This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft File: 67KkJVDl4rSqGkc7KzcbwoNBoWo.mft (raw, json) Hash identifier: YHTHFVqs9UspZc1IU6rx7HSweYQ9iExlA2mNFVXwQtw= Subject key identifier: DB:31:10:5E:17:29:6E:9A:A1:E0:43:33:BD:0E:16:E6:5F:4A:58:61 Authority key identifier: EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A Certificate issuer: /CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a Certificate serial: 019AF49BA22D0F941BF5090DCFF628097004 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft Manifest number: 0EC5 Signing time: Sat 06 Dec 2025 17:00:31 +0000 Manifest this update: Sat 06 Dec 2025 17:00:31 +0000 Manifest next update: Sun 07 Dec 2025 17:00:31 +0000 Files and hashes: 1: 67KkJVDl4rSqGkc7KzcbwoNBoWo.crl (hash: vVU40PSBNU7pSsM6VXIR8Si038704K0sJ2LKFtPgdcA=) 2: UGLv7iIWQ-5niuk1r5Vedx_SrIM.roa (hash: +rlvmMS0hKnH04ERI3SbO3F5bnx5NVtVmXo36GJpU3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:a2:2d:0f:94:1b:f5:09:0d:cf:f6:28:09:70:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a Validity Not Before: Dec 6 17:00:31 2025 GMT Not After : Dec 7 17:00:31 2025 GMT Subject: CN=db31105e17296e9aa1e04333bd0e16e65f4a5861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:81:b6:e8:a3:c5:d6:96:fb:f8:b0:43:43:f8: 78:98:84:61:e2:8d:b6:23:dc:b0:23:56:05:6f:24: 0b:f0:7b:5e:0e:f1:9b:c2:88:3d:a3:70:d7:9f:7a: 48:a3:88:c4:3d:48:67:89:9c:60:c7:26:c6:1e:65: 10:23:69:37:a7:92:ee:f4:1c:1d:2b:74:36:d5:31: b7:db:c4:36:2f:dd:73:03:ba:b6:db:05:28:99:02: 71:ab:3e:13:c0:1b:b5:6f:2e:37:c6:49:1b:89:26: ae:f4:8f:9b:a4:80:f5:72:1c:ca:0f:5e:6d:ce:6a: d3:73:41:80:b9:9c:0b:26:5d:cf:f3:89:bd:6e:81: 3c:d8:fc:5a:de:f0:3d:95:b4:29:98:69:70:4d:42: e0:d4:0f:8e:78:82:51:d5:7e:f3:2e:77:79:05:9a: 73:94:2e:9f:d3:16:8e:d6:cf:c9:6f:03:97:7c:ee: c5:6e:de:37:4a:2b:b2:ef:5c:e4:83:62:19:19:5c: 17:75:10:a5:f9:2a:5d:9c:b8:68:2f:f6:9f:12:95: 46:75:97:6d:0a:76:79:d1:21:ba:d2:fd:e3:e2:77: 2c:55:bd:4e:58:e3:26:0e:c9:08:4d:8a:a0:b2:95: 00:08:f4:f2:f5:de:01:8e:dd:04:63:93:7a:dd:10: 7f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:31:10:5E:17:29:6E:9A:A1:E0:43:33:BD:0E:16:E6:5F:4A:58:61 X509v3 Authority Key Identifier: keyid:EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:2f:bc:2e:7a:7c:f0:25:3e:bf:89:4e:dc:cf:fc:60:12:81: c4:f9:2f:8b:4f:8f:f2:10:b6:c4:ae:71:89:ce:11:a3:5e:a8: 80:54:8e:82:d1:3c:a2:22:c9:66:29:64:1c:a2:e7:b3:4f:8a: 86:10:e8:8b:17:75:bc:99:5c:2e:23:37:d9:3c:b1:9a:81:b6: c2:36:a8:0d:91:9d:f9:50:35:b8:ce:fb:3a:dc:58:de:6c:8b: 74:64:78:bc:8c:e9:46:0d:41:a5:23:83:8f:03:db:25:ee:6a: 69:55:ff:d3:8d:6d:c8:06:83:20:c4:c8:f3:3c:83:af:e7:9b: 17:2a:8c:65:3c:a2:67:11:ae:ae:e9:46:0e:b8:7d:ab:78:ab: 7f:ae:90:87:7b:c9:77:74:2d:e5:1c:48:de:44:63:06:1f:fc: 87:af:6a:8e:92:67:55:aa:eb:6c:03:4b:74:28:68:f1:27:1f: ce:b1:85:d0:d6:13:96:94:7b:b7:07:18:29:b9:5d:4f:0b:c7: a3:37:ba:10:b5:0c:53:c5:52:ce:47:3d:60:81:73:29:d4:5a: 90:3d:a8:4e:a0:18:d5:46:f6:b6:9f:79:89:cc:5c:44:10:da: 8e:7e:49:1e:ea:8a:fb:c8:f6:d3:92:55:27:d0:bc:38:44:cb: ba:1a:77:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m6ItD5Qb9QkNz/YoCXAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYjJhNDI1NTBlNWUyYjRhYTFhNDczYjJiMzcxYmMyODM0 MWExNmEwHhcNMjUxMjA2MTcwMDMxWhcNMjUxMjA3MTcwMDMxWjAzMTEwLwYDVQQD EyhkYjMxMTA1ZTE3Mjk2ZTlhYTFlMDQzMzNiZDBlMTZlNjVmNGE1ODYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoG26KPF1pb7+LBDQ/h4mIRh4o22 I9ywI1YFbyQL8HteDvGbwog9o3DXn3pIo4jEPUhniZxgxybGHmUQI2k3p5Lu9Bwd K3Q21TG328Q2L91zA7q22wUomQJxqz4TwBu1by43xkkbiSau9I+bpID1chzKD15t zmrTc0GAuZwLJl3P84m9boE82Pxa3vA9lbQpmGlwTULg1A+OeIJR1X7zLnd5BZpz lC6f0xaO1s/JbwOXfO7Fbt43Siuy71zkg2IZGVwXdRCl+SpdnLhoL/afEpVGdZdt CnZ50SG60v3j4ncsVb1OWOMmDskITYqgspUACPTy9d4Bjt0EY5N63RB/qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsxEF4XKW6aoeBDM70OFuZfSlhhMB8GA1UdIwQY MBaAFOuypCVQ5eK0qhpHOys3G8KDQaFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lNThiNDAtZGRlNi00ODQwLTgxMGMt MzFmOTI5NDVkZmZkLzEvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9lNThiNDAtZGRlNi00ODQwLTgxMGMtMzFmOTI5NDVkZmZk LzEvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZi+8Lnp8 8CU+v4lO3M/8YBKBxPkvi0+P8hC2xK5xic4Ro16ogFSOgtE8oiLJZilkHKLns0+K hhDoixd1vJlcLiM32TyxmoG2wjaoDZGd+VA1uM77OtxY3myLdGR4vIzpRg1BpSOD jwPbJe5qaVX/041tyAaDIMTI8zyDr+ebFyqMZTyiZxGurulGDrh9q3irf66Qh3vJ d3Qt5RxI3kRjBh/8h69qjpJnVarrbANLdCho8ScfzrGF0NYTlpR7twcYKbldTwvH oze6ELUMU8VSzkc9YIFzKdRakD2oTqAY1Ub2tp95icxcRBDajn5JHuqK+8j205JV J9C8OETLuhp30A== -----END CERTIFICATE-----Generated at Sat Dec 6 21:05:52 2025 by rpki-client