This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json) Hash identifier: d82UhhMIRIIUcvISDAIW1PoH2Fg13Lx8eaTYaeP/x+g= Subject key identifier: 63:3F:07:F0:2A:D4:87:7D:FC:C7:E4:B3:62:D0:7E:9A:74:CC:50:4E Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04 Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104 Certificate serial: 019B706B21159749FF010DD3E0A7220CA2BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft Manifest number: 17B7 Signing time: Tue 30 Dec 2025 18:00:27 +0000 Manifest this update: Tue 30 Dec 2025 18:00:27 +0000 Manifest next update: Wed 31 Dec 2025 18:00:27 +0000 Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: ow8nf81Hv5R/6fHmtI1JOgVJOoridjIFtutkB/FhOOY=) 2: KZug6FKGZZRd25xEmWgbfg0_wdw.roa (hash: ctBKd+yf9Znf9nJH1GwdvGB/+F5ODDOhs9z06Ml25Ow=) 3: Yhr8lSQPkVNE2nE3dAVuTYK9ZTE.roa (hash: DYAfTfRN42C4dDlnu2IUI5X6rPDqQbV+Vyawh6lte/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:6b:21:15:97:49:ff:01:0d:d3:e0:a7:22:0c:a2:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104 Validity Not Before: Dec 30 18:00:27 2025 GMT Not After : Dec 31 18:00:27 2025 GMT Subject: CN=633f07f02ad4877dfcc7e4b362d07e9a74cc504e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c0:5e:c6:69:67:75:a9:83:6a:95:69:56:ea: f0:dc:80:65:86:3f:45:82:23:30:ed:40:52:c8:11: 9f:c6:6b:44:4b:69:57:ef:eb:22:93:90:26:08:31: 42:7d:5a:0a:27:86:43:1d:5f:fb:75:f2:6c:52:17: ea:3a:21:64:e0:8a:84:76:67:4e:21:1f:fb:8a:42: 03:3c:10:4f:27:9b:ea:86:79:b7:60:da:6b:9d:7f: 01:91:cd:33:91:29:c6:fd:e9:dd:c1:cf:8f:c7:4a: 5f:a9:34:72:8e:97:c1:1b:f3:d2:82:8c:b9:4c:e9: 10:2a:df:e5:d1:9f:f9:a4:a4:9d:9a:16:8e:64:b5: 0f:0a:d1:91:b5:03:5d:2d:40:e7:2d:82:2d:14:b0: 44:01:08:d3:e6:6e:d2:81:b8:73:70:a9:2c:3b:bd: 48:a8:e5:78:60:18:3b:2b:42:91:3b:75:60:09:86: 73:96:9e:d7:ec:29:af:d7:2c:e1:d3:8e:00:c2:19: e1:6f:90:c3:c8:eb:81:52:99:88:f9:5e:c6:bc:e5: ee:8b:e7:03:40:a7:d1:ce:11:b1:07:83:aa:fd:34: f1:47:f3:33:65:21:1e:c1:8e:4c:44:42:1f:83:97: e2:4e:4a:26:9d:f9:54:ef:fa:a3:1b:2b:fe:8f:79: a6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3F:07:F0:2A:D4:87:7D:FC:C7:E4:B3:62:D0:7E:9A:74:CC:50:4E X509v3 Authority Key Identifier: keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ee:92:11:1c:38:03:18:b7:88:55:a6:9d:e4:85:2c:44:e6: 2f:60:16:1e:20:01:9d:4f:05:3b:09:e1:28:d3:15:47:f5:27: 20:a0:39:5f:b5:f5:89:c2:7c:e3:f8:1b:59:b1:67:22:3a:d0: d3:73:8e:3e:8b:cb:4c:9f:e4:c2:d3:9a:3c:d8:d7:3c:85:4a: ee:1c:5f:89:41:fa:a7:46:3f:14:f6:a1:be:1a:3b:0f:ef:ea: c8:2c:25:2d:b9:a7:59:5a:f9:6c:d5:1c:ed:fd:65:df:be:7b: 44:14:3e:20:bd:36:e7:de:c1:30:9b:da:18:42:3c:e8:4b:5a: 1e:19:38:b5:fb:42:dd:f7:39:08:57:b6:f1:1b:98:37:f9:45: cf:83:76:93:9c:2d:1f:4c:b7:2f:22:84:c6:22:ad:0e:65:e4: cd:f0:05:1a:d5:c6:c3:44:43:7c:bf:78:56:2a:c0:08:ae:d8: 32:2f:41:cf:83:52:3f:62:40:f9:6a:62:65:e7:8b:b0:f1:11: 6e:09:0f:01:50:62:9a:34:0f:d4:92:a5:22:5d:d0:59:46:2c: c8:4a:cb:93:71:24:aa:e9:b3:e7:61:53:d6:9b:4a:0b:d5:8a: fd:bf:d0:34:2a:fb:d4:dd:72:e8:64:07:bb:f0:24:7e:92:e5: 1a:1f:14:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwayEVl0n/AQ3T4KciDKK+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYzY2NDAzYWQwYzQ1MzdhZjljMzJiMGRlZjBjNTJhYzJh YWIxMDQwHhcNMjUxMjMwMTgwMDI3WhcNMjUxMjMxMTgwMDI3WjAzMTEwLwYDVQQD Eyg2MzNmMDdmMDJhZDQ4NzdkZmNjN2U0YjM2MmQwN2U5YTc0Y2M1MDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsBexmlndamDapVpVurw3IBlhj9F giMw7UBSyBGfxmtES2lX7+sik5AmCDFCfVoKJ4ZDHV/7dfJsUhfqOiFk4IqEdmdO IR/7ikIDPBBPJ5vqhnm3YNprnX8Bkc0zkSnG/endwc+Px0pfqTRyjpfBG/PSgoy5 TOkQKt/l0Z/5pKSdmhaOZLUPCtGRtQNdLUDnLYItFLBEAQjT5m7SgbhzcKksO71I qOV4YBg7K0KRO3VgCYZzlp7X7Cmv1yzh044Awhnhb5DDyOuBUpmI+V7GvOXui+cD QKfRzhGxB4Oq/TTxR/MzZSEewY5MREIfg5fiTkomnflU7/qjGyv+j3mmsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGM/B/Aq1Id9/Mfks2LQfpp0zFBOMB8GA1UdIwQY MBaAFOvGZAOtDEU3r5wysN7wxSrCqrEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi83MjgxZGEtMGViMC00MGE4LTk5ODMt ZDFhOWRhNGExMzBkLzEvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi83MjgxZGEtMGViMC00MGE4LTk5ODMtZDFhOWRhNGExMzBk LzEvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+6SERw4 Axi3iFWmneSFLETmL2AWHiABnU8FOwnhKNMVR/UnIKA5X7X1icJ84/gbWbFnIjrQ 03OOPovLTJ/kwtOaPNjXPIVK7hxfiUH6p0Y/FPahvho7D+/qyCwlLbmnWVr5bNUc 7f1l3757RBQ+IL02597BMJvaGEI86EtaHhk4tftC3fc5CFe28RuYN/lFz4N2k5wt H0y3LyKExiKtDmXkzfAFGtXGw0RDfL94VirACK7YMi9Bz4NSP2JA+WpiZeeLsPER bgkPAVBimjQP1JKlIl3QWUYsyErLk3Ekqumz52FT1ptKC9WK/b/QNCr71N1y6GQH u/AkfpLlGh8UwQ== -----END CERTIFICATE-----Generated at Tue Dec 30 23:06:43 2025 by rpki-client