This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.mft File: 68sOe5lBX5hvTQgXf4i1uPfrp_k.mft (raw, json) Hash identifier: xnNgpw4b8rBAcSl8YM504Cpu0v2YXF+RfCaJJoWCDEM= Subject key identifier: 14:50:D7:6C:15:CC:71:DA:54:28:E1:47:90:1E:89:B9:4B:DD:7C:94 Authority key identifier: EB:CB:0E:7B:99:41:5F:98:6F:4D:08:17:7F:88:B5:B8:F7:EB:A7:F9 Certificate issuer: /CN=ebcb0e7b99415f986f4d08177f88b5b8f7eba7f9 Certificate serial: 019AF61C84015EBC37223DE00CE784B6B5EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68sOe5lBX5hvTQgXf4i1uPfrp_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.mft Manifest number: D6 Signing time: Sun 07 Dec 2025 00:00:55 +0000 Manifest this update: Sun 07 Dec 2025 00:00:55 +0000 Manifest next update: Mon 08 Dec 2025 00:00:55 +0000 Files and hashes: 1: 68sOe5lBX5hvTQgXf4i1uPfrp_k.crl (hash: CCfmyjZcM+wvHYqyQP5vfLBLlGfcddzLAGJPYKKGH0E=) 2: zqH_FbH4S-II4YZQGavH-bMUrEo.roa (hash: ePnRXaJa+GcJLcsGzH8p1H1utEMwoKTcU9HMLbPMGJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.crl rsync://rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.mft rsync://rpki.ripe.net/repository/DEFAULT/68sOe5lBX5hvTQgXf4i1uPfrp_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:84:01:5e:bc:37:22:3d:e0:0c:e7:84:b6:b5:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebcb0e7b99415f986f4d08177f88b5b8f7eba7f9 Validity Not Before: Dec 7 00:00:55 2025 GMT Not After : Dec 8 00:00:55 2025 GMT Subject: CN=1450d76c15cc71da5428e147901e89b94bdd7c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2b:51:2b:e1:84:03:f0:5d:1a:af:5e:53:f5: d2:6a:56:f2:66:14:f5:5b:ac:36:90:5b:58:93:9f: 5d:82:04:00:1c:b2:38:df:7b:32:dd:50:ce:8d:53: 70:d8:0e:14:7d:63:45:02:31:7b:66:ac:f3:cc:73: 3f:2c:09:9c:e2:06:e0:19:48:56:86:f5:e6:d2:9d: c3:53:44:4f:2e:ee:29:a9:e5:53:80:c0:f2:4c:e0: 28:80:08:26:8f:28:f1:26:dc:77:c3:33:2a:0f:15: 37:39:7b:16:f8:47:8e:40:07:74:0d:c4:70:82:63: ee:4d:f5:6f:59:38:1f:b9:84:67:af:65:fe:84:f5: 53:36:e1:9b:ff:24:fc:bb:1f:0c:59:5e:fa:89:79: 63:99:70:36:85:e0:26:9a:75:e0:0e:28:2c:9e:8a: 7e:f1:54:eb:8c:06:5f:74:18:7e:99:eb:f7:3c:59: 48:f0:46:4f:a9:87:10:a0:83:65:39:13:26:af:e0: c2:83:19:37:6c:5e:9e:17:d0:8b:f2:64:e0:78:28: 98:f9:88:70:bd:d3:af:22:07:f2:31:a0:3f:f8:0c: b7:5a:12:bf:86:99:2a:6d:25:59:e2:50:bc:c5:b8: 95:c7:77:54:e2:2d:4e:3c:65:40:73:4f:e0:81:4a: de:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:50:D7:6C:15:CC:71:DA:54:28:E1:47:90:1E:89:B9:4B:DD:7C:94 X509v3 Authority Key Identifier: