This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft File: 234XcKOATHS58Sy5tvpwOW3pMp8.mft (raw, json) Hash identifier: zpNE0n+W9JvdqQdEKgHaU+K5Dr9UsHiPs9a4QgWGKhw= Subject key identifier: 95:8D:BF:3E:48:4D:76:EF:B8:15:B5:93:05:76:A6:96:5A:F2:6C:47 Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F Certificate issuer: /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f Certificate serial: 019B424A4D411C8F643B25B2C8A726E62462 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft Manifest number: 04EC Signing time: Sun 21 Dec 2025 19:02:03 +0000 Manifest this update: Sun 21 Dec 2025 19:02:03 +0000 Manifest next update: Mon 22 Dec 2025 19:02:03 +0000 Files and hashes: 1: 234XcKOATHS58Sy5tvpwOW3pMp8.crl (hash: ODmIfxeGEUyqA15qpqKoso2r0+0RNwuvIz21DtQc77U=) 2: TfZHjmYknRwU6ErUe_wYUlK2dPk.roa (hash: c7WP6wJfnnCXs2t+4y61hzS0o/WHpIcUL2rUoYBlMZ4=) 3: UQg1PMXj1_xA8cNWapDDicWf9QE.roa (hash: SNk8uKYXIWMnimS9vpTvdTlC1q8gr9Fg7CLCU0N94ls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:4d:41:1c:8f:64:3b:25:b2:c8:a7:26:e6:24:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f Validity Not Before: Dec 21 19:02:03 2025 GMT Not After : Dec 22 19:02:03 2025 GMT Subject: CN=958dbf3e484d76efb815b5930576a6965af26c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cc:ff:33:4b:86:ff:a1:ba:82:cf:d2:13:2b: 66:65:4e:30:3f:d8:9d:5d:01:b1:a9:de:08:6b:94: 34:0b:89:ed:eb:b6:74:ef:31:e1:ce:48:8c:4b:3a: e5:7e:ae:43:3c:f1:2f:ca:5c:b3:4c:26:98:a8:67: 31:9e:a1:d7:01:08:c0:65:67:86:ec:c4:de:82:64: 7d:ee:80:32:e2:50:7c:90:6e:d0:b8:da:89:d8:dd: f9:aa:07:20:b4:1b:11:cf:41:e9:40:0f:d7:82:71: 32:59:37:3d:f5:28:37:1b:92:22:a9:4c:5f:d9:dc: e0:84:7b:43:c3:e2:5f:db:e4:79:45:b5:53:be:29: ad:88:ed:ee:53:d4:aa:08:b8:3b:f2:a8:ab:18:89: 45:97:a3:61:1c:67:d2:83:04:d7:e8:14:1b:df:6d: 84:8e:97:e0:c0:a5:62:d6:a6:cb:a0:8d:3f:06:ca: 4f:96:2e:6a:1b:b9:85:f3:a0:bb:ab:8f:1d:37:3a: 28:01:98:42:87:37:5c:e2:dc:7e:3f:9b:3c:af:b9: 9b:c8:73:66:1c:e8:6f:63:76:db:19:0d:d7:15:1e: 85:2f:c5:84:7a:27:e1:de:43:c7:ee:fe:2d:ae:25: bc:e3:52:bf:9e:78:17:70:1e:99:aa:4f:33:93:24: 86:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8D:BF:3E:48:4D:76:EF:B8:15:B5:93:05:76:A6:96:5A:F2:6C:47 X509v3 Authority Key Identifier: keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:19:e9:20:b2:d4:9a:65:25:66:ec:6a:a4:30:4f:0f:73:b0: c6:fe:e5:d7:5c:54:7d:b0:b1:38:e6:cd:5a:e6:c8:c0:80:8c: