This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft File: sda67LY65G_uowyrhiHUbFn3KAg.mft (raw, json) Hash identifier: wOPBs2sO/1LzMJvBm2O8L8R/6tEXn3CwZOj7PpOsj+M= Subject key identifier: 58:57:95:30:5B:32:0B:EC:47:30:D9:D8:40:C1:02:FD:40:F1:11:64 Authority key identifier: B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08 Certificate issuer: /CN=b1d6baecb63ae46feea30cab8621d46c59f72808 Certificate serial: 019B3DFE676FC47B1F19C923204733508D39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft Manifest number: 14DA Signing time: Sat 20 Dec 2025 23:00:41 +0000 Manifest this update: Sat 20 Dec 2025 23:00:41 +0000 Manifest next update: Sun 21 Dec 2025 23:00:41 +0000 Files and hashes: 1: LM0g69HtGp_batQfV5x1NEUMmOk.roa (hash: 7VtBpd+wuDX24L0fq4Y7fsMl9oygXrzXXYzNLlqhtLg=) 2: sda67LY65G_uowyrhiHUbFn3KAg.crl (hash: JmH1sQYjTGz/gFdU9L3pK8H8pXMTNxr/9xOr1QTn+fo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:67:6f:c4:7b:1f:19:c9:23:20:47:33:50:8d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1d6baecb63ae46feea30cab8621d46c59f72808 Validity Not Before: Dec 20 23:00:41 2025 GMT Not After : Dec 21 23:00:41 2025 GMT Subject: CN=585795305b320bec4730d9d840c102fd40f11164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:02:80:72:b8:9a:cb:32:a9:20:f4:00:42:e9: 83:78:82:f3:86:60:c2:a7:1b:1e:3d:5d:56:f3:a8: 97:c1:a8:7c:0e:c1:30:1c:5d:e2:5d:f2:ef:2e:eb: c1:e2:a4:bc:be:a3:8b:03:4e:16:35:9a:c6:63:e1: 84:84:b3:18:02:f7:c5:8e:d1:ee:81:72:c4:70:d1: 45:db:d9:8c:75:88:8e:2c:3a:96:e7:ef:65:08:47: 47:13:69:48:28:ea:1c:ef:2a:a3:76:f8:40:09:54: 47:6f:7a:25:66:0b:6b:85:43:c4:d9:d5:cb:01:59: e2:a3:1f:ba:0f:7e:18:4d:52:1e:3f:a8:45:31:31: 9f:45:d3:1d:9d:4a:3e:4c:ca:99:5e:60:4e:2c:90: 26:70:3d:f2:15:2f:e7:68:f2:8c:90:aa:06:5d:e4: e7:17:0f:2f:04:39:15:fe:16:07:1b:c2:d0:2c:c3: 82:46:9c:96:85:3e:14:3a:a6:5b:4f:59:06:f2:52: d2:0f:96:a5:58:fa:16:ff:29:b1:87:8d:0a:ad:6b: d5:82:51:ba:26:56:8d:25:ce:2f:62:15:ea:1c:3f: 52:23:0e:db:5b:3b:f8:65:ff:92:65:56:bb:a2:52: c0:4f:7b:5f:fa:be:91:0b:6d:63:fb:e2:19:f9:3d: 17:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:57:95:30:5B:32:0B:EC:47:30:D9:D8:40:C1:02:FD:40:F1:11:64 X509v3 Authority Key Identifier: keyid:B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:55:c8:ee:cf:1c:6d:0a:52:98:b9:71:b5:d9:b9:52:b1:03: 26:b4:ff:11:35:5a:81:a5:58:4f:b8:6e:74:87:6c:79:f2:40: 