This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft File: 23uiovC_o6dvXJkaR82YaMbR674.mft (raw, json) Hash identifier: KpaTO+ufG5cQfyCUfCN9gYBNmXv0el1ogJWyTB34a/g= Subject key identifier: F8:5A:BE:87:36:B4:F7:98:77:F0:25:24:11:33:90:73:26:95:83:E6 Authority key identifier: DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE Certificate issuer: /CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe Certificate serial: 019B3945F8BE960FD9A1AC891E6372E9D7A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft Manifest number: 1438 Signing time: Sat 20 Dec 2025 01:00:45 +0000 Manifest this update: Sat 20 Dec 2025 01:00:45 +0000 Manifest next update: Sun 21 Dec 2025 01:00:45 +0000 Files and hashes: 1: 23uiovC_o6dvXJkaR82YaMbR674.crl (hash: RQnuQt0SaRCFDEHJ3j+XoE2w9fYngpbeOf1OTNBcd0o=) 2: J8hzJTM2uz7yXJSlk16QOqdb0iI.roa (hash: sPVr5eHmre5tC1ZjjWRY6ekKAEsqs3UiVYcFX3QHcj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:45:f8:be:96:0f:d9:a1:ac:89:1e:63:72:e9:d7:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe Validity Not Before: Dec 20 01:00:45 2025 GMT Not After : Dec 21 01:00:45 2025 GMT Subject: CN=f85abe8736b4f79877f0252411339073269583e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fe:f5:7a:b2:6b:41:78:a2:7a:c2:00:68:60: 08:d4:de:71:ff:43:e5:8e:a0:b6:65:37:ea:94:86: a6:ef:1e:0c:43:c0:16:a9:af:8d:4a:43:9c:96:5d: 40:3a:0a:a8:8d:9c:e6:b2:ab:67:ea:9a:2e:3d:ec: 7f:c2:b8:a6:37:05:0c:95:5e:04:ec:65:15:a1:80: 20:b0:ed:a4:ad:df:a5:ba:b2:b4:50:d2:09:1d:28: 40:3e:15:05:79:e0:0b:2b:fb:60:d5:ee:71:cc:2b: 51:e5:e2:d2:12:2c:1d:09:54:a2:3b:98:41:18:87: ad:17:3e:f1:01:20:4a:d7:cd:96:8a:e9:d9:79:34: 2f:68:8b:36:47:4d:0b:9f:7e:92:02:b7:c3:a5:a5: b9:f2:f3:e3:09:9b:f4:fd:a1:de:b8:ac:3f:3d:2f: 0c:23:4b:9a:db:ee:11:ce:8f:1f:4d:ac:67:c5:7c: 10:a9:61:f6:5f:c1:67:e7:ab:5e:90:a2:27:ce:e0: d6:cd:24:2f:41:d5:fe:1c:84:b1:1d:f8:e4:aa:d4: 22:cf:21:58:72:3b:c4:f4:7a:c9:41:ac:e3:5f:0a: 01:d4:78:39:15:8d:f6:a7:a9:0f:da:61:d0:d7:c8: cc:d6:ef:c4:7d:3d:13:82:8c:a0:74:f4:8d:29:7d: b6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5A:BE:87:36:B4:F7:98:77:F0:25:24:11:33:90:73:26:95:83:E6 X509v3 Authority Key Identifier: keyid:DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:75:c9:b7:3b:d2:c3:30:c6:8a:74:27:5f:d7:44:03:d1:f2: 26:ad:0e:e2:5d:91:a1:69:65:60:ed:10:98:c6:73:11:06:c3: 0a:4a:7b:d8:48:a3:bb:13:9b:fd:96:cc:8a:ac:24:22:b9:48: f6:6d:c0:58:d5:18:63:50:37:a7:d1:73:a7:15:84:0c:2a:5f: 94:7a:05:34:05:64:41:ad:56:a9:93:cf:be:bf:77:a8:2d:0e: e1:d1:0a:70:85:7a:ba:62:d9:7f:3b:20:2e:bb:15:27:45:13: 15:f5:73:00:ed:40:9a:e9:31:6b:6d:09:13:8e:39:c9:c2:7e: c3:aa:c3:de:de:f5:6f:72:5f:46:e3:d3:6c:99:d6:d9:a6:49: 44:f7:8f:16:fe:08:08:e8:98:2d:44:19:e5:77:15:97:d4:6f: 6a:20:7c:2e:27:30:52:4d:67:8f:0e:4f:e3:37:d4:cf:08:64: 25:e3:f9:ac:d0:82:24:6e:a9:13:bb:2b:d3:ab:31:5c:f7:32: 24:15:c3:47:f7:2b:58:73:29:b5:83:d5:82:b7:2e:f7:c8:8d: 18:cb:3e:c4:fa:0b:35:a7:fe:8d:04:f9:61:8e:02:3a:eb:37: cf:23:8f:eb:08:37:92:64:15:c5:13:6d:9e:a1:d1:ac:43:f7: 0c:0e:03:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Rfi+lg/ZoayJHmNy6denMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiN2JhMmEyZjBiZmEzYTc2ZjVjOTkxYTQ3Y2Q5ODY4YzZk MWViYmUwHhcNMjUxMjIwMDEwMDQ1WhcNMjUxMjIxMDEwMDQ1WjAzMTEwLwYDVQQD EyhmODVhYmU4NzM2YjRmNzk4NzdmMDI1MjQxMTMzOTA3MzI2OTU4M2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P71erJrQXiiesIAaGAI1N5x/0Pl jqC2ZTfqlIam7x4MQ8AWqa+NSkOcll1AOgqojZzmsqtn6pouPex/wrimNwUMlV4E 7GUVoYAgsO2krd+lurK0UNIJHShAPhUFeeALK/tg1e5xzCtR5eLSEiwdCVSiO5hB GIetFz7xASBK182WiunZeTQvaIs2R00Ln36SArfDpaW58vPjCZv0/aHeuKw/PS8M I0ua2+4Rzo8fTaxnxXwQqWH2X8Fn56tekKInzuDWzSQvQdX+HISxHfjkqtQizyFY cjvE9HrJQazjXwoB1Hg5FY32p6kP2mHQ18jM1u/EfT0TgoygdPSNKX22kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhavoc2tPeYd/AlJBEzkHMmlYPmMB8GA1UdIwQY MBaAFNt7oqLwv6Onb1yZGkfNmGjG0eu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82MTdhOWYtM2ZiMi00Y2JiLTk5ZmEt ZjIyZWI2NWZjYzcyLzEvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC82MTdhOWYtM2ZiMi00Y2JiLTk5ZmEtZjIyZWI2NWZjYzcy LzEvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHXJtzvS wzDGinQnX9dEA9HyJq0O4l2RoWllYO0QmMZzEQbDCkp72EijuxOb/ZbMiqwkIrlI 9m3AWNUYY1A3p9FzpxWEDCpflHoFNAVkQa1WqZPPvr93qC0O4dEKcIV6umLZfzsg LrsVJ0UTFfVzAO1Amukxa20JE445ycJ+w6rD3t71b3JfRuPTbJnW2aZJRPePFv4I COiYLUQZ5XcVl9RvaiB8LicwUk1njw5P4zfUzwhkJeP5rNCCJG6pE7sr06sxXPcy JBXDR/crWHMptYPVgrcu98iNGMs+xPoLNaf+jQT5YY4COus3zyOP6wg3kmQVxRNt nqHRrEP3DA4Daw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:59 2025 by rpki-client