This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft File: 23uiovC_o6dvXJkaR82YaMbR674.mft (raw, json) Hash identifier: 6nHh0Hlw31jNK3kN9J/JCuCQRJaJPAXNRAzlmC7tRm0= Subject key identifier: 87:69:D2:64:13:E7:14:03:D7:24:3F:92:61:05:22:81:FD:16:0A:B6 Authority key identifier: DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE Certificate issuer: /CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe Certificate serial: 019AF3C00F3CE977716B2B703D0A966B0930 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft Manifest number: 1414 Signing time: Sat 06 Dec 2025 13:00:41 +0000 Manifest this update: Sat 06 Dec 2025 13:00:41 +0000 Manifest next update: Sun 07 Dec 2025 13:00:41 +0000 Files and hashes: 1: 23uiovC_o6dvXJkaR82YaMbR674.crl (hash: Om08s8ZwfadGMyAye3mAeN2U2JcTBQXT+E7zG1J+qYo=) 2: J8hzJTM2uz7yXJSlk16QOqdb0iI.roa (hash: sPVr5eHmre5tC1ZjjWRY6ekKAEsqs3UiVYcFX3QHcj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:0f:3c:e9:77:71:6b:2b:70:3d:0a:96:6b:09:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe Validity Not Before: Dec 6 13:00:41 2025 GMT Not After : Dec 7 13:00:41 2025 GMT Subject: CN=8769d26413e71403d7243f9261052281fd160ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6d:4b:2d:0b:93:24:d5:9a:7b:2d:ea:76:0f: f2:c4:ef:ba:00:23:c0:79:de:ed:72:80:87:e4:38: e0:c2:28:03:f9:86:b9:c5:11:32:5b:9f:26:05:4f: dd:d0:21:50:54:dd:74:26:c6:1b:e5:d5:16:c2:b1: d4:ae:28:d3:38:bf:12:b1:dd:bd:9c:92:46:2b:db: 97:ee:63:8e:a4:c5:d4:68:91:49:1b:48:3c:e0:5b: 55:af:a0:5b:87:24:21:a0:21:9a:a1:76:71:cf:8a: 3d:68:59:3c:35:68:da:24:92:91:b5:b1:7c:14:3d: e7:25:db:d7:35:da:e1:34:4c:1e:4e:9a:f8:15:1f: fa:74:25:92:42:f2:4b:9d:05:ce:d8:29:8e:98:45: 30:b3:c3:80:61:b8:0e:a1:25:95:11:37:5e:97:90: 86:36:71:a9:06:f7:4d:16:d9:81:fc:77:59:7b:0f: ad:f6:a8:41:18:9f:87:a9:9e:ca:03:22:d9:96:9c: d7:03:9f:99:65:a6:cf:51:cb:1a:0b:1e:01:b5:49: e1:5d:b8:5c:24:e5:87:82:25:be:79:e4:53:f6:1f: e9:38:19:52:cb:88:80:1c:75:ad:92:ac:b7:f5:e8: 3e:b4:7c:22:42:ee:d7:ed:6b:e2:1f:f9:f4:37:8b: 54:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:69:D2:64:13:E7:14:03:D7:24:3F:92:61:05:22:81:FD:16:0A:B6 X509v3 Authority Key Identifier: keyid:DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:71:5b:f7:23:ee:4a:24:29:60:ce:e9:75:e9:8b:30:db:cd: 7c:e0:72:95:cf:8f:ad:43:a3:b7:f6:b5:27:41:1f:75:b0:b2: d9:b7:da:41:02:fb:3b:39:57:65:f9:d7:d3:78:64:db:90:27: db:9b:c7:66:fa:7f:92:5f:eb:87:90:35:fa:f9:56:4e:49:fc: 49:12:dc:8c:aa:61:8e:7a:9d:2c:0a:3d:03:bb:56:42:b2:54: 9b:c9:65:1d:0a:6b:7e:43:9b:e6:ad:83:b1:76:1a:48:98:75: f8:3e:58:e4:87:d8:09:b5:60:21:cd:ce:21:e5:35:b6:94:57: c6:4d:67:77:80:9d:04:a0:77:1c:1b:2c:a8:27:b2:a9:8a:b4: bf:f4:05:86:03:09:91:cd:a0:6f:96:86:a2:d4:23:03:f2:0b: 1b:65:91:28:f5:7b:a3:e2:90:ad:e3:63:06:11:41:51:92:1d: 03:79:96:04:fb:11:06:a4:a7:f1:d2:a7:02:8e:9c:0a:19:5a: b0:e3:f4:8a:e6:e1:bb:f2:08:23:d4:f0:05:ac:a3:61:e5:54: bb:38:fb:11:8f:5d:cc:b2:5e:4f:70:d3:fe:19:e0:f7:c6:cd: 0e:8e:fd:83:da:bb:e9:80:79:82:a6:9e:fc:9e:d1:c9:ba:1f: 0e:45:ad:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwA886XdxaytwPQqWawkwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiN2JhMmEyZjBiZmEzYTc2ZjVjOTkxYTQ3Y2Q5ODY4YzZk MWViYmUwHhcNMjUxMjA2MTMwMDQxWhcNMjUxMjA3MTMwMDQxWjAzMTEwLwYDVQQD Eyg4NzY5ZDI2NDEzZTcxNDAzZDcyNDNmOTI2MTA1MjI4MWZkMTYwYWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG1LLQuTJNWaey3qdg/yxO+6ACPA ed7tcoCH5DjgwigD+Ya5xREyW58mBU/d0CFQVN10JsYb5dUWwrHUrijTOL8Ssd29 nJJGK9uX7mOOpMXUaJFJG0g84FtVr6BbhyQhoCGaoXZxz4o9aFk8NWjaJJKRtbF8 FD3nJdvXNdrhNEweTpr4FR/6dCWSQvJLnQXO2CmOmEUws8OAYbgOoSWVETdel5CG NnGpBvdNFtmB/HdZew+t9qhBGJ+HqZ7KAyLZlpzXA5+ZZabPUcsaCx4BtUnhXbhc JOWHgiW+eeRT9h/pOBlSy4iAHHWtkqy39eg+tHwiQu7X7WviH/n0N4tUVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdp0mQT5xQD1yQ/kmEFIoH9Fgq2MB8GA1UdIwQY MBaAFNt7oqLwv6Onb1yZGkfNmGjG0eu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82MTdhOWYtM2ZiMi00Y2JiLTk5ZmEt ZjIyZWI2NWZjYzcyLzEvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC82MTdhOWYtM2ZiMi00Y2JiLTk5ZmEtZjIyZWI2NWZjYzcy LzEvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3Fb9yPu SiQpYM7pdemLMNvNfOBylc+PrUOjt/a1J0EfdbCy2bfaQQL7OzlXZfnX03hk25An 25vHZvp/kl/rh5A1+vlWTkn8SRLcjKphjnqdLAo9A7tWQrJUm8llHQprfkOb5q2D sXYaSJh1+D5Y5IfYCbVgIc3OIeU1tpRXxk1nd4CdBKB3HBssqCeyqYq0v/QFhgMJ kc2gb5aGotQjA/ILG2WRKPV7o+KQreNjBhFBUZIdA3mWBPsRBqSn8dKnAo6cChla sOP0iubhu/III9TwBayjYeVUuzj7EY9dzLJeT3DT/hng98bNDo79g9q76YB5gqae /J7RybofDkWt7w== -----END CERTIFICATE-----Generated at Sat Dec 6 20:56:36 2025 by rpki-client