This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft File: p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft (raw, json) Hash identifier: dUzef08CAxLfhJb+o79Bwqw/7zeNKgimUNXCfzDHi00= Subject key identifier: 73:2E:B8:3B:97:45:FB:C6:D6:32:69:98:5E:82:14:DC:47:23:D1:87 Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3 Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3 Certificate serial: 019B5BD280564A5C08FAF38DEE4A11900F06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft Manifest number: 1667 Signing time: Fri 26 Dec 2025 18:01:20 +0000 Manifest this update: Fri 26 Dec 2025 18:01:20 +0000 Manifest next update: Sat 27 Dec 2025 18:01:20 +0000 Files and hashes: 1: BZzPZeF6nVBFp0ePkibSpSImMO4.roa (hash: CC6O/xKtKrtHkfClJGWdlIogukbhcIa4MJLuoLVEnNw=) 2: DUIJZvRDQ202HKrZ6QZsgh8Lpxg.roa (hash: WYZK5bFTDM+c1kX5q/i2Za+Wt5aspj2Z2UKRWytwMBA=) 3: p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl (hash: LIc3KOXu+gUHhNN1nuziN+6qBSaFXtd/wP0NwhAtDhM=) 4: qRD7ujzJORaie3rLE2YnokYZ17U.roa (hash: S1UJWxv+rwUU/ObCl8nZivjHpfQGYiacpAIE0ZGhjrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d2:80:56:4a:5c:08:fa:f3:8d:ee:4a:11:90:0f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3 Validity Not Before: Dec 26 18:01:20 2025 GMT Not After : Dec 27 18:01:20 2025 GMT Subject: CN=732eb83b9745fbc6d63269985e8214dc4723d187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:06:d3:df:ab:51:43:f7:d2:6a:1b:b0:e7:1f: 95:00:58:ef:10:76:2c:6a:56:9e:35:0d:b2:30:db: c8:9c:77:33:c9:26:81:d4:f2:d0:b7:c4:f3:be:7a: f4:60:1c:c6:f6:2a:6d:88:09:2a:d5:ac:b6:83:30: e1:c5:17:b6:1b:0b:12:da:3f:e4:39:8c:3b:83:d7: 29:58:04:d2:35:c8:cd:3c:82:62:bb:e7:c5:de:8b: a1:08:a8:2b:70:f8:28:e0:c2:f6:8c:40:64:7c:f2: 3b:6c:dc:d7:e1:ea:7b:09:df:bc:b1:76:96:fb:77: c2:f0:b0:6b:c2:2e:e3:96:98:7c:7e:39:66:5a:ac: d2:a7:34:d1:52:b3:8f:12:8b:e8:9f:bd:75:ae:04: 8b:d5:24:14:a5:d6:fb:2a:3a:10:68:c4:e1:f1:3b: 77:72:da:55:a2:86:15:3d:26:bc:3b:77:68:0d:98: 2f:dc:f4:d6:08:42:31:f3:72:95:da:8b:59:43:33: 41:b5:5e:ef:c8:c2:49:96:db:1d:18:43:6e:21:94: aa:8f:7e:6d:7e:e0:8e:e9:70:e5:cf:46:fc:e2:e8: 59:0d:40:af:b3:a7:ba:d3:f4:04:88:25:ed:0c:f2: f1:e9:86:aa:e4:09:a4:9f:3c:3d:0d:15:fb:36:26: f4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2E:B8:3B:97:45:FB:C6:D6:32:69:98:5E:82:14:DC:47:23:D1:87 X509v3 Authority Key Identifier: keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:89:96:dc:99:81:37:d6:0c:12:ca:2d:fa:0e:48:11:be:e0: 58:8a:7c:b5:dd:40:fa:ad:8f:ab:69:46:54:0a:b5:c4:32:f2: d1:75:43:e9:49:27:8c:12:83:78:05:92:32:22:ae:42:ef:ec: 79:61:27:3d:0b:16:f8:36:60:de:30:5d:7c:83:6e:33:70:f7: 26:48:31:10:9d:40:5c:38:34:86:05:0b:f4:21:d9:fe:bd:bf: 09:8a:a4:62:60:74:a5:2d:bf:e9:1a:f0:d6:44:4a:0e:b6:e5: bf:d9:56:91:fd:ae:71:2a:62:11:df:d4:c9:75:75:83:18:11: 85:ea:53:55:94:3b:dd:76:80:a6:7c:9b:ba:12:d1:40:19:a3: 63:ae:84:4c:58:ec:86:8a:9d:47:09:bf:97:d0:31:50:53:f4: 62:70:83:70:20:e6:ea:58:d4:18:68:b0:70:fc:13:59:a3:14: 5b:21:4c:d3:b0:da:f8:8c:a9:1a:91:f5:33:e3:d1:3f:cf:c6: 54:15:02:cd:01:3a:b8:a8:dd:e4:f8:c1:04:2c:e8:8a:44:62: 38:8a:10:a1:31:ec:17:fe:60:93:d6:64:05:1d:be:79:87:3a: b0:e0:57:37:ef:cb:9f:20:84:14:b5:ed:1f:41:f2:69:f1:99: 26:c9:2e:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0oBWSlwI+vON7koRkA8GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YWVlNjc2MjBkOWMwYWU2M2QyOTU3ODVjOWQ5NTZmMDYz YzIxYzMwHhcNMjUxMjI2MTgwMTIwWhcNMjUxMjI3MTgwMTIwWjAzMTEwLwYDVQQD Eyg3MzJlYjgzYjk3NDVmYmM2ZDYzMjY5OTg1ZTgyMTRkYzQ3MjNkMTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwbT36tRQ/fSahuw5x+VAFjvEHYs alaeNQ2yMNvInHczySaB1PLQt8Tzvnr0YBzG9iptiAkq1ay2gzDhxRe2GwsS2j/k OYw7g9cpWATSNcjNPIJiu+fF3ouhCKgrcPgo4ML2jEBkfPI7bNzX4ep7Cd+8sXaW +3fC8LBrwi7jlph8fjlmWqzSpzTRUrOPEovon711rgSL1SQUpdb7KjoQaMTh8Tt3 ctpVooYVPSa8O3doDZgv3PTWCEIx83KV2otZQzNBtV7vyMJJltsdGENuIZSqj35t fuCO6XDlz0b84uhZDUCvs6e60/QEiCXtDPLx6Yaq5Amknzw9DRX7Nib0jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMuuDuXRfvG1jJpmF6CFNxHI9GHMB8GA1UdIwQY MBaAFKeu5nYg2cCuY9KVeFydlW8GPCHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYmEyNWEtMGFiZC00NTUwLWJjYTQt MGI3ZjE1YjUwOWNiLzEvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8yYmEyNWEtMGFiZC00NTUwLWJjYTQtMGI3ZjE1YjUwOWNi LzEvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUomW3JmB N9YMEsot+g5IEb7gWIp8td1A+q2Pq2lGVAq1xDLy0XVD6UknjBKDeAWSMiKuQu/s eWEnPQsW+DZg3jBdfINuM3D3JkgxEJ1AXDg0hgUL9CHZ/r2/CYqkYmB0pS2/6Rrw 1kRKDrblv9lWkf2ucSpiEd/UyXV1gxgRhepTVZQ73XaApnybuhLRQBmjY66ETFjs hoqdRwm/l9AxUFP0YnCDcCDm6ljUGGiwcPwTWaMUWyFM07Da+IypGpH1M+PRP8/G VBUCzQE6uKjd5PjBBCzoikRiOIoQoTHsF/5gk9ZkBR2+eYc6sOBXN+/LnyCEFLXt H0HyafGZJskuhw== -----END CERTIFICATE-----Generated at Fri Dec 26 23:10:52 2025 by rpki-client