This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft File: 68Xg5EXZRzFUru10Rpss-6NmTjU.mft (raw, json) Hash identifier: nb+F4cI80v/V7aKqEiGSa55J2ZJyK45IL++xt0z6iKk= Subject key identifier: 35:30:9F:71:67:EC:9D:54:C6:F2:42:7E:EA:72:E8:66:03:6B:A8:B5 Authority key identifier: EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35 Certificate issuer: /CN=ebc5e0e445d9473154aeed74469b2cfba3664e35 Certificate serial: 019B4A037B1B9EC19DC0BD1357D7F8961EEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft Manifest number: 0AD3 Signing time: Tue 23 Dec 2025 07:01:40 +0000 Manifest this update: Tue 23 Dec 2025 07:01:40 +0000 Manifest next update: Wed 24 Dec 2025 07:01:40 +0000 Files and hashes: 1: 68Xg5EXZRzFUru10Rpss-6NmTjU.crl (hash: askBdVnEuX5YY3SsH/RQiIESA4bat+Bpz9KOSyHvTIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:7b:1b:9e:c1:9d:c0:bd:13:57:d7:f8:96:1e:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebc5e0e445d9473154aeed74469b2cfba3664e35 Validity Not Before: Dec 23 07:01:40 2025 GMT Not After : Dec 24 07:01:40 2025 GMT Subject: CN=35309f7167ec9d54c6f2427eea72e866036ba8b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:40:df:df:f1:1d:e9:07:dc:1b:73:4c:bc:f8: 4b:3d:8e:91:6f:4d:fa:3b:76:6c:df:21:95:c6:4e: d6:f5:20:fc:a4:9b:02:77:d4:79:a6:00:68:e0:ea: 5f:61:f6:ae:73:44:db:7d:0c:6b:0d:42:0d:ac:53: 2b:9b:c5:88:b7:a3:99:c6:63:c2:70:e2:af:38:6d: 55:35:60:75:26:71:e1:99:5f:fe:e1:d1:23:9d:ee: a8:8e:2c:d3:91:20:1c:49:83:f0:b2:5c:da:7a:72: 61:cf:2d:3a:f0:da:15:c0:51:fb:af:a6:49:5a:91: 72:3b:a1:99:cf:39:dd:06:1b:6b:fd:01:0e:77:8c: 97:f0:4d:e5:8e:25:6f:39:8f:ce:6a:5d:b6:16:3f: 34:d1:0d:1a:1d:a8:8c:16:73:f6:1a:2d:27:95:77: bf:cb:a0:d9:f1:14:06:b4:bc:5a:38:92:f3:13:ff: 8e:44:d6:9f:11:ba:d9:b2:41:f5:b6:49:2d:43:f9: 47:5f:af:21:a2:b3:ec:58:09:08:fa:8b:5d:7a:c8: a1:69:8d:ba:8d:96:2d:d4:7c:76:ac:11:e9:1c:99: 60:a2:c9:ca:89:79:94:e9:ec:04:56:5a:f1:d8:dd: 38:75:f5:e4:12:93:b7:4e:ad:60:ef:d3:3e:30:dd: b3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:30:9F:71:67:EC:9D:54:C6:F2:42:7E:EA:72:E8:66:03:6B:A8:B5 X509v3 Authority Key Identifier: keyid:EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:31:e6:1e:e2:4b:33:43:df:a9:67:a2:39:86:fd:b7:60:a3: 13:12:20:c8:38:c7:41:b7:79:bd:62:bf:e6:0c:5d:b5:e9:40: df:5a:8a:4f:d1:6e:75:dd:1d:71:e1:aa:cc:7a:e0:a0:a2:32: e1:25:b1:d6:5f:04:c4:72:70:cc:c4:ea:e6:48:4c:2a:4b:7f: 41:52:18:5b:1a:41:ca:cc:0d:77:14:4c:71:49:c1:ff:86:37: 46:41:68:67:f5:5a:79:bf:f7:27:a0:97:22:c0:1b:35:87:d3: 08:9f:64:63:bd:bd:ce:a6:7d:7c:62:27:84:6c:17:a3:d9:13: 66:e4:0a:d7:dc:55:d3:da:e5:93:5c:54:9a:7a:c6:20:81:59: 0a:c5:91:9e:6f:12:b7:f0:79:94:44:3c:7c:a5:8b:b9:89:0b: 01:b5:7e:97:2e:70:4a:0b:af:fc:1c:43:cc:cb:45:84:f5:5f: 7f:fd:4c:4d:ff:0f:bb:16:3d:01:5e:4e:f9:fa:b0:95:06:f7: 15:ca:fa:2e:45:ac:5a:b1:03:fc:a2:08:b2:bb:28:da:ad:95: f2:6c:a0:a0:09:4d:dd:ba:41:b4:6d:c0:45:2d:60:b5:55:76: 6c:9d:26:f6:2e:a4:64:3a:80:9b:fa:80:d7:04:81:8e:79:f7: 89:83:46:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA3sbnsGdwL0TV9f4lh7sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYzVlMGU0NDVkOTQ3MzE1NGFlZWQ3NDQ2OWIyY2ZiYTM2 NjRlMzUwHhcNMjUxMjIzMDcwMTQwWhcNMjUxMjI0MDcwMTQwWjAzMTEwLwYDVQQD EygzNTMwOWY3MTY3ZWM5ZDU0YzZmMjQyN2VlYTcyZTg2NjAzNmJhOGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0Df3/Ed6QfcG3NMvPhLPY6Rb036 O3Zs3yGVxk7W9SD8pJsCd9R5pgBo4OpfYfauc0TbfQxrDUINrFMrm8WIt6OZxmPC cOKvOG1VNWB1JnHhmV/+4dEjne6ojizTkSAcSYPwslzaenJhzy068NoVwFH7r6ZJ WpFyO6GZzzndBhtr/QEOd4yX8E3ljiVvOY/Oal22Fj800Q0aHaiMFnP2Gi0nlXe/ y6DZ8RQGtLxaOJLzE/+ORNafEbrZskH1tkktQ/lHX68horPsWAkI+otdesihaY26 jZYt1Hx2rBHpHJlgosnKiXmU6ewEVlrx2N04dfXkEpO3Tq1g79M+MN2zMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUwn3Fn7J1UxvJCfupy6GYDa6i1MB8GA1UdIwQY MBaAFOvF4ORF2UcxVK7tdEabLPujZk41MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjhYZzVFWFpSekZVcnUxMFJwc3MtNk5tVGpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zMmFiZWUtY2Y3YS00NGY5LTg3NjUt OGRlYzJlMTYzYTg2LzEvNjhYZzVFWFpSekZVcnUxMFJwc3MtNk5tVGpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8zMmFiZWUtY2Y3YS00NGY5LTg3NjUtOGRlYzJlMTYzYTg2 LzEvNjhYZzVFWFpSekZVcnUxMFJwc3MtNk5tVGpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDHmHuJL M0PfqWeiOYb9t2CjExIgyDjHQbd5vWK/5gxdtelA31qKT9Fudd0dceGqzHrgoKIy 4SWx1l8ExHJwzMTq5khMKkt/QVIYWxpByswNdxRMcUnB/4Y3RkFoZ/Vaeb/3J6CX IsAbNYfTCJ9kY729zqZ9fGInhGwXo9kTZuQK19xV09rlk1xUmnrGIIFZCsWRnm8S t/B5lEQ8fKWLuYkLAbV+ly5wSguv/BxDzMtFhPVff/1MTf8PuxY9AV5O+fqwlQb3 Fcr6LkWsWrED/KIIsrso2q2V8mygoAlN3bpBtG3ARS1gtVV2bJ0m9i6kZDqAm/qA 1wSBjnn3iYNGHQ== -----END CERTIFICATE-----Generated at Tue Dec 23 11:20:41 2025 by rpki-client