This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft File: 69-nwK1-9nTdW0GUlg8v_UEV8mE.mft (raw, json) Hash identifier: 7UEnt2bgTAhjfannohbPNq8CNF0F5Sjjh25SWEX7mR4= Subject key identifier: 93:8B:37:31:6A:5E:95:B5:27:50:46:6B:A0:50:B9:B9:DE:F8:78:2B Authority key identifier: EB:DF:A7:C0:AD:7E:F6:74:DD:5B:41:94:96:0F:2F:FD:41:15:F2:61 Certificate issuer: /CN=ebdfa7c0ad7ef674dd5b4194960f2ffd4115f261 Certificate serial: 019B5117393621E601664DAB8401CC86FA1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69-nwK1-9nTdW0GUlg8v_UEV8mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 16:00:34 +0000 Manifest this update: Wed 24 Dec 2025 16:00:34 +0000 Manifest next update: Thu 25 Dec 2025 16:00:34 +0000 Files and hashes: 1: 69-nwK1-9nTdW0GUlg8v_UEV8mE.crl (hash: jxcM5m3C85EGmo1WOgPUvVLjZEtOUWA20m4YqhzbqdA=) 2: jKlk89-fCSzoTB01s7RShivsAOE.roa (hash: iI/3xADl4iYI6LJcczTraHOHC9ZNevaWvmg8LIoJztg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.crl rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft rsync://rpki.ripe.net/repository/DEFAULT/69-nwK1-9nTdW0GUlg8v_UEV8mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:39:36:21:e6:01:66:4d:ab:84:01:cc:86:fa:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebdfa7c0ad7ef674dd5b4194960f2ffd4115f261 Validity Not Before: Dec 24 16:00:34 2025 GMT Not After : Dec 25 16:00:34 2025 GMT Subject: CN=938b37316a5e95b52750466ba050b9b9def8782b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7c:28:98:79:cc:44:83:38:33:d4:bb:0b:8d: 42:df:7c:3e:19:2b:29:0f:09:ca:19:b0:76:26:95: ea:e3:3e:3f:30:c1:8e:03:88:d9:8d:a7:62:b7:5c: 6d:21:88:c7:b0:e1:9f:83:ba:03:e0:52:58:20:49: a0:2a:14:ba:96:14:a9:22:d1:a2:98:46:40:6b:40: 55:b3:67:f8:e2:84:a1:0e:bb:be:4f:42:02:c8:99: 9a:20:bf:e4:ac:f7:4d:27:d3:ff:76:43:d5:cb:0b: e2:6d:7b:ac:b0:a1:74:1c:23:ca:e2:dc:d1:77:d7: 2f:15:15:a7:46:db:73:cb:cb:87:d5:ee:11:b0:ef: 25:70:5b:a6:95:33:27:53:69:a5:8e:e3:8b:d7:ec: e1:99:cf:df:5a:d2:cc:d2:26:8d:44:73:8a:2f:c1: f8:21:26:6f:13:93:ab:96:5e:86:4d:e2:a7:b8:2f: 08:34:8d:72:17:71:c9:3f:16:b2:1f:59:fe:56:25: 03:a0:a2:96:e3:39:f1:33:d7:49:9f:1d:f2:e2:1d: 9e:fc:e8:a9:e2:bf:1d:66:b5:7f:c0:4c:0c:b2:7a: 6f:49:5d:ec:b7:4d:88:24:0b:bb:e2:87:39:58:83: 45:44:5d:52:f2:ff:b6:65:18:1e:eb:80:56:8a:20: 0e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:8B:37:31:6A:5E:95:B5:27:50:46:6B:A0:50:B9:B9:DE:F8:78:2B X509v3 Authority Key Identifier: keyid:EB:DF:A7:C0:AD:7E:F6:74:DD:5B:41:94:96:0F:2F:FD:41:15:F2:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69-nwK1-9nTdW0GUlg8v_UEV8mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ac:5f:c3:7d:52:c0:77:a3:56:73:b4:80:48:4d:1e:5e:2b: 