This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json) Hash identifier: CAUBw5NVO8VsXED+NYMXWOvKBohOazbvrJ12caCdUz8= Subject key identifier: D6:09:21:BE:C6:50:32:4B:FF:3A:C5:3A:6D:74:1F:48:30:91:A2:20 Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6 Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6 Certificate serial: 019B4D03E10B1079D1CD11554D0A78F06EE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft Manifest number: 1792 Signing time: Tue 23 Dec 2025 21:00:58 +0000 Manifest this update: Tue 23 Dec 2025 21:00:58 +0000 Manifest next update: Wed 24 Dec 2025 21:00:58 +0000 Files and hashes: 1: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: Rk3cgWTlNXt6f4k9YpyIyxSUZtSkGpF/8xJvvEt1Di8=) 2: _d5sQjAqDWf1j4CIit8rsE25AME.roa (hash: RxeX2YNDuil9ac/AHR6OmQjklSZPEl3KjGtvZpjNDfk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:03:e1:0b:10:79:d1:cd:11:55:4d:0a:78:f0:6e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6 Validity Not Before: Dec 23 21:00:58 2025 GMT Not After : Dec 24 21:00:58 2025 GMT Subject: CN=d60921bec650324bff3ac53a6d741f483091a220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3b:ff:87:18:68:93:59:54:5d:e6:56:33:28: f3:63:fe:e4:d0:d2:12:17:e9:98:9f:fa:9a:25:ca: bd:ad:fe:09:80:88:be:18:a6:01:c2:6a:e4:f6:c2: 00:c4:53:0d:36:25:f7:50:71:49:58:3e:71:39:a2: 9e:49:42:a8:7a:b1:1c:69:2e:74:a5:75:35:7a:81: bd:b9:ce:2a:31:b5:ff:fa:da:27:b4:b3:ba:19:83: 77:a6:89:d4:94:ae:49:f1:a6:1a:a4:0a:ea:a2:b2: c8:b7:86:14:2b:53:58:40:c6:c6:46:d2:4e:2b:0b: 1f:b6:d6:94:f8:ec:12:2f:cd:1f:ce:75:ce:cd:53: 44:d0:f9:d3:83:c9:c7:d3:63:ae:9b:48:bc:36:74: 08:33:2c:46:dd:d5:73:ba:b3:03:83:07:f0:77:66: ec:e2:9f:88:1a:0d:37:74:47:ad:80:c8:04:b2:6e: f8:e6:b7:70:95:a2:4c:62:ba:17:b2:24:d3:b9:bf: 3d:73:63:4e:b5:db:a9:16:b4:71:8d:e5:2c:79:24: 34:e3:7a:18:8b:ef:fe:05:a9:7c:77:f6:45:b4:15: 02:ff:eb:8b:16:5f:d8:a2:c0:c8:0a:ad:ee:2d:04: b7:ba:88:55:74:44:4a:ff:e1:24:8f:f7:b9:2a:38: 8d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:09:21:BE:C6:50:32:4B:FF:3A:C5:3A:6D:74:1F:48:30:91:A2:20 X509v3 Authority Key Identifier: keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:31:d8:6a:00:d0:e3:0d:d0:78:c4:18:03:ca:5b:77:2c:7f: 53:bd:48:db:ea:2e:24:de:fd:79:e2:f8:98:58:a5:2c:1b:1e: 8b:e5:e6:1d:1d:ee:02:93:17:7b:76:80:52:b7:e8:ad:33:5b: 10:0f:3f:df:8e:e3:e4:f4:3d:14:15:7d:af:8c:91:81:87:2a: e0:03:b3:1f:df:ec:42:8f:9b:bb:f0:32:85:fc:c0:37:4f:f5: b9:17:cb:2c:8d:74:33:41:9d:8b:1d:0a:71:40:fc:8e:ed:c9: f4:25:a1:8b:08:7d:70:f8:1f:fd:1f:9f:b6:de:a1:42:27:27: f0:25:22:75:5d:4a:b0:7c:36:b2:88:90:e2:e1:c7:3c:e1:fb: 72:3e:2f:9d:13:57:a7:e1:db:16:a1:e0:18:1e:b2:5d:ed:d8: 63:92:ff:4e:0c:7a:4c:50:80:0d:08:8c:d0:5d:c4:eb:94:02: bb:c3:37:2c:6c:e8:54:3f:3c:cb:21:8f:99:62:87:72:3d:ce: 75:be:2d:54:d7:c0:56:16:89:90:8f:eb:af:60:45:28:2f:e8: 02:d3:1c:68:7e:44:0b:07:b3:c4:a0:ae:5f:35:41:05:ff:00: dd:59:b4:67:fe:0a:7b:3d:e8:a2:6e:c4:8d:9e:a1:78:8b:52: 58:bd:98:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNA+ELEHnRzRFVTQp48G7hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYjAxNmY0NmRlMmRiNWNjMzExNjU5OWVlODcxYzc2YzJj ODM0YzYwHhcNMjUxMjIzMjEwMDU4WhcNMjUxMjI0MjEwMDU4WjAzMTEwLwYDVQQD EyhkNjA5MjFiZWM2NTAzMjRiZmYzYWM1M2E2ZDc0MWY0ODMwOTFhMjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjv/hxhok1lUXeZWMyjzY/7k0NIS F+mYn/qaJcq9rf4JgIi+GKYBwmrk9sIAxFMNNiX3UHFJWD5xOaKeSUKoerEcaS50 pXU1eoG9uc4qMbX/+tontLO6GYN3ponUlK5J8aYapArqorLIt4YUK1NYQMbGRtJO KwsfttaU+OwSL80fznXOzVNE0PnTg8nH02Oum0i8NnQIMyxG3dVzurMDgwfwd2bs 4p+IGg03dEetgMgEsm745rdwlaJMYroXsiTTub89c2NOtdupFrRxjeUseSQ043oY i+/+Bal8d/ZFtBUC/+uLFl/YosDICq3uLQS3uohVdERK/+Ekj/e5KjiNfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYJIb7GUDJL/zrFOm10H0gwkaIgMB8GA1UdIwQY MBaAFOuwFvRt4ttcwxFlme6HHHbCyDTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjdBVzlHM2kyMXpERVdXWjdvY2Nkc0xJTk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8zZDAxM2UtOWU1OC00NjVlLTg3YmIt MDcyZmNhNWZmZWJlLzEvNjdBVzlHM2kyMXpERVdXWjdvY2Nkc0xJTk1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8zZDAxM2UtOWU1OC00NjVlLTg3YmItMDcyZmNhNWZmZWJl LzEvNjdBVzlHM2kyMXpERVdXWjdvY2Nkc0xJTk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDHYagDQ 4w3QeMQYA8pbdyx/U71I2+ouJN79eeL4mFilLBsei+XmHR3uApMXe3aAUrforTNb EA8/347j5PQ9FBV9r4yRgYcq4AOzH9/sQo+bu/AyhfzAN0/1uRfLLI10M0Gdix0K cUD8ju3J9CWhiwh9cPgf/R+ftt6hQicn8CUidV1KsHw2soiQ4uHHPOH7cj4vnRNX p+HbFqHgGB6yXe3YY5L/Tgx6TFCADQiM0F3E65QCu8M3LGzoVD88yyGPmWKHcj3O db4tVNfAVhaJkI/rr2BFKC/oAtMcaH5ECwezxKCuXzVBBf8A3Vm0Z/4Kez3oom7E jZ6heItSWL2Y7w== -----END CERTIFICATE-----Generated at Wed Dec 24 04:44:03 2025 by rpki-client