This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft File: B67xkPRL_B2wxQ8ac_3wFwga_hY.mft (raw, json) Hash identifier: qgBvHDfpLytt85ksuA+oiL9W4LqIEuKoeeEt7NHs3f0= Subject key identifier: 72:BC:0F:91:B4:39:97:FF:D7:6C:E9:AD:7F:76:DA:80:7D:78:33:F3 Authority key identifier: 07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16 Certificate issuer: /CN=07aef190f44bfc1db0c50f1a73fdf017081afe16 Certificate serial: 019B390F0FE5CD7ED3037BF6094EB58F32A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft Manifest number: 0CDF Signing time: Sat 20 Dec 2025 00:00:46 +0000 Manifest this update: Sat 20 Dec 2025 00:00:46 +0000 Manifest next update: Sun 21 Dec 2025 00:00:46 +0000 Files and hashes: 1: B67xkPRL_B2wxQ8ac_3wFwga_hY.crl (hash: bu4uWiRSQsD/up4QPlSfsMQnOi3gHVK+TcbSyc+i3jE=) 2: o0m8fWeQnLg_XbqIRRPxINGkNnk.roa (hash: hFBwillrrnPw4RwjJ9B6leCvzXkiINuH8WcY9jtsCtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:0f:e5:cd:7e:d3:03:7b:f6:09:4e:b5:8f:32:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07aef190f44bfc1db0c50f1a73fdf017081afe16 Validity Not Before: Dec 20 00:00:46 2025 GMT Not After : Dec 21 00:00:46 2025 GMT Subject: CN=72bc0f91b43997ffd76ce9ad7f76da807d7833f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:98:0e:e3:62:e2:e1:6f:4f:7d:cc:3f:87:66: 5e:96:f4:3a:8a:a6:ca:10:73:ab:ee:62:04:dc:a1: 8e:30:23:de:ed:f4:43:de:0f:d9:c7:6a:8d:00:85: bf:64:2a:24:de:74:f6:d4:19:bf:37:06:a7:df:e3: 6c:16:3a:52:82:c0:d4:49:3f:e7:3d:ad:85:53:8a: 72:54:2b:4e:13:05:75:19:ab:74:75:97:c0:a6:72: 7c:0b:e8:c6:10:bf:78:0c:c9:53:fb:89:53:fc:2a: 5f:04:bd:b4:a9:b7:91:d8:8f:21:5a:19:84:37:89: 7a:f3:97:05:fb:c9:ff:90:f7:41:b9:ec:b1:9d:58: 81:9e:b2:4b:dd:f4:6f:ff:55:2e:90:6f:b8:88:c4: e5:2a:ff:4f:c5:bd:83:d2:45:1c:58:50:08:89:20: 1e:4d:17:34:af:98:51:e0:8c:83:9b:16:48:ab:9d: 72:2d:7e:bb:a4:ea:39:f6:9e:fd:d2:eb:46:cc:44: ab:ba:c4:e1:0e:f0:4d:a5:53:b1:2c:05:d7:b8:a1: bb:a6:dd:f3:ef:9e:67:3e:61:3e:74:d7:79:91:68: 92:02:f2:9c:6e:2f:58:c4:ef:a3:7f:f5:12:a4:0c: b7:e8:9d:e2:30:52:45:b2:0c:21:e6:59:99:ad:69: 1c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BC:0F:91:B4:39:97:FF:D7:6C:E9:AD:7F:76:DA:80:7D:78:33:F3 X509v3 Authority Key Identifier: keyid:07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:2d:25:f7:39:d2:56:e8:01:8a:fb:ad:8a:53:9c:88:ee:7e: b2:e3:b3:15:db:d5:90:ca:89:aa:9a:27:cb:b9:dd:83:86:cf: