOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:e8:7d:44:7d:8e:13:f5:93:de:1e:a5:c7:31:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3c86ea2995e934b65041911cb9eb65872c2289f Validity Not Before: Dec 19 04:02:23 2025 GMT Not After : Dec 20 04:02:23 2025 GMT Subject: CN=6796d663268a08a5145542887265477172ca0565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ce:f4:40:5f:c5:99:83:61:dc:36:30:68:4c: a6:20:e1:05:1e:b6:86:95:98:61:91:06:8b:19:2c: 58:29:8c:e4:dc:2e:9d:d6:86:79:e4:04:15:61:a3: 0a:cd:40:0f:12:74:e9:5c:f2:c4:9e:64:1e:40:67: 40:94:27:4a:fa:17:29:23:8c:3a:55:1c:62:d3:f3: 6d:3d:b3:05:38:45:26:3f:16:af:ec:f5:56:d4:aa: 75:08:d4:5f:ce:b2:ff:9e:cd:d5:04:cc:ce:70:dc: aa:31:54:3a:40:31:10:a1:4f:a6:c1:bd:84:a6:eb: 9e:a4:8c:16:d5:08:84:5e:61:56:ec:95:28:c6:62: 27:b6:19:23:1b:99:54:96:ff:15:1e:e4:36:2d:bf: 25:ef:68:ae:54:fa:25:7e:b9:8f:f9:ef:36:45:1b: cd:08:d9:9f:f5:25:fb:f4:07:5d:87:91:ea:54:f4: d0:36:a7:90:99:cd:8b:8f:f7:04:e3:dd:db:f6:e4: f1:bc:e6:b4:a0:41:06:3e:48:de:45:ad:ad:50:10: 56:8d:4d:ec:0c:25:f4:bb:38:ed:90:a4:5b:98:ad: aa:74:3d:da:f9:bb:21:1d:35:a5:b9:d3:44:e5:ec: 65:7d:dd:03:81:25:55:11:a1:b7:4d:38:92:30:f0: fa:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:96:D6:63:26:8A:08:A5:14:55:42:88:72:65:47:71:72:CA:05:65 X509v3 Authority Key Identifier: keyid:F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:13:ea:04:f5:05:7b:79:46:51:4f:40:49:65:6d:f7:bd:ec: fd:b8:98:93:3b:62:fc:5e:4d:15:54:1c:a2:db:6c:5b:00:62: 03:3d:18:79:de:3e:e5:7e:9a:22:95:25:55:bd:16:27:38:68: 9d:f2:61:6d:56:e8:65:d9:08:f2:47:55:ec:92:0e:9d:36:ca: 83:47:1b:5b:c7:9c:3b:f0:bc:06:4b:1d:28:86:4d:64:5f:5d: 90:77:63:25:49:66:d8:59:ab:76:7e:2c:bf:e9:1f:b0:da:af: 6f:f2:79:0e:47:82:09:7f:72:7e:df:c4:cf:f1:44:0b:73:2a: 92:8e:e8:c9:ca:76:aa:8f:67:6b:a9:fb:1f:fb:de:03:78:01: 61:f7:89:de:c2:e2:20:7b:08:e1:a3:b8:a4:d2:64:76:34:b6: d7:5e:2a:98:c7:10:63:cb:ff:27:91:33:1b:b0:f1:13:9a:25: be:05:97:75:e8:a7:b7:8c:8a:be:e3:20:1d:42:91:22:58:47: b6:38:1f:df:29:0e:a2:87:35:bd:49:8d:59:54:c3:21:a8:3f: 3d:af:dd:0a:ea:d1:1a:50:a8:46:f9:cc:08:3d:fe:38:e7:6f: 31:3a:fe:8f:43:45:24:e7:01:a4:e4:9d:24:55:f0:b3:05:5b: 55:38:d6:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xeh9RH2OE/WT3h6lxzGYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYzg2ZWEyOTk1ZTkzNGI2NTA0MTkxMWNiOWViNjU4NzJj MjI4OWYwHhcNMjUxMjE5MDQwMjIzWhcNMjUxMjIwMDQwMjIzWjAzMTEwLwYDVQQD Eyg2Nzk2ZDY2MzI2OGEwOGE1MTQ1NTQyODg3MjY1NDc3MTcyY2EwNTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq870QF/FmYNh3DYwaEymIOEFHraG lZhhkQaLGSxYKYzk3C6d1oZ55AQVYaMKzUAPEnTpXPLEnmQeQGdAlCdK+hcpI4w6 VRxi0/NtPbMFOEUmPxav7PVW1Kp1CNRfzrL/ns3VBMzOcNyqMVQ6QDEQoU+mwb2E puuepIwW1QiEXmFW7JUoxmInthkjG5lUlv8VHuQ2Lb8l72iuVPolfrmP+e82RRvN CNmf9SX79Addh5HqVPTQNqeQmc2Lj/cE493b9uTxvOa0oEEGPkjeRa2tUBBWjU3s DCX0uzjtkKRbmK2qdD3a+bshHTWludNE5exlfd0DgSVVEaG3TTiSMPD6UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGeW1mMmigilFFVCiHJlR3FyygVlMB8GA1UdIwQY MBaAFPPIbqKZXpNLZQQZEcuetlhywiifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODhodW9wbGVrMHRsQkJrUnk1NjJXSExDS0o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lNTU0YWEtZTRlZC00OTQ4LWI2ZmMt YzYzNWQ4ZWVkNDQ3LzEvODhodW9wbGVrMHRsQkJrUnk1NjJXSExDS0o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9lNTU0YWEtZTRlZC00OTQ4LWI2ZmMtYzYzNWQ4ZWVkNDQ3 LzEvODhodW9wbGVrMHRsQkJrUnk1NjJXSExDS0o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBPqBPUF e3lGUU9ASWVt973s/biYkzti/F5NFVQcottsWwBiAz0Yed4+5X6aIpUlVb0WJzho nfJhbVboZdkI8kdV7JIOnTbKg0cbW8ecO/C8BksdKIZNZF9dkHdjJUlm2Fmrdn4s v+kfsNqvb/J5DkeCCX9yft/Ez/FEC3Mqko7oycp2qo9na6n7H/veA3gBYfeJ3sLi IHsI4aO4pNJkdjS2114qmMcQY8v/J5EzG7DxE5olvgWXdeint4yKvuMgHUKRIlhH tjgf3ykOooc1vUmNWVTDIag/Pa/dCurRGlCoRvnMCD3+OOdvMTr+j0NFJOcBpOSd JFXwswVbVTjWeg== -----END CERTIFICATE-----Generated at Fri Dec 19 10:40:01 2025 by rpki-client