This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json) Hash identifier: TVh8I3DuOoYGWaq59qTccFPQfw1R+OqccCZXtHaDis4= Subject key identifier: DD:C6:7A:41:46:D9:74:EB:33:2E:EE:7B:78:42:1F:FF:86:0B:8E:09 Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04 Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104 Certificate serial: 019BF3BDC26F0AE94F787ECCA7B6ADF29DDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft Manifest number: 17FC Signing time: Sun 25 Jan 2026 06:00:58 +0000 Manifest this update: Sun 25 Jan 2026 06:00:58 +0000 Manifest next update: Mon 26 Jan 2026 06:00:58 +0000 Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: 5ac0HfrsrZFOSeFxg/H1IfnuvClz6hoIy/eFnlMTcXk=) 2: NAxRx4Jr0rqPtlJTNXrb35CC0xc.roa (hash: RsFVL4HNfvBrvPK/cBofT0YHxk3eVLnp1XbozYT7S+s=) 3: suamwYdV2kKIPidzPYiCq9-IUDM.roa (hash: VNOegjuT8/2Y39UrMHD85RKZ5GmjLwxmKGv2c2FnOoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:c2:6f:0a:e9:4f:78:7e:cc:a7:b6:ad:f2:9d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104 Validity Not Before: Jan 25 06:00:58 2026 GMT Not After : Jan 26 06:00:58 2026 GMT Subject: CN=ddc67a4146d974eb332eee7b78421fff860b8e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:40:e4:3a:91:69:a9:53:1d:6f:16:c3:28:c3: 86:d6:ff:67:d2:9a:f5:ff:ef:e2:fa:c3:85:e4:cf: e9:1c:d5:dd:f1:0c:b6:5d:54:62:18:82:bf:89:17: cb:ff:c4:31:b4:db:59:df:37:c4:f6:b5:2a:44:2f: f0:0b:3d:c5:2b:eb:f3:b9:7b:87:24:6f:20:5c:1f: bb:3c:0c:cc:1e:d6:83:1a:94:79:54:d2:fd:66:fb: be:00:ad:22:82:8a:b3:14:86:4a:ed:df:d9:99:77: 54:6b:90:4f:a2:c3:d9:04:88:4b:a2:b6:a4:17:4e: 45:97:e9:14:00:44:8d:2f:95:70:a2:8d:39:c6:b9: 96:00:60:90:0f:2b:72:f2:fd:18:6a:13:15:32:08: a1:d1:38:55:0d:0d:4c:2d:d8:98:bb:3d:41:82:f3: 25:97:05:8e:c4:41:3c:de:c4:96:9c:cc:4e:91:c7: 45:64:12:7a:c7:07:46:f0:99:89:3f:89:d7:76:4b: e1:cb:f1:6f:95:48:4b:f0:a3:d3:ac:ed:0d:8a:ff: a5:4f:a4:4e:3e:c8:0d:36:a4:c9:83:e7:50:36:c1: 1a:88:be:16:c6:7d:62:76:40:d1:65:12:c2:ee:4f: 98:12:18:33:99:10:fb:1d:20:fb:17:eb:18:d4:d4: 07:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C6:7A:41:46:D9:74:EB:33:2E:EE:7B:78:42:1F:FF:86:0B:8E:09 X509v3 Authority Key Identifier: keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a2:73:82:2a:2a:50:fe:01:ad:f1:4a:c7:5b:f1:ec:5e:69: 3b:3b:82:c4:5d:6a:38:3e:5a:30:ed:bc:b9:ac:d3:0f:d6:4e: 96:0e:f6:c7:73:c4:b1:68:a3:30:bb:81:d3:aa:0c:81:09:01: 50:5e:d9:1d:84:0d:af:69:23:87:97:32:e1:53:44:b7:93:81: 4d:82:5f:89:94:d3:66:77:9e:4f:a1:fd:cc:63:97:00:80:64: 7e:30:5f:02:3b:c0:e4:98:e5:c9:55:1f:d2:6c:fd:ef:60:49: c8:7a:56:e6:3b:c6:6b:87:a9:7a:5c:c4:35:85:1d:9a:41:ae: 23:5f:b8:55:89:cf:75:e5:b6:ec:e4:bf:19:af:15:4a:ba:1f: a5:61:c3:ac:80:79:d3:d7:56:ba:c3:40:83:90:0b:2c:24:96: 1e:ae:f5:da:5a:c4:63:d1:f0:f6:4e:26:96:a3:8d:9a:97:22: e6:8e:dc:fc:a9:2d:85:2e:1e:7a:42:08:5a:34:32:08:32:d0: a4:ce:d5:54:fd:3f:ab:ef:16:bd:cc:14:73:21:13:e2:42:32: 49:01:e5:4e:61:0a:32:c9:41:d8:96:bc:f8:bc:d7:31:e5:db: 94:64:7a:30:08:9e:2f:a0:ef:de:d1:05:57:7a:b6:08:70:ea: 8f:12:59:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvcJvCulPeH7Mp7at8p3cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYzY2NDAzYWQwYzQ1MzdhZjljMzJiMGRlZjBjNTJhYzJh YWIxMDQwHhcNMjYwMTI1MDYwMDU4WhcNMjYwMTI2MDYwMDU4WjAzMTEwLwYDVQQD EyhkZGM2N2E0MTQ2ZDk3NGViMzMyZWVlN2I3ODQyMWZmZjg2MGI4ZTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0DkOpFpqVMdbxbDKMOG1v9n0pr1 /+/i+sOF5M/pHNXd8Qy2XVRiGIK/iRfL/8QxtNtZ3zfE9rUqRC/wCz3FK+vzuXuH JG8gXB+7PAzMHtaDGpR5VNL9Zvu+AK0igoqzFIZK7d/ZmXdUa5BPosPZBIhLorak F05Fl+kUAESNL5Vwoo05xrmWAGCQDyty8v0YahMVMgih0ThVDQ1MLdiYuz1BgvMl lwWOxEE83sSWnMxOkcdFZBJ6xwdG8JmJP4nXdkvhy/FvlUhL8KPTrO0Niv+lT6RO PsgNNqTJg+dQNsEaiL4Wxn1idkDRZRLC7k+YEhgzmRD7HSD7F+sY1NQHiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3GekFG2XTrMy7ue3hCH/+GC44JMB8GA1UdIwQY MBaAFOvGZAOtDEU3r5wysN7wxSrCqrEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi83MjgxZGEtMGViMC00MGE4LTk5ODMt ZDFhOWRhNGExMzBkLzEvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi83MjgxZGEtMGViMC00MGE4LTk5ODMtZDFhOWRhNGExMzBk LzEvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALaJzgioq UP4BrfFKx1vx7F5pOzuCxF1qOD5aMO28uazTD9ZOlg72x3PEsWijMLuB06oMgQkB UF7ZHYQNr2kjh5cy4VNEt5OBTYJfiZTTZneeT6H9zGOXAIBkfjBfAjvA5JjlyVUf 0mz972BJyHpW5jvGa4epelzENYUdmkGuI1+4VYnPdeW27OS/Ga8VSrofpWHDrIB5 09dWusNAg5ALLCSWHq712lrEY9Hw9k4mlqONmpci5o7c/KkthS4eekIIWjQyCDLQ pM7VVP0/q+8WvcwUcyET4kIySQHlTmEKMslB2Ja8+LzXMeXblGR6MAieL6Dv3tEF V3q2CHDqjxJZtQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:24:11 2026 by rpki-client