This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/14e977-346f-44ad-b0df-0a10b881c3ac/1/04BE23ZiygAUgai9swt6vRi86ao.mft File: 04BE23ZiygAUgai9swt6vRi86ao.mft (raw, json) Hash identifier: 3wI/ktamBe9Tq1NWiCUhSg20vptoaHg6tGtBa5NfDmM= Subject key identifier: C7:01:C0:9B:DD:36:9A:96:63:E0:79:1D:FF:17:01:7B:EE:BC:BA:D3 Authority key identifier: D3:80:44:DB:76:62:CA:00:14:81:A8:BD:B3:0B:7A:BD:18:BC:E9:AA Certificate issuer: /CN=d38044db7662ca001481a8bdb30b7abd18bce9aa Certificate serial: 019AF1D221765283AB8AD046554AD1D29368 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04BE23ZiygAUgai9swt6vRi86ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/14e977-346f-44ad-b0df-0a10b881c3ac/1/04BE23ZiygAUgai9swt6vRi86ao.mft Manifest number: 1224 Signing time: Sat 06 Dec 2025 04:01:11 +0000 Manifest this update: Sat 06 Dec 2025 04:01:11 +0000 Manifest next update: Sun 07 Dec 2025 04:01:11 +0000 Files and hashes: 1: 04BE23ZiygAUgai9swt6vRi86ao.crl (hash: IGuAdcXJc5CDzdfa6Y1spKVWj5lr56tg0ri9n2jLyNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/14e977-346f-44ad-b0df-0a10b881c3ac/1/04BE23ZiygAUgai9swt6vRi86ao.crl rsync://rpki.ripe.net/repository/DEFAULT/91/14e977-346f-44ad-b0df-0a10b881c3ac/1/04BE23ZiygAUgai9swt6vRi86ao.mft rsync://rpki.ripe.net/repository/DEFAULT/04BE23ZiygAUgai9swt6vRi86ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:21:76:52:83:ab:8a:d0:46:55:4a:d1:d2:93:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d38044db7662ca001481a8bdb30b7abd18bce9aa Validity Not Before: Dec 6 04:01:11 2025 GMT Not After : Dec 7 04:01:11 2025 GMT Subject: CN=c701c09bdd369a9663e0791dff17017beebcbad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ef:51:06:95:19:68:66:26:96:28:27:80:68: e8:74:49:b4:73:a8:c9:ef:7e:0e:70:13:9e:d1:d1: 8e:11:49:2a:f0:f3:79:d4:73:44:a4:ae:bf:74:88: 33:a7:a5:80:ae:7c:76:7d:fc:4f:d7:3a:c8:59:e7: 72:99:69:7e:fe:f2:de:ee:9f:ce:2c:72:c9:01:55: e5:2c:59:a7:80:4d:18:14:dd:17:cc:f2:28:95:d1: 08:e4:39:b8:cb:2e:52:74:c6:51:cf:f4:1b:9d:5a: 50:c9:69:27:3d:af:79:17:eb:8e:d1:d4:42:63:b1: 4b:4a:ee:f2:78:27:13:1f:57:67:f7:a4:b9:c7:03: 3f:75:a2:e5:b5:46:de:4c:b4:95:c6:5f:8f:93:d4: dd:a2:e9:ac:87:6d:5c:6f:34:e6:1c:ae:56:a2:30: b0:7d:56:d9:55:09:f7:36:3f:76:87:8b:1f:5c:4f: 9f:d4:28:91:63:9c:4e:b6:b1:f5:50:90:19:cf:53: e5:89:e9:c6:93:94:52:72:fc:b7:64:fa:34:8a:50: fc:88:3f:ba:d4:f0:ad:1c:0f:01:e8:df:fc:b5:05: 60:f5:94:5a:74:f5:49:6c:79:36:17:6e:d9:90:bf: 08:40:09:4f:db:16:e4:c4:2c:21:06:cb:97:7a:2b: 5c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:01:C0:9B:DD:36:9A:96:63:E0:79:1D:FF:17:01:7B:EE:BC:BA:D3 X509v3 Authority Key Identifier: keyid:D3:80:44:DB:76:62:CA:00:14:81:A8:BD:B3:0B:7A:BD:18:BC:E9:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04BE23ZiygAUgai9swt6vRi86ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/14e977-346f-44ad-b0df-0a10b881c3ac/1/04BE23ZiygAUgai9swt6vRi86ao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/14e977-346f-44ad-b0df-0a10b881c3ac/1/04BE23ZiygAUgai9swt6vRi86ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:fc:7d:7a:f2:3c:02:d3:d3:e8:6c:a5:d1:cc:ec:12:2b:2d: b9:bf:fa:21:86:c6:03:65:77:ff:20:cc:38:3a:3b:b5:59:e8: b7:a2:02:b7:c8:18:32:78:bd:c0:bb:62:d4:2b:0c:f9:66:46: 48:87:c3:02:63:30:cc:66:68:ad:e2:b4:1c:1a:1c:53:4b:c4: af:3b:fd:2a:cf:4b:6e:0b:0e:50:de:3d:fe:15:96:89:0b:cf: ab:71:58:c2:3c:58:61:42:1d:7a:e4:01:40:dd:45:b9:69:5a: 9f:6a:18:03:37:75:98:2b:5f:d8:57:3b:07:9f:73:d8:6c:f6: 50:df:d4:7b:01:39:06:ee:3d:39:1a:66:91:a1:13:6f:3e:f7: 82:f2:94:24:fc:05:22:cf:5b:4b:97:dc:78:e1:ac:64:3b:b1: c8:df:30:a4:2c:03:43:9a:b2:96:90:5b:99:c6:19:b7:f6:8a: ad:81:1a:df:85:79:b2:14:5f:22:39:c6:e4:3f:d2:f5:cc:3a: 6d:eb:46:49:d4:17:4d:12:7d:e5:74:c9:3e:a1:cb:0c:57:91: f4:fc:e2:60:af:b0:58:65:9f:a7:fd:2a:6d:fe:65:ab:8a:ef: 07:5a:61:f1:83:cf:01:27:6b:e2:e0:c4:23:9b:38:e4:e2:9e: e1:b2:7c:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iF2UoOritBGVUrR0pNoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzODA0NGRiNzY2MmNhMDAxNDgxYThiZGIzMGI3YWJkMThi Y2U5YWEwHhcNMjUxMjA2MDQwMTExWhcNMjUxMjA3MDQwMTExWjAzMTEwLwYDVQQD EyhjNzAxYzA5YmRkMzY5YTk2NjNlMDc5MWRmZjE3MDE3YmVlYmNiYWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu9RBpUZaGYmligngGjodEm0c6jJ 734OcBOe0dGOEUkq8PN51HNEpK6/dIgzp6WArnx2ffxP1zrIWedymWl+/vLe7p/O LHLJAVXlLFmngE0YFN0XzPIoldEI5Dm4yy5SdMZRz/QbnVpQyWknPa95F+uO0dRC Y7FLSu7yeCcTH1dn96S5xwM/daLltUbeTLSVxl+Pk9Tdoumsh21cbzTmHK5WojCw fVbZVQn3Nj92h4sfXE+f1CiRY5xOtrH1UJAZz1PlienGk5RScvy3ZPo0ilD8iD+6 1PCtHA8B6N/8tQVg9ZRadPVJbHk2F27ZkL8IQAlP2xbkxCwhBsuXeitcqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcBwJvdNpqWY+B5Hf8XAXvuvLrTMB8GA1UdIwQY MBaAFNOARNt2YsoAFIGovbMLer0YvOmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDRCRTIzWml5Z0FVZ2FpOXN3dDZ2Umk4NmFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8xNGU5NzctMzQ2Zi00NGFkLWIwZGYt MGExMGI4ODFjM2FjLzEvMDRCRTIzWml5Z0FVZ2FpOXN3dDZ2Umk4NmFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8xNGU5NzctMzQ2Zi00NGFkLWIwZGYtMGExMGI4ODFjM2Fj LzEvMDRCRTIzWml5Z0FVZ2FpOXN3dDZ2Umk4NmFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/x9evI8 AtPT6Gyl0czsEistub/6IYbGA2V3/yDMODo7tVnot6ICt8gYMni9wLti1CsM+WZG SIfDAmMwzGZoreK0HBocU0vErzv9Ks9LbgsOUN49/hWWiQvPq3FYwjxYYUIdeuQB QN1FuWlan2oYAzd1mCtf2Fc7B59z2Gz2UN/UewE5Bu49ORpmkaETbz73gvKUJPwF Is9bS5fceOGsZDuxyN8wpCwDQ5qylpBbmcYZt/aKrYEa34V5shRfIjnG5D/S9cw6 betGSdQXTRJ95XTJPqHLDFeR9PziYK+wWGWfp/0qbf5lq4rvB1ph8YPPASdr4uDE I5s45OKe4bJ8GA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:43 2025 by rpki-client