keyid:EB:CB:0E:7B:99:41:5F:98:6F:4D:08:17:7F:88:B5:B8:F7:EB:A7:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68sOe5lBX5hvTQgXf4i1uPfrp_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:f9:9d:08:7f:af:a0:9a:92:22:e8:56:ab:0d:f9:51:2a:dd: 78:29:b6:1f:d2:6b:c3:8f:6d:14:90:d6:84:92:3b:b9:7e:83: cd:22:07:07:0f:d0:7e:63:c6:1b:d8:11:68:a5:e7:28:52:5f: 72:38:d2:58:04:6b:17:02:75:74:12:e4:b4:5f:dc:cc:13:70: 93:9b:99:25:11:59:e3:51:15:6a:b3:db:8c:11:20:70:25:f9: 4d:50:95:5d:bb:2d:7d:0c:2a:06:fd:74:32:aa:fb:70:3d:e9: 99:ad:63:6a:15:b3:01:a2:ac:80:59:1f:3e:13:1e:ab:63:2f: db:1a:23:c4:fa:22:6b:01:cb:11:37:20:af:a5:fe:7f:b7:a6: cd:43:79:32:45:52:3a:65:22:bc:d7:de:e6:4f:d4:b7:66:0f: 59:58:70:b0:f0:68:1f:b8:0a:df:b4:f3:ea:53:39:16:d6:7f: 20:b8:37:bd:c8:1f:16:40:66:1f:08:bd:55:85:63:c9:d8:78: 29:90:30:15:12:ae:cc:5d:44:ca:bd:e1:b5:45:2d:37:ad:7e: 2d:8a:fa:cb:0d:33:43:3b:8e:b7:ef:2e:86:42:92:6c:fb:52: 74:3f:47:74:f7:b5:1f:c3:f3:15:8a:bb:f4:b7:70:40:d5:bc: f4:c9:6a:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HIQBXrw3Ij3gDOeEtrXqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViY2IwZTdiOTk0MTVmOTg2ZjRkMDgxNzdmODhiNWI4Zjdl YmE3ZjkwHhcNMjUxMjA3MDAwMDU1WhcNMjUxMjA4MDAwMDU1WjAzMTEwLwYDVQQD EygxNDUwZDc2YzE1Y2M3MWRhNTQyOGUxNDc5MDFlODliOTRiZGQ3Yzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnytRK+GEA/BdGq9eU/XSalbyZhT1 W6w2kFtYk59dggQAHLI433sy3VDOjVNw2A4UfWNFAjF7ZqzzzHM/LAmc4gbgGUhW hvXm0p3DU0RPLu4pqeVTgMDyTOAogAgmjyjxJtx3wzMqDxU3OXsW+EeOQAd0DcRw gmPuTfVvWTgfuYRnr2X+hPVTNuGb/yT8ux8MWV76iXljmXA2heAmmnXgDigsnop+ 8VTrjAZfdBh+mev3PFlI8EZPqYcQoINlORMmr+DCgxk3bF6eF9CL8mTgeCiY+Yhw vdOvIgfyMaA/+Ay3WhK/hpkqbSVZ4lC8xbiVx3dU4i1OPGVAc0/ggUrelQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRQ12wVzHHaVCjhR5AeiblL3XyUMB8GA1UdIwQY MBaAFOvLDnuZQV+Yb00IF3+Itbj366f5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjhzT2U1bEJYNWh2VFFnWGY0aTF1UGZycF9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZmNhZGYtODA2MC00Mzk1LTkyNmQt ZGVlOWNlMzk0OTkxLzEvNjhzT2U1bEJYNWh2VFFnWGY0aTF1UGZycF9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8xZmNhZGYtODA2MC00Mzk1LTkyNmQtZGVlOWNlMzk0OTkx LzEvNjhzT2U1bEJYNWh2VFFnWGY0aTF1UGZycF9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARfmdCH+v oJqSIuhWqw35USrdeCm2H9Jrw49tFJDWhJI7uX6DzSIHBw/QfmPGG9gRaKXnKFJf cjjSWARrFwJ1dBLktF/czBNwk5uZJRFZ41EVarPbjBEgcCX5TVCVXbstfQwqBv10 Mqr7cD3pma1jahWzAaKsgFkfPhMeq2Mv2xojxPoiawHLETcgr6X+f7emzUN5MkVS OmUivNfe5k/Ut2YPWVhwsPBoH7gK37Tz6lM5FtZ/ILg3vcgfFkBmHwi9VYVjydh4 KZAwFRKuzF1Eyr3htUUtN61+LYr6yw0zQzuOt+8uhkKSbPtSdD9HdPe1H8PzFYq7 9LdwQNW89Mlqnw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:13:44 2025 by rpki-client