This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft File: 67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json) Hash identifier: DR8+iq7PWRfH7AFagNfpoR+qBXGu2giT594242D58ys= Subject key identifier: EA:97:52:68:FA:05:7F:F9:A9:4E:1C:15:0B:DA:1B:7D:A8:D9:14:D5 Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c Certificate serial: 019B3EA3948692B465545CABE484D38A64B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 02:01:06 +0000 Manifest this update: Sun 21 Dec 2025 02:01:06 +0000 Manifest next update: Mon 22 Dec 2025 02:01:06 +0000 Files and hashes: 1: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: yhXYhqt9X6w3IkCa5Qog3hrnCdF8fH0BGUnLhdcb6+4=) 2: EqkXgOY99e-iUkXVNdA5xYmgxlo.roa (hash: veZu9uXJXJvhWX4xtP47S8hZ9s5IMdM1R7TmdJX9vpU=) 3: wrDqtsAOuC7Agc1zIPRkhKVhP8U.roa (hash: kfogXl8tGYAhJxfycDCrALmBGs+Zy+SyeMiS4IsU5B8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:94:86:92:b4:65:54:5c:ab:e4:84:d3:8a:64:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c Validity Not Before: Dec 21 02:01:06 2025 GMT Not After : Dec 22 02:01:06 2025 GMT Subject: CN=ea975268fa057ff9a94e1c150bda1b7da8d914d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:78:e3:be:7f:5f:d8:26:1b:75:d3:cc:a8:aa: 9d:c0:a5:0f:d7:77:c0:50:29:40:a1:9d:ad:c6:fa: 38:74:a6:f5:ec:ec:2f:40:92:28:5d:8a:86:26:2a: 18:cc:a9:c3:9c:4a:cf:3e:22:cf:90:db:15:14:bf: 2c:07:8e:7b:c3:6d:13:6f:a9:46:84:40:05:81:8d: 65:6f:d7:85:d7:19:a2:37:3d:e4:b9:3a:90:84:68: 5e:86:2f:00:bf:88:59:6a:9a:4f:75:e7:a0:ea:8a: dc:4d:a7:eb:27:3a:5d:9c:42:73:81:d6:18:cc:d6: 7d:7b:f8:32:77:c8:3b:e9:25:3f:47:00:f7:f3:1f: f8:c8:1a:c0:87:2c:17:5f:5d:2b:f0:26:a1:11:e0: 4f:b3:47:f4:8d:7c:93:7a:e3:81:a5:5e:41:95:b9: 49:de:88:c3:52:de:c1:52:41:f1:6e:59:50:31:10: e5:30:b8:81:67:03:92:6d:81:06:7c:3a:5d:b6:aa: 3f:9a:9a:cf:08:fe:7e:3d:8e:6c:54:58:2b:56:1f: 76:ac:32:fb:eb:00:b9:44:41:3c:a1:41:e3:2e:69: 85:13:7a:5c:93:06:01:8a:af:e5:0b:14:cd:57:94: bd:97:f6:65:24:6d:60:40:f4:c5:9b:a2:0e:2e:7a: 91:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:97:52:68:FA:05:7F:F9:A9:4E:1C:15:0B:DA:1B:7D:A8:D9:14:D5 X509v3 Authority Key Identifier: keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:0c:0f:81:1e:93:7a:14:f2:f2:46:df:26:9e:52:f6:25:c0: 5a:5c:12:ad:ee:13:f3:cc:2f:b0:0a:7b:f3:37:89:6c:45:80: fc:b1:cb:08:b1:6a:a9:57:92:90:82:84:cb:5d:25:75:93:6f: 88:f2:0d:67:30:d0:ca:3d:f4:08:80:b9:e0:fd:39:2e:c8:a5: e7:b4:35:b1:c7:ca:cf:38:84:9f:05:8d:ce:9a:ac:77:f6:7c: 7b:f9:56:86:8f:c3:13:87:4d:8d:5c:7f:fb:b0:d1:5b:e6:70: 62:53:86:55:4d:cb:7c:27:cd:9e:c5:a8:b2:49:23:ef:97:51: b8:54:3a:05:be:e1:a3:ba:0a:55:13:f9:db:06:9f:75:c4:03: 51:d6:cb:f9:f9:b0:50:d7:2c:a4:29:e6:0e:e6:37:f3:ce:c0: b2:8d:e7:08:26:86:ff:84:18:83:66:cd:f1:11:c0:c1:38:48: 13:d9:72:88:68:e6:e8:58:ea:cb:21:28:cc:8d:90:ab:4f:43: 2e:98:23:b6:f3:6a:ac:01:2a:1e:ce:e5:09:05:97:c1:e0:0b: 2e:ca:be:be:72:a6:3f:e9:14:2d:ae:4e:62:5e:f2:4d:56:cc: 30:80:dd:fa:aa:ae:14:5c:7c:3b:e2:d9:26:08:95:b4:d0:95: 77:42:72:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o5SGkrRlVFyr5ITTimSzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYjA4YmU4MDAxMjY1MTFjZmY4ZDI1Njk5ZDlhYzEzNmVk MGVjOGMwHhcNMjUxMjIxMDIwMTA2WhcNMjUxMjIyMDIwMTA2WjAzMTEwLwYDVQQD EyhlYTk3NTI2OGZhMDU3ZmY5YTk0ZTFjMTUwYmRhMWI3ZGE4ZDkxNGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3jjvn9f2CYbddPMqKqdwKUP13fA UClAoZ2txvo4dKb17OwvQJIoXYqGJioYzKnDnErPPiLPkNsVFL8sB457w20Tb6lG hEAFgY1lb9eF1xmiNz3kuTqQhGhehi8Av4hZappPdeeg6orcTafrJzpdnEJzgdYY zNZ9e/gyd8g76SU/RwD38x/4yBrAhywXX10r8CahEeBPs0f0jXyTeuOBpV5BlblJ 3ojDUt7BUkHxbllQMRDlMLiBZwOSbYEGfDpdtqo/mprPCP5+PY5sVFgrVh92rDL7 6wC5REE8oUHjLmmFE3pckwYBiq/lCxTNV5S9l/ZlJG1gQPTFm6IOLnqRFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqXUmj6BX/5qU4cFQvaG32o2RTVMB8GA1UdIwQY MBaAFOuwi+gAEmURz/jSVpnZrBNu0OyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjdDTDZBQVNaUkhQLU5KV21kbXNFMjdRN0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82YzE0MmEtMmI1ZS00MTZiLTk0ZGUt YmE5ZDUxZmU5ZTJiLzEvNjdDTDZBQVNaUkhQLU5KV21kbXNFMjdRN0l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS82YzE0MmEtMmI1ZS00MTZiLTk0ZGUtYmE5ZDUxZmU5ZTJi LzEvNjdDTDZBQVNaUkhQLU5KV21kbXNFMjdRN0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtQwPgR6T ehTy8kbfJp5S9iXAWlwSre4T88wvsAp78zeJbEWA/LHLCLFqqVeSkIKEy10ldZNv iPINZzDQyj30CIC54P05Lsil57Q1scfKzziEnwWNzpqsd/Z8e/lWho/DE4dNjVx/ +7DRW+ZwYlOGVU3LfCfNnsWoskkj75dRuFQ6Bb7ho7oKVRP52wafdcQDUdbL+fmw UNcspCnmDuY3887Aso3nCCaG/4QYg2bN8RHAwThIE9lyiGjm6FjqyyEozI2Qq09D LpgjtvNqrAEqHs7lCQWXweALLsq+vnKmP+kULa5OYl7yTVbMMIDd+qquFFx8O+LZ JgiVtNCVd0Jy8Q== -----END CERTIFICATE-----Generated at Sun Dec 21 06:17:11 2025 by rpki-client