This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft File: F88SpliemYyb7BOa-PznCsR1rXI.mft (raw, json) Hash identifier: S2wRtcWurCl9VjraiRMWh4fvc8xV3kKvgUIyNpFsSac= Subject key identifier: 76:42:85:7D:48:94:BA:57:8F:68:F6:50:65:11:48:49:DE:1E:98:9B Authority key identifier: 17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72 Certificate issuer: /CN=17cf12a6589e998c9bec139af8fce70ac475ad72 Certificate serial: 019B5A1A55E2D6CCD1CAFA42473A8A27F271 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 10:00:33 +0000 Manifest this update: Fri 26 Dec 2025 10:00:33 +0000 Manifest next update: Sat 27 Dec 2025 10:00:33 +0000 Files and hashes: 1: F88SpliemYyb7BOa-PznCsR1rXI.crl (hash: Pl1xn30EtN8ItsRBmlpu8sjFhzPgNRpp8Vk50T4+8Cg=) 2: dAIhcdZ8fwYvVo-M_emgqHoK7ZU.roa (hash: SjeXAqHoVFgHw2EHHXptMICe3kneOtC1TL1zW8otQdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:55:e2:d6:cc:d1:ca:fa:42:47:3a:8a:27:f2:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17cf12a6589e998c9bec139af8fce70ac475ad72 Validity Not Before: Dec 26 10:00:33 2025 GMT Not After : Dec 27 10:00:33 2025 GMT Subject: CN=7642857d4894ba578f68f65065114849de1e989b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d5:1f:7a:70:b4:92:ac:b1:e9:ea:de:89:f6: 6f:ff:d7:22:86:bc:9c:46:e4:5e:cc:f5:2b:41:13: 4e:78:77:ec:83:95:73:c1:73:df:4d:a2:cf:6b:2e: 63:99:1e:3d:31:da:d5:5f:f4:10:79:49:08:f3:5b: 39:6d:7a:4c:33:0d:df:90:44:69:4d:5e:2f:b5:ae: 38:ac:4f:07:be:40:f6:e9:77:6a:8e:d6:86:06:6a: fe:19:a6:e6:39:81:88:e0:57:e0:ee:ae:0e:f5:fc: 8d:ac:10:7c:29:06:7e:85:e2:76:ab:11:96:ef:15: d4:49:0e:3a:1d:42:8a:d4:a3:5a:0e:48:26:4e:b6: f4:bf:84:24:d8:48:fc:bf:e5:74:34:47:99:aa:b7: dd:3d:39:18:ad:e6:c0:93:07:ad:e3:21:d6:bd:b4: 04:fe:6a:20:a7:6a:18:2a:47:d4:58:58:06:31:e1: 5c:49:94:b8:b2:e1:0f:45:a0:54:3e:0c:b0:c4:46: 09:52:66:63:a8:2a:35:89:ac:a7:5f:80:ea:69:a2: e4:23:45:b1:d4:b2:90:48:34:27:1f:1f:dd:66:34: 9e:e8:94:32:25:bb:2c:ae:2b:16:ac:92:b2:96:23: 9d:71:e2:a3:dd:45:de:c8:ed:1f:8a:10:80:9e:5a: 25:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:42:85:7D:48:94:BA:57:8F:68:F6:50:65:11:48:49:DE:1E:98:9B X509v3 Authority Key Identifier: keyid:17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:eb:a1:b0:37:ef:34:e2:60:f7:10:6e:42:96:4a:57:db:fb: 74:90:ce:99:8d:c5:43:0a:93:bd:e1:4a:fb:78:48:e7:73:19: df:05:fe:91:bd:be:e3:87:d6:00:45:f8:41:1c:a8:54:b1:e3: e1:57:87:bc:23:2b:91:ff:c8:cf:6a:f7:04:fe:d0:5f:95:8e: 5f:22:6e:11:ca:41:6d:c1:99:56:cd:68:69:70:c9:d7:2f:a8: e1:4b:b6:70:07:a5:1f:d7:9f:c5:d9:25:a9:59:b6:61:c7:39: a7:29:ab:84:14:27:7f:90:fb:ba:f9:0e:77:a9:f6:db:a8:f7: 40:5c:64:ac:e2:57:47:51:fd:80:00:c3:31:49:d9:57:8f:dc: 0f:81:ad:e5:56:4e:50:41:c4:9a:c3:16:2b:a9:c5:cb:a5:fc: f1:82:46:05:66:b5:64:7d:22:ce:b1:a1:96:25:71:d7:da:71: 47:43:14:b1:3f:89:c9:07:f4:26:43:58:1f:79:d1:d9:fd:4e: ba:52:99:ac:42:61:ec:ec:42:cd:b0:20:90:15:db:6a:c2:b6: 8f:5b:05:d6:8a:3d:e4:21:59:da:25:a2:41:90:32:ec:e5:96: 64:1a:b0:e6:cf:d7:f0:9c:8f:d7:ed:22:23:ea:34:92:83:fa: b5:7b:75:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGlXi1szRyvpCRzqKJ/JxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3Y2YxMmE2NTg5ZTk5OGM5YmVjMTM5YWY4ZmNlNzBhYzQ3 NWFkNzIwHhcNMjUxMjI2MTAwMDMzWhcNMjUxMjI3MTAwMDMzWjAzMTEwLwYDVQQD Eyg3NjQyODU3ZDQ4OTRiYTU3OGY2OGY2NTA2NTExNDg0OWRlMWU5ODliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdUfenC0kqyx6ereifZv/9cihryc RuRezPUrQRNOeHfsg5VzwXPfTaLPay5jmR49MdrVX/QQeUkI81s5bXpMMw3fkERp TV4vta44rE8HvkD26XdqjtaGBmr+GabmOYGI4Ffg7q4O9fyNrBB8KQZ+heJ2qxGW 7xXUSQ46HUKK1KNaDkgmTrb0v4Qk2Ej8v+V0NEeZqrfdPTkYrebAkwet4yHWvbQE /mogp2oYKkfUWFgGMeFcSZS4suEPRaBUPgywxEYJUmZjqCo1iaynX4DqaaLkI0Wx 1LKQSDQnHx/dZjSe6JQyJbssrisWrJKyliOdceKj3UXeyO0fihCAnlolVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZChX1IlLpXj2j2UGURSEneHpibMB8GA1UdIwQY MBaAFBfPEqZYnpmMm+wTmvj85wrEda1yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjg4U3BsaWVtWXliN0JPYS1Qem5Dc1IxclhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85YmRmMzQtNzI5ZC00YmUwLWIxNWYt NWRlMDg3MTE4MmJhLzEvRjg4U3BsaWVtWXliN0JPYS1Qem5Dc1IxclhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS85YmRmMzQtNzI5ZC00YmUwLWIxNWYtNWRlMDg3MTE4MmJh LzEvRjg4U3BsaWVtWXliN0JPYS1Qem5Dc1IxclhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOuhsDfv NOJg9xBuQpZKV9v7dJDOmY3FQwqTveFK+3hI53MZ3wX+kb2+44fWAEX4QRyoVLHj 4VeHvCMrkf/Iz2r3BP7QX5WOXyJuEcpBbcGZVs1oaXDJ1y+o4Uu2cAelH9efxdkl qVm2Ycc5pymrhBQnf5D7uvkOd6n226j3QFxkrOJXR1H9gADDMUnZV4/cD4Gt5VZO UEHEmsMWK6nFy6X88YJGBWa1ZH0izrGhliVx19pxR0MUsT+JyQf0JkNYH3nR2f1O ulKZrEJh7OxCzbAgkBXbasK2j1sF1oo95CFZ2iWiQZAy7OWWZBqw5s/X8JyP1+0i I+o0koP6tXt19g== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:22 2025 by rpki-client