This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft File: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft (raw, json) Hash identifier: AyQ8tT6zDXBXDFU9iJiODJ85i7dG28i3HcN0nf6bwuY= Subject key identifier: 87:C7:BB:8B:E6:52:8C:74:72:79:D0:D1:66:B8:C7:ED:7C:B7:3A:83 Authority key identifier: EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53 Certificate issuer: /CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553 Certificate serial: 019B45B836E4B63F8088137C8C7418F794B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 11:00:59 +0000 Manifest this update: Mon 22 Dec 2025 11:00:59 +0000 Manifest next update: Tue 23 Dec 2025 11:00:59 +0000 Files and hashes: 1: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl (hash: Rt42yzMGQjRBN6Mb7uTt+1DL6SHLay/2LnuPelsnb9I=) 2: fGQ3YVDh2zkecLRGo_WA_JJKmDU.roa (hash: mv8AdpdjP5/diFcicEaZODtxwOkiTIPwxcyY8ZLf9hw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:36:e4:b6:3f:80:88:13:7c:8c:74:18:f7:94:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553 Validity Not Before: Dec 22 11:00:59 2025 GMT Not After : Dec 23 11:00:59 2025 GMT Subject: CN=87c7bb8be6528c747279d0d166b8c7ed7cb73a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6f:a9:54:9b:9f:a6:61:59:c2:1a:58:e3:c3: 76:78:db:be:78:c2:b6:75:e9:71:8b:ac:a7:39:17: b4:c9:49:fb:f5:7d:f8:83:1b:4f:06:5f:de:da:80: b3:d5:0c:01:4b:52:a5:ea:60:60:5f:df:eb:e7:c7: 78:f0:2c:ac:31:73:99:eb:90:6f:10:b6:63:0b:f8: 3c:ef:e5:4e:d8:fa:29:d5:64:bb:d2:1e:02:95:dc: 4c:9b:77:f5:98:cb:39:37:65:f7:03:66:57:9b:7e: 99:af:35:a6:e5:47:43:c2:2f:a5:9f:a5:c4:d3:a9: a4:fc:d9:a9:6d:5f:a9:3b:8a:f5:ff:ac:39:0e:e7: f2:18:04:63:4a:d3:d5:f4:e1:18:54:d7:31:82:4d: 98:58:3e:da:d9:d2:30:86:0c:9d:d0:f5:6c:be:eb: d0:e0:d2:df:bc:e6:43:42:56:70:cf:25:ca:3f:c3: 80:e4:61:b0:c8:f6:ed:15:97:37:e9:0b:99:b0:09: 6d:ba:3a:a9:82:5a:27:5c:40:f9:8d:40:70:48:ee: 5f:d4:3f:d1:f8:13:27:a8:f9:d9:10:2d:73:b5:18: 1e:79:97:fe:db:df:52:2c:7b:79:3e:bd:23:fe:ad: e6:90:57:b7:29:46:36:60:81:50:e9:04:cb:91:a5: 38:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C7:BB:8B:E6:52:8C:74:72:79:D0:D1:66:B8:C7:ED:7C:B7:3A:83 X509v3 Authority Key Identifier: keyid:EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:29:cf:93:77:63:78:26:5a:4c:1f:fd:e6:c4:27:aa:9e:72: 80:d4:79:3e:1b:7c:42:c9:13:c0:f3:f8:d8:32:a0:07:67:38: 