This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft File: 234XcKOATHS58Sy5tvpwOW3pMp8.mft (raw, json) Hash identifier: 42kDowRsHw7vIhE6bEgxTOqyhAYpKpDfvCCd6KOm5XY= Subject key identifier: DA:74:64:0A:10:D2:B0:75:07:CB:AA:F1:65:26:A4:F4:9D:75:9E:D9 Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F Certificate issuer: /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f Certificate serial: 019AF509AAD207DB738E40E9D83681BF04B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft Manifest number: 04C4 Signing time: Sat 06 Dec 2025 19:00:42 +0000 Manifest this update: Sat 06 Dec 2025 19:00:42 +0000 Manifest next update: Sun 07 Dec 2025 19:00:42 +0000 Files and hashes: 1: 234XcKOATHS58Sy5tvpwOW3pMp8.crl (hash: AnJcdTjn1Fs073cB+oEjLVsGBaG5Hv7cSVhgQO1U0ak=) 2: TfZHjmYknRwU6ErUe_wYUlK2dPk.roa (hash: c7WP6wJfnnCXs2t+4y61hzS0o/WHpIcUL2rUoYBlMZ4=) 3: UQg1PMXj1_xA8cNWapDDicWf9QE.roa (hash: SNk8uKYXIWMnimS9vpTvdTlC1q8gr9Fg7CLCU0N94ls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:aa:d2:07:db:73:8e:40:e9:d8:36:81:bf:04:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f Validity Not Before: Dec 6 19:00:42 2025 GMT Not After : Dec 7 19:00:42 2025 GMT Subject: CN=da74640a10d2b07507cbaaf16526a4f49d759ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ec:40:91:8e:16:54:52:8b:c7:4b:16:65:9d: 86:0e:9e:9a:10:64:b2:06:85:d3:95:b9:5c:50:eb: e2:c8:2e:e7:8c:d2:ad:45:f9:3e:0b:a6:85:78:ec: 3f:20:a4:74:44:71:8a:7f:39:8c:1c:5a:02:f7:81: ae:f9:48:08:20:90:b4:3e:e5:83:e4:5f:a4:f1:d2: ef:4c:21:1d:cb:a1:69:4f:c3:69:fb:24:da:8c:fa: cf:33:ca:53:c1:aa:79:32:1b:84:d1:8c:0e:d7:1a: bf:a1:61:b4:34:e7:41:b9:7f:6e:b5:88:ed:20:e3: 3e:d3:85:be:d0:6d:87:ff:4a:41:ee:2e:38:30:15: a2:94:53:06:54:9a:e4:f3:e9:66:40:50:90:f3:a4: a0:76:c5:26:14:45:c7:d4:5b:38:c4:04:02:c9:59: ea:66:84:1d:15:f1:8b:6e:5b:de:62:d7:f1:ea:ad: 33:e8:9b:f6:c1:c5:55:73:9c:8c:9d:73:02:3a:c8: c6:1d:fb:54:09:b8:cd:b6:c1:e8:f8:cc:19:65:1f: 5c:fa:f4:cc:52:77:86:d3:f0:74:0e:72:68:36:8a: 51:76:be:5c:e2:08:df:c2:63:b2:f7:2c:53:b8:ce: a7:9b:79:1a:2c:5a:93:c2:1d:cc:c1:43:46:f6:6b: 21:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:74:64:0A:10:D2:B0:75:07:CB:AA:F1:65:26:A4:F4:9D:75:9E:D9 X509v3 Authority Key Identifier: keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:44:96:ce:9f:32:a0:70:79:78:f6:2b:5f:82:cd:84:24:d3: 0d:0e:02:11:d2:6f:ec:6e:91:c6:7d:0b:84:3b:98:66:8e:3c: 