e9:b8:38:6f:79:95:d2:f8:a8:2f:b5:31:7a:94:1b:d2:47:f6: 47:9f:41:4a:f8:69:c6:d4:89:44:e8:e9:60:68:18:50:56:7f: 31:89:16:f3:0b:19:86:df:a1:f1:f3:6c:ec:da:52:a6:a1:12: 6d:82:66:e6:62:1d:58:37:aa:0f:3a:60:77:1b:4f:3a:a2:d9: c6:53:f4:e9:46:39:8a:6a:ef:6d:be:5d:7e:91:17:d0:6c:c3: 71:5f:38:93:92:b6:de:d7:df:98:2d:2b:3b:33:16:9a:3a:b3: 2e:62:5f:91:36:72:8f:8f:dd:1d:33:c7:26:77:32:c0:41:bc: 20:a5:26:1f:82:11:53:50:83:9a:a3:bc:c6:82:43:cc:e8:df: 1c:63:70:9d:4f:c1:1c:c9:fe:5c:55:97:a0:00:57:eb:a1:da: 0a:b5:43:2c:94:83:47:18:0e:30:b3:29:de:4e:95:03:6c:07: 6c:5a:d3:73:2e:f9:e4:69:f9:b4:09:be:ed:af:1b:ec:49:5a: 92:c0:ee:5b:06:1c:8a:db:14:b7:d9:42:a6:aa:1c:8a:52:df: 88:6b:39:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Dw/lzX7TA3v2CU61jzKhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YWVmMTkwZjQ0YmZjMWRiMGM1MGYxYTczZmRmMDE3MDgx YWZlMTYwHhcNMjUxMjIwMDAwMDQ2WhcNMjUxMjIxMDAwMDQ2WjAzMTEwLwYDVQQD Eyg3MmJjMGY5MWI0Mzk5N2ZmZDc2Y2U5YWQ3Zjc2ZGE4MDdkNzgzM2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJgO42Li4W9Pfcw/h2ZelvQ6iqbK EHOr7mIE3KGOMCPe7fRD3g/Zx2qNAIW/ZCok3nT21Bm/Nwan3+NsFjpSgsDUST/n Pa2FU4pyVCtOEwV1Gat0dZfApnJ8C+jGEL94DMlT+4lT/CpfBL20qbeR2I8hWhmE N4l685cF+8n/kPdBueyxnViBnrJL3fRv/1UukG+4iMTlKv9Pxb2D0kUcWFAIiSAe TRc0r5hR4IyDmxZIq51yLX67pOo59p790utGzESrusThDvBNpVOxLAXXuKG7pt3z 755nPmE+dNd5kWiSAvKcbi9YxO+jf/USpAy36J3iMFJFsgwh5lmZrWkcpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHK8D5G0OZf/12zprX922oB9eDPzMB8GA1UdIwQY MBaAFAeu8ZD0S/wdsMUPGnP98BcIGv4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjY3eGtQUkxfQjJ3eFE4YWNfM3dGd2dhX2hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kNjk1MjUtN2NmYi00N2M4LTljNGYt ZWY0NDU4ZWEyMGNkLzEvQjY3eGtQUkxfQjJ3eFE4YWNfM3dGd2dhX2hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kNjk1MjUtN2NmYi00N2M4LTljNGYtZWY0NDU4ZWEyMGNk LzEvQjY3eGtQUkxfQjJ3eFE4YWNfM3dGd2dhX2hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJS0l9znS VugBivutilOciO5+suOzFdvVkMqJqpony7ndg4bP6bg4b3mV0vioL7UxepQb0kf2 R59BSvhpxtSJROjpYGgYUFZ/MYkW8wsZht+h8fNs7NpSpqESbYJm5mIdWDeqDzpg dxtPOqLZxlP06UY5imrvbb5dfpEX0GzDcV84k5K23tffmC0rOzMWmjqzLmJfkTZy j4/dHTPHJncywEG8IKUmH4IRU1CDmqO8xoJDzOjfHGNwnU/BHMn+XFWXoABX66Ha CrVDLJSDRxgOMLMp3k6VA2wHbFrTcy755Gn5tAm+7a8b7ElaksDuWwYcitsUt9lC pqocilLfiGs50g== -----END CERTIFICATE-----Generated at Sat Dec 20 09:11:35 2025 by rpki-client