70:10:f7:e4:2e:35:e8:49:1e:4c:46:7c:d0:e1:10:10:fe:20: ef:57:0a:d2:97:0a:30:68:30:be:e8:6a:bc:30:5d:b7:04:ec: 61:cb:c3:5d:00:07:d2:8b:6d:87:97:f8:14:71:64:cb:ec:d7: cb:02:ea:ef:bf:b8:51:3d:cf:0a:d1:24:7b:1d:b3:3a:16:de: 5b:d3:4b:5e:22:3d:b7:00:c6:7a:6f:f6:00:b5:6e:31:b8:9d: 1a:08:69:ad:7f:41:a0:65:4b:ec:4e:b1:a4:c3:68:39:cf:c8: 03:28:80:3e:28:db:83:3a:00:e5:95:dd:1a:53:35:2c:b7:f4: 47:2e:5d:f1:2d:d1:2b:c8:bd:c3:a8:7c:dd:64:26:1f:45:f6: f5:bd:ff:82:37:09:43:86:05:eb:72:47:a2:1b:05:56:2d:28: d0:38:ef:89:bc:fd:52:0c:e4:88:7c:0a:7f:b7:c0:a1:f9:7b: 28:8f:20:43:b3:e1:a7:49:ef:e8:24:d5:b7:c2:2d:e0:74:dc: e4:b3:0e:dc:7b:26:7c:8d:cf:dc:fa:1d:b0:b0:e5:62:e7:a0: ac:f1:1a:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/mdvxHsfGckjIEczUI05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxZDZiYWVjYjYzYWU0NmZlZWEzMGNhYjg2MjFkNDZjNTlm NzI4MDgwHhcNMjUxMjIwMjMwMDQxWhcNMjUxMjIxMjMwMDQxWjAzMTEwLwYDVQQD Eyg1ODU3OTUzMDViMzIwYmVjNDczMGQ5ZDg0MGMxMDJmZDQwZjExMTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AKAcriayzKpIPQAQumDeILzhmDC pxsePV1W86iXwah8DsEwHF3iXfLvLuvB4qS8vqOLA04WNZrGY+GEhLMYAvfFjtHu gXLEcNFF29mMdYiOLDqW5+9lCEdHE2lIKOoc7yqjdvhACVRHb3olZgtrhUPE2dXL AVniox+6D34YTVIeP6hFMTGfRdMdnUo+TMqZXmBOLJAmcD3yFS/naPKMkKoGXeTn Fw8vBDkV/hYHG8LQLMOCRpyWhT4UOqZbT1kG8lLSD5alWPoW/ymxh40KrWvVglG6 JlaNJc4vYhXqHD9SIw7bWzv4Zf+SZVa7olLAT3tf+r6RC21j++IZ+T0X7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhXlTBbMgvsRzDZ2EDBAv1A8RFkMB8GA1UdIwQY MBaAFLHWuuy2OuRv7qMMq4Yh1GxZ9ygIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2RhNjdMWTY1R191b3d5cmhpSFViRm4zS0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MDNkOTYtZTM0Yi00YzI0LTljOWMt N2FmNzlkYWE2OWI5LzEvc2RhNjdMWTY1R191b3d5cmhpSFViRm4zS0FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny83MDNkOTYtZTM0Yi00YzI0LTljOWMtN2FmNzlkYWE2OWI5 LzEvc2RhNjdMWTY1R191b3d5cmhpSFViRm4zS0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1XI7s8c bQpSmLlxtdm5UrEDJrT/ETVagaVYT7hudIdsefJAcBD35C416EkeTEZ80OEQEP4g 71cK0pcKMGgwvuhqvDBdtwTsYcvDXQAH0otth5f4FHFky+zXywLq77+4UT3PCtEk ex2zOhbeW9NLXiI9twDGem/2ALVuMbidGghprX9BoGVL7E6xpMNoOc/IAyiAPijb gzoA5ZXdGlM1LLf0Ry5d8S3RK8i9w6h83WQmH0X29b3/gjcJQ4YF63JHohsFVi0o 0Djvibz9UgzkiHwKf7fAofl7KI8gQ7Php0nv6CTVt8It4HTc5LMO3HsmfI3P3Pod sLDlYuegrPEaWQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:15:04 2025 by rpki-client