This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json) Hash identifier: oEjy2KqgdNDJ87xZZy5uUlKsF5iAxpmkV6MJNbGt7rQ= Subject key identifier: 78:18:16:09:47:C6:B2:BA:8B:0E:9F:9E:C5:47:17:CE:19:91:38:D7 Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6 Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6 Certificate serial: 019B5A888B46B0A706BB81F9CD5D183B6CE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 12:00:56 +0000 Manifest this update: Fri 26 Dec 2025 12:00:56 +0000 Manifest next update: Sat 27 Dec 2025 12:00:56 +0000 Files and hashes: 1: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: wOM3Zyp+RVhVQqtHzLdSfnWef1E3nyDVZdJZj//sKCA=) 2: _d5sQjAqDWf1j4CIit8rsE25AME.roa (hash: RxeX2YNDuil9ac/AHR6OmQjklSZPEl3KjGtvZpjNDfk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:8b:46:b0:a7:06:bb:81:f9:cd:5d:18:3b:6c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6 Validity Not Before: Dec 26 12:00:56 2025 GMT Not After : Dec 27 12:00:56 2025 GMT Subject: CN=7818160947c6b2ba8b0e9f9ec54717ce199138d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5f:15:20:ec:09:44:c4:21:e5:ff:e7:37:65: fe:67:d3:6b:86:64:a5:c2:40:b5:40:12:fa:9c:2a: dd:e7:c1:83:71:24:2d:92:7a:93:11:83:d0:3f:f0: 67:4d:6f:60:d8:8f:74:d1:42:f9:8d:77:8d:cb:84: 5b:15:00:44:cf:d8:1b:06:e7:e1:c8:f6:85:a1:64: 34:c0:4e:c9:fd:4d:bf:a0:5b:77:df:56:2a:4e:84: 35:78:58:10:7c:01:78:29:db:76:b0:9a:cb:99:32: fc:0d:e8:f7:50:df:c2:11:af:4e:66:7f:f3:8d:16: 21:7d:56:1a:5b:59:37:05:92:5e:0b:3c:38:45:d8: e1:1b:98:68:de:d6:dd:d1:b0:36:56:e8:72:ea:a1: 13:78:16:ea:46:0a:8e:16:5e:87:bd:e1:89:8e:a2: ad:6e:ee:ec:47:48:cc:8c:04:88:53:d1:71:e9:c6: 67:15:a8:b9:af:da:7a:04:80:12:bd:16:90:cc:89: ec:a3:05:ed:b2:c9:41:d9:c2:49:c6:b1:c9:96:13: c8:a0:55:1c:79:f3:1c:59:3b:6c:fc:eb:07:42:29: 31:02:42:bb:6a:e8:3b:89:29:a3:82:7c:dd:c0:2d: 64:38:fe:88:28:de:3e:72:e6:6f:a0:ea:0c:cd:48: e9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:18:16:09:47:C6:B2:BA:8B:0E:9F:9E:C5:47:17:CE:19:91:38:D7 X509v3 Authority Key Identifier: keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:2a:73:57:0b:92:61:f8:06:b8:00:20:95:95:d0:f8:16:19: 50:1c:f9:dd:6c:bf:1a:d7:a9:da:b0:c8:3d:9c:a8:b7:36:de: 1c:96:a7:ca:95:b0:0d:17:50:d7:6a:77:b9:e5:b1:4b:7b:1c: 38:f6:93:c5:ce:62:36:2f:3c:20:74:03:55:b4:fd:d1:1b:1c: 92:d2:7b:7e:2e:0e:a9:5c:e2:26:db:f4:23:f6:ac:04:6e:d8: 31:a8:f9:e7:a0:8b:97:58:d3:e9:e3:85:1a:f3:63:b6:66:85: 2e:ad:1f:23:54:52:d0:b0:b3:5a:ba:9c:8d:65:6d:eb:62:81: 4b:cc:dc:97:84:6f:97:d4:d8:6d:73:23:aa:b4:e5:85:6d:e4: cf:bb:32:9b:c2:02:d0:c3:9e:d6:1e:2c:55:93:49:0a:7f:ab: 44:d3:44:30:e3:1a:8f:c6:53:db:f2:74:e6:b9:0e:b4:7a:10: b9:c9:d4:0f:6e:f7:44:fa:d6:fd:59:49:ff:48:74:99:4c:1d: 8a:31:1a:3b:a7:c0:b4:eb:19:4e:09:9f:f5:ac:6c:25:af:30: 47:39:49:e8:7b:98:25:30:c2:77:17:7b:3c:bd:a6:c0:d8:6e: 37:f8:cf:9c:da:07:0a:27:e3:11:15:35:95:82:aa:8d:e2:3f: 18:9e:4a:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiItGsKcGu4H5zV0YO2zoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYjAxNmY0NmRlMmRiNWNjMzExNjU5OWVlODcxYzc2YzJj ODM0YzYwHhcNMjUxMjI2MTIwMDU2WhcNMjUxMjI3MTIwMDU2WjAzMTEwLwYDVQQD Eyg3ODE4MTYwOTQ3YzZiMmJhOGIwZTlmOWVjNTQ3MTdjZTE5OTEzOGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2V8VIOwJRMQh5f/nN2X+Z9NrhmSl wkC1QBL6nCrd58GDcSQtknqTEYPQP/BnTW9g2I900UL5jXeNy4RbFQBEz9gbBufh yPaFoWQ0wE7J/U2/oFt331YqToQ1eFgQfAF4Kdt2sJrLmTL8Dej3UN/CEa9OZn/z jRYhfVYaW1k3BZJeCzw4RdjhG5ho3tbd0bA2Vuhy6qETeBbqRgqOFl6HveGJjqKt bu7sR0jMjASIU9Fx6cZnFai5r9p6BIASvRaQzInsowXtsslB2cJJxrHJlhPIoFUc efMcWTts/OsHQikxAkK7aug7iSmjgnzdwC1kOP6IKN4+cuZvoOoMzUjpBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgYFglHxrK6iw6fnsVHF84ZkTjXMB8GA1UdIwQY MBaAFOuwFvRt4ttcwxFlme6HHHbCyDTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjdBVzlHM2kyMXpERVdXWjdvY2Nkc0xJTk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8zZDAxM2UtOWU1OC00NjVlLTg3YmIt MDcyZmNhNWZmZWJlLzEvNjdBVzlHM2kyMXpERVdXWjdvY2Nkc0xJTk1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8zZDAxM2UtOWU1OC00NjVlLTg3YmItMDcyZmNhNWZmZWJl LzEvNjdBVzlHM2kyMXpERVdXWjdvY2Nkc0xJTk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdypzVwuS YfgGuAAglZXQ+BYZUBz53Wy/Gtep2rDIPZyotzbeHJanypWwDRdQ12p3ueWxS3sc OPaTxc5iNi88IHQDVbT90RscktJ7fi4OqVziJtv0I/asBG7YMaj556CLl1jT6eOF GvNjtmaFLq0fI1RS0LCzWrqcjWVt62KBS8zcl4Rvl9TYbXMjqrTlhW3kz7sym8IC 0MOe1h4sVZNJCn+rRNNEMOMaj8ZT2/J05rkOtHoQucnUD273RPrW/VlJ/0h0mUwd ijEaO6fAtOsZTgmf9axsJa8wRzlJ6HuYJTDCdxd7PL2mwNhuN/jPnNoHCifjERU1 lYKqjeI/GJ5KtA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:05:25 2025 by rpki-client