This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft File: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft (raw, json) Hash identifier: 1Tvc085Mp286d78tX0yXrkZfHyOkgx8zh353HoD3q2g= Subject key identifier: 58:89:B2:A3:8F:FA:0B:EB:DC:CB:37:20:BB:9F:B3:C7:23:D5:99:8A Authority key identifier: EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54 Certificate issuer: /CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054 Certificate serial: 019B3344126BEF5F561F4E57CCDC7FA6E63A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft Manifest number: 1090 Signing time: Thu 18 Dec 2025 21:00:57 +0000 Manifest this update: Thu 18 Dec 2025 21:00:57 +0000 Manifest next update: Fri 19 Dec 2025 21:00:57 +0000 Files and hashes: 1: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl (hash: z4QgNbfO+1mETbPYsDuxfkQ+N42BtV+rR+z1k2y3q9E=) 2: oYCCEaHZDFeU07vWfgI3VuJzA2k.roa (hash: ZelDCAPq5Lk9TPNRJeopu8e/ZIbjOUyl0w35TbZibt4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:12:6b:ef:5f:56:1f:4e:57:cc:dc:7f:a6:e6:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054 Validity Not Before: Dec 18 21:00:57 2025 GMT Not After : Dec 19 21:00:57 2025 GMT Subject: CN=5889b2a38ffa0bebdccb3720bb9fb3c723d5998a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:54:ce:86:4e:9c:37:fe:c6:51:e0:dc:06:4a: b0:8a:eb:31:e9:af:15:be:99:80:ba:0e:56:63:0c: 20:d5:f7:82:54:be:28:6f:05:74:31:c2:2e:f9:c3: 3a:a1:a1:cd:97:59:a9:96:28:1c:f2:ce:92:d9:fe: 5a:ba:98:ea:84:48:4f:56:d3:99:f9:22:86:fb:ca: 01:9b:87:28:a5:bc:a9:7e:86:f7:cc:54:fb:6a:fe: 75:2b:db:7d:d2:eb:bf:af:d2:d4:dc:6e:87:70:0f: f8:6d:3a:c6:f1:13:bf:54:1a:e6:e2:5a:0d:94:c8: 12:9a:57:0f:a2:c2:bc:ca:5a:1c:7f:10:5f:1d:6e: 92:96:ba:cb:d2:d8:b0:0f:e2:81:bb:4b:8d:0b:d1: f6:3e:2b:ab:93:dc:c1:9c:33:8c:1c:25:54:87:44: 5b:e4:2f:44:98:e2:35:64:fb:d4:f2:8f:81:45:51: 1f:42:e5:85:fb:6f:03:fd:13:a9:ae:9b:e5:b8:ff: a1:b4:59:bc:a6:42:39:20:11:30:1c:66:ea:23:8a: 59:3e:4c:ee:84:a1:1c:ca:05:09:d3:1b:ef:99:31: e5:f9:1c:8e:0a:5e:12:5a:09:29:eb:c3:c2:f9:fd: a1:9a:d7:70:2c:81:69:bb:da:b0:b2:39:07:72:b1: 82:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:89:B2:A3:8F:FA:0B:EB:DC:CB:37:20:BB:9F:B3:C7:23:D5:99:8A X509v3 Authority Key Identifier: keyid:EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:95:90:b7:0c:f0:72:0e:40:98:48:cb:04:fd:31:7f:f8:6b: 60:56:25:08:06:11:90:92:03:6f:8b:40:b3:a7:d2:bf:32:50: 