This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft File: 67Ulb-PgcwKrcye3R7jfOCRcTt8.mft (raw, json) Hash identifier: tx5JgY8ooTZ7NobjY9Ro0EOEGQq9zLFUzcHmcI33oQU= Subject key identifier: F7:CC:29:0C:F4:13:BD:9C:1F:F4:EA:10:DF:64:58:B5:11:97:3E:AB Authority key identifier: EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF Certificate issuer: /CN=ebb5256fe3e07302ab7327b747b8df38245c4edf Certificate serial: 019B2219B57CC99F3A72864AFD0E91842DC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft Manifest number: 029E Signing time: Mon 15 Dec 2025 13:01:08 +0000 Manifest this update: Mon 15 Dec 2025 13:01:08 +0000 Manifest next update: Tue 16 Dec 2025 13:01:08 +0000 Files and hashes: 1: 67Ulb-PgcwKrcye3R7jfOCRcTt8.crl (hash: RX/AHglSoPgUKS8fW8OlmlfEyBS3uIChCLyaT4+QbZs=) 2: R2qc8xIB7ETeFtMUELFMOTQfjZ4.roa (hash: BfeJlxl1OQPY3ScyZzCp1zSxOdUPgq5TTtPThWNATH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:b5:7c:c9:9f:3a:72:86:4a:fd:0e:91:84:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebb5256fe3e07302ab7327b747b8df38245c4edf Validity Not Before: Dec 15 13:01:08 2025 GMT Not After : Dec 16 13:01:08 2025 GMT Subject: CN=f7cc290cf413bd9c1ff4ea10df6458b511973eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fe:c1:5f:b8:b4:e8:c3:85:ee:20:7c:f1:58: b1:51:a5:86:ec:e0:5f:0c:0e:7d:f2:00:28:bd:7c: bc:cc:b4:67:5f:c4:d2:f3:27:bb:b5:06:00:87:8c: b7:6b:f1:85:f8:92:5a:58:8d:4f:a7:8c:c9:f1:62: fa:b1:17:12:75:22:c5:69:b2:30:6b:1c:56:41:fb: bb:fe:d5:e3:75:0e:10:0e:b7:d1:6a:68:6e:5d:9e: d3:bf:74:85:52:47:8b:b0:5e:bd:61:d0:79:31:97: ba:ab:8e:25:ff:d1:2f:f7:58:d6:81:1f:c4:9c:0f: e8:34:bf:b4:15:e5:e2:75:4a:14:6d:b5:73:eb:f4: e2:ba:a1:70:3d:bd:43:36:8d:7a:8e:98:48:9d:c9: ac:83:6a:2b:71:e4:ff:f5:51:d5:6a:39:02:a5:bf: 38:3a:b6:da:2e:2c:95:90:bd:a1:da:6a:3f:0d:01: 0f:fd:10:fa:7d:a3:a9:85:cb:a1:d5:cd:03:32:af: ac:f1:88:01:27:53:1a:9d:99:2c:b2:0b:72:bf:2a: 57:4b:a0:67:4f:be:95:0c:78:eb:28:b1:ed:95:df: 94:9a:dc:19:38:5a:a4:d7:b2:ea:ce:81:29:34:ea: 8d:0d:4c:a2:af:3f:70:95:44:8a:29:5c:39:39:eb: 4e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CC:29:0C:F4:13:BD:9C:1F:F4:EA:10:DF:64:58:B5:11:97:3E:AB X509v3 Authority Key Identifier: keyid:EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:da:59:2a:e9:ea:b6:cc:d4:40:11:83:08:1d:b4:6f:91:c9: 1c:7f:89:74:b7:cb:45:dd:dd:09:63:6f:30:63:88:59:b5:11: d8:16:77:4b:38:c4:e2:07:85:7e:93:75:81:62:9e:6b:f0:b0: 32:2d:04:d7:0a:c5:3e:75:15:07:34:bb:8e:be:02:d4:1d:a5: 9b:82:7c:1d:5f:26:c2:13:90:ef:c3:52:e9:44:13:95:f3:e9: 67:6f:f2:b6:70:18:9b:23:a8:6e:6f:99:39:52:7e:be:26:bd: 9a:95:a4:4f:c8:c9:37:c9:56:67:cc:01:ea:66:4a:e8:df:e6: c6:74:29:18:b1:74:5a:72:4c:cb:c8:e2:ec:56:ab:0a:ae:cd: 78:a5:ba:90:29:4e:e6:a8:52:b1:a7:19:99:25:45:31:47:e8: a0:b5:33:c1:53:69:20:32:ea:6f:44:83:b3:29:6b:05:b6:ee: 5f:57:9d:a6:f4:46:1f:81:28:05:05:95:5c:64:c6:0f:43:ac: 2c:46:88:7a:42:5c:64:ca:a3:f6:1a:0f:ba:3e:47:34:5d:3f: db:f3:46:c3:c7:b6:a1:a2:e5:90:81:00:90:23:eb:6b:91:67: 65:48:35:fe:a0:33:40:b6:42:bf:e8:27:78:65:ab:c1:28:a4: cc:e4:81:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGbV8yZ86coZK/Q6RhC3AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYjUyNTZmZTNlMDczMDJhYjczMjdiNzQ3YjhkZjM4MjQ1 YzRlZGYwHhcNMjUxMjE1MTMwMTA4WhcNMjUxMjE2MTMwMTA4WjAzMTEwLwYDVQQD EyhmN2NjMjkwY2Y0MTNiZDljMWZmNGVhMTBkZjY0NThiNTExOTczZWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP7BX7i06MOF7iB88VixUaWG7OBf DA598gAovXy8zLRnX8TS8ye7tQYAh4y3a/GF+JJaWI1Pp4zJ8WL6sRcSdSLFabIw axxWQfu7/tXjdQ4QDrfRamhuXZ7Tv3SFUkeLsF69YdB5MZe6q44l/9Ev91jWgR/E nA/oNL+0FeXidUoUbbVz6/TiuqFwPb1DNo16jphIncmsg2orceT/9VHVajkCpb84 OrbaLiyVkL2h2mo/DQEP/RD6faOphcuh1c0DMq+s8YgBJ1ManZkssgtyvypXS6Bn T76VDHjrKLHtld+UmtwZOFqk17LqzoEpNOqNDUyirz9wlUSKKVw5OetO6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfMKQz0E72cH/TqEN9kWLURlz6rMB8GA1UdIwQY MBaAFOu1JW/j4HMCq3Mnt0e43zgkXE7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjdVbGItUGdjd0tyY3llM1I3amZPQ1JjVHQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS80MGIyYTktYjJjNy00MjIzLTg4NDgt MGQyZTQyMDU2ODZmLzEvNjdVbGItUGdjd0tyY3llM1I3amZPQ1JjVHQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS80MGIyYTktYjJjNy00MjIzLTg4NDgtMGQyZTQyMDU2ODZm LzEvNjdVbGItUGdjd0tyY3llM1I3amZPQ1JjVHQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtpZKunq tszUQBGDCB20b5HJHH+JdLfLRd3dCWNvMGOIWbUR2BZ3SzjE4geFfpN1gWKea/Cw Mi0E1wrFPnUVBzS7jr4C1B2lm4J8HV8mwhOQ78NS6UQTlfPpZ2/ytnAYmyOobm+Z OVJ+via9mpWkT8jJN8lWZ8wB6mZK6N/mxnQpGLF0WnJMy8ji7FarCq7NeKW6kClO 5qhSsacZmSVFMUfooLUzwVNpIDLqb0SDsylrBbbuX1edpvRGH4EoBQWVXGTGD0Os LEaIekJcZMqj9hoPuj5HNF0/2/NGw8e2oaLlkIEAkCPra5FnZUg1/qAzQLZCv+gn eGWrwSikzOSB/Q== -----END CERTIFICATE-----Generated at Mon Dec 15 19:56:08 2025 by rpki-client