This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft File: 67KkJVDl4rSqGkc7KzcbwoNBoWo.mft (raw, json) Hash identifier: GF5BILXlcROjIhk+xdLqFRQsvauR/lZpKzTiV0RBsl4= Subject key identifier: 1E:34:A8:E7:D4:C0:97:F4:CB:6B:32:E3:A2:9E:15:69:8F:31:EE:B2 Authority key identifier: EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A Certificate issuer: /CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a Certificate serial: 019B5AF62242307CBAE3A3EA6CA7F77AB273 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft Manifest number: 0EFA Signing time: Fri 26 Dec 2025 14:00:38 +0000 Manifest this update: Fri 26 Dec 2025 14:00:38 +0000 Manifest next update: Sat 27 Dec 2025 14:00:38 +0000 Files and hashes: 1: 67KkJVDl4rSqGkc7KzcbwoNBoWo.crl (hash: 1O3/faxfnOGhrtVjEhGXBjALRvfNcagkkkrTTvv9tWQ=) 2: UGLv7iIWQ-5niuk1r5Vedx_SrIM.roa (hash: +rlvmMS0hKnH04ERI3SbO3F5bnx5NVtVmXo36GJpU3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:22:42:30:7c:ba:e3:a3:ea:6c:a7:f7:7a:b2:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a Validity Not Before: Dec 26 14:00:38 2025 GMT Not After : Dec 27 14:00:38 2025 GMT Subject: CN=1e34a8e7d4c097f4cb6b32e3a29e15698f31eeb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e8:ec:64:de:48:3a:e2:5e:f0:4c:cf:5a:d4: c8:c2:b5:af:03:d6:0f:56:5e:7f:25:51:9a:c9:ac: db:63:55:3f:82:0c:a5:a0:6a:fb:e0:9f:b9:a4:2a: 97:07:af:9b:dc:a6:93:98:c5:37:79:b5:84:7a:3d: 03:a4:ff:f7:40:9a:1b:05:a6:72:cf:60:27:5d:a0: 9d:e0:fa:c6:2f:f8:4b:11:bc:ee:6e:5f:c1:9f:cc: 44:95:52:3c:72:d0:e7:25:d4:38:83:29:c2:07:c0: 58:a4:6d:bf:f2:de:2b:38:e9:36:ef:ba:41:92:f7: 6e:71:96:5c:60:43:1c:da:5a:e8:c4:bb:ba:78:e5: c2:24:46:e5:4b:0d:25:f6:a3:fe:d7:c1:26:31:98: 0a:ad:a0:d9:09:80:d0:59:64:17:cf:0e:16:c3:d4: 91:a5:4d:22:e7:eb:73:19:e3:e0:6f:c6:4b:a4:0e: bb:25:e8:92:b7:1b:cb:be:46:e1:78:51:6e:8b:fe: ce:38:1d:64:e4:b4:ce:71:4f:15:d7:b2:76:be:a1: b2:8b:a9:e0:dc:67:f9:b3:30:d6:21:2f:37:c5:b0: 6c:3f:28:5f:ee:36:94:52:6c:ad:fc:0c:41:28:0a: 7a:d9:22:41:62:e8:73:45:55:0e:a7:eb:44:79:83: 99:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:34:A8:E7:D4:C0:97:F4:CB:6B:32:E3:A2:9E:15:69:8F:31:EE:B2 X509v3 Authority Key Identifier: keyid:EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:0a:51:38:5f:ec:e8:55:90:bc:7e:b7:8e:ae:74:ef:3e:61: a1:7f:ef:72:b7:9d:75:00:7d:f8:de:46:4d:5f:30:d1:37:2b: ea:6e:ba:bd:fb:df:0d:b0:82:07:39:5e:95:f1:ab:dd:43:4c: 5e:a3:31:03:a4:22:bc:e2:45:19:f7:6a:01:bd:e3:4c:72:75: c3:21:6e:04:8d:44:c4:6e:79:91:34:c5:de:00:13:12:a5:c1: 0f:82:70:63:c7:7d:0e:46:05:19:07:42:a5:3a:e1:75:b1:40: ac:71:65:72:bb:95:97:b4:56:c5:bd:f9:4b:77:ca:ad:3b:18: 74:92:f8:cf:da:a0:cf:3b:d1:7c:4b:ad:64:b4:f0:ed:9a:7a: e0:2b:df:ce:5b:93:72:26:c4:b8:41:81:6a:4a:32:74:4f:b5: 80:95:9c:c9:ae:db:3f:b8:aa:54:25:90:bd:20:be:02:73:8a: fe:60:20:5b:93:11:3b:cb:5c:36:c6:6d:5b:88:3c:83:05:c3: 3f:8b:6c:89:e8:39:56:b2:62:00:a9:f6:af:e9:6b:43:25:7b: 7f:3d:7d:1e:e0:44:5d:61:a0:54:7b:03:33:df:92:53:8a:95: 11:ba:65:84:80:f3:c9:2d:c7:1b:0e:e6:a1:40:d3:56:0e:c2: fd:48:4d:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9iJCMHy646PqbKf3erJzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYjJhNDI1NTBlNWUyYjRhYTFhNDczYjJiMzcxYmMyODM0 MWExNmEwHhcNMjUxMjI2MTQwMDM4WhcNMjUxMjI3MTQwMDM4WjAzMTEwLwYDVQQD EygxZTM0YThlN2Q0YzA5N2Y0Y2I2YjMyZTNhMjllMTU2OThmMzFlZWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyujsZN5IOuJe8EzPWtTIwrWvA9YP Vl5/JVGayazbY1U/ggyloGr74J+5pCqXB6+b3KaTmMU3ebWEej0DpP/3QJobBaZy z2AnXaCd4PrGL/hLEbzubl/Bn8xElVI8ctDnJdQ4gynCB8BYpG2/8t4rOOk277pB kvducZZcYEMc2lroxLu6eOXCJEblSw0l9qP+18EmMZgKraDZCYDQWWQXzw4Ww9SR pU0i5+tzGePgb8ZLpA67JeiStxvLvkbheFFui/7OOB1k5LTOcU8V17J2vqGyi6ng 3Gf5szDWIS83xbBsPyhf7jaUUmyt/AxBKAp62SJBYuhzRVUOp+tEeYOZUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB40qOfUwJf0y2sy46KeFWmPMe6yMB8GA1UdIwQY MBaAFOuypCVQ5eK0qhpHOys3G8KDQaFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lNThiNDAtZGRlNi00ODQwLTgxMGMt MzFmOTI5NDVkZmZkLzEvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9lNThiNDAtZGRlNi00ODQwLTgxMGMtMzFmOTI5NDVkZmZk LzEvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmgpROF/s 6FWQvH63jq507z5hoX/vcreddQB9+N5GTV8w0Tcr6m66vfvfDbCCBzlelfGr3UNM XqMxA6QivOJFGfdqAb3jTHJ1wyFuBI1ExG55kTTF3gATEqXBD4JwY8d9DkYFGQdC pTrhdbFArHFlcruVl7RWxb35S3fKrTsYdJL4z9qgzzvRfEutZLTw7Zp64CvfzluT cibEuEGBakoydE+1gJWcya7bP7iqVCWQvSC+AnOK/mAgW5MRO8tcNsZtW4g8gwXD P4tsieg5VrJiAKn2r+lrQyV7fz19HuBEXWGgVHsDM9+SU4qVEbplhIDzyS3HGw7m oUDTVg7C/UhN9Q== -----END CERTIFICATE-----Generated at Fri Dec 26 17:43:33 2025 by rpki-client