This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e1377f-6908-4f27-9eb3-9b80141c0aeb/1/67XTVXRBaWDqp27yWMsvpZuKz84.mft File: 67XTVXRBaWDqp27yWMsvpZuKz84.mft (raw, json) Hash identifier: d3K0nS/gTN4gy0zagRgdImosUGrGyAG83SOLXC37hhw= Subject key identifier: 66:33:28:1B:A5:EA:26:78:79:D3:83:23:39:07:1B:91:76:A6:48:D9 Authority key identifier: EB:B5:D3:55:74:41:69:60:EA:A7:6E:F2:58:CB:2F:A5:9B:8A:CF:CE Certificate issuer: /CN=ebb5d35574416960eaa76ef258cb2fa59b8acfce Certificate serial: 019B5A88CD32178BA24FABADE03B7226E34F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67XTVXRBaWDqp27yWMsvpZuKz84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/e1377f-6908-4f27-9eb3-9b80141c0aeb/1/67XTVXRBaWDqp27yWMsvpZuKz84.mft Manifest number: 39 Signing time: Fri 26 Dec 2025 12:01:13 +0000 Manifest this update: Fri 26 Dec 2025 12:01:13 +0000 Manifest next update: Sat 27 Dec 2025 12:01:13 +0000 Files and hashes: 1: 67XTVXRBaWDqp27yWMsvpZuKz84.crl (hash: bPnXk1hl/96ewUh88NtsWT5Qg5n2TM5PplhzXM/O1aw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/e1377f-6908-4f27-9eb3-9b80141c0aeb/1/67XTVXRBaWDqp27yWMsvpZuKz84.crl rsync://rpki.ripe.net/repository/DEFAULT/40/e1377f-6908-4f27-9eb3-9b80141c0aeb/1/67XTVXRBaWDqp27yWMsvpZuKz84.mft rsync://rpki.ripe.net/repository/DEFAULT/67XTVXRBaWDqp27yWMsvpZuKz84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:cd:32:17:8b:a2:4f:ab:ad:e0:3b:72:26:e3:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebb5d35574416960eaa76ef258cb2fa59b8acfce Validity Not Before: Dec 26 12:01:13 2025 GMT Not After : Dec 27 12:01:13 2025 GMT Subject: CN=6633281ba5ea267879d3832339071b9176a648d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:98:cf:0a:a8:1d:24:f5:fc:74:cb:ad:5c:88: ea:41:15:f4:1e:ed:09:27:b0:8e:63:ee:98:2c:f5: d7:ac:e0:a3:ba:15:1d:45:8e:f7:22:36:d7:a8:38: 16:1a:a6:11:b4:2b:8f:5e:29:60:7c:55:e3:63:04: 89:1d:e1:0a:a5:d9:d0:03:98:c6:8d:58:5b:b2:1e: c9:4b:ab:00:4f:c7:5c:ab:1d:6e:cf:1e:69:c7:18: 97:1a:cb:b9:54:c2:fa:ed:0f:ec:a2:e1:2e:c0:cf: c4:5c:0f:a9:01:df:65:ec:26:f3:5d:34:92:20:5e: 05:70:1c:d6:8f:ca:8d:e0:47:f2:5f:48:1a:d9:2a: 96:ab:bb:b9:42:25:5f:82:67:27:51:14:09:3f:91: 01:25:21:ec:66:17:df:8d:66:87:b3:b7:58:2c:48: b2:63:ff:3d:86:27:51:8d:43:93:b1:30:5d:9f:15: a1:bc:e8:44:6a:a9:38:2d:20:c5:82:f2:a7:e7:4f: 56:52:14:ab:fc:89:9b:15:ac:9c:d4:68:16:b3:3f: 10:cd:8a:b4:57:29:4b:67:07:ec:b5:33:29:f8:72: cb:81:75:f3:b1:cd:44:37:53:0c:39:d8:36:32:87: e8:e5:e0:51:b6:1b:35:d7:6c:85:a0:ed:d4:c6:c4: f5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:33:28:1B:A5:EA:26:78:79:D3:83:23:39:07:1B:91:76:A6:48:D9 X509v3 Authority Key Identifier: keyid:EB:B5:D3:55:74:41:69:60:EA:A7:6E:F2:58:CB:2F:A5:9B:8A:CF:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67XTVXRBaWDqp27yWMsvpZuKz84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e1377f-6908-4f27-9eb3-9b80141c0aeb/1/67XTVXRBaWDqp27yWMsvpZuKz84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e1377f-6908-4f27-9eb3-9b80141c0aeb/1/67XTVXRBaWDqp27yWMsvpZuKz84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:fa:ac:fa:8c:ef:a1:9d:f5:37:b3:2f:47:91:c6:1c:68:27: d4:21:86:cf:57:33:ad:fc:32:1e:ef:6c:a8:b8:55:20:3a:3d: 59:63:bc:8c:9d:e4:1f:05:a1:24:b0:ed:42:61:6b:fa:91:58: 91:ce:25:d3:34:b9:08:45:e5:1c:dd:af:30:aa:dd:c7:67:ac: d4:34:11:6a:a1:0a:ed:60:08:20:4c:ad:ea:7c:db:63:8e:77: 69:89:7e:32:46:ea:a2:14:e6:6a:3a:f9:35:14:5b:ce:b3:b5: da:00:04:12:9e:24:2d:5d:86:55:ad:f6:b0:91:12:b1:42:8d: 07:57:c6:50:6b:6b:28:85:e8:5f:74:ea:b4:39:88:ba:76:63: fd:85:a9:f1:62:5c:62:a1:8d:e3:47:92:c3:3a:03:0c:d1:0d: 26:59:a4:06:c9:d1:fb:7c:0f:27:82:98:27:46:20:de:67:7e: f2:55:a8:60:e2:8a:50:78:e4:5b:b6:15:98:5c:fa:f4:f4:64: 71:aa:fa:7b:be:25:80:91:f6:27:90:88:7a:34:17:31:18:72: 01:f7:a5:d3:82:86:34:92:8d:2c:04:5b:8d:bd:04:b5:67:02: e5:ff:65:9f:bc:66:b4:9e:75:de:c0:99:8b:9e:87:e4:b2:2a: 38:52:fe:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiM0yF4uiT6ut4DtyJuNPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYjVkMzU1NzQ0MTY5NjBlYWE3NmVmMjU4Y2IyZmE1OWI4 YWNmY2UwHhcNMjUxMjI2MTIwMTEzWhcNMjUxMjI3MTIwMTEzWjAzMTEwLwYDVQQD Eyg2NjMzMjgxYmE1ZWEyNjc4NzlkMzgzMjMzOTA3MWI5MTc2YTY0OGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJjPCqgdJPX8dMutXIjqQRX0Hu0J J7COY+6YLPXXrOCjuhUdRY73IjbXqDgWGqYRtCuPXilgfFXjYwSJHeEKpdnQA5jG jVhbsh7JS6sAT8dcqx1uzx5pxxiXGsu5VML67Q/souEuwM/EXA+pAd9l7CbzXTSS IF4FcBzWj8qN4EfyX0ga2SqWq7u5QiVfgmcnURQJP5EBJSHsZhffjWaHs7dYLEiy Y/89hidRjUOTsTBdnxWhvOhEaqk4LSDFgvKn509WUhSr/ImbFayc1GgWsz8QzYq0 VylLZwfstTMp+HLLgXXzsc1EN1MMOdg2Mofo5eBRths112yFoO3UxsT1gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYzKBul6iZ4edODIzkHG5F2pkjZMB8GA1UdIwQY MBaAFOu101V0QWlg6qdu8ljLL6Wbis/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjdYVFZYUkJhV0RxcDI3eVdNc3ZwWnVLejg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9lMTM3N2YtNjkwOC00ZjI3LTllYjMt OWI4MDE0MWMwYWViLzEvNjdYVFZYUkJhV0RxcDI3eVdNc3ZwWnVLejg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9lMTM3N2YtNjkwOC00ZjI3LTllYjMtOWI4MDE0MWMwYWVi LzEvNjdYVFZYUkJhV0RxcDI3eVdNc3ZwWnVLejg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAefqs+ozv oZ31N7MvR5HGHGgn1CGGz1czrfwyHu9sqLhVIDo9WWO8jJ3kHwWhJLDtQmFr+pFY kc4l0zS5CEXlHN2vMKrdx2es1DQRaqEK7WAIIEyt6nzbY453aYl+MkbqohTmajr5 NRRbzrO12gAEEp4kLV2GVa32sJESsUKNB1fGUGtrKIXoX3TqtDmIunZj/YWp8WJc YqGN40eSwzoDDNENJlmkBsnR+3wPJ4KYJ0Yg3md+8lWoYOKKUHjkW7YVmFz69PRk car6e74lgJH2J5CIejQXMRhyAfel04KGNJKNLARbjb0EtWcC5f9ln7xmtJ513sCZ i56H5LIqOFL+wg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:12 2025 by rpki-client