This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft File: F88SpliemYyb7BOa-PznCsR1rXI.mft (raw, json) Hash identifier: FF0zd0akRoK885o0eT9nTTVIxAxy5evAR5XvsHu6U88= Subject key identifier: F3:6E:85:F8:7D:62:3A:18:71:91:F8:15:01:F3:43:DA:7C:22:6C:ED Authority key identifier: 17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72 Certificate issuer: /CN=17cf12a6589e998c9bec139af8fce70ac475ad72 Certificate serial: 019B71472CE91883A816A7A14DFA247E4A72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft Manifest number: 17A5 Signing time: Tue 30 Dec 2025 22:00:48 +0000 Manifest this update: Tue 30 Dec 2025 22:00:48 +0000 Manifest next update: Wed 31 Dec 2025 22:00:48 +0000 Files and hashes: 1: F88SpliemYyb7BOa-PznCsR1rXI.crl (hash: OAb6q8dfFZVkBhYjroY36+9myeCsGL2Xkj1PkUGW1c4=) 2: dAIhcdZ8fwYvVo-M_emgqHoK7ZU.roa (hash: SjeXAqHoVFgHw2EHHXptMICe3kneOtC1TL1zW8otQdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 22:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:47:2c:e9:18:83:a8:16:a7:a1:4d:fa:24:7e:4a:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17cf12a6589e998c9bec139af8fce70ac475ad72 Validity Not Before: Dec 30 22:00:48 2025 GMT Not After : Dec 31 22:00:48 2025 GMT Subject: CN=f36e85f87d623a187191f81501f343da7c226ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bf:1b:80:23:2b:ec:f0:2d:d6:d6:5e:51:86: de:17:28:e5:0a:f3:0a:43:d0:9d:eb:7a:3c:b1:6c: 4f:0a:31:ad:da:2c:01:54:04:e7:89:8e:e1:34:05: 89:78:d8:bc:eb:36:34:f9:e3:0d:cf:94:94:d2:a7: 66:c2:51:cb:90:0d:28:1a:9d:05:6d:75:3d:4b:ee: 9a:98:dc:55:95:1f:1b:f0:b9:eb:5d:07:ab:1e:22: 4a:fb:c2:3b:69:0f:db:2c:64:e0:d1:22:17:2f:d8: c0:b4:c1:2b:61:00:30:27:3a:08:06:5a:2e:89:f8: 26:a3:57:c6:0c:41:09:0f:a1:a0:28:3e:a1:eb:8e: 12:6f:95:63:bd:52:25:cf:34:35:63:7d:57:22:e8: 52:9c:83:bf:df:11:f8:76:52:c2:60:b2:02:f1:fb: cc:e0:0a:d8:0d:26:93:69:6a:ee:f2:ef:39:a9:d5: fd:96:a6:28:68:b3:b0:8e:25:c1:b7:e6:3c:38:8b: c4:3a:47:21:42:00:fc:ca:af:d9:df:26:39:7b:1a: 0b:3e:b6:07:fa:f5:50:9f:f6:1e:ee:7b:78:9b:94: ac:01:79:d2:bd:fc:17:dd:82:be:a5:6e:3b:2d:6a: 74:5c:69:e2:4c:b8:fc:74:aa:07:55:ea:2a:5f:a2: 33:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:6E:85:F8:7D:62:3A:18:71:91:F8:15:01:F3:43:DA:7C:22:6C:ED X509v3 Authority Key Identifier: keyid:17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:88:7c:3e:e4:63:44:4b:6e:46:68:6e:7f:4b:a2:fd:7e:1a: 