07:f9:38:7b:22:1f:34:14:a1:78:0b:ba:4b:96:af:4e:08:8c: c9:ff:e1:75:7e:73:a0:42:6f:02:4a:04:f3:38:0b:64:15:ed: f3:b6:59:83:28:58:07:be:0a:0a:50:1d:75:4f:c9:9d:bf:e7: 53:d6:45:34:51:8c:9e:5a:b7:fd:d1:e2:05:9b:4e:25:a6:5d: 83:e0:6c:b7:4e:d2:f0:23:7c:ca:28:41:00:6f:f2:20:dc:82: 57:9f:6a:9b:b5:48:8a:4c:4e:96:18:26:6d:a4:da:e7:ff:a7: 7e:82:b9:9c:08:75:23:d4:95:20:f7:f7:0e:a9:8d:7a:17:bc: 3c:03:f0:a7:b8:98:95:c9:5f:32:54:28:72:c6:4d:e7:e4:c6: 80:47:ef:07:48:37:ca:8b:f5:ec:40:88:0c:3d:95:fb:c0:35: 00:67:54:5d:1f:5e:9b:62:e3:d5:19:dd:da:a5:3f:ca:ba:ab: 4a:cb:70:41:d6:81:ac:7f:67:34:1e:63:49:39:2a:94:e4:86: 61:82:10:6c:b7:51:53:d5:1d:6c:44:c6:b8:45:b9:f4:71:e6: d5:7e:47:df:e8:61:74:9a:e9:74:be:3e:76:43:01:ef:c6:ee: 8e:06:fc:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRFzk2IeYBZk2rhAHMhvodMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZGZhN2MwYWQ3ZWY2NzRkZDViNDE5NDk2MGYyZmZkNDEx NWYyNjEwHhcNMjUxMjI0MTYwMDM0WhcNMjUxMjI1MTYwMDM0WjAzMTEwLwYDVQQD Eyg5MzhiMzczMTZhNWU5NWI1Mjc1MDQ2NmJhMDUwYjliOWRlZjg3ODJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHwomHnMRIM4M9S7C41C33w+GSsp DwnKGbB2JpXq4z4/MMGOA4jZjadit1xtIYjHsOGfg7oD4FJYIEmgKhS6lhSpItGi mEZAa0BVs2f44oShDru+T0ICyJmaIL/krPdNJ9P/dkPVywvibXussKF0HCPK4tzR d9cvFRWnRttzy8uH1e4RsO8lcFumlTMnU2mljuOL1+zhmc/fWtLM0iaNRHOKL8H4 ISZvE5Orll6GTeKnuC8INI1yF3HJPxayH1n+ViUDoKKW4znxM9dJnx3y4h2e/Oip 4r8dZrV/wEwMsnpvSV3st02IJAu74oc5WINFRF1S8v+2ZRge64BWiiAOxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOLNzFqXpW1J1BGa6BQubne+HgrMB8GA1UdIwQY MBaAFOvfp8CtfvZ03VtBlJYPL/1BFfJhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjktbndLMS05blRkVzBHVWxnOHZfVUVWOG1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny80MzRmZWQtODc3ZC00YTBmLWEyNTYt ODUzNDVmNjYwNjU1LzEvNjktbndLMS05blRkVzBHVWxnOHZfVUVWOG1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny80MzRmZWQtODc3ZC00YTBmLWEyNTYtODUzNDVmNjYwNjU1 LzEvNjktbndLMS05blRkVzBHVWxnOHZfVUVWOG1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABaxfw31S wHejVnO0gEhNHl4rB/k4eyIfNBSheAu6S5avTgiMyf/hdX5zoEJvAkoE8zgLZBXt 87ZZgyhYB74KClAddU/Jnb/nU9ZFNFGMnlq3/dHiBZtOJaZdg+Bst07S8CN8yihB AG/yINyCV59qm7VIikxOlhgmbaTa5/+nfoK5nAh1I9SVIPf3DqmNehe8PAPwp7iY lclfMlQocsZN5+TGgEfvB0g3yov17ECIDD2V+8A1AGdUXR9em2Lj1Rnd2qU/yrqr SstwQdaBrH9nNB5jSTkqlOSGYYIQbLdRU9UdbETGuEW59HHm1X5H3+hhdJrpdL4+ dkMB78bujgb8oQ== -----END CERTIFICATE-----Generated at Wed Dec 24 18:43:25 2025 by rpki-client