This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft File: 234XcKOATHS58Sy5tvpwOW3pMp8.mft (raw, json) Hash identifier: rIeIQe123TPtiRsFfo27E1rxZgYSC3QJItYCNQfV/g0= Subject key identifier: 4E:BF:46:13:A2:22:0D:B9:A1:EE:46:7A:27:E2:38:91:0B:9F:4F:90 Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F Certificate issuer: /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f Certificate serial: 019B5976A85EE2288221C43B9E9143C22405 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft Manifest number: 04F8 Signing time: Fri 26 Dec 2025 07:01:47 +0000 Manifest this update: Fri 26 Dec 2025 07:01:47 +0000 Manifest next update: Sat 27 Dec 2025 07:01:47 +0000 Files and hashes: 1: 234XcKOATHS58Sy5tvpwOW3pMp8.crl (hash: rxr19JDWXh74SMvTfa6LUkXvgUSJHZ6ypUWC78f0050=) 2: TfZHjmYknRwU6ErUe_wYUlK2dPk.roa (hash: c7WP6wJfnnCXs2t+4y61hzS0o/WHpIcUL2rUoYBlMZ4=) 3: UQg1PMXj1_xA8cNWapDDicWf9QE.roa (hash: SNk8uKYXIWMnimS9vpTvdTlC1q8gr9Fg7CLCU0N94ls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:a8:5e:e2:28:82:21:c4:3b:9e:91:43:c2:24:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f Validity Not Before: Dec 26 07:01:47 2025 GMT Not After : Dec 27 07:01:47 2025 GMT Subject: CN=4ebf4613a2220db9a1ee467a27e238910b9f4f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:58:18:05:23:9b:d2:a1:8b:82:db:2d:8c:ee: 22:bd:96:c6:25:4d:ad:4d:bc:46:b7:a6:6b:8f:08: 38:05:2a:30:ad:22:55:00:f7:85:c3:81:b8:9e:38: bf:83:ee:a0:3b:b8:47:f2:23:14:f3:25:13:b0:51: 04:30:fe:d3:54:f3:aa:f0:00:0c:64:26:75:38:86: a6:e9:51:9e:a0:d0:1f:0e:11:c7:10:3e:64:af:09: 1c:65:fa:b1:16:b6:87:90:d3:63:c8:50:3a:e2:37: 88:ab:36:72:7a:44:6c:7e:5d:f2:6f:17:69:10:c4: 83:cc:af:26:b9:5b:3f:5b:2e:08:4c:83:2f:d9:00: 60:e0:6b:8d:38:a7:f2:39:56:8c:67:71:1f:1d:74: 0f:78:bb:c3:a0:9e:25:d3:0d:3d:de:0f:9b:d6:16: ce:27:1f:a7:1d:f2:c7:1e:2f:41:15:bd:f7:c7:4d: 21:f3:5e:bd:0b:73:3f:d1:bd:85:12:2c:71:63:bf: 0f:d4:4a:d7:a4:42:ea:ab:88:eb:6a:b8:4e:05:f8: d8:1c:ab:40:72:49:92:6a:9a:53:78:4b:eb:29:59: 6a:a5:ab:9f:35:f6:e7:a4:b0:7a:66:18:fb:df:c6: 14:a2:0f:00:a0:8f:a8:66:12:5d:df:28:73:f6:a9: 79:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BF:46:13:A2:22:0D:B9:A1:EE:46:7A:27:E2:38:91:0B:9F:4F:90 X509v3 Authority Key Identifier: keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:59:2f:f9:1d:32:d5:87:5e:b3:3d:8a:fc:b9:d5:af:43:eb: 13:4b:46:64:50:4b:ef:1b:63:0f:6d:de:df:d9:2e:1d:da:8d: 