7c:a2:8c:e1:b1:c0:d0:2b:24:bd:fe:17:12:3a:26:2b:8a:b3: d5:04:12:bd:22:97:ad:e8:32:72:ac:10:42:18:b9:8e:50:75: b2:cc:0c:35:ca:8b:e3:ff:12:ae:6d:0d:5f:a8:aa:0e:4e:09: 79:88:ba:8e:cb:84:96:1d:4c:d8:92:6f:f0:e6:03:81:f4:c6: 57:ec:43:c0:65:b5:46:a2:c3:91:c0:e7:d4:68:df:a9:03:14: af:7d:41:92:9f:a0:79:42:74:68:d0:ab:bd:45:e3:c1:9d:2e: d5:95:02:15:4f:86:92:9c:22:cf:9e:1b:3c:08:e4:63:6a:6e: cc:a4:6b:91:3e:01:41:50:0c:13:07:01:ce:c5:57:02:79:46: 8f:e0:66:43:bd:d2:28:2a:65:b3:46:05:7d:98:90:bc:86:e5: fd:b7:e0:c2:fb:8c:7c:0f:62:81:1f:bf:9e:ba:f3:1f:82:08: e2:3d:86:5f:0f:b9:95:5f:9f:5d:0c:22:13:d3:15:3c:88:2e: be:19:fa:f8:66:79:8e:de:b0:64:11:e1:aa:7d:9f:d4:7a:96: d8:97:c3:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuDbktj+AiBN8jHQY95SxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYzg2YzhjMmQ0OTVjOWViZTQyNjY1YTE1MTNkZTY5YTli ZjY1NTMwHhcNMjUxMjIyMTEwMDU5WhcNMjUxMjIzMTEwMDU5WjAzMTEwLwYDVQQD Eyg4N2M3YmI4YmU2NTI4Yzc0NzI3OWQwZDE2NmI4YzdlZDdjYjczYTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG+pVJufpmFZwhpY48N2eNu+eMK2 delxi6ynORe0yUn79X34gxtPBl/e2oCz1QwBS1Kl6mBgX9/r58d48CysMXOZ65Bv ELZjC/g87+VO2Pop1WS70h4CldxMm3f1mMs5N2X3A2ZXm36ZrzWm5UdDwi+ln6XE 06mk/NmpbV+pO4r1/6w5DufyGARjStPV9OEYVNcxgk2YWD7a2dIwhgyd0PVsvuvQ 4NLfvOZDQlZwzyXKP8OA5GGwyPbtFZc36QuZsAltujqpglonXED5jUBwSO5f1D/R +BMnqPnZEC1ztRgeeZf+299SLHt5Pr0j/q3mkFe3KUY2YIFQ6QTLkaU4kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfHu4vmUox0cnnQ0Wa4x+18tzqDMB8GA1UdIwQY MBaAFOvIbIwtSVyevkJmWhUT3mmpv2VTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjhoc2pDMUpYSjYtUW1aYUZSUGVhYW1fWlZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wYjI1MmQtZGI0Yy00MjU2LWFiMDYt MDZkMTRjZjBhNDZiLzEvNjhoc2pDMUpYSjYtUW1aYUZSUGVhYW1fWlZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8wYjI1MmQtZGI0Yy00MjU2LWFiMDYtMDZkMTRjZjBhNDZi LzEvNjhoc2pDMUpYSjYtUW1aYUZSUGVhYW1fWlZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbinPk3dj eCZaTB/95sQnqp5ygNR5Pht8QskTwPP42DKgB2c4fKKM4bHA0Cskvf4XEjomK4qz 1QQSvSKXregycqwQQhi5jlB1sswMNcqL4/8Srm0NX6iqDk4JeYi6jsuElh1M2JJv 8OYDgfTGV+xDwGW1RqLDkcDn1GjfqQMUr31Bkp+geUJ0aNCrvUXjwZ0u1ZUCFU+G kpwiz54bPAjkY2puzKRrkT4BQVAMEwcBzsVXAnlGj+BmQ73SKCpls0YFfZiQvIbl /bfgwvuMfA9igR+/nrrzH4II4j2GXw+5lV+fXQwiE9MVPIguvhn6+GZ5jt6wZBHh qn2f1HqW2JfDkQ== -----END CERTIFICATE-----Generated at Mon Dec 22 13:55:28 2025 by rpki-client