This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft File: 69siVHHy1uQQYLNBhXJUhUgQFLg.mft (raw, json) Hash identifier: S89R2jMgQqw6sMgkM6dkJMBCo3MVpjSRLorLCwOIzHU= Subject key identifier: 53:61:DE:9A:62:08:4B:1B:4B:EC:B1:32:04:1C:31:5F:14:55:F3:FF Authority key identifier: EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8 Certificate issuer: /CN=ebdb225471f2d6e41060b34185725485481014b8 Certificate serial: 019B3EDA1D9C971F099447047B7520BA0F6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft Manifest number: 16EA Signing time: Sun 21 Dec 2025 03:00:40 +0000 Manifest this update: Sun 21 Dec 2025 03:00:40 +0000 Manifest next update: Mon 22 Dec 2025 03:00:40 +0000 Files and hashes: 1: 69siVHHy1uQQYLNBhXJUhUgQFLg.crl (hash: Z5iB1BGQkRdUQgKsro2IuFZ+OyuJih4j5CxFzcv+o9c=) 2: fa7NROYx8iSrXkapsnKC5maWgAE.roa (hash: uTBWDWi+lUO6SXQc1mkpkLFQ4pPjE/7aqsWLMLokR9M=) 3: ypiHaIkjWTMZcDzv0-OFLs0Vl8g.roa (hash: VEkHUv83f9ifQbOyDH/QRdAXTrrARw1jb4RzCM/pIXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:1d:9c:97:1f:09:94:47:04:7b:75:20:ba:0f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebdb225471f2d6e41060b34185725485481014b8 Validity Not Before: Dec 21 03:00:40 2025 GMT Not After : Dec 22 03:00:40 2025 GMT Subject: CN=5361de9a62084b1b4becb132041c315f1455f3ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ad:d8:25:76:96:7f:74:b7:23:6f:a7:bf:a1: 68:bb:66:4a:29:e4:a4:a7:a2:7e:54:9b:00:d9:03: 60:ee:c1:2a:d2:82:5f:b7:f1:8a:8a:6a:82:c0:da: d5:50:a5:82:b7:28:2c:8b:95:a3:32:52:35:51:7e: 72:7c:f3:07:23:95:93:e6:7f:55:15:d3:96:34:f5: 10:d3:69:ec:1b:eb:63:2f:13:bd:37:91:f7:8a:d9: 51:ed:22:5a:2d:a5:d7:13:c8:ef:8a:58:4a:6b:ca: cd:e8:2c:90:c0:c6:79:0a:56:c3:59:f6:9f:1f:cc: 34:50:c9:01:5a:f3:e2:89:b0:eb:53:3d:93:e5:ef: cd:3b:c0:c6:06:53:29:09:af:6c:bc:fd:88:37:2d: 96:97:a9:c1:a7:66:42:d9:34:19:aa:d1:59:84:06: b6:6c:83:23:07:76:ac:8b:74:9f:64:77:92:ab:de: 10:60:0d:06:28:b3:88:f2:e2:3f:db:50:98:42:b7: 2a:72:f5:eb:ca:5e:53:bc:55:b5:9f:b1:ad:e8:3d: 6a:4a:6e:e9:df:b8:60:ce:a0:37:c8:56:d4:6d:52: 68:c9:b9:1c:e2:c7:82:2f:1d:e2:a6:24:08:00:d9: b4:fb:c2:f2:6a:54:75:1e:36:5e:f7:ab:08:2f:11: e4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:61:DE:9A:62:08:4B:1B:4B:EC:B1:32:04:1C:31:5F:14:55:F3:FF X509v3 Authority Key Identifier: keyid:EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:c6:85:51:5d:63:7b:62:f0:b6:a9:ef:15:7d:40:fe:f2:e4: 