79:89:9a:c7:d4:0c:ac:ef:4a:4e:25:37:9e:52:fd:41:9d:1c: 69:85:08:ff:83:40:32:08:74:4c:e8:15:65:65:22:b1:63:2a: a1:6f:b2:ea:7c:9d:55:ca:7f:c1:dc:73:38:aa:2f:1e:f5:08: dd:f8:b7:b4:c3:3e:98:81:63:50:09:99:91:bf:2c:31:4f:c7: e1:db:6f:b6:de:70:e2:4f:98:79:c5:4f:02:5c:e9:d7:69:cd: c9:55:f7:95:b3:ea:d2:fc:04:31:92:23:69:83:3f:a9:1a:74: b2:d3:2a:bc:49:7f:78:ed:16:ce:7d:6c:2d:ea:17:e6:5e:ad: 0c:48:8d:ee:7b:52:13:ef:cb:a8:d6:0c:43:2e:c9:83:8e:4d: b7:6b:db:bf:57:a8:ed:83:b0:78:24:fb:59:15:91:69:89:79: eb:0e:f5:16:ba:43:f6:3f:42:4b:94:47:80:27:f7:41:84:c8: fc:db:95:8b:ee:44:5e:8f:5d:ce:b8:5f:ca:f7:58:21:66:84: 11:9c:85:da:49:9c:c7:16:38:24:b4:a2:71:04:e8:45:2f:ba: 70:ba:a2:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdqhe4iiCIcQ7npFDwiQFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiN2UxNzcwYTM4MDRjNzRiOWYxMmNiOWI2ZmE3MDM5NmRl OTMyOWYwHhcNMjUxMjI2MDcwMTQ3WhcNMjUxMjI3MDcwMTQ3WjAzMTEwLwYDVQQD Eyg0ZWJmNDYxM2EyMjIwZGI5YTFlZTQ2N2EyN2UyMzg5MTBiOWY0ZjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1gYBSOb0qGLgtstjO4ivZbGJU2t TbxGt6Zrjwg4BSowrSJVAPeFw4G4nji/g+6gO7hH8iMU8yUTsFEEMP7TVPOq8AAM ZCZ1OIam6VGeoNAfDhHHED5krwkcZfqxFraHkNNjyFA64jeIqzZyekRsfl3ybxdp EMSDzK8muVs/Wy4ITIMv2QBg4GuNOKfyOVaMZ3EfHXQPeLvDoJ4l0w093g+b1hbO Jx+nHfLHHi9BFb33x00h8169C3M/0b2FEixxY78P1ErXpELqq4jrarhOBfjYHKtA ckmSappTeEvrKVlqpaufNfbnpLB6Zhj738YUog8AoI+oZhJd3yhz9ql5swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6/RhOiIg25oe5GeifiOJELn0+QMB8GA1UdIwQY MBaAFNt+F3CjgEx0ufEsubb6cDlt6TKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjM0WGNLT0FUSFM1OFN5NXR2cHdPVzNwTXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kMTEzMGUtZTA3Zi00OWJhLWJlZjQt NmM3NjdiOTJjOWE1LzEvMjM0WGNLT0FUSFM1OFN5NXR2cHdPVzNwTXA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kMTEzMGUtZTA3Zi00OWJhLWJlZjQtNmM3NjdiOTJjOWE1 LzEvMjM0WGNLT0FUSFM1OFN5NXR2cHdPVzNwTXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblkv+R0y 1Ydesz2K/LnVr0PrE0tGZFBL7xtjD23e39kuHdqNeYmax9QMrO9KTiU3nlL9QZ0c aYUI/4NAMgh0TOgVZWUisWMqoW+y6nydVcp/wdxzOKovHvUI3fi3tMM+mIFjUAmZ kb8sMU/H4dtvtt5w4k+YecVPAlzp12nNyVX3lbPq0vwEMZIjaYM/qRp0stMqvEl/ eO0Wzn1sLeoX5l6tDEiN7ntSE+/LqNYMQy7Jg45Nt2vbv1eo7YOweCT7WRWRaYl5 6w71FrpD9j9CS5RHgCf3QYTI/NuVi+5EXo9dzrhfyvdYIWaEEZyF2kmcxxY4JLSi cQToRS+6cLqizA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:02 2025 by rpki-client