This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft File: 67KkJVDl4rSqGkc7KzcbwoNBoWo.mft (raw, json) Hash identifier: FD+VRTwiuL85V8IvinAkd7bQI9QedL4+qBUWqcHxRps= Subject key identifier: F4:C0:58:4F:E3:A6:80:68:B0:CF:80:4F:44:03:35:84:F5:DF:89:97 Authority key identifier: EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A Certificate issuer: /CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a Certificate serial: 019B4B830D7307ADC19F11B0BB40F6479F22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft Manifest number: 0EF2 Signing time: Tue 23 Dec 2025 14:00:38 +0000 Manifest this update: Tue 23 Dec 2025 14:00:38 +0000 Manifest next update: Wed 24 Dec 2025 14:00:38 +0000 Files and hashes: 1: 67KkJVDl4rSqGkc7KzcbwoNBoWo.crl (hash: +b/f3m6fK7xm6Ei2BKnCdtPLtim5Hrc4giOu8cqGMxQ=) 2: UGLv7iIWQ-5niuk1r5Vedx_SrIM.roa (hash: +rlvmMS0hKnH04ERI3SbO3F5bnx5NVtVmXo36GJpU3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:83:0d:73:07:ad:c1:9f:11:b0:bb:40:f6:47:9f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a Validity Not Before: Dec 23 14:00:38 2025 GMT Not After : Dec 24 14:00:38 2025 GMT Subject: CN=f4c0584fe3a68068b0cf804f44033584f5df8997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3c:b6:76:8f:fa:42:d3:32:14:11:59:81:1e: 86:c9:1a:4b:98:17:9d:06:02:5b:c0:1e:d9:58:f5: 08:3e:15:ea:1d:8b:9f:37:59:4d:91:f0:66:fe:a7: ef:f3:17:66:3d:a2:bd:b5:a1:98:ce:cd:44:ff:a1: e4:15:58:ec:84:4e:d6:4c:f7:c1:ec:24:3b:80:7b: b5:53:d8:2d:8f:0e:90:bc:8e:65:e4:01:16:b8:02: c3:71:ba:33:32:4b:95:8a:ab:0d:1e:03:de:54:d9: 63:80:da:0d:52:d7:26:31:d3:2e:65:fe:dc:7f:a5: 41:cd:da:ef:5e:ce:22:d7:66:29:84:8f:9d:77:56: df:92:be:9a:8e:cf:5e:5b:15:f4:58:b6:cf:fd:4e: 6f:e5:d7:cb:cf:0e:50:ed:3c:bf:d0:f2:24:55:3a: 75:c9:68:9b:7f:04:52:de:35:f2:1f:99:40:46:63: 96:86:87:8a:7f:af:94:86:43:9e:74:20:5c:ab:71: d8:e8:c7:6b:26:a6:09:49:52:a1:43:47:9a:c9:82: 21:4a:72:dc:df:1b:32:8f:ad:f7:4f:0a:16:1c:8c: 44:00:e7:4f:9b:43:33:0b:7c:01:d5:52:8f:c4:b1: a2:61:e4:ac:2c:cf:09:cc:1a:69:bf:86:8f:74:87: c9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C0:58:4F:E3:A6:80:68:B0:CF:80:4F:44:03:35:84:F5:DF:89:97 X509v3 Authority Key Identifier: keyid:EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:7f:b8:d9:86:6a:34:4a:9c:57:bc:91:48:b4:7a:37:2c:ec: d3:d5:1f:93:05:c7:c6:1a:b0:dc:fb:0f:a6:b3:f1:c8:2b:8e: fe:29:66:0b:85:74:02:35:2e:55:5c:25:a0:ea:c0:67:df:2b: d1:b6:1f:3d:c2:2c:a0:a2:df:80:7e:a8:0e:b3:7f:0c:57:a6: 73:35:f2:56:7a:39:c7:e4:d2:47:fa:eb:3e:c0:16:20:2e:83: 68:f4:cc:c6:a4:ed:b1:ce:f1:ca:1d:e8:7d:d6:7e:87:a0:4e: 87:6b:7e:2d:87:d1:8e:12:d6:12:e3:51:8b:e1:63:62:41:33: 27:0d:4a:ce:d0:11:d0:96:35:b2:e8:3f:7c:cc:2c:c6:62:bc: 7c:39:10:37:30:d1:d4:ac:bd:04:77:05:66:fb:90:ed:72:2a: 66:25:21:1e:cc:72:70:52:3b:58:fb:5a:de:e3:e6:55:57:e0: c1:7b:58:f2:12:cd:82:43:eb:1c:56:5f:a4:e2:9a:d0:aa:2f: e6:0e:af:c9:5c:d6:c4:a3:ee:c8:7e:e5:a1:f7:41:dd:09:da: 13:4c:8d:98:b6:e1:87:12:14:be:4b:36:b7:28:47:79:4d:11: db:62:32:79:5e:d5:03:fe:a0:39:44:21:aa:a4:cb:de:cb:de: 55:0d:c3:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLgw1zB63BnxGwu0D2R58iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYjJhNDI1NTBlNWUyYjRhYTFhNDczYjJiMzcxYmMyODM0 MWExNmEwHhcNMjUxMjIzMTQwMDM4WhcNMjUxMjI0MTQwMDM4WjAzMTEwLwYDVQQD EyhmNGMwNTg0ZmUzYTY4MDY4YjBjZjgwNGY0NDAzMzU4NGY1ZGY4OTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzy2do/6QtMyFBFZgR6GyRpLmBed BgJbwB7ZWPUIPhXqHYufN1lNkfBm/qfv8xdmPaK9taGYzs1E/6HkFVjshE7WTPfB 7CQ7gHu1U9gtjw6QvI5l5AEWuALDcbozMkuViqsNHgPeVNljgNoNUtcmMdMuZf7c f6VBzdrvXs4i12YphI+dd1bfkr6ajs9eWxX0WLbP/U5v5dfLzw5Q7Ty/0PIkVTp1 yWibfwRS3jXyH5lARmOWhoeKf6+UhkOedCBcq3HY6MdrJqYJSVKhQ0eayYIhSnLc 3xsyj633TwoWHIxEAOdPm0MzC3wB1VKPxLGiYeSsLM8JzBppv4aPdIfJDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTAWE/jpoBosM+AT0QDNYT134mXMB8GA1UdIwQY MBaAFOuypCVQ5eK0qhpHOys3G8KDQaFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lNThiNDAtZGRlNi00ODQwLTgxMGMt MzFmOTI5NDVkZmZkLzEvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9lNThiNDAtZGRlNi00ODQwLTgxMGMtMzFmOTI5NDVkZmZk LzEvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlH+42YZq NEqcV7yRSLR6Nyzs09UfkwXHxhqw3PsPprPxyCuO/ilmC4V0AjUuVVwloOrAZ98r 0bYfPcIsoKLfgH6oDrN/DFemczXyVno5x+TSR/rrPsAWIC6DaPTMxqTtsc7xyh3o fdZ+h6BOh2t+LYfRjhLWEuNRi+FjYkEzJw1KztAR0JY1sug/fMwsxmK8fDkQNzDR 1Ky9BHcFZvuQ7XIqZiUhHsxycFI7WPta3uPmVVfgwXtY8hLNgkPrHFZfpOKa0Kov 5g6vyVzWxKPuyH7lofdB3QnaE0yNmLbhhxIUvks2tyhHeU0R22IyeV7VA/6gOUQh qqTL3sveVQ3DfA== -----END CERTIFICATE-----Generated at Tue Dec 23 15:51:30 2025 by rpki-client