c0:7d:75:4e:bb:98:3f:53:ec:cd:51:ef:a1:ef:ee:93:47:c8: 5e:e7:17:d0:91:f5:4b:3d:95:78:c0:95:73:23:9e:ef:19:b4: 97:5f:04:fe:c8:c6:42:7d:53:24:f5:a3:23:78:83:c4:f1:c1: 77:2f:18:6d:19:88:e5:d8:93:06:c3:1f:d8:e1:79:32:74:e9: a5:df:28:97:ea:a3:9b:62:bd:61:26:a8:54:6e:9b:bf:bf:c5: 76:d2:17:a2:13:d6:80:1a:e3:bb:48:c7:3a:8a:d3:5c:47:f4: d3:eb:fd:db:76:6d:aa:f6:ef:79:60:54:16:6d:9e:1d:51:25: b3:ce:87:15:0e:99:9b:6f:12:2e:7f:b9:d3:08:1b:19:17:0c: c1:b2:6d:34:09:f4:52:5d:8d:d6:72:5a:39:cc:e9:f1:6c:2c: 10:64:36:d0:81:18:1a:ed:35:d3:ea:89:b0:69:c8:6d:58:fe: cf:b9:a4:00:cb:f5:87:29:2a:6e:dd:1b:f7:7e:33:28:c5:f7: 33:91:7e:bb:93:e1:92:c3:1e:df:45:9c:50:f0:00:cb:44:76: 3e:d2:06:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSk1BHI9kOyWyyKcm5iRiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiN2UxNzcwYTM4MDRjNzRiOWYxMmNiOWI2ZmE3MDM5NmRl OTMyOWYwHhcNMjUxMjIxMTkwMjAzWhcNMjUxMjIyMTkwMjAzWjAzMTEwLwYDVQQD Eyg5NThkYmYzZTQ4NGQ3NmVmYjgxNWI1OTMwNTc2YTY5NjVhZjI2YzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucz/M0uG/6G6gs/SEytmZU4wP9id XQGxqd4Ia5Q0C4nt67Z07zHhzkiMSzrlfq5DPPEvylyzTCaYqGcxnqHXAQjAZWeG 7MTegmR97oAy4lB8kG7QuNqJ2N35qgcgtBsRz0HpQA/XgnEyWTc99Sg3G5IiqUxf 2dzghHtDw+Jf2+R5RbVTvimtiO3uU9SqCLg78qirGIlFl6NhHGfSgwTX6BQb322E jpfgwKVi1qbLoI0/BspPli5qG7mF86C7q48dNzooAZhChzdc4tx+P5s8r7mbyHNm HOhvY3bbGQ3XFR6FL8WEeifh3kPH7v4triW841K/nngXcB6Zqk8zkySGVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWNvz5ITXbvuBW1kwV2ppZa8mxHMB8GA1UdIwQY MBaAFNt+F3CjgEx0ufEsubb6cDlt6TKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjM0WGNLT0FUSFM1OFN5NXR2cHdPVzNwTXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kMTEzMGUtZTA3Zi00OWJhLWJlZjQt NmM3NjdiOTJjOWE1LzEvMjM0WGNLT0FUSFM1OFN5NXR2cHdPVzNwTXA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kMTEzMGUtZTA3Zi00OWJhLWJlZjQtNmM3NjdiOTJjOWE1 LzEvMjM0WGNLT0FUSFM1OFN5NXR2cHdPVzNwTXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIRnpILLU mmUlZuxqpDBPD3Owxv7l11xUfbCxOObNWubIwICMwH11TruYP1PszVHvoe/uk0fI XucX0JH1Sz2VeMCVcyOe7xm0l18E/sjGQn1TJPWjI3iDxPHBdy8YbRmI5diTBsMf 2OF5MnTppd8ol+qjm2K9YSaoVG6bv7/FdtIXohPWgBrju0jHOorTXEf00+v923Zt qvbveWBUFm2eHVEls86HFQ6Zm28SLn+50wgbGRcMwbJtNAn0Ul2N1nJaOczp8Wws EGQ20IEYGu010+qJsGnIbVj+z7mkAMv1hykqbt0b934zKMX3M5F+u5PhksMe30Wc UPAAy0R2PtIGWQ== -----END CERTIFICATE-----Generated at Mon Dec 22 00:11:44 2025 by rpki-client