0d:2e:1f:b0:f4:a4:f4:f1:81:a8:95:40:4d:2a:ba:1e:b1:67: 44:98:ce:dc:fe:e1:4d:f5:cc:76:39:10:fc:df:ba:69:8e:69: a3:64:b6:a0:d8:7d:34:e0:c1:26:f4:3a:36:60:aa:87:3c:62: b5:b5:9e:09:d3:22:21:f8:02:d7:41:70:69:9d:62:b7:31:97: 11:3a:b2:7c:5e:5e:99:5c:13:34:b0:cc:a6:e4:ef:94:b9:cb: 94:c3:af:6f:18:c3:f1:20:67:0e:89:97:9d:98:49:3f:a3:6b: c9:59:75:53:01:9c:64:a2:ea:04:e1:78:84:32:b3:4a:ee:41: 68:13:29:f5:73:2e:9a:d6:1d:d4:4f:e4:2b:12:c2:f0:7c:65: 01:2a:90:14:36:6a:a9:de:65:ba:92:a2:4a:e6:dd:81:76:39: 63:dc:26:fd:1f:4b:cb:1c:44:97:3f:31:3a:22:ad:92:41:53: 7d:a0:03:10:b0:9e:a4:51:2c:4e:f6:5e:54:b9:bd:94:61:4b: 90:c6:85:5c:d2:b4:d5:cc:bd:09:ff:44:7c:49:fc:14:1a:2b: fc:04:58:30:25:42:c6:b7:96:88:ff:f9:ec:aa:64:5b:68:46: 46:03:0b:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2h2clx8JlEcEe3Ugug9tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZGIyMjU0NzFmMmQ2ZTQxMDYwYjM0MTg1NzI1NDg1NDgx MDE0YjgwHhcNMjUxMjIxMDMwMDQwWhcNMjUxMjIyMDMwMDQwWjAzMTEwLwYDVQQD Eyg1MzYxZGU5YTYyMDg0YjFiNGJlY2IxMzIwNDFjMzE1ZjE0NTVmM2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4q3YJXaWf3S3I2+nv6Fou2ZKKeSk p6J+VJsA2QNg7sEq0oJft/GKimqCwNrVUKWCtygsi5WjMlI1UX5yfPMHI5WT5n9V FdOWNPUQ02nsG+tjLxO9N5H3itlR7SJaLaXXE8jvilhKa8rN6CyQwMZ5ClbDWfaf H8w0UMkBWvPiibDrUz2T5e/NO8DGBlMpCa9svP2INy2Wl6nBp2ZC2TQZqtFZhAa2 bIMjB3asi3SfZHeSq94QYA0GKLOI8uI/21CYQrcqcvXryl5TvFW1n7Gt6D1qSm7p 37hgzqA3yFbUbVJoybkc4seCLx3ipiQIANm0+8LyalR1HjZe96sILxHkJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNh3ppiCEsbS+yxMgQcMV8UVfP/MB8GA1UdIwQY MBaAFOvbIlRx8tbkEGCzQYVyVIVIEBS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjlzaVZISHkxdVFRWUxOQmhYSlVoVWdRRkxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zNzY4NTMtMmFiZi00MjMyLTkxZmYt MDlhNWU4ZDk2MGRkLzEvNjlzaVZISHkxdVFRWUxOQmhYSlVoVWdRRkxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8zNzY4NTMtMmFiZi00MjMyLTkxZmYtMDlhNWU4ZDk2MGRk LzEvNjlzaVZISHkxdVFRWUxOQmhYSlVoVWdRRkxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs8aFUV1j e2LwtqnvFX1A/vLkDS4fsPSk9PGBqJVATSq6HrFnRJjO3P7hTfXMdjkQ/N+6aY5p o2S2oNh9NODBJvQ6NmCqhzxitbWeCdMiIfgC10FwaZ1itzGXETqyfF5emVwTNLDM puTvlLnLlMOvbxjD8SBnDomXnZhJP6NryVl1UwGcZKLqBOF4hDKzSu5BaBMp9XMu mtYd1E/kKxLC8HxlASqQFDZqqd5lupKiSubdgXY5Y9wm/R9LyxxElz8xOiKtkkFT faADELCepFEsTvZeVLm9lGFLkMaFXNK01cy9Cf9EfEn8FBor/ARYMCVCxreWiP/5 7KpkW2hGRgML0g== -----END CERTIFICATE-----Generated at Sun Dec 21 08:42:58 2025 by rpki-client