This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft File: b58jpjrWJaftMNptos3J6LW7gD4.mft (raw, json) Hash identifier: bqjMagdZ/6zqEqril/DWvsy1hM0DCskABQ/AqSb+Zzg= Subject key identifier: D3:4B:9E:72:FC:DF:FE:06:74:3B:0F:12:D4:D8:E2:2D:F1:E0:A8:1F Authority key identifier: 6F:9F:23:A6:3A:D6:25:A7:ED:30:DA:6D:A2:CD:C9:E8:B5:BB:80:3E Certificate issuer: /CN=6f9f23a63ad625a7ed30da6da2cdc9e8b5bb803e Certificate serial: 019B3A909D09A89847B3B21DE2F6CADCFD18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b58jpjrWJaftMNptos3J6LW7gD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft Manifest number: 67 Signing time: Sat 20 Dec 2025 07:01:54 +0000 Manifest this update: Sat 20 Dec 2025 07:01:54 +0000 Manifest next update: Sun 21 Dec 2025 07:01:54 +0000 Files and hashes: 1: DnzI1ao7aTnh9Jg64y172kFEW10.roa (hash: iBNgKqvR9Nock/QGQ3vmBAJvLcgbXi64UUTOdAAo0Us=) 2: QXeX_hj0YihTkx3SqV3PC2T0syM.roa (hash: MR5IJFaW2NtmqgjhgTv+2teNHPIAKkBRldoN04grSBs=) 3: b58jpjrWJaftMNptos3J6LW7gD4.crl (hash: lRce4jhp/UcgGkw8tdb7KeKew//C/RJiX3Tr8bvAVwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft rsync://rpki.ripe.net/repository/DEFAULT/b58jpjrWJaftMNptos3J6LW7gD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:9d:09:a8:98:47:b3:b2:1d:e2:f6:ca:dc:fd:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9f23a63ad625a7ed30da6da2cdc9e8b5bb803e Validity Not Before: Dec 20 07:01:54 2025 GMT Not After : Dec 21 07:01:54 2025 GMT Subject: CN=d34b9e72fcdffe06743b0f12d4d8e22df1e0a81f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:39:ff:63:d2:ae:5a:5f:f3:30:4d:8e:de:45: 76:41:8f:61:e8:e6:11:0d:59:60:50:5a:27:ac:28: b8:59:8b:b2:37:c7:43:73:75:05:8d:06:77:16:d2: ee:44:51:0a:76:69:94:23:59:5f:00:fd:87:ce:6c: 02:c5:e7:35:54:bd:c7:08:91:91:3c:6b:07:5b:de: e4:ee:01:5a:24:9a:da:37:d1:3c:e0:27:5f:92:ba: 68:f0:ba:99:cf:17:cf:5f:cb:eb:ae:2b:ba:ad:31: 0c:c3:d5:55:87:4f:52:a1:ef:09:c5:89:32:0d:98: 35:4c:49:d7:91:a7:5d:ff:7b:e7:ea:c1:48:e8:2c: 02:53:d3:a9:20:a0:c4:ae:4f:24:1d:bb:40:04:bd: f6:9c:dd:6b:99:d9:27:50:ba:dd:02:e8:09:55:9c: 87:52:90:ec:fd:99:8e:11:1b:58:6b:1c:75:cf:7c: ab:20:ad:e8:e1:f6:26:64:00:e7:0a:44:09:61:86: 5b:37:6d:38:f9:b6:44:80:56:0c:92:e2:1d:7d:f6: 57:56:60:bd:76:d4:ec:3d:75:3f:0a:0d:41:72:c0: 38:56:be:b4:9a:cd:24:ff:c5:76:b3:48:75:b9:05: ad:46:95:48:66:5a:de:8d:c2:a7:45:d6:9e:88:d1: bc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4B:9E:72:FC:DF:FE:06:74:3B:0F:12:D4:D8:E2:2D:F1:E0:A8:1F X509v3 Authority Key Identifier: