This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft File: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft (raw, json) Hash identifier: rxL4DhTh85EKXftTY27qKwEFArg8sH6gWWX5a5mL/ag= Subject key identifier: 3A:9C:CC:0A:88:F3:0E:3C:6B:80:64:FD:34:D6:55:C9:67:8F:37:01 Authority key identifier: EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53 Certificate issuer: /CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553 Certificate serial: 019AF68A2FCC08EBEA5B7485A459B85C6EAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft Manifest number: 1763 Signing time: Sun 07 Dec 2025 02:00:42 +0000 Manifest this update: Sun 07 Dec 2025 02:00:42 +0000 Manifest next update: Mon 08 Dec 2025 02:00:42 +0000 Files and hashes: 1: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl (hash: PE/ZrgZ8FpYDw0crGB3T6cvDZUM92zS/nsJm59VX7YM=) 2: fGQ3YVDh2zkecLRGo_WA_JJKmDU.roa (hash: mv8AdpdjP5/diFcicEaZODtxwOkiTIPwxcyY8ZLf9hw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:2f:cc:08:eb:ea:5b:74:85:a4:59:b8:5c:6e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553 Validity Not Before: Dec 7 02:00:42 2025 GMT Not After : Dec 8 02:00:42 2025 GMT Subject: CN=3a9ccc0a88f30e3c6b8064fd34d655c9678f3701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a4:e1:e4:f6:8d:b5:5d:61:fd:c0:8a:c0:33: 17:a2:4e:56:62:ae:d1:f3:8a:8a:a5:a0:ca:6d:fb: 23:83:0a:e9:19:34:a7:c4:d5:46:b3:7c:54:f9:bc: 03:d8:4e:5b:38:1a:ff:66:3b:3f:75:ae:73:96:88: c4:9c:88:86:7b:08:29:4f:36:77:d1:4b:56:bd:69: 43:ae:9a:84:98:2e:34:d1:e9:44:13:66:68:b5:84: ee:a2:dc:a2:f9:81:6a:8f:72:23:07:f4:f3:ab:ac: 52:2c:86:30:e6:9b:1c:14:2b:32:36:b6:2e:67:20: ed:6a:a6:a1:49:7f:82:68:df:bf:2d:b5:9a:c5:f7: b8:a1:cd:b2:0b:9e:65:2c:64:6d:18:b8:21:df:57: 2c:d8:00:73:22:46:00:70:aa:6c:ca:71:35:f4:66: 66:1b:81:7d:bb:df:ee:b2:96:d1:23:0e:aa:9b:1d: d2:4a:da:b2:81:69:62:d4:7b:7e:37:ac:99:e9:93: 28:be:0b:22:cf:22:5d:cd:0a:10:41:18:42:38:00: d8:24:d4:4b:8a:db:59:f2:e3:bc:3f:94:c9:26:dc: 9a:6a:dd:b1:d5:87:43:53:9c:e2:3d:95:f8:9e:a3: 86:74:5d:59:f8:6e:fb:2e:5f:50:12:1b:ff:5e:95: ab:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9C:CC:0A:88:F3:0E:3C:6B:80:64:FD:34:D6:55:C9:67:8F:37:01 X509v3 Authority Key Identifier: keyid:EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:5b:b7:d2:fb:3e:a3:89:92:b9:18:59:97:f7:20:96:ab:64: d5:7b:bd:8d:2b:39:b5:27:02:95:28:26:f3:89:62:80:91:ad: 