This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft File: B67xkPRL_B2wxQ8ac_3wFwga_hY.mft (raw, json) Hash identifier: wAZD/rm2wxg+Ai3MQK2DFCzt2UCSZSgdIdEenBZPohw= Subject key identifier: 4D:6B:46:9D:47:0C:19:D2:1B:57:04:38:CC:D6:B6:9B:DB:2B:E0:3B Authority key identifier: 07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16 Certificate issuer: /CN=07aef190f44bfc1db0c50f1a73fdf017081afe16 Certificate serial: 019B3EDACC67DBA5E22674F822FF37835753 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft Manifest number: 0CE2 Signing time: Sun 21 Dec 2025 03:01:25 +0000 Manifest this update: Sun 21 Dec 2025 03:01:25 +0000 Manifest next update: Mon 22 Dec 2025 03:01:25 +0000 Files and hashes: 1: B67xkPRL_B2wxQ8ac_3wFwga_hY.crl (hash: p968VsAocCfyXokiCCq8iJecZtmDneIx7FSDDarXhbg=) 2: o0m8fWeQnLg_XbqIRRPxINGkNnk.roa (hash: hFBwillrrnPw4RwjJ9B6leCvzXkiINuH8WcY9jtsCtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:cc:67:db:a5:e2:26:74:f8:22:ff:37:83:57:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07aef190f44bfc1db0c50f1a73fdf017081afe16 Validity Not Before: Dec 21 03:01:25 2025 GMT Not After : Dec 22 03:01:25 2025 GMT Subject: CN=4d6b469d470c19d21b570438ccd6b69bdb2be03b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:07:90:45:b7:c8:b0:79:fa:c7:f6:64:ab:99: 99:f7:82:9f:01:bb:27:c1:5a:e0:c4:a0:cc:67:40: dc:e5:44:c9:d3:c2:21:c7:c5:45:1c:22:df:06:9e: d6:6a:49:df:b4:1d:90:ad:68:89:a3:23:a3:66:f8: a0:99:be:43:c9:87:41:c9:09:5c:4f:72:f1:03:4c: ba:3c:b4:0c:b9:5a:06:df:e2:85:cc:24:fd:13:75: e5:45:00:94:96:03:77:56:70:48:f9:47:f1:34:a5: 8d:1d:02:ed:3f:39:85:2e:a2:62:10:a7:60:41:e9: a2:9d:85:b1:fb:57:2e:9a:5b:d2:2a:42:6b:e4:67: 15:03:a3:40:3a:ae:c5:d1:1c:b9:fa:97:9d:34:d3: 6e:ac:b8:dc:5b:99:11:35:69:18:af:e9:48:23:4a: 37:f9:28:94:8b:71:01:3b:cb:59:9f:3c:03:ab:8a: 7f:19:9b:62:b6:22:9d:2b:fe:38:67:60:fe:79:b7: ea:42:6d:27:98:09:e7:dd:46:9b:eb:1b:16:66:70: bd:80:e9:98:6b:59:0e:84:e8:10:18:20:03:18:d9: 6b:df:0d:0a:ae:32:17:a1:f9:77:34:66:95:f2:c0: 09:5c:a8:05:65:4d:31:29:6a:28:9f:de:98:a4:51: f7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6B:46:9D:47:0C:19:D2:1B:57:04:38:CC:D6:B6:9B:DB:2B:E0:3B X509v3 Authority Key Identifier: keyid:07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:b7:cf:59:39:48:80:c5:bb:2c:77:7c:23:5b:49:af:7c:cc: 8f:ed:38:4f:ed:aa:ee:39:88:df:6c:7a:82:cc:19:29:60:22: 