This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json) Hash identifier: Bv2VNMtpBb+3bEH2nV1ES2K63krxkpu2ZfNZhFf7qJ4= Subject key identifier: 06:DF:CB:58:2E:9C:26:60:83:2F:B6:D6:79:97:64:07:57:1A:4A:65 Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6 Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6 Certificate serial: 019B31FAD4ECC0EB7BCC0D1C5079CF9DFF78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 15:01:20 +0000 Manifest this update: Thu 18 Dec 2025 15:01:20 +0000 Manifest next update: Fri 19 Dec 2025 15:01:20 +0000 Files and hashes: 1: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: 9H4h7u5MBKpXeTSznZYO8BhiZY3gXC4VxVS+sUmHWlI=) 2: _d5sQjAqDWf1j4CIit8rsE25AME.roa (hash: RxeX2YNDuil9ac/AHR6OmQjklSZPEl3KjGtvZpjNDfk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:d4:ec:c0:eb:7b:cc:0d:1c:50:79:cf:9d:ff:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6 Validity Not Before: Dec 18 15:01:20 2025 GMT Not After : Dec 19 15:01:20 2025 GMT Subject: CN=06dfcb582e9c2660832fb6d679976407571a4a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:88:74:80:fb:0d:fe:fe:18:59:80:34:d8:78: f1:e6:49:fb:60:22:44:76:75:fd:78:65:14:78:e1: c6:b5:dd:ec:22:fe:e0:be:bf:7a:d8:ab:e3:61:0e: 8a:f6:bc:ae:53:79:1d:13:17:df:75:73:19:96:1b: c9:69:c3:81:43:eb:0d:f4:58:12:55:c2:2f:6c:88: c4:ff:c2:43:c1:e3:f9:d0:80:39:28:c3:87:f3:3e: 57:b4:69:53:95:21:d9:bc:d2:49:ae:2a:33:42:a4: 60:04:8a:65:0a:e0:fd:0d:2b:06:d8:64:19:81:51: 06:85:5e:39:e9:2a:45:47:f2:8f:b9:53:3e:5f:c4: 3c:fb:3e:73:d5:17:2c:04:ba:88:e9:59:14:7f:27: 23:8c:b8:49:c5:36:a6:78:63:38:75:36:00:f4:a0: 91:3a:2a:ed:6d:9d:ce:e7:5d:4b:ac:bc:2c:aa:62: 6b:24:50:28:2a:6c:91:f9:0d:16:f2:78:71:5c:b6: c0:24:ac:d3:d8:be:f8:d8:55:d3:4b:23:f1:b9:7d: 4f:db:8c:9c:12:82:0f:dd:2f:42:07:e9:c3:5c:4e: 88:6b:12:d5:aa:a1:ed:20:b1:78:41:56:a0:68:43: fc:ca:13:75:61:03:cd:cf:41:27:12:1d:86:0a:91: 85:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DF:CB:58:2E:9C:26:60:83:2F:B6:D6:79:97:64:07:57:1A:4A:65 X509v3 Authority Key Identifier: keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:03:29:b9:06:d0:ce:0c:b0:73:55:ae:20:41:b5:ff:80:68: 09:df:9e:b1:a3:f8:82:e8:7e:6c:95:5b:9e:0a:dd:9c:5e:ff: 79:96:46:68:a5:d8:c2:dd:a5:10:e6:13:bb:59:7e:31:d2:48: d4:96:bf:7a:8d:be:09:d7:4d:30:0a:a3:1e:e3:c3:24:04:cf: 14:c5:72:0a:42:29:50:eb:39:20:49:8c:fa:9a:35:d5:44:67: 34:99:0d:fd:4f:60:38:e4:a8:f1:c4:c3:81:07:56:a9:bd:5a: c4:5b:b4:c5:61:72:e7:10:e4:4a:77:fd:e8:14:83:86:0c:5f: ce:ec:3d:3e:80:84:0a:65:97:3e:d9:26:31:c8:4d:28:c8:e3: f6:9a:98:d7:28:63:37:da:d7:78:c5:3b:42:5b:5f:76:90:db: 7b:d5:e2:b2:71:81:75:45:de:1f:a6:3b:4f:ae:e4:19:b6:0d: e6:ec:d5:f4:0b:a4:61:35:26:aa:a0:e8:1c:cd:68:e1:b0:96: f9:f6:6f:2e:e6:57:57:97:94:16:92:cb:90:7a:0b:7c:d9:d0: 2b:84:ac:6d:35:8e:82:39:96:a9:ed:8c:0b:8b:12:39:68:b1: 61:71:6f:f7:05:9e:bc:a2:63:2d:d6:e4:2c:6f:f4:a0:64:49: ea:27:d6:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+tTswOt7zA0cUHnPnf94MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYjAxNmY0NmRlMmRiNWNjMzExNjU5OWVlODcxYzc2YzJj ODM0YzYwHhcNMjUxMjE4MTUwMTIwWhcNMjUxMjE5MTUwMTIwWjAzMTEwLwYDVQQD EygwNmRmY2I1ODJlOWMyNjYwODMyZmI2ZDY3OTk3NjQwNzU3MWE0YTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYh0gPsN/v4YWYA02Hjx5kn7YCJE dnX9eGUUeOHGtd3sIv7gvr962KvjYQ6K9ryuU3kdExffdXMZlhvJacOBQ+sN9FgS VcIvbIjE/8JDweP50IA5KMOH8z5XtGlTlSHZvNJJriozQqRgBIplCuD9DSsG2GQZ gVEGhV456SpFR/KPuVM+X8Q8+z5z1RcsBLqI6VkUfycjjLhJxTameGM4dTYA9KCR OirtbZ3O511LrLwsqmJrJFAoKmyR+Q0W8nhxXLbAJKzT2L742FXTSyPxuX1P24yc EoIP3S9CB+nDXE6IaxLVqqHtILF4QVagaEP8yhN1YQPNz0EnEh2GCpGFDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbfy1gunCZggy+21nmXZAdXGkplMB8GA1UdIwQY MBaAFOuwFvRt4ttcwxFlme6HHHbCyDTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjdBVzlHM2kyMXpERVdXWjdvY2Nkc0xJTk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8zZDAxM2UtOWU1OC00NjVlLTg3YmIt MDcyZmNhNWZmZWJlLzEvNjdBVzlHM2kyMXpERVdXWjdvY2Nkc0xJTk1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8zZDAxM2UtOWU1OC00NjVlLTg3YmItMDcyZmNhNWZmZWJl LzEvNjdBVzlHM2kyMXpERVdXWjdvY2Nkc0xJTk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQMpuQbQ zgywc1WuIEG1/4BoCd+esaP4guh+bJVbngrdnF7/eZZGaKXYwt2lEOYTu1l+MdJI 1Ja/eo2+CddNMAqjHuPDJATPFMVyCkIpUOs5IEmM+po11URnNJkN/U9gOOSo8cTD gQdWqb1axFu0xWFy5xDkSnf96BSDhgxfzuw9PoCECmWXPtkmMchNKMjj9pqY1yhj N9rXeMU7QltfdpDbe9XisnGBdUXeH6Y7T67kGbYN5uzV9AukYTUmqqDoHM1o4bCW +fZvLuZXV5eUFpLLkHoLfNnQK4SsbTWOgjmWqe2MC4sSOWixYXFv9wWevKJjLdbk LG/0oGRJ6ifWtQ== -----END CERTIFICATE-----Generated at Thu Dec 18 17:52:11 2025 by rpki-client