This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json) Hash identifier: trMD14UPUsjPgXLi//s5WTkDZsgXzNydCoAm/d0fnfs= Subject key identifier: C9:D8:D7:2C:DE:4A:D7:86:4A:68:18:74:FC:78:B3:2C:9C:C7:D4:1A Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04 Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104 Certificate serial: 019B3A5886FB67722067B008ED89DDFBB815 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft Manifest number: 179B Signing time: Sat 20 Dec 2025 06:00:38 +0000 Manifest this update: Sat 20 Dec 2025 06:00:38 +0000 Manifest next update: Sun 21 Dec 2025 06:00:38 +0000 Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: HY7LSWM7gF/Y7jiwn7WnxVcYkEeTf6ieua54yZZmolc=) 2: KZug6FKGZZRd25xEmWgbfg0_wdw.roa (hash: ctBKd+yf9Znf9nJH1GwdvGB/+F5ODDOhs9z06Ml25Ow=) 3: Yhr8lSQPkVNE2nE3dAVuTYK9ZTE.roa (hash: DYAfTfRN42C4dDlnu2IUI5X6rPDqQbV+Vyawh6lte/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:86:fb:67:72:20:67:b0:08:ed:89:dd:fb:b8:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104 Validity Not Before: Dec 20 06:00:38 2025 GMT Not After : Dec 21 06:00:38 2025 GMT Subject: CN=c9d8d72cde4ad7864a681874fc78b32c9cc7d41a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9c:57:00:4e:51:13:76:cd:ea:26:97:39:d3: 66:c4:a2:6b:2a:96:6c:4a:f7:33:2d:07:cf:c6:e3: f6:25:42:57:b8:a9:4a:5a:a9:2d:60:f4:0a:d5:0d: df:78:be:ba:d0:31:34:27:ae:05:d0:e1:d9:fd:5e: f5:0e:05:56:22:24:70:5e:97:07:98:7e:fe:fb:fc: 12:73:82:4e:00:8d:2c:66:f8:2c:cc:f2:25:d3:00: 70:a1:cf:a9:b9:f8:81:55:5c:51:84:73:58:53:b4: f6:03:f5:58:0a:13:80:40:83:55:03:49:5d:29:c3: cd:b3:d0:23:70:73:d6:ad:95:86:e6:75:c7:92:de: 81:3a:56:0a:d7:eb:46:52:4c:af:d5:83:48:db:e0: c9:15:44:4d:59:af:61:ca:c0:4e:46:0f:5a:14:bc: 6c:37:1d:09:a7:30:c4:88:d1:09:13:d0:b9:7b:70: 03:d2:0f:46:8c:9e:b5:d0:b6:6a:01:89:18:57:ce: 1b:72:10:73:43:32:52:45:e6:ba:f2:eb:27:d6:a6: 18:38:bb:21:6f:d5:61:b5:a1:a6:08:12:b9:8f:6f: 06:fc:5c:90:30:93:8d:16:e6:97:3f:f0:88:bd:79: 71:fd:b8:dc:4f:b3:e1:16:3e:d4:f8:56:8c:f7:27: c9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D8:D7:2C:DE:4A:D7:86:4A:68:18:74:FC:78:B3:2C:9C:C7:D4:1A X509v3 Authority Key Identifier: keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:4d:ef:e9:ff:c6:5b:a4:66:05:37:ba:ee:67:39:cf:a8:ed: 0e:46:c9:85:5b:a0:88:6b:ba:db:d0:4d:3b:71:df:63:0b:31: 0e:87:49:18:6e:84:67:2d:b0:c6:1e:2a:ce:a9:eb:f0:ea:05: 42:1b:16:59:82:17:a9:51:1a:28:77:f8:c5:f5:67:21:53:88: a4:1a:7e:2f:a2:6d:c6:36:57:6b:d3:28:5c:3c:a2:87:e4:02: a5:d5:2c:5f:dc:95:17:34:6f:4b:bd:bf:51:26:e6:ca:b2:5e: a2:3b:6e:a7:71:c7:9b:6a:51:c3:cb:2c:69:81:bb:b9:1c:ad: 5e:8e:07:68:1c:8f:5c:14:7d:38:09:b1:e6:84:67:0b:97:7c: b2:04:31:a2:4d:ca:3f:92:b9:51:1f:0a:8f:42:d8:47:21:d9: f7:80:27:23:ed:6a:80:8d:04:0d:14:d5:df:2e:28:74:b3:8b: d3:39:6b:72:1c:ff:a9:6e:02:90:30:12:e8:6c:79:81:60:51: b1:c3:3c:73:e9:89:4b:7e:08:dd:b3:bd:09:0e:a3:63:91:e3: 75:6a:83:82:68:9c:af:a6:4a:b5:b8:91:55:55:92:d8:ea:8a: 69:6e:3f:11:91:d6:89:fe:a8:dc:4e:0c:6a:d2:78:cb:88:80: 68:7d:7f:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WIb7Z3IgZ7AI7Ynd+7gVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYzY2NDAzYWQwYzQ1MzdhZjljMzJiMGRlZjBjNTJhYzJh YWIxMDQwHhcNMjUxMjIwMDYwMDM4WhcNMjUxMjIxMDYwMDM4WjAzMTEwLwYDVQQD EyhjOWQ4ZDcyY2RlNGFkNzg2NGE2ODE4NzRmYzc4YjMyYzljYzdkNDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJxXAE5RE3bN6iaXOdNmxKJrKpZs SvczLQfPxuP2JUJXuKlKWqktYPQK1Q3feL660DE0J64F0OHZ/V71DgVWIiRwXpcH mH7++/wSc4JOAI0sZvgszPIl0wBwoc+pufiBVVxRhHNYU7T2A/VYChOAQINVA0ld KcPNs9AjcHPWrZWG5nXHkt6BOlYK1+tGUkyv1YNI2+DJFURNWa9hysBORg9aFLxs Nx0JpzDEiNEJE9C5e3AD0g9GjJ610LZqAYkYV84bchBzQzJSRea68usn1qYYOLsh b9VhtaGmCBK5j28G/FyQMJONFuaXP/CIvXlx/bjcT7PhFj7U+FaM9yfJgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnY1yzeSteGSmgYdPx4syycx9QaMB8GA1UdIwQY MBaAFOvGZAOtDEU3r5wysN7wxSrCqrEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi83MjgxZGEtMGViMC00MGE4LTk5ODMt ZDFhOWRhNGExMzBkLzEvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi83MjgxZGEtMGViMC00MGE4LTk5ODMtZDFhOWRhNGExMzBk LzEvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABE3v6f/G W6RmBTe67mc5z6jtDkbJhVugiGu629BNO3HfYwsxDodJGG6EZy2wxh4qzqnr8OoF QhsWWYIXqVEaKHf4xfVnIVOIpBp+L6JtxjZXa9MoXDyih+QCpdUsX9yVFzRvS72/ USbmyrJeojtup3HHm2pRw8ssaYG7uRytXo4HaByPXBR9OAmx5oRnC5d8sgQxok3K P5K5UR8Kj0LYRyHZ94AnI+1qgI0EDRTV3y4odLOL0zlrchz/qW4CkDAS6Gx5gWBR scM8c+mJS34I3bO9CQ6jY5HjdWqDgmicr6ZKtbiRVVWS2OqKaW4/EZHWif6o3E4M atJ4y4iAaH1/Ew== -----END CERTIFICATE-----Generated at Sat Dec 20 10:32:12 2025 by rpki-client