89:2d:1b:80:7e:f7:c7:8f:e3:6b:7a:a4:00:7c:b0:c7:33:ad: 35:c4:3f:04:b3:e8:cc:c2:1b:a6:80:48:65:be:3a:db:21:42: 51:cf:82:42:c2:db:dc:f3:a0:e4:39:b4:df:58:a3:ed:d2:38: 49:35:b8:d7:4f:78:31:87:d6:24:5e:f3:85:2f:67:ee:12:5e: 10:a2:ef:01:0d:30:50:2e:cc:c4:c5:34:c6:1d:29:83:0f:42: c5:50:7d:f6:83:db:89:16:e4:8a:c0:f3:12:3f:64:4d:a7:6a: c0:ce:ab:12:6c:f1:f5:a0:9e:38:30:ca:c8:a9:ae:07:2b:50: 26:70:f0:d9:d2:e5:e4:5e:a8:a4:0d:1d:c7:99:61:61:a6:4c: 52:c0:80:49:9b:10:9c:28:e4:31:10:eb:40:95:a3:fb:25:d5: 7c:a8:58:c4:a8:6f:5a:5d:a6:10:4e:c3:83:26:ea:2f:e7:11: c3:80:1a:b9:58:47:99:50:66:72:e9:bf:b3:15:73:75:ea:8c: fc:74:fa:9a:43:9a:19:e3:eb:62:f5:f5:49:38:41:ce:b7:42: 04:66:ae:73:bf:be:59:fd:b1:e8:b6:7c:04:98:91:b7:f4:8e: 1e:ad:72:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxRyzpGIOoFqehTfokfkpyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3Y2YxMmE2NTg5ZTk5OGM5YmVjMTM5YWY4ZmNlNzBhYzQ3 NWFkNzIwHhcNMjUxMjMwMjIwMDQ4WhcNMjUxMjMxMjIwMDQ4WjAzMTEwLwYDVQQD EyhmMzZlODVmODdkNjIzYTE4NzE5MWY4MTUwMWYzNDNkYTdjMjI2Y2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL8bgCMr7PAt1tZeUYbeFyjlCvMK Q9Cd63o8sWxPCjGt2iwBVATniY7hNAWJeNi86zY0+eMNz5SU0qdmwlHLkA0oGp0F bXU9S+6amNxVlR8b8LnrXQerHiJK+8I7aQ/bLGTg0SIXL9jAtMErYQAwJzoIBlou ifgmo1fGDEEJD6GgKD6h644Sb5VjvVIlzzQ1Y31XIuhSnIO/3xH4dlLCYLIC8fvM 4ArYDSaTaWru8u85qdX9lqYoaLOwjiXBt+Y8OIvEOkchQgD8yq/Z3yY5exoLPrYH +vVQn/Ye7nt4m5SsAXnSvfwX3YK+pW47LWp0XGniTLj8dKoHVeoqX6Iz3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNuhfh9YjoYcZH4FQHzQ9p8ImztMB8GA1UdIwQY MBaAFBfPEqZYnpmMm+wTmvj85wrEda1yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjg4U3BsaWVtWXliN0JPYS1Qem5Dc1IxclhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85YmRmMzQtNzI5ZC00YmUwLWIxNWYt NWRlMDg3MTE4MmJhLzEvRjg4U3BsaWVtWXliN0JPYS1Qem5Dc1IxclhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS85YmRmMzQtNzI5ZC00YmUwLWIxNWYtNWRlMDg3MTE4MmJh LzEvRjg4U3BsaWVtWXliN0JPYS1Qem5Dc1IxclhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYh8PuRj REtuRmhuf0ui/X4aiS0bgH73x4/ja3qkAHywxzOtNcQ/BLPozMIbpoBIZb462yFC Uc+CQsLb3POg5Dm031ij7dI4STW41094MYfWJF7zhS9n7hJeEKLvAQ0wUC7MxMU0 xh0pgw9CxVB99oPbiRbkisDzEj9kTadqwM6rEmzx9aCeODDKyKmuBytQJnDw2dLl 5F6opA0dx5lhYaZMUsCASZsQnCjkMRDrQJWj+yXVfKhYxKhvWl2mEE7DgybqL+cR w4AauVhHmVBmcum/sxVzdeqM/HT6mkOaGePrYvX1SThBzrdCBGauc7++Wf2x6LZ8 BJiRt/SOHq1yWw== -----END CERTIFICATE-----Generated at Wed Dec 31 06:29:07 2025 by rpki-client