This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json) Hash identifier: xb3R2cBwDgORjbriEYS7b1pMYwRDM9146Ps7+QYcH5k= Subject key identifier: C7:78:8F:50:4A:63:7B:41:E5:24:02:54:DC:BE:81:A0:DC:E2:41:FB Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04 Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104 Certificate serial: 019AF4D2B3D8EE9184143B891DE7D2EFF2C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft Manifest number: 1777 Signing time: Sat 06 Dec 2025 18:00:40 +0000 Manifest this update: Sat 06 Dec 2025 18:00:40 +0000 Manifest next update: Sun 07 Dec 2025 18:00:40 +0000 Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: 6x9WPD2CDHQ7+6jK1oB+jRkiqnesZsFqQdgfcoyyfTI=) 2: KZug6FKGZZRd25xEmWgbfg0_wdw.roa (hash: ctBKd+yf9Znf9nJH1GwdvGB/+F5ODDOhs9z06Ml25Ow=) 3: Yhr8lSQPkVNE2nE3dAVuTYK9ZTE.roa (hash: DYAfTfRN42C4dDlnu2IUI5X6rPDqQbV+Vyawh6lte/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:b3:d8:ee:91:84:14:3b:89:1d:e7:d2:ef:f2:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104 Validity Not Before: Dec 6 18:00:40 2025 GMT Not After : Dec 7 18:00:40 2025 GMT Subject: CN=c7788f504a637b41e5240254dcbe81a0dce241fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1d:84:b7:2f:74:54:9d:75:fc:8a:2a:c4:d4: 6e:dd:b5:fd:bd:90:28:17:52:c9:ce:00:6f:eb:27: ce:4c:1d:20:e9:49:4f:3b:f5:15:89:c5:00:57:2c: e3:40:3a:3f:db:32:4a:70:d0:a6:69:e3:81:66:b2: 5e:b8:b3:d2:e6:44:48:0f:77:89:d5:fe:66:dc:33: 28:b2:4c:84:05:09:bf:15:82:b3:99:f4:00:c4:9c: 66:48:01:32:3a:30:2d:0c:11:f9:80:8d:44:1b:d9: a5:ef:ce:0b:af:c7:7b:50:5f:43:1c:f2:83:6d:c2: a9:31:41:40:2d:b8:a7:5e:a4:03:34:8e:ac:cf:55: bd:33:61:23:40:8e:84:7c:98:53:cc:4a:66:06:14: 42:fb:39:aa:4d:e0:b1:2d:34:6f:62:37:32:6f:4b: 19:2a:a5:07:b7:3d:57:2c:98:d8:51:41:c0:9b:78: 62:7a:62:da:1a:e0:81:ce:7f:ae:2a:58:72:d7:95: 89:2a:51:50:eb:72:44:1f:ea:6f:75:0c:31:ce:ab: 58:85:dc:0e:63:49:2b:66:ee:c6:b9:c6:3a:41:f0: 74:61:83:65:3e:ba:ce:64:90:d6:31:20:d5:d5:7d: 3b:b4:0b:92:ff:13:d2:b9:a4:c2:ae:83:78:9d:85: f2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:78:8F:50:4A:63:7B:41:E5:24:02:54:DC:BE:81:A0:DC:E2:41:FB X509v3 Authority Key Identifier: keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:10:20:61:79:96:af:d9:0b:3f:30:35:0e:a4:c9:06:5b:c8: ad:87:7e:ee:71:dd:3b:c5:3e:dd:85:09:f8:9e:9a:1a:4c:c6: 2c:09:f0:2f:ad:69:af:65:04:49:85:7b:66:84:7e:48:69:da: 85:69:50:7a:2b:b3:bb:f8:68:db:31:d7:b2:17:d1:0e:70:ba: 1d:3e:25:d2:33:06:ab:70:15:f9:a4:05:99:16:de:27:66:07: 97:6c:72:60:29:d5:9a:ec:64:72:66:a9:46:f1:f9:98:87:e2: 06:8e:38:71:21:68:f4:96:ef:40:68:bc:9e:1f:c8:04:6b:10: 90:33:78:30:2e:a2:12:a8:e1:b9:77:3d:f5:c3:7a:b1:4b:18: 4a:e4:69:27:a1:fe:11:ae:bd:38:c3:eb:7c:b6:41:51:62:25: 95:24:ec:cd:2d:cd:51:76:a4:07:71:c0:f2:c8:6b:c1:fc:d0: e2:da:49:93:05:ba:12:a5:11:6d:16:6f:58:fa:6a:d6:e3:4a: f5:34:7a:75:d0:d1:f8:39:2a:fc:59:99:7d:a1:e3:15:00:56: df:28:95:39:2a:36:f2:73:1d:40:76:90:02:e7:eb:83:f5:e6: 1c:43:20:ca:95:6d:d9:e0:b6:ab:b2:d8:ba:a7:1f:72:69:ad: 6e:e6:7c:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00rPY7pGEFDuJHefS7/LCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYzY2NDAzYWQwYzQ1MzdhZjljMzJiMGRlZjBjNTJhYzJh YWIxMDQwHhcNMjUxMjA2MTgwMDQwWhcNMjUxMjA3MTgwMDQwWjAzMTEwLwYDVQQD EyhjNzc4OGY1MDRhNjM3YjQxZTUyNDAyNTRkY2JlODFhMGRjZTI0MWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5x2Ety90VJ11/IoqxNRu3bX9vZAo F1LJzgBv6yfOTB0g6UlPO/UVicUAVyzjQDo/2zJKcNCmaeOBZrJeuLPS5kRID3eJ 1f5m3DMoskyEBQm/FYKzmfQAxJxmSAEyOjAtDBH5gI1EG9ml784Lr8d7UF9DHPKD bcKpMUFALbinXqQDNI6sz1W9M2EjQI6EfJhTzEpmBhRC+zmqTeCxLTRvYjcyb0sZ KqUHtz1XLJjYUUHAm3hiemLaGuCBzn+uKlhy15WJKlFQ63JEH+pvdQwxzqtYhdwO Y0krZu7GucY6QfB0YYNlPrrOZJDWMSDV1X07tAuS/xPSuaTCroN4nYXyuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMd4j1BKY3tB5SQCVNy+gaDc4kH7MB8GA1UdIwQY MBaAFOvGZAOtDEU3r5wysN7wxSrCqrEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi83MjgxZGEtMGViMC00MGE4LTk5ODMt ZDFhOWRhNGExMzBkLzEvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi83MjgxZGEtMGViMC00MGE4LTk5ODMtZDFhOWRhNGExMzBk LzEvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChAgYXmW r9kLPzA1DqTJBlvIrYd+7nHdO8U+3YUJ+J6aGkzGLAnwL61pr2UESYV7ZoR+SGna hWlQeiuzu/ho2zHXshfRDnC6HT4l0jMGq3AV+aQFmRbeJ2YHl2xyYCnVmuxkcmap RvH5mIfiBo44cSFo9JbvQGi8nh/IBGsQkDN4MC6iEqjhuXc99cN6sUsYSuRpJ6H+ Ea69OMPrfLZBUWIllSTszS3NUXakB3HA8shrwfzQ4tpJkwW6EqURbRZvWPpq1uNK 9TR6ddDR+Dkq/FmZfaHjFQBW3yiVOSo28nMdQHaQAufrg/XmHEMgypVt2eC2q7LY uqcfcmmtbuZ8lg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:49:31 2025 by rpki-client