This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft File: p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft (raw, json) Hash identifier: Qh2ZB+1AqmlFpGGC7ZOo3UfphZaSuZuoIpqpsGEwc+Y= Subject key identifier: 5E:F0:BD:47:C5:76:E6:B6:31:89:D2:85:2B:0A:1C:A2:E8:40:BC:43 Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3 Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3 Certificate serial: 019B353234DBE632B610C0967CC64A0DA5A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft Manifest number: 1653 Signing time: Fri 19 Dec 2025 06:00:41 +0000 Manifest this update: Fri 19 Dec 2025 06:00:41 +0000 Manifest next update: Sat 20 Dec 2025 06:00:41 +0000 Files and hashes: 1: BZzPZeF6nVBFp0ePkibSpSImMO4.roa (hash: CC6O/xKtKrtHkfClJGWdlIogukbhcIa4MJLuoLVEnNw=) 2: DUIJZvRDQ202HKrZ6QZsgh8Lpxg.roa (hash: WYZK5bFTDM+c1kX5q/i2Za+Wt5aspj2Z2UKRWytwMBA=) 3: p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl (hash: HUcIGEhsMu+eMxw2y5uAl0b5yEHAMyEvU5xlVoxK5AE=) 4: qRD7ujzJORaie3rLE2YnokYZ17U.roa (hash: S1UJWxv+rwUU/ObCl8nZivjHpfQGYiacpAIE0ZGhjrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:34:db:e6:32:b6:10:c0:96:7c:c6:4a:0d:a5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3 Validity Not Before: Dec 19 06:00:41 2025 GMT Not After : Dec 20 06:00:41 2025 GMT Subject: CN=5ef0bd47c576e6b63189d2852b0a1ca2e840bc43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1a:8f:2c:94:7a:e9:7f:d8:bb:68:49:96:40: 9a:37:46:46:c1:38:b7:1e:af:34:63:95:a6:13:39: 34:c4:e6:40:e9:ba:ad:9d:bd:b8:9e:65:61:2c:f2: ed:98:30:17:8f:5d:3e:80:1d:d1:43:3e:32:e5:f6: 0e:67:37:17:36:89:ef:9b:11:84:e2:79:70:da:81: c3:57:11:41:30:9d:62:fe:ef:df:dd:a8:ea:ac:20: 5c:13:31:16:cf:8b:5e:ed:a1:57:6c:7c:cf:53:d0: 9e:4d:ae:26:7b:1e:fe:bc:e0:a2:b6:ab:aa:5d:f8: 4d:db:02:55:fe:61:59:db:6b:aa:79:36:5b:18:c3: a4:ea:b2:0d:83:97:a1:0e:3d:62:43:d4:77:10:b6: 44:bd:27:25:fc:da:b8:7c:81:02:c4:b4:40:a6:9a: e3:8c:16:ad:ad:54:e8:37:4d:94:45:66:a2:e3:14: 00:5a:a0:a5:05:c3:d3:51:bd:3a:ef:04:d4:a8:f9: ff:0c:30:e5:a8:35:a1:c9:2e:d3:ee:53:4d:7c:1a: e3:d8:42:21:09:be:e5:89:7d:b9:7c:87:cc:93:d9: 0f:b8:1c:0b:c1:e2:5f:b6:d1:be:1b:41:18:fc:d6: e7:07:97:1a:4d:45:ab:74:9a:e4:0d:e4:71:db:e2: 0a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F0:BD:47:C5:76:E6:B6:31:89:D2:85:2B:0A:1C:A2:E8:40:BC:43 X509v3 Authority Key Identifier: keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:3c:56:55:85:98:8c:b3:6a:b0:7b:07:92:5d:25:fc:13:86: fa:e8:e7:79:89:f9:97:61:ec:7f:c9:0f:fd:06:c1:37:a4:74: 55:3e:28:ef:67:05:9f:a1:2b:61:ac:03:4c:ae:ea:6a:de:f0: a6:59:74:dc:2f:2e:52:50:fc:59:61:56:8a:19:22:a7:1e:db: 4c:b3:ff:6d:c4:cf:0a:09:44:11:d9:54:2c:0f:a2:73:15:8f: dc:8a:ab:02:ad:e5:08:8d:06:d3:97:83:da:cf:51:94:08:1c: 4d:b5:7b:e9:19:9e:a3:be:f6:95:55:d1:51:7c:3c:d5:6f:44: 66:6f:5f:74:c6:52:97:2e:1f:03:28:a9:eb:95:46:30:3f:5d: 00:f5:09:3f:da:8a:bc:fc:dc:94:ed:11:96:b1:51:e2:3d:a0: 16:b3:7b:75:11:e4:94:8e:1a:a3:3e:cc:eb:52:c3:33:15:f7: 66:62:10:a2:b4:99:6a:ee:9a:60:e8:41:9c:5e:6e:c1:80:3d: ad:d8:8c:e9:f7:95:d5:d2:20:69:df:62:42:29:d7:98:62:e7: 4a:84:c7:d0:13:c1:12:98:e2:e3:a2:a0:30:7b:3a:29:d6:ad: fb:99:62:ad:c1:65:35:d6:26:c8:b6:aa:96:16:f1:bb:c3:5a: 9c:0d:df:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MjTb5jK2EMCWfMZKDaWgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YWVlNjc2MjBkOWMwYWU2M2QyOTU3ODVjOWQ5NTZmMDYz YzIxYzMwHhcNMjUxMjE5MDYwMDQxWhcNMjUxMjIwMDYwMDQxWjAzMTEwLwYDVQQD Eyg1ZWYwYmQ0N2M1NzZlNmI2MzE4OWQyODUyYjBhMWNhMmU4NDBiYzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xqPLJR66X/Yu2hJlkCaN0ZGwTi3 Hq80Y5WmEzk0xOZA6bqtnb24nmVhLPLtmDAXj10+gB3RQz4y5fYOZzcXNonvmxGE 4nlw2oHDVxFBMJ1i/u/f3ajqrCBcEzEWz4te7aFXbHzPU9CeTa4mex7+vOCitquq XfhN2wJV/mFZ22uqeTZbGMOk6rINg5ehDj1iQ9R3ELZEvScl/Nq4fIECxLRApprj jBatrVToN02URWai4xQAWqClBcPTUb067wTUqPn/DDDlqDWhyS7T7lNNfBrj2EIh Cb7liX25fIfMk9kPuBwLweJfttG+G0EY/NbnB5caTUWrdJrkDeRx2+IKjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7wvUfFdua2MYnShSsKHKLoQLxDMB8GA1UdIwQY MBaAFKeu5nYg2cCuY9KVeFydlW8GPCHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYmEyNWEtMGFiZC00NTUwLWJjYTQt MGI3ZjE1YjUwOWNiLzEvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8yYmEyNWEtMGFiZC00NTUwLWJjYTQtMGI3ZjE1YjUwOWNi LzEvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojxWVYWY jLNqsHsHkl0l/BOG+ujneYn5l2Hsf8kP/QbBN6R0VT4o72cFn6ErYawDTK7qat7w pll03C8uUlD8WWFWihkipx7bTLP/bcTPCglEEdlULA+icxWP3IqrAq3lCI0G05eD 2s9RlAgcTbV76Rmeo772lVXRUXw81W9EZm9fdMZSly4fAyip65VGMD9dAPUJP9qK vPzclO0RlrFR4j2gFrN7dRHklI4aoz7M61LDMxX3ZmIQorSZau6aYOhBnF5uwYA9 rdiM6feV1dIgad9iQinXmGLnSoTH0BPBEpji46KgMHs6Kdat+5lircFlNdYmyLaq lhbxu8NanA3fXg== -----END CERTIFICATE-----Generated at Fri Dec 19 13:11:51 2025 by rpki-client