5e:82:ec:00:f4:e8:0e:1b:56:3c:4d:6d:e8:5d:53:8b:d6:7c: a6:d1:17:27:91:b6:8d:68:97:99:54:06:6a:28:97:64:d5:ef: 03:c9:4c:38:ff:f0:83:6c:fc:fc:e5:5c:bf:d0:af:66:31:3f: b6:d7:fb:5f:c9:fc:7f:3a:72:38:ff:c2:e1:a1:68:bc:db:0b: d5:62:69:5e:49:cc:86:bf:b3:be:42:95:c4:a2:cb:15:18:bb: 99:58:93:dd:70:43:48:59:56:eb:9b:bb:00:d8:24:f1:f5:a4: 8a:b2:51:86:10:a3:a4:ff:38:cc:4f:5f:20:6a:db:b5:b4:e6: 62:be:14:82:ad:cd:a7:03:31:58:b3:f4:20:91:90:03:69:f1: 1d:f6:06:0d:d1:9b:f3:0a:44:b8:6c:7c:74:d1:b5:99:40:8e: 41:37:f2:f3:da:fc:59:c3:81:12:2a:41:0c:86:4d:55:c0:3c: 0f:e7:37:07:8b:56:22:59:89:fb:9b:19:16:82:99:ee:45:33: dd:ca:6e:47:a0:a3:d0:96:ce:a7:b0:b6:13:11:9a:b6:fd:a8: 7d:9b:63:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ii/MCOvqW3SFpFm4XG6rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYzg2YzhjMmQ0OTVjOWViZTQyNjY1YTE1MTNkZTY5YTli ZjY1NTMwHhcNMjUxMjA3MDIwMDQyWhcNMjUxMjA4MDIwMDQyWjAzMTEwLwYDVQQD EygzYTljY2MwYTg4ZjMwZTNjNmI4MDY0ZmQzNGQ2NTVjOTY3OGYzNzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qTh5PaNtV1h/cCKwDMXok5WYq7R 84qKpaDKbfsjgwrpGTSnxNVGs3xU+bwD2E5bOBr/Zjs/da5zlojEnIiGewgpTzZ3 0UtWvWlDrpqEmC400elEE2ZotYTuotyi+YFqj3IjB/Tzq6xSLIYw5pscFCsyNrYu ZyDtaqahSX+CaN+/LbWaxfe4oc2yC55lLGRtGLgh31cs2ABzIkYAcKpsynE19GZm G4F9u9/uspbRIw6qmx3SStqygWli1Ht+N6yZ6ZMovgsizyJdzQoQQRhCOADYJNRL ittZ8uO8P5TJJtyaat2x1YdDU5ziPZX4nqOGdF1Z+G77Ll9QEhv/XpWrcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqczAqI8w48a4Bk/TTWVclnjzcBMB8GA1UdIwQY MBaAFOvIbIwtSVyevkJmWhUT3mmpv2VTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjhoc2pDMUpYSjYtUW1aYUZSUGVhYW1fWlZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wYjI1MmQtZGI0Yy00MjU2LWFiMDYt MDZkMTRjZjBhNDZiLzEvNjhoc2pDMUpYSjYtUW1aYUZSUGVhYW1fWlZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8wYjI1MmQtZGI0Yy00MjU2LWFiMDYtMDZkMTRjZjBhNDZi LzEvNjhoc2pDMUpYSjYtUW1aYUZSUGVhYW1fWlZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFu30vs+ o4mSuRhZl/cglqtk1Xu9jSs5tScClSgm84ligJGtXoLsAPToDhtWPE1t6F1Ti9Z8 ptEXJ5G2jWiXmVQGaiiXZNXvA8lMOP/wg2z8/OVcv9CvZjE/ttf7X8n8fzpyOP/C 4aFovNsL1WJpXknMhr+zvkKVxKLLFRi7mViT3XBDSFlW65u7ANgk8fWkirJRhhCj pP84zE9fIGrbtbTmYr4Ugq3NpwMxWLP0IJGQA2nxHfYGDdGb8wpEuGx8dNG1mUCO QTfy89r8WcOBEipBDIZNVcA8D+c3B4tWIlmJ+5sZFoKZ7kUz3cpuR6Cj0JbOp7C2 ExGatv2ofZtjvA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:34:55 2025 by rpki-client