This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft File: B67xkPRL_B2wxQ8ac_3wFwga_hY.mft (raw, json) Hash identifier: J85wstwgjqmIG9rIpjE6fEJ6vfXla+Yf1q8MWp4rdwo= Subject key identifier: 00:AB:9F:29:27:5F:68:F1:8D:09:75:03:5F:AD:75:48:90:39:15:A6 Authority key identifier: 07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16 Certificate issuer: /CN=07aef190f44bfc1db0c50f1a73fdf017081afe16 Certificate serial: 019AF5782DDC942452EEC29C0AFF815E4FC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft Manifest number: 0CBC Signing time: Sat 06 Dec 2025 21:01:25 +0000 Manifest this update: Sat 06 Dec 2025 21:01:25 +0000 Manifest next update: Sun 07 Dec 2025 21:01:25 +0000 Files and hashes: 1: B67xkPRL_B2wxQ8ac_3wFwga_hY.crl (hash: tWFJ94gZN9InXr1ChBiU7jrqE57vOXqjv3NaMLHP2lk=) 2: o0m8fWeQnLg_XbqIRRPxINGkNnk.roa (hash: hFBwillrrnPw4RwjJ9B6leCvzXkiINuH8WcY9jtsCtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:2d:dc:94:24:52:ee:c2:9c:0a:ff:81:5e:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07aef190f44bfc1db0c50f1a73fdf017081afe16 Validity Not Before: Dec 6 21:01:25 2025 GMT Not After : Dec 7 21:01:25 2025 GMT Subject: CN=00ab9f29275f68f18d0975035fad7548903915a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:69:ca:21:8a:be:c2:0f:ba:4a:7a:1a:cb:86: 0d:bb:77:e0:6c:de:f9:92:69:ac:39:0b:25:ab:77: 63:23:9e:f2:eb:f2:e7:96:94:31:77:81:c1:2f:f0: 09:0d:3c:f9:66:1f:80:d3:55:3d:d3:ac:9d:55:9c: 9e:10:45:9e:83:d2:ab:ae:ae:e9:c0:e9:13:71:ec: b9:0f:f0:ff:ad:bf:dd:e7:65:14:c7:73:25:ec:19: ec:22:90:03:f4:61:e5:d6:e5:02:9f:81:fd:5a:b0: 19:cd:1a:a9:3f:f4:b6:96:0a:81:51:39:26:74:c2: 15:05:6a:66:14:7f:b6:09:db:05:67:02:2b:6c:79: 6b:65:73:4b:57:e4:74:43:c1:60:00:f3:1b:0d:69: ba:7f:0a:e6:54:c6:e1:11:6e:0e:c8:a2:97:1f:ca: 2d:1e:8b:b2:82:da:d6:2f:43:58:b2:d1:4b:cd:ae: 1b:5c:cb:2a:25:91:e9:19:9c:33:4e:1e:79:9a:0e: 9d:99:5c:01:7c:e8:45:a4:43:7f:30:34:ab:a3:c1: 72:32:6d:2c:cd:49:af:73:fa:7c:6d:67:08:7a:2d: 92:e7:e1:01:46:07:4c:bd:98:a4:4c:28:36:fa:54: 06:b9:78:82:48:9d:d2:8c:18:7f:cd:25:c0:86:09: c8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AB:9F:29:27:5F:68:F1:8D:09:75:03:5F:AD:75:48:90:39:15:A6 X509v3 Authority Key Identifier: keyid:07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:0b:67:39:1f:9e:8d:5d:ff:07:12:ad:f3:f4:7c:88:b0:be: f7:58:d3:c6:11:ea:29:a1:9a:cd:30:65:09:d4:e5:86:08:3f: dd:d7:e7:48:55:21:2a:e0:86:d7:cb:81:a4:eb:9e:18:45:65: 52:ef:52:4d:a8:71:b1:1b:ed:bc:0b:46:29:8f:f7:89:30:84: 82:31:d4:76:bd:29:e0:f0:96:05:d4:73:c6:8d:34:cf:ee:76: 28:8f:0b:00:78:55:83:53:52:fa:ff:55:9a:32:a6:83:b0:b1: f0:3b:98:c2:c9:13:cc:34:b2:2b:bf:56:54:4d:60:96:21:08: fb:9f:f2:01:f0:3c:ea:52:6d:52:8f:38:20:f8:7d:85:8b:12: 96:6a:a8:96:1d:b2:f0:e5:97:fa:35:02:41:82:3d:ff:8a:9c: dd:3d:65:e4:72:61:a4:81:97:96:62:35:3e:5c:e0:60:84:52: ad:0f:99:3e:d0:62:2f:ac:24:5d:75:b1:91:be:b5:12:db:ac: 9b:31:d2:6b:00:d1:d1:47:62:42:cd:16:26:06:38:0b:6b:a5: 12:b4:cd:60:a5:a5:67:8d:a7:a6:d0:4b:6e:c2:2e:06:43:cb: 9d:98:1c:74:ce:95:ed:82:b0:d8:60:05:8b:67:94:00:fe:aa: c8:e8:6e:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eC3clCRS7sKcCv+BXk/AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YWVmMTkwZjQ0YmZjMWRiMGM1MGYxYTczZmRmMDE3MDgx YWZlMTYwHhcNMjUxMjA2MjEwMTI1WhcNMjUxMjA3MjEwMTI1WjAzMTEwLwYDVQQD EygwMGFiOWYyOTI3NWY2OGYxOGQwOTc1MDM1ZmFkNzU0ODkwMzkxNWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WnKIYq+wg+6Snoay4YNu3fgbN75 kmmsOQslq3djI57y6/LnlpQxd4HBL/AJDTz5Zh+A01U906ydVZyeEEWeg9Krrq7p wOkTcey5D/D/rb/d52UUx3Ml7BnsIpAD9GHl1uUCn4H9WrAZzRqpP/S2lgqBUTkm dMIVBWpmFH+2CdsFZwIrbHlrZXNLV+R0Q8FgAPMbDWm6fwrmVMbhEW4OyKKXH8ot HouygtrWL0NYstFLza4bXMsqJZHpGZwzTh55mg6dmVwBfOhFpEN/MDSro8FyMm0s zUmvc/p8bWcIei2S5+EBRgdMvZikTCg2+lQGuXiCSJ3SjBh/zSXAhgnI+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACrnyknX2jxjQl1A1+tdUiQORWmMB8GA1UdIwQY MBaAFAeu8ZD0S/wdsMUPGnP98BcIGv4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjY3eGtQUkxfQjJ3eFE4YWNfM3dGd2dhX2hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kNjk1MjUtN2NmYi00N2M4LTljNGYt ZWY0NDU4ZWEyMGNkLzEvQjY3eGtQUkxfQjJ3eFE4YWNfM3dGd2dhX2hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kNjk1MjUtN2NmYi00N2M4LTljNGYtZWY0NDU4ZWEyMGNk LzEvQjY3eGtQUkxfQjJ3eFE4YWNfM3dGd2dhX2hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgtnOR+e jV3/BxKt8/R8iLC+91jTxhHqKaGazTBlCdTlhgg/3dfnSFUhKuCG18uBpOueGEVl Uu9STahxsRvtvAtGKY/3iTCEgjHUdr0p4PCWBdRzxo00z+52KI8LAHhVg1NS+v9V mjKmg7Cx8DuYwskTzDSyK79WVE1gliEI+5/yAfA86lJtUo84IPh9hYsSlmqolh2y 8OWX+jUCQYI9/4qc3T1l5HJhpIGXlmI1PlzgYIRSrQ+ZPtBiL6wkXXWxkb61Etus mzHSawDR0UdiQs0WJgY4C2ulErTNYKWlZ42nptBLbsIuBkPLnZgcdM6V7YKw2GAF i2eUAP6qyOhutg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:44:08 2025 by rpki-client