This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft File: 23uiovC_o6dvXJkaR82YaMbR674.mft (raw, json) Hash identifier: ntd97YYjWvrriltaMl08laBlB+S5qc/tuTua+jIyfJI= Subject key identifier: 74:1B:9D:02:E2:E0:47:71:20:3B:CC:C3:A7:4C:DA:6A:36:7D:5E:72 Authority key identifier: DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE Certificate issuer: /CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe Certificate serial: 019B50729CD4F68FF9185CF20EB74BEF1AEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft Manifest number: 1444 Signing time: Wed 24 Dec 2025 13:00:47 +0000 Manifest this update: Wed 24 Dec 2025 13:00:47 +0000 Manifest next update: Thu 25 Dec 2025 13:00:47 +0000 Files and hashes: 1: 23uiovC_o6dvXJkaR82YaMbR674.crl (hash: l8SIjs91xnGuiuX8UKbh1AswxffyDjKO2V5HU5LCSX8=) 2: J8hzJTM2uz7yXJSlk16QOqdb0iI.roa (hash: sPVr5eHmre5tC1ZjjWRY6ekKAEsqs3UiVYcFX3QHcj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:72:9c:d4:f6:8f:f9:18:5c:f2:0e:b7:4b:ef:1a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe Validity Not Before: Dec 24 13:00:47 2025 GMT Not After : Dec 25 13:00:47 2025 GMT Subject: CN=741b9d02e2e04771203bccc3a74cda6a367d5e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:95:3c:e4:ef:35:32:f7:eb:a4:68:c7:b9:10: a1:56:71:90:a6:b1:8a:92:8d:da:f7:ca:79:80:2e: ca:d3:82:5f:6c:70:e8:79:60:d7:56:29:d2:b8:be: 26:47:5d:c9:16:9a:3c:e1:11:1f:b6:c1:dd:a8:8c: 9f:bf:db:ce:bd:7b:3b:40:88:09:48:c5:93:30:34: 74:c9:50:e4:ea:86:c1:33:66:15:fb:fc:12:28:6d: 42:0a:4c:e3:a3:15:94:61:dd:b8:66:a7:28:1c:63: dc:ac:c5:3b:c6:e9:fb:fe:c6:31:d5:f3:c8:ba:67: 9b:97:04:ba:17:64:51:ad:ad:3b:4d:24:cb:67:75: 3b:e0:4f:5e:26:fa:9a:f4:18:ec:aa:55:71:02:3a: 0a:f7:db:ff:ea:25:0d:b8:14:dc:0c:ca:5c:c2:12: 6f:d7:e9:2c:25:c1:55:40:c5:5b:6d:05:23:3c:19: 82:77:49:5c:66:96:3c:c6:23:55:5b:53:7d:dd:3b: 33:b9:45:07:02:23:98:5c:0d:25:f1:5c:70:0b:bb: cc:7c:0e:88:06:53:bf:3b:5c:a6:88:2a:a2:62:b5: 26:b7:c8:5a:d9:d5:4f:8d:c3:78:1b:6f:21:8c:49: 24:9c:6e:6f:65:24:66:f7:9c:29:d3:c2:60:8d:26: af:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1B:9D:02:E2:E0:47:71:20:3B:CC:C3:A7:4C:DA:6A:36:7D:5E:72 X509v3 Authority Key Identifier: keyid:DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:3a:b7:b1:9a:df:59:a5:a2:66:4d:7a:ec:3b:13:f5:f2:a4: 28:ad:59:e1:b0:26:a4:4b:46:5f:5b:ec:dd:38:09:98:dd:d9: 72:e7:63:16:e8:8d:62:b7:f6:28:45:e8:1d:74:ce:a7:b2:d6: a5:a9:e2:2f:28:ca:c1:09:9a:09:bd:47:1f:fa:59:67:ef:e2: 1e:85:fb:0e:99:78:13:c6:78:f0:59:de:f0:6f:c3:2a:13:81: 9f:80:f8:c8:38:f2:a2:3f:b5:a8:5f:10:12:a0:f5:9b:2e:c1: 91:f2:54:99:e5:06:6c:54:1e:36:96:d4:d3:ed:d0:ac:f3:90: a1:d1:bd:e1:3a:7f:8f:84:3f:31:e4:28:6e:f6:28:e4:fb:7d: db:a4:5a:b8:46:20:c0:f6:e8:2a:7d:69:9d:03:8b:ec:6d:0f: e2:16:f6:00:25:a1:f7:b2:f1:9d:dc:6c:cb:47:f2:4f:6b:18: 02:a3:08:4c:ce:09:1f:35:72:e3:f1:5d:3d:4f:ae:07:3a:49: b4:e5:a8:73:0b:44:cf:d2:9a:b0:04:80:97:65:15:c1:c6:d9: 15:59:1c:86:17:ed:8c:ff:69:89:1f:e1:b1:18:3c:c9:d4:ae: e7:bd:67:65:d4:fb:72:25:2a:39:ac:e4:86:a3:e4:b4:5e:4c: 4d:d9:a0:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcpzU9o/5GFzyDrdL7xrrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiN2JhMmEyZjBiZmEzYTc2ZjVjOTkxYTQ3Y2Q5ODY4YzZk MWViYmUwHhcNMjUxMjI0MTMwMDQ3WhcNMjUxMjI1MTMwMDQ3WjAzMTEwLwYDVQQD Eyg3NDFiOWQwMmUyZTA0NzcxMjAzYmNjYzNhNzRjZGE2YTM2N2Q1ZTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZU85O81MvfrpGjHuRChVnGQprGK ko3a98p5gC7K04JfbHDoeWDXVinSuL4mR13JFpo84REftsHdqIyfv9vOvXs7QIgJ SMWTMDR0yVDk6obBM2YV+/wSKG1CCkzjoxWUYd24ZqcoHGPcrMU7xun7/sYx1fPI umeblwS6F2RRra07TSTLZ3U74E9eJvqa9BjsqlVxAjoK99v/6iUNuBTcDMpcwhJv 1+ksJcFVQMVbbQUjPBmCd0lcZpY8xiNVW1N93TszuUUHAiOYXA0l8VxwC7vMfA6I BlO/O1ymiCqiYrUmt8ha2dVPjcN4G28hjEkknG5vZSRm95wp08JgjSavhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQbnQLi4EdxIDvMw6dM2mo2fV5yMB8GA1UdIwQY MBaAFNt7oqLwv6Onb1yZGkfNmGjG0eu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82MTdhOWYtM2ZiMi00Y2JiLTk5ZmEt ZjIyZWI2NWZjYzcyLzEvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC82MTdhOWYtM2ZiMi00Y2JiLTk5ZmEtZjIyZWI2NWZjYzcy LzEvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTq3sZrf WaWiZk167DsT9fKkKK1Z4bAmpEtGX1vs3TgJmN3ZcudjFuiNYrf2KEXoHXTOp7LW paniLyjKwQmaCb1HH/pZZ+/iHoX7Dpl4E8Z48Fne8G/DKhOBn4D4yDjyoj+1qF8Q EqD1my7BkfJUmeUGbFQeNpbU0+3QrPOQodG94Tp/j4Q/MeQobvYo5Pt926RauEYg wPboKn1pnQOL7G0P4hb2ACWh97Lxndxsy0fyT2sYAqMITM4JHzVy4/FdPU+uBzpJ tOWocwtEz9KasASAl2UVwcbZFVkchhftjP9piR/hsRg8ydSu571nZdT7ciUqOazk hqPktF5MTdmgBQ== -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:24 2025 by rpki-client