9e:32:cd:8f:d2:ef:a7:b3:b2:6e:f1:71:e1:4e:8f:49:20:26: f9:98:9f:39:61:17:e5:2b:c2:6c:b7:87:1f:94:60:5b:e8:4e: ae:9a:8e:93:4a:15:c8:66:4c:e6:b3:3f:ff:3f:5f:70:f0:09: 3b:78:21:e3:e3:04:40:f4:2e:79:15:9a:ca:e4:c4:2c:3d:37: 64:ce:6d:d0:40:70:5b:11:0f:1f:c7:6c:99:d9:be:9f:f8:11: e8:41:ae:36:28:6f:2c:d6:b7:4f:db:16:67:81:6a:1f:c2:d0: ac:f8:08:96:10:ad:89:10:d3:09:b0:55:a9:08:92:91:33:29: f2:5c:1c:f3:43:e8:25:61:a8:d0:73:cf:46:ed:79:b5:a7:d8: f2:66:49:8f:d2:b2:e9:fa:13:7c:dd:2e:78:4e:3e:98:2b:06: 97:72:1c:d4:db:c9:4d:de:24:92:37:b4:9d:2f:80:7f:6b:84: e4:bf:87:02:37:29:60:f5:46:f5:31:f6:e4:5f:51:68:cc:b7: 6a:bb:87:71:57:90:6d:35:7a:7a:eb:65:38:22:87:c5:92:51: ee:59:5d:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2sxn26XiJnT4Iv83g1dTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YWVmMTkwZjQ0YmZjMWRiMGM1MGYxYTczZmRmMDE3MDgx YWZlMTYwHhcNMjUxMjIxMDMwMTI1WhcNMjUxMjIyMDMwMTI1WjAzMTEwLwYDVQQD Eyg0ZDZiNDY5ZDQ3MGMxOWQyMWI1NzA0MzhjY2Q2YjY5YmRiMmJlMDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQeQRbfIsHn6x/Zkq5mZ94KfAbsn wVrgxKDMZ0Dc5UTJ08Ihx8VFHCLfBp7WaknftB2QrWiJoyOjZvigmb5DyYdByQlc T3LxA0y6PLQMuVoG3+KFzCT9E3XlRQCUlgN3VnBI+UfxNKWNHQLtPzmFLqJiEKdg QeminYWx+1cumlvSKkJr5GcVA6NAOq7F0Ry5+pedNNNurLjcW5kRNWkYr+lII0o3 +SiUi3EBO8tZnzwDq4p/GZtitiKdK/44Z2D+ebfqQm0nmAnn3Uab6xsWZnC9gOmY a1kOhOgQGCADGNlr3w0KrjIXofl3NGaV8sAJXKgFZU0xKWoon96YpFH3wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1rRp1HDBnSG1cEOMzWtpvbK+A7MB8GA1UdIwQY MBaAFAeu8ZD0S/wdsMUPGnP98BcIGv4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjY3eGtQUkxfQjJ3eFE4YWNfM3dGd2dhX2hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kNjk1MjUtN2NmYi00N2M4LTljNGYt ZWY0NDU4ZWEyMGNkLzEvQjY3eGtQUkxfQjJ3eFE4YWNfM3dGd2dhX2hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kNjk1MjUtN2NmYi00N2M4LTljNGYtZWY0NDU4ZWEyMGNk LzEvQjY3eGtQUkxfQjJ3eFE4YWNfM3dGd2dhX2hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbfPWTlI gMW7LHd8I1tJr3zMj+04T+2q7jmI32x6gswZKWAinjLNj9Lvp7OybvFx4U6PSSAm +ZifOWEX5SvCbLeHH5RgW+hOrpqOk0oVyGZM5rM//z9fcPAJO3gh4+MEQPQueRWa yuTELD03ZM5t0EBwWxEPH8dsmdm+n/gR6EGuNihvLNa3T9sWZ4FqH8LQrPgIlhCt iRDTCbBVqQiSkTMp8lwc80PoJWGo0HPPRu15tafY8mZJj9Ky6foTfN0ueE4+mCsG l3Ic1NvJTd4kkje0nS+Af2uE5L+HAjcpYPVG9TH25F9RaMy3aruHcVeQbTV6eutl OCKHxZJR7lldiQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:44:05 2025 by rpki-client