04:90:80:bf:67:34:5c:d6:86:0b:98:00:e4:1c:74:54:85:c5: 24:5b:4e:d7:4e:73:c6:f5:f6:92:46:b0:8f:a8:76:64:23:f6: 4a:6e:56:f4:7e:86:00:7f:d4:bf:8e:e4:3d:bf:1c:d5:7d:da: 7a:5c:1f:06:ca:85:5f:56:37:59:88:5a:6d:ef:a1:cd:a1:82: aa:6e:85:8f:7d:c7:b6:e4:64:8f:9f:9e:a6:78:db:0d:4e:de: 85:91:14:01:09:cf:11:df:61:f7:b0:2d:dd:39:ee:28:f2:70: 1b:75:fa:5f:9b:3b:e6:34:87:de:3f:8a:05:b9:e7:c1:3d:b7: 68:da:20:1d:e0:c4:70:2b:d8:66:80:2d:53:0e:12:f4:0d:3a: 95:9d:ae:f2:36:e4:4a:d1:8f:3b:3a:e4:fc:47:94:c6:d5:8f: 54:13:02:6f:de:91:24:48:0c:4f:e1:fa:23:74:9c:ba:df:8c: 2a:34:25:a6:fb:38:9b:b3:c5:8f:4d:e7:aa:c6:7e:3f:f7:3a: ab:f6:43:a3:30:31:9f:d8:33:09:24:d2:24:fb:00:35:be:2f: 8b:22:aa:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRBJr719WH05XzNx/puY6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYzhjNGEwNjZlMmMxNTAzMTNlZTFjMDg3NDcxZjNjOGIw ZGUwNTQwHhcNMjUxMjE4MjEwMDU3WhcNMjUxMjE5MjEwMDU3WjAzMTEwLwYDVQQD Eyg1ODg5YjJhMzhmZmEwYmViZGNjYjM3MjBiYjlmYjNjNzIzZDU5OThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lTOhk6cN/7GUeDcBkqwiusx6a8V vpmAug5WYwwg1feCVL4obwV0McIu+cM6oaHNl1mpligc8s6S2f5aupjqhEhPVtOZ +SKG+8oBm4copbypfob3zFT7av51K9t90uu/r9LU3G6HcA/4bTrG8RO/VBrm4loN lMgSmlcPosK8ylocfxBfHW6SlrrL0tiwD+KBu0uNC9H2Piurk9zBnDOMHCVUh0Rb 5C9EmOI1ZPvU8o+BRVEfQuWF+28D/ROprpvluP+htFm8pkI5IBEwHGbqI4pZPkzu hKEcygUJ0xvvmTHl+RyOCl4SWgkp68PC+f2hmtdwLIFpu9qwsjkHcrGCGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiJsqOP+gvr3Ms3ILufs8cj1ZmKMB8GA1UdIwQY MBaAFOvIxKBm4sFQMT7hwIdHHzyLDeBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjhqRW9HYml3VkF4UHVIQWgwY2ZQSXNONEZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZTQ0ZTMtMWI1NC00NzllLWE1NGMt NDdlYWQ1MzcyYmZiLzEvNjhqRW9HYml3VkF4UHVIQWgwY2ZQSXNONEZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84ZTQ0ZTMtMWI1NC00NzllLWE1NGMtNDdlYWQ1MzcyYmZi LzEvNjhqRW9HYml3VkF4UHVIQWgwY2ZQSXNONEZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJWQtwzw cg5AmEjLBP0xf/hrYFYlCAYRkJIDb4tAs6fSvzJQBJCAv2c0XNaGC5gA5Bx0VIXF JFtO105zxvX2kkawj6h2ZCP2Sm5W9H6GAH/Uv47kPb8c1X3aelwfBsqFX1Y3WYha be+hzaGCqm6Fj33HtuRkj5+epnjbDU7ehZEUAQnPEd9h97At3TnuKPJwG3X6X5s7 5jSH3j+KBbnnwT23aNogHeDEcCvYZoAtUw4S9A06lZ2u8jbkStGPOzrk/EeUxtWP VBMCb96RJEgMT+H6I3Scut+MKjQlpvs4m7PFj03nqsZ+P/c6q/ZDozAxn9gzCSTS JPsANb4viyKq1Q== -----END CERTIFICATE-----Generated at Fri Dec 19 00:47:55 2025 by rpki-client