05:a5:db:3c:db:c1:27:57:85:44:f2:5c:e3:a0:d8:be:61:77: 4c:39:9e:77:39:19:df:77:57:46:a9:32:07:83:63:6b:ef:a9: ee:78:47:12:bf:48:ab:4d:2d:10:0c:f9:78:77:eb:fb:4a:6b: f8:ca:12:38:11:94:8f:5b:3a:0f:02:56:f9:ba:2f:89:bf:cc: 2b:ae:f4:9a:81:5b:a8:8a:82:3e:bb:78:c3:39:af:b3:5f:39: 0a:fc:a9:f1:b3:8c:b0:54:03:3d:15:b3:55:f6:59:c4:ca:20: 70:fd:97:1e:77:8a:54:2f:d9:3d:4b:40:74:1d:8b:d4:bd:8e: 92:8f:23:eb:ab:77:66:14:92:c9:79:37:80:60:99:43:e2:4f: 2f:92:ad:c6:0d:d3:91:7a:74:dc:b7:50:36:15:64:5c:6e:0a: e6:5b:43:97:85:66:54:48:60:3b:31:15:34:37:7e:52:d1:f6: 20:ab:b8:ee:a6:ad:ac:c5:ed:0d:f6:19:54:94:0c:9c:54:ad: 09:d0:cf:d9:f3:1e:72:1f:b9:9f:82:4e:53:e4:0f:0d:8b:42: 7e:40:ee:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CarSB9tzjkDp2DaBvwS3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiN2UxNzcwYTM4MDRjNzRiOWYxMmNiOWI2ZmE3MDM5NmRl OTMyOWYwHhcNMjUxMjA2MTkwMDQyWhcNMjUxMjA3MTkwMDQyWjAzMTEwLwYDVQQD EyhkYTc0NjQwYTEwZDJiMDc1MDdjYmFhZjE2NTI2YTRmNDlkNzU5ZWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuexAkY4WVFKLx0sWZZ2GDp6aEGSy BoXTlblcUOviyC7njNKtRfk+C6aFeOw/IKR0RHGKfzmMHFoC94Gu+UgIIJC0PuWD 5F+k8dLvTCEdy6FpT8Np+yTajPrPM8pTwap5MhuE0YwO1xq/oWG0NOdBuX9utYjt IOM+04W+0G2H/0pB7i44MBWilFMGVJrk8+lmQFCQ86SgdsUmFEXH1Fs4xAQCyVnq ZoQdFfGLblveYtfx6q0z6Jv2wcVVc5yMnXMCOsjGHftUCbjNtsHo+MwZZR9c+vTM UneG0/B0DnJoNopRdr5c4gjfwmOy9yxTuM6nm3kaLFqTwh3MwUNG9msh6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNp0ZAoQ0rB1B8uq8WUmpPSddZ7ZMB8GA1UdIwQY MBaAFNt+F3CjgEx0ufEsubb6cDlt6TKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjM0WGNLT0FUSFM1OFN5NXR2cHdPVzNwTXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kMTEzMGUtZTA3Zi00OWJhLWJlZjQt NmM3NjdiOTJjOWE1LzEvMjM0WGNLT0FUSFM1OFN5NXR2cHdPVzNwTXA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kMTEzMGUtZTA3Zi00OWJhLWJlZjQtNmM3NjdiOTJjOWE1 LzEvMjM0WGNLT0FUSFM1OFN5NXR2cHdPVzNwTXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADESWzp8y oHB5ePYrX4LNhCTTDQ4CEdJv7G6Rxn0LhDuYZo48BaXbPNvBJ1eFRPJc46DYvmF3 TDmedzkZ33dXRqkyB4Nja++p7nhHEr9Iq00tEAz5eHfr+0pr+MoSOBGUj1s6DwJW +bovib/MK670moFbqIqCPrt4wzmvs185Cvyp8bOMsFQDPRWzVfZZxMogcP2XHneK VC/ZPUtAdB2L1L2Oko8j66t3ZhSSyXk3gGCZQ+JPL5Ktxg3TkXp03LdQNhVkXG4K 5ltDl4VmVEhgOzEVNDd+UtH2IKu47qatrMXtDfYZVJQMnFStCdDP2fMech+5n4JO U+QPDYtCfkDutQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:35:18 2025 by rpki-client