This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft File: 67yRzMqwFtO5EodhqcTlU5dhIcg.mft (raw, json) Hash identifier: KUXV6ocjgPyJtqwcNvCbj8vMsm5Y2QXS21mPIsLFbyw= Subject key identifier: 51:38:C7:18:AC:94:98:8D:8F:4E:4C:FE:5C:EA:63:30:73:8D:00:26 Authority key identifier: EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8 Certificate issuer: /CN=ebbc91cccab016d3b9128761a9c4e553976121c8 Certificate serial: 019B337B29051727FD5904F800FB1E3B6712 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft Manifest number: 030C Signing time: Thu 18 Dec 2025 22:01:08 +0000 Manifest this update: Thu 18 Dec 2025 22:01:08 +0000 Manifest next update: Fri 19 Dec 2025 22:01:08 +0000 Files and hashes: 1: 67yRzMqwFtO5EodhqcTlU5dhIcg.crl (hash: oivc7sCgG8h+6HNVmM8PWzaKdMmbVduvAsCiPlsLZkA=) 2: s5l9rjSPorbmJ6DV5XzzuHrSRWc.roa (hash: j3es1QhJ3BxNSOr+OOVs21FGOEaNLK9nKvgzFCuGlpk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:29:05:17:27:fd:59:04:f8:00:fb:1e:3b:67:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebbc91cccab016d3b9128761a9c4e553976121c8 Validity Not Before: Dec 18 22:01:08 2025 GMT Not After : Dec 19 22:01:08 2025 GMT Subject: CN=5138c718ac94988d8f4e4cfe5cea6330738d0026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:75:1e:a4:e1:df:9c:e2:2d:d6:4d:10:94:5e: 53:f0:d1:c5:8b:c7:a2:d0:e6:e2:87:b3:98:c3:8e: b1:29:67:71:53:9b:f2:44:d9:59:54:0f:e4:02:e4: 96:f4:2f:69:ff:02:c9:77:87:c9:06:0c:41:ca:df: ab:54:e6:bf:78:1b:9e:2d:2b:15:4a:96:17:be:24: 28:a7:46:f9:6e:39:41:2c:1f:10:5e:cf:ad:fd:13: b5:fe:7a:c8:49:34:6b:35:39:9c:c1:6b:4a:e7:dd: 33:fe:61:4d:b4:12:3b:ef:25:60:fc:33:9b:b6:ba: d4:9e:15:be:18:29:03:c9:6f:0f:4f:9f:37:9e:ab: 1f:fe:64:f6:fc:41:a5:52:3b:9f:26:95:b7:81:4a: f1:5e:4e:2e:17:ae:02:c7:c1:e4:b4:5a:6c:93:60: fc:ed:97:c8:96:a8:97:06:6c:14:45:af:f6:c9:fc: c5:ec:4f:32:9f:3c:fc:27:cc:24:f8:11:5a:ad:6e: 52:1c:31:cf:a0:5b:3a:32:ba:db:4c:64:d7:70:d9: 9d:e4:3f:9c:d7:72:7c:8b:36:66:c6:71:54:fd:0d: 31:9c:9b:80:ea:c2:68:1f:41:24:1e:94:c1:95:7d: 76:1e:51:64:33:c7:0e:de:84:05:ed:a6:03:8f:d1: 6c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:38:C7:18:AC:94:98:8D:8F:4E:4C:FE:5C:EA:63:30:73:8D:00:26 X509v3 Authority Key Identifier: keyid:EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:6f:5d:e9:15:f6:82:24:eb:e9:b8:7a:8a:b7:50:2b:fc:43: 7c:8c:64:73:cc:c6:2e:9f:f1:99:93:6f:f4:70:0e:9a:86:43: e4:44:08:63:aa:bf:57:c7:57:b1:80:00:42:84:ac:0b:a6:16: 68:f2:e7:0a:bf:eb:32:3d:e7:1b:64:97:b5:9b:91:8f:c0:94: 5f:34:8f:e2:c8:6b:62:c7:dd:bc:0f:7a:8f:ce:fe:c3:f5:8b: 2c:2b:83:31:be:62:ff:d7:0d:0b:92:47:48:f1:2e:f3:d3:7d: f4:ea:6d:9d:74:ad:9d:b6:ed:30:6f:c6:6a:3a:af:a9:6f:24: 0c:19:d9:52:c0:9f:51:d2:e8:05:a2:37:5f:4a:1c:fd:5b:75: 48:d7:4c:74:c4:bf:09:1f:78:31:38:54:1d:a7:ac:a7:f4:94: 6e:ac:eb:35:33:eb:09:6e:44:37:f9:d2:35:dd:cd:7c:50:75: 67:52:22:d5:3f:12:9c:6c:2e:53:1f:93:ff:c0:4e:03:9a:5d: d0:dc:e3:91:f3:50:5c:8c:14:4a:b5:2a:84:84:a2:4c:f0:07: 60:f4:e3:85:15:47:8b:2c:92:0b:e1:00:dd:f7:ff:b0:f1:a9: cb:35:d5:5a:72:0c:22:b7:f3:b9:db:1e:ae:6a:f2:ec:59:c2: 70:7b:33:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszeykFFyf9WQT4APseO2cSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYmM5MWNjY2FiMDE2ZDNiOTEyODc2MWE5YzRlNTUzOTc2 MTIxYzgwHhcNMjUxMjE4MjIwMTA4WhcNMjUxMjE5MjIwMTA4WjAzMTEwLwYDVQQD Eyg1MTM4YzcxOGFjOTQ5ODhkOGY0ZTRjZmU1Y2VhNjMzMDczOGQwMDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XUepOHfnOIt1k0QlF5T8NHFi8ei 0Obih7OYw46xKWdxU5vyRNlZVA/kAuSW9C9p/wLJd4fJBgxByt+rVOa/eBueLSsV SpYXviQop0b5bjlBLB8QXs+t/RO1/nrISTRrNTmcwWtK590z/mFNtBI77yVg/DOb trrUnhW+GCkDyW8PT583nqsf/mT2/EGlUjufJpW3gUrxXk4uF64Cx8HktFpsk2D8 7ZfIlqiXBmwURa/2yfzF7E8ynzz8J8wk+BFarW5SHDHPoFs6MrrbTGTXcNmd5D+c 13J8izZmxnFU/Q0xnJuA6sJoH0EkHpTBlX12HlFkM8cO3oQF7aYDj9FsnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFE4xxislJiNj05M/lzqYzBzjQAmMB8GA1UdIwQY MBaAFOu8kczKsBbTuRKHYanE5VOXYSHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjd5UnpNcXdGdE81RW9kaHFjVGxVNWRoSWNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9lYWRkYWUtMzc4My00ZmRiLWEzMDEt YTAwMWEyOWMyM2YwLzEvNjd5UnpNcXdGdE81RW9kaHFjVGxVNWRoSWNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9lYWRkYWUtMzc4My00ZmRiLWEzMDEtYTAwMWEyOWMyM2Yw LzEvNjd5UnpNcXdGdE81RW9kaHFjVGxVNWRoSWNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyG9d6RX2 giTr6bh6irdQK/xDfIxkc8zGLp/xmZNv9HAOmoZD5EQIY6q/V8dXsYAAQoSsC6YW aPLnCr/rMj3nG2SXtZuRj8CUXzSP4shrYsfdvA96j87+w/WLLCuDMb5i/9cNC5JH SPEu89N99OptnXStnbbtMG/GajqvqW8kDBnZUsCfUdLoBaI3X0oc/Vt1SNdMdMS/ CR94MThUHaesp/SUbqzrNTPrCW5EN/nSNd3NfFB1Z1Ii1T8SnGwuUx+T/8BOA5pd 0NzjkfNQXIwUSrUqhISiTPAHYPTjhRVHiyySC+EA3ff/sPGpyzXVWnIMIrfzudse rmry7FnCcHszdQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:56:21 2025 by rpki-client