keyid:6F:9F:23:A6:3A:D6:25:A7:ED:30:DA:6D:A2:CD:C9:E8:B5:BB:80:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b58jpjrWJaftMNptos3J6LW7gD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:79:28:a6:32:73:7a:99:7e:39:1b:fa:ca:64:d7:f3:b1:7d: 25:28:6e:7c:17:f0:e2:e7:05:60:53:bd:fa:d7:4c:64:98:46: 28:53:41:8d:ae:c2:f9:1f:16:41:31:d7:bc:88:21:a4:60:65: f2:bb:95:c1:0a:45:8d:ab:a3:54:dd:ea:0f:d9:67:18:2a:46: 3c:1c:e4:4d:2c:30:33:c6:8f:1b:20:54:9c:c0:6d:19:6e:99: 95:62:53:e8:7b:5e:4d:39:f5:0a:56:7f:38:81:a0:55:32:99: 37:c6:f7:4b:cb:fe:87:35:fd:8d:bf:7d:e4:3e:37:6d:a0:52: 27:29:e9:f2:49:2d:9f:17:78:b9:a4:a2:81:63:b0:7f:11:7d: bd:e7:1f:07:fe:c4:1d:2f:27:89:60:c1:44:50:d3:b0:e8:a7: 32:4a:5b:04:c6:71:ae:8b:bf:54:75:5a:31:81:88:b4:a5:33: 79:fe:22:83:36:18:09:33:af:18:38:38:c8:92:93:a8:a1:a2: a4:c9:67:4d:65:05:c1:9c:42:3f:53:23:4c:10:32:a3:bc:68: c3:0d:85:ff:e9:b4:84:e7:f2:87:4d:c7:c9:d1:61:88:1b:56: 79:97:2f:4d:4a:0d:ec:59:f4:40:5f:f1:97:c0:43:70:77:cd: 65:01:39:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kJ0JqJhHs7Id4vbK3P0YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOWYyM2E2M2FkNjI1YTdlZDMwZGE2ZGEyY2RjOWU4YjVi YjgwM2UwHhcNMjUxMjIwMDcwMTU0WhcNMjUxMjIxMDcwMTU0WjAzMTEwLwYDVQQD EyhkMzRiOWU3MmZjZGZmZTA2NzQzYjBmMTJkNGQ4ZTIyZGYxZTBhODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTn/Y9KuWl/zME2O3kV2QY9h6OYR DVlgUFonrCi4WYuyN8dDc3UFjQZ3FtLuRFEKdmmUI1lfAP2HzmwCxec1VL3HCJGR PGsHW97k7gFaJJraN9E84Cdfkrpo8LqZzxfPX8vrriu6rTEMw9VVh09Soe8JxYky DZg1TEnXkadd/3vn6sFI6CwCU9OpIKDErk8kHbtABL32nN1rmdknULrdAugJVZyH UpDs/ZmOERtYaxx1z3yrIK3o4fYmZADnCkQJYYZbN204+bZEgFYMkuIdffZXVmC9 dtTsPXU/Cg1BcsA4Vr60ms0k/8V2s0h1uQWtRpVIZlrejcKnRdaeiNG8SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNLnnL83/4GdDsPEtTY4i3x4KgfMB8GA1UdIwQY MBaAFG+fI6Y61iWn7TDabaLNyei1u4A+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjU4anBqcldKYWZ0TU5wdG9zM0o2TFc3Z0Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNzJkZTQtNjM2Ni00N2ZhLWI2ZjYt ZDQyYmQ2ODI2MzhkLzEvYjU4anBqcldKYWZ0TU5wdG9zM0o2TFc3Z0Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iNzJkZTQtNjM2Ni00N2ZhLWI2ZjYtZDQyYmQ2ODI2Mzhk LzEvYjU4anBqcldKYWZ0TU5wdG9zM0o2TFc3Z0Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHkopjJz epl+ORv6ymTX87F9JShufBfw4ucFYFO9+tdMZJhGKFNBja7C+R8WQTHXvIghpGBl 8ruVwQpFjaujVN3qD9lnGCpGPBzkTSwwM8aPGyBUnMBtGW6ZlWJT6HteTTn1ClZ/ OIGgVTKZN8b3S8v+hzX9jb995D43baBSJynp8kktnxd4uaSigWOwfxF9vecfB/7E HS8niWDBRFDTsOinMkpbBMZxrou/VHVaMYGItKUzef4igzYYCTOvGDg4yJKTqKGi pMlnTWUFwZxCP1MjTBAyo7xoww2F/+m0hOfyh03HydFhiBtWeZcvTUoN7Fn0QF/x l8BDcHfNZQE5ew== -----END CERTIFICATE-----Generated at Sat Dec 20 10:58:56 2025 by rpki-client