This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft File: 23uiovC_o6dvXJkaR82YaMbR674.mft (raw, json) Hash identifier: lRxtQKf02AKTCyxsktcfo+/TBmGY1f2PU9Iz7W5tJ/o= Subject key identifier: 88:3D:ED:86:A3:E6:11:9D:7E:AE:B1:B8:26:04:F1:E8:70:BF:A2:A5 Authority key identifier: DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE Certificate issuer: /CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe Certificate serial: 019B44DC771E90482671E822FB632389F7AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft Manifest number: 143E Signing time: Mon 22 Dec 2025 07:00:57 +0000 Manifest this update: Mon 22 Dec 2025 07:00:57 +0000 Manifest next update: Tue 23 Dec 2025 07:00:57 +0000 Files and hashes: 1: 23uiovC_o6dvXJkaR82YaMbR674.crl (hash: YlEDeR5W0GedsGNzfArKTOYhd+AKO9Y0oweHj/XSW9E=) 2: J8hzJTM2uz7yXJSlk16QOqdb0iI.roa (hash: sPVr5eHmre5tC1ZjjWRY6ekKAEsqs3UiVYcFX3QHcj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:77:1e:90:48:26:71:e8:22:fb:63:23:89:f7:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe Validity Not Before: Dec 22 07:00:57 2025 GMT Not After : Dec 23 07:00:57 2025 GMT Subject: CN=883ded86a3e6119d7eaeb1b82604f1e870bfa2a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:11:7a:66:2b:16:44:b1:be:ce:dc:34:cd:9e: 64:94:4a:1f:15:1f:00:fd:7f:97:02:ad:be:bc:4b: 0e:e5:7f:24:8f:56:e1:b2:16:d6:87:00:96:ac:25: 32:79:41:79:6b:92:36:cf:59:f6:51:94:89:43:1b: 3b:2c:a6:a7:e4:f8:f3:9c:85:6d:b6:28:a2:2e:a9: 4a:e1:80:9f:0f:76:93:9b:79:23:c5:82:40:f2:77: ec:b9:a5:25:53:27:02:fb:26:3a:6d:16:bd:a2:7e: f9:9b:c5:3e:6e:d6:9b:9b:74:aa:7f:86:e5:a3:37: cf:8b:2c:b1:b2:11:d4:ea:10:7a:10:0b:25:1d:4f: c1:f1:89:89:3a:49:6a:c2:1a:6b:0f:8f:55:ce:4e: 84:da:6b:50:b2:cb:af:fa:36:f2:ee:64:0a:5e:f3: 5e:49:84:5e:ec:63:81:eb:81:56:4c:58:19:a6:3c: 32:23:b6:24:34:df:47:89:6c:5a:d7:13:a0:4a:b4: a1:16:00:03:8f:7d:a3:81:06:de:6f:89:7e:d9:37: 81:db:12:6e:bd:1b:b0:24:c4:d4:9d:e6:44:af:0b: 59:1a:a7:b0:b5:6f:32:42:c0:55:40:26:0d:8c:e2: 2a:d6:48:da:18:10:54:20:28:bb:71:bd:49:b1:e5: 86:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3D:ED:86:A3:E6:11:9D:7E:AE:B1:B8:26:04:F1:E8:70:BF:A2:A5 X509v3 Authority Key Identifier: keyid:DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:5d:3e:50:68:f0:9b:ad:db:ab:ca:ea:af:f3:a6:1e:ad:0c: f3:06:e4:04:6c:ef:fb:2f:c7:1b:00:17:10:b4:3c:94:28:c3: 25:bc:24:7d:3a:9f:48:4d:51:d7:3d:a6:70:77:61:d3:5a:fa: 5a:9e:dd:91:6b:cb:b6:db:b8:58:d2:57:f7:b8:20:12:8c:5f: 93:11:64:80:c8:69:95:da:9e:44:19:fb:6d:b9:24:29:3e:f4: f7:50:2e:58:c2:4e:a3:ab:d9:3d:8b:9b:b0:79:1d:d0:96:cb: d1:71:b6:d0:50:d6:c2:25:c2:1e:f3:99:76:6c:d9:29:09:c3: 12:1b:4a:12:78:85:d8:3f:0a:ce:81:fa:c5:c1:03:db:72:dd: a6:20:28:0a:11:f5:4b:92:22:80:73:09:3b:a5:e3:dd:3c:8b: 40:5d:24:43:c1:c2:07:27:ee:49:d7:82:cc:81:5e:8c:d3:2f: b4:39:76:70:a1:8f:8d:2c:3d:4c:65:63:3e:a4:e7:6e:ef:f2: d6:f2:c3:92:0c:ca:f2:4d:55:78:7f:98:09:14:0d:d1:74:86: 3b:e9:5a:94:71:c8:03:a2:ca:a2:a1:f8:5e:d2:f1:bd:8d:e2: c8:f5:10:09:e9:53:4b:e8:74:39:72:0b:7b:1f:e4:5d:ce:78: 8d:bb:10:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3HcekEgmcegi+2MjifevMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiN2JhMmEyZjBiZmEzYTc2ZjVjOTkxYTQ3Y2Q5ODY4YzZk MWViYmUwHhcNMjUxMjIyMDcwMDU3WhcNMjUxMjIzMDcwMDU3WjAzMTEwLwYDVQQD Eyg4ODNkZWQ4NmEzZTYxMTlkN2VhZWIxYjgyNjA0ZjFlODcwYmZhMmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BF6ZisWRLG+ztw0zZ5klEofFR8A /X+XAq2+vEsO5X8kj1bhshbWhwCWrCUyeUF5a5I2z1n2UZSJQxs7LKan5PjznIVt tiiiLqlK4YCfD3aTm3kjxYJA8nfsuaUlUycC+yY6bRa9on75m8U+btabm3Sqf4bl ozfPiyyxshHU6hB6EAslHU/B8YmJOklqwhprD49Vzk6E2mtQssuv+jby7mQKXvNe SYRe7GOB64FWTFgZpjwyI7YkNN9HiWxa1xOgSrShFgADj32jgQbeb4l+2TeB2xJu vRuwJMTUneZErwtZGqewtW8yQsBVQCYNjOIq1kjaGBBUICi7cb1JseWGfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIg97Yaj5hGdfq6xuCYE8ehwv6KlMB8GA1UdIwQY MBaAFNt7oqLwv6Onb1yZGkfNmGjG0eu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82MTdhOWYtM2ZiMi00Y2JiLTk5ZmEt ZjIyZWI2NWZjYzcyLzEvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC82MTdhOWYtM2ZiMi00Y2JiLTk5ZmEtZjIyZWI2NWZjYzcy LzEvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPl0+UGjw m63bq8rqr/OmHq0M8wbkBGzv+y/HGwAXELQ8lCjDJbwkfTqfSE1R1z2mcHdh01r6 Wp7dkWvLttu4WNJX97ggEoxfkxFkgMhpldqeRBn7bbkkKT7091AuWMJOo6vZPYub sHkd0JbL0XG20FDWwiXCHvOZdmzZKQnDEhtKEniF2D8KzoH6xcED23LdpiAoChH1 S5IigHMJO6Xj3TyLQF0kQ8HCByfuSdeCzIFejNMvtDl2cKGPjSw9TGVjPqTnbu/y 1vLDkgzK8k1VeH+YCRQN0XSGO+lalHHIA6LKoqH4XtLxvY3iyPUQCelTS+h0OXIL ex/kXc54jbsQCg== -----END CERTIFICATE-----Generated at Mon Dec 22 15:42:03 2025 by rpki-client