This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft File: p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft (raw, json) Hash identifier: LvEwV6ME89vp7CsYd66kKKZJdmNXiL6E0hO3hKWHDn0= Subject key identifier: E3:3A:40:01:2B:A5:4F:F3:CB:F0:33:9D:B7:74:63:49:47:4C:EE:FB Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3 Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3 Certificate serial: 019B3CEC53E2E9A890A31F00D6A4C1688403 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft Manifest number: 1657 Signing time: Sat 20 Dec 2025 18:01:19 +0000 Manifest this update: Sat 20 Dec 2025 18:01:19 +0000 Manifest next update: Sun 21 Dec 2025 18:01:19 +0000 Files and hashes: 1: BZzPZeF6nVBFp0ePkibSpSImMO4.roa (hash: CC6O/xKtKrtHkfClJGWdlIogukbhcIa4MJLuoLVEnNw=) 2: DUIJZvRDQ202HKrZ6QZsgh8Lpxg.roa (hash: WYZK5bFTDM+c1kX5q/i2Za+Wt5aspj2Z2UKRWytwMBA=) 3: p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl (hash: HfxVOtVca081cq933v3ovCCPdYwdpcdH6eZeJebH9OI=) 4: qRD7ujzJORaie3rLE2YnokYZ17U.roa (hash: S1UJWxv+rwUU/ObCl8nZivjHpfQGYiacpAIE0ZGhjrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:53:e2:e9:a8:90:a3:1f:00:d6:a4:c1:68:84:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3 Validity Not Before: Dec 20 18:01:19 2025 GMT Not After : Dec 21 18:01:19 2025 GMT Subject: CN=e33a40012ba54ff3cbf0339db7746349474ceefb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a7:a1:10:a3:0f:ba:f2:21:06:a6:f7:73:2a: d4:94:08:16:ce:c9:b0:ac:ed:02:70:62:25:df:66: ab:2c:0c:90:d0:84:34:76:78:d7:94:a6:b8:f9:96: e5:76:dc:2a:09:86:54:54:ed:b5:cd:eb:98:3b:4d: bc:af:8b:d0:00:53:01:00:42:fe:b9:0e:c1:8b:cd: 2e:fa:ef:17:6b:75:e0:bf:ff:e7:e4:63:5e:ea:a5: d7:ca:83:8c:99:04:8e:8b:f0:05:0e:69:53:ff:5c: 61:00:9a:3a:df:8d:d9:15:91:07:19:2c:f5:40:a1: 85:12:a9:b5:5d:c3:9d:c4:b4:16:c2:15:6b:3f:99: 59:19:b5:86:0f:30:0d:a0:d4:98:36:73:26:80:63: ce:10:f3:d1:29:94:9f:ae:ec:95:db:e1:41:38:c9: 4d:d9:d9:d2:cf:cc:73:77:85:6c:4f:30:9c:b6:79: 24:79:aa:07:b2:34:67:63:90:6a:e6:9f:a9:4a:ae: e9:3a:d8:24:39:31:96:4c:19:04:c8:fa:f4:7c:2b: 68:bf:b3:c6:26:59:5d:a3:fe:8e:4b:0b:7e:0e:19: 64:2f:a8:14:ed:67:b1:18:d1:13:27:b0:05:5b:91: 40:1c:7e:3e:f2:3d:6a:8f:fd:06:21:f6:3b:83:26: 40:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3A:40:01:2B:A5:4F:F3:CB:F0:33:9D:B7:74:63:49:47:4C:EE:FB X509v3 Authority Key Identifier: keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:92:29:14:5a:e5:e4:da:10:a0:f1:68:76:d3:49:03:e4:38: f1:92:09:5e:48:12:12:c6:ff:ba:bc:06:96:5a:df:df:12:bd: 61:46:c5:b2:af:3c:54:b9:6b:37:97:1d:1b:e2:a3:05:9e:da: 1d:3a:04:ea:b6:5c:bd:c5:37:3c:70:71:f0:b4:2d:81:d0:38: 85:2f:87:1d:49:cb:bf:f6:73:e6:bd:95:10:e3:71:a9:19:fb: 28:fd:cb:06:a5:de:cc:27:3c:8e:25:bb:f1:48:cf:50:27:a5: 02:a5:ad:03:a7:9b:06:7e:0c:c9:ab:73:33:6d:22:25:80:fa: 29:f2:9b:19:28:fd:79:af:43:c3:be:be:1e:32:00:a4:1b:4e: 59:55:1f:a2:b2:a5:42:1e:fc:c6:6b:6c:5c:e6:8f:83:06:61: 4c:36:f2:4c:89:12:c0:44:28:27:d5:9a:0e:10:01:dd:c3:fd: 56:b4:d9:f4:68:25:f5:84:f5:6e:a4:4c:9a:69:ef:d0:44:78: 7b:98:7f:6f:03:4d:9a:2c:f4:c1:54:dc:6c:1e:2a:19:f7:45: 31:8f:95:b6:f3:7c:7f:d4:96:6e:b7:97:d0:06:32:2f:28:51: 3e:b8:c6:d1:c8:85:61:b2:96:06:17:a9:2c:60:87:25:be:77: 3c:bb:7c:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87FPi6aiQox8A1qTBaIQDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YWVlNjc2MjBkOWMwYWU2M2QyOTU3ODVjOWQ5NTZmMDYz YzIxYzMwHhcNMjUxMjIwMTgwMTE5WhcNMjUxMjIxMTgwMTE5WjAzMTEwLwYDVQQD EyhlMzNhNDAwMTJiYTU0ZmYzY2JmMDMzOWRiNzc0NjM0OTQ3NGNlZWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqehEKMPuvIhBqb3cyrUlAgWzsmw rO0CcGIl32arLAyQ0IQ0dnjXlKa4+ZbldtwqCYZUVO21zeuYO028r4vQAFMBAEL+ uQ7Bi80u+u8Xa3Xgv//n5GNe6qXXyoOMmQSOi/AFDmlT/1xhAJo6343ZFZEHGSz1 QKGFEqm1XcOdxLQWwhVrP5lZGbWGDzANoNSYNnMmgGPOEPPRKZSfruyV2+FBOMlN 2dnSz8xzd4VsTzCctnkkeaoHsjRnY5Bq5p+pSq7pOtgkOTGWTBkEyPr0fCtov7PG Jlldo/6OSwt+DhlkL6gU7WexGNETJ7AFW5FAHH4+8j1qj/0GIfY7gyZAIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOM6QAErpU/zy/Aznbd0Y0lHTO77MB8GA1UdIwQY MBaAFKeu5nYg2cCuY9KVeFydlW8GPCHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYmEyNWEtMGFiZC00NTUwLWJjYTQt MGI3ZjE1YjUwOWNiLzEvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8yYmEyNWEtMGFiZC00NTUwLWJjYTQtMGI3ZjE1YjUwOWNi LzEvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5IpFFrl 5NoQoPFodtNJA+Q48ZIJXkgSEsb/urwGllrf3xK9YUbFsq88VLlrN5cdG+KjBZ7a HToE6rZcvcU3PHBx8LQtgdA4hS+HHUnLv/Zz5r2VEONxqRn7KP3LBqXezCc8jiW7 8UjPUCelAqWtA6ebBn4MyatzM20iJYD6KfKbGSj9ea9Dw76+HjIApBtOWVUforKl Qh78xmtsXOaPgwZhTDbyTIkSwEQoJ9WaDhAB3cP9VrTZ9Ggl9YT1bqRMmmnv0ER4 e5h/bwNNmiz0wVTcbB4qGfdFMY+VtvN8f9SWbreX0AYyLyhRPrjG0ciFYbKWBhep LGCHJb53PLt8GQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:19:23 2025 by rpki-client