This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft File: R88nFPKduANS6fMJ6i6MUoyUa9k.mft (raw, json) Hash identifier: nAC+n6H72qg0sk9XgNZjlpewOOMJOzTbE0R0bwf0KcE= Subject key identifier: 37:99:FA:B4:B3:29:9F:1F:45:25:68:3B:C0:76:E5:FF:CD:96:AD:A0 Authority key identifier: 47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9 Certificate issuer: /CN=47cf2714f29db80352e9f309ea2e8c528c946bd9 Certificate serial: 019B3EDA1EAFD46972EE97BC85155044B47F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft Manifest number: 174A Signing time: Sun 21 Dec 2025 03:00:40 +0000 Manifest this update: Sun 21 Dec 2025 03:00:40 +0000 Manifest next update: Mon 22 Dec 2025 03:00:40 +0000 Files and hashes: 1: R88nFPKduANS6fMJ6i6MUoyUa9k.crl (hash: FOkhLWFmaMkj/YygiWxjFT28P/tNTDWGp42nuC+6NOs=) 2: jHbOO-v3l--J7LgIxP9_M8wQbrA.roa (hash: FeF1DOYHjXY3CVPpoNeujItbqTAw7Wp1ChNuqHrFnss=) 3: zmA_4zxXMcTORxmCgPEyljXw27c.roa (hash: 566gwzLgN6mZch94CNNtXeQSmmj7Ao7jmOLhB0MgKkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:1e:af:d4:69:72:ee:97:bc:85:15:50:44:b4:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47cf2714f29db80352e9f309ea2e8c528c946bd9 Validity Not Before: Dec 21 03:00:40 2025 GMT Not After : Dec 22 03:00:40 2025 GMT Subject: CN=3799fab4b3299f1f4525683bc076e5ffcd96ada0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3d:3c:36:81:1e:d8:fb:20:cf:15:91:9a:46: cf:c6:95:e0:73:b1:9e:8c:a0:9b:a3:9d:83:20:55: 94:8a:a2:ac:65:3f:e1:fb:c0:7b:e3:33:f1:09:b2: 2e:50:e5:9d:db:4c:18:3b:43:65:2a:68:2d:0d:2e: bc:72:c5:49:ce:34:fb:1e:45:cd:a0:8c:82:c3:ff: b8:8d:da:eb:e4:0b:c7:f3:9b:2e:14:9e:6a:bd:6b: 0a:8d:f9:0c:ad:df:3f:a0:a5:17:1d:e3:7b:61:32: 4f:5c:55:2b:44:67:5f:99:24:f0:82:17:9a:68:96: 5f:d4:03:86:6d:69:11:da:17:8d:a5:ee:e9:9b:fc: 27:57:36:e3:ae:50:e3:bd:27:78:3d:23:27:bd:ae: be:d0:55:c1:85:04:42:59:fc:4c:d9:39:a8:97:a8: e1:db:82:e9:52:42:8b:93:37:4c:f0:13:5b:c7:4e: 0e:7f:e4:22:3d:e3:d3:e4:36:f0:0a:c7:e7:8a:e3: 66:d7:fb:ab:1c:e2:73:96:88:bf:bd:c8:4e:c3:fd: 4f:41:3f:6e:d3:2a:a5:29:cf:ac:f8:ee:c2:79:ad: ab:bc:cd:0d:a9:66:3a:8d:de:18:74:0f:99:e4:ee: 09:a4:9c:66:c8:6a:68:b1:7d:14:68:20:6e:ea:72: 03:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:99:FA:B4:B3:29:9F:1F:45:25:68:3B:C0:76:E5:FF:CD:96:AD:A0 X509v3 Authority Key Identifier: keyid:47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ac:26:93:64:23:13:04:a4:e2:e3:55:f7:c6:49:60:2c:6a: 8c:54:d4:39:62:9f:d1:ed:d5:2d:e0:f3:30:3f:3d:b0:5d:e9: 5e:e7:12:c7:0e:85:8b:99:13:10:6f:b9:be:39:08:5d:fa:e5: 47:25:ee:f3:88:6b:f7:fe:4d:32:3d:74:ac:fa:41:dd:55:0e: e5:e1:77:b6:ec:76:17:16:1b:c6:2b:60:e5:e8:3b:19:d1:93: 4e:94:75:ea:cf:74:ad:0d:78:dd:cd:50:41:0f:8a:0e:00:db: 7d:f8:3c:e6:14:e2:0e:95:18:e2:71:44:ee:35:fb:8f:99:91: 8d:df:03:fa:7b:42:bb:2f:b0:91:58:7c:56:57:ac:6c:0e:98: 62:ed:70:9c:b7:68:8e:c2:ac:b5:28:39:cb:2e:c5:0f:c5:96: c6:ab:da:69:c7:b7:1b:a0:6e:50:ad:0d:34:a7:8b:de:2d:30: 00:14:f3:83:48:3a:87:73:7c:70:90:e5:62:02:db:54:6f:da: a1:28:e7:2b:fa:13:62:8e:65:e7:41:fe:ac:91:66:ef:91:cd: 9d:fc:6e:0b:2a:b3:bf:b6:99:e4:8b:01:07:fe:5a:d4:89:29: 7d:62:46:fe:72:37:cb:1f:79:31:2a:a1:49:31:17:a6:36:44: a6:d0:23:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2h6v1Gly7pe8hRVQRLR/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3Y2YyNzE0ZjI5ZGI4MDM1MmU5ZjMwOWVhMmU4YzUyOGM5 NDZiZDkwHhcNMjUxMjIxMDMwMDQwWhcNMjUxMjIyMDMwMDQwWjAzMTEwLwYDVQQD EygzNzk5ZmFiNGIzMjk5ZjFmNDUyNTY4M2JjMDc2ZTVmZmNkOTZhZGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD08NoEe2PsgzxWRmkbPxpXgc7Ge jKCbo52DIFWUiqKsZT/h+8B74zPxCbIuUOWd20wYO0NlKmgtDS68csVJzjT7HkXN oIyCw/+4jdrr5AvH85suFJ5qvWsKjfkMrd8/oKUXHeN7YTJPXFUrRGdfmSTwghea aJZf1AOGbWkR2heNpe7pm/wnVzbjrlDjvSd4PSMnva6+0FXBhQRCWfxM2Tmol6jh 24LpUkKLkzdM8BNbx04Of+QiPePT5DbwCsfniuNm1/urHOJzloi/vchOw/1PQT9u 0yqlKc+s+O7Cea2rvM0NqWY6jd4YdA+Z5O4JpJxmyGposX0UaCBu6nIDHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDeZ+rSzKZ8fRSVoO8B25f/Nlq2gMB8GA1UdIwQY MBaAFEfPJxTynbgDUunzCeoujFKMlGvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yYjE5MmYtNmNlZS00N2ZhLTgzOTUt NThhZGY3OGQ4Mjc4LzEvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yYjE5MmYtNmNlZS00N2ZhLTgzOTUtNThhZGY3OGQ4Mjc4 LzEvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqwmk2Qj EwSk4uNV98ZJYCxqjFTUOWKf0e3VLeDzMD89sF3pXucSxw6Fi5kTEG+5vjkIXfrl RyXu84hr9/5NMj10rPpB3VUO5eF3tux2FxYbxitg5eg7GdGTTpR16s90rQ143c1Q QQ+KDgDbffg85hTiDpUY4nFE7jX7j5mRjd8D+ntCuy+wkVh8VlesbA6YYu1wnLdo jsKstSg5yy7FD8WWxqvaace3G6BuUK0NNKeL3i0wABTzg0g6h3N8cJDlYgLbVG/a oSjnK/oTYo5l50H+rJFm75HNnfxuCyqzv7aZ5IsBB/5a1IkpfWJG/nI3yx95MSqh STEXpjZEptAjuA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:14:16 2025 by rpki-client