This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft File: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft (raw, json) Hash identifier: +1ex47Z/n9HtEn0neTjmWVKpZ051cW40mkC6lVUEqNQ= Subject key identifier: 9B:FE:87:20:51:D1:A7:27:EE:EB:8F:5C:0A:B1:70:56:2D:EC:90:3E Authority key identifier: EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54 Certificate issuer: /CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054 Certificate serial: 019AF578708B55131ED3999BC9A3362092CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft Manifest number: 1070 Signing time: Sat 06 Dec 2025 21:01:42 +0000 Manifest this update: Sat 06 Dec 2025 21:01:42 +0000 Manifest next update: Sun 07 Dec 2025 21:01:42 +0000 Files and hashes: 1: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl (hash: KgSr2S2pOJFrFQ9YVpI34Nhu8dmXZ9+PV+g2vggindA=) 2: oYCCEaHZDFeU07vWfgI3VuJzA2k.roa (hash: ZelDCAPq5Lk9TPNRJeopu8e/ZIbjOUyl0w35TbZibt4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:70:8b:55:13:1e:d3:99:9b:c9:a3:36:20:92:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054 Validity Not Before: Dec 6 21:01:42 2025 GMT Not After : Dec 7 21:01:42 2025 GMT Subject: CN=9bfe872051d1a727eeeb8f5c0ab170562dec903e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3b:6e:af:44:dd:b6:fe:ef:bd:92:f9:af:a9: de:9f:40:4c:e3:5a:df:c8:c8:d6:b9:75:04:9b:6e: a4:ac:8a:de:50:f9:fd:b1:89:ff:ff:95:a4:2a:a7: 3b:fa:20:c2:ba:ae:71:50:95:b2:50:77:8b:2f:3a: fe:e5:99:65:69:2d:2d:9a:1c:b6:2f:d1:b6:09:2a: 42:f2:ae:b7:08:62:40:39:d1:1f:93:be:1d:af:8d: 2a:46:de:ff:3d:c4:90:e4:f5:49:b7:29:8a:53:d3: 8b:a3:d8:92:51:ef:5a:76:4c:c9:60:5e:15:9e:4c: 41:e6:d1:6e:48:df:09:e4:32:fb:9a:a7:89:6f:b8: 15:84:4f:24:8e:9b:1a:af:30:4c:13:c1:f9:26:8f: 96:d2:c0:52:c9:f2:73:17:64:fc:05:cf:b8:9d:67: 94:a2:0a:9d:a1:89:9d:eb:39:44:71:61:b7:b5:fc: a0:7f:3b:4a:53:c6:38:0c:f6:c9:a7:ed:29:1d:33: d5:17:b4:83:93:9b:f2:2e:c4:f3:aa:75:5d:aa:7a: 38:94:b1:d8:d3:1d:a5:71:14:47:15:da:9a:b0:0f: ca:93:fc:c9:c1:86:60:b1:37:04:92:62:f1:05:3f: 00:f0:b3:65:8f:22:d1:d6:bd:88:61:94:99:ea:cc: 1c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:FE:87:20:51:D1:A7:27:EE:EB:8F:5C:0A:B1:70:56:2D:EC:90:3E X509v3 Authority Key Identifier: keyid:EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:01:09:48:61:25:cf:92:9b:89:d1:40:db:49:f7:9f:f1:f1: 90:1d:e9:aa:5a:53:0d:33:15:5a:14:01:30:0f:49:83:1d:7e: 83:76:05:46:b8:aa:cb:1b:fc:ea:b4:2e:cc:85:c5:d1:e5:17: d6:09:06:01:48:b5:98:b0:9e:bb:48:de:05:8f:97:b1:d3:48: 59:f5:5e:90:0c:e8:04:03:77:37:a2:57:7b:9f:a8:44:d1:07: c8:a6:24:a3:36:9b:95:20:6b:e1:85:a4:70:96:90:29:03:18: e4:3a:04:c4:83:c5:a5:e0:b4:98:be:51:72:08:ba:db:d5:7c: 1a:35:6a:c5:76:1f:3b:f3:18:04:24:05:a5:b4:57:17:b7:28: 33:31:2c:0a:bf:30:ef:90:dd:af:97:ec:0d:e6:97:4d:1b:73: f9:9f:f8:40:3a:de:12:76:4a:d4:2f:d4:7b:1e:12:a7:28:ff: 52:27:9b:f2:eb:53:00:d5:55:ae:7d:20:f0:bb:bb:79:9e:18: 76:61:75:cd:37:68:ee:a3:fb:64:2e:89:e3:c7:51:ab:21:b4: 6d:8e:ae:74:95:ed:c7:14:a2:71:7b:d9:81:e5:df:80:35:89: 6d:49:59:df:87:6b:cf:d1:e3:01:24:00:5f:aa:19:8f:ca:ae: 08:42:02:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eHCLVRMe05mbyaM2IJLMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYzhjNGEwNjZlMmMxNTAzMTNlZTFjMDg3NDcxZjNjOGIw ZGUwNTQwHhcNMjUxMjA2MjEwMTQyWhcNMjUxMjA3MjEwMTQyWjAzMTEwLwYDVQQD Eyg5YmZlODcyMDUxZDFhNzI3ZWVlYjhmNWMwYWIxNzA1NjJkZWM5MDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDtur0Tdtv7vvZL5r6nen0BM41rf yMjWuXUEm26krIreUPn9sYn//5WkKqc7+iDCuq5xUJWyUHeLLzr+5ZllaS0tmhy2 L9G2CSpC8q63CGJAOdEfk74dr40qRt7/PcSQ5PVJtymKU9OLo9iSUe9adkzJYF4V nkxB5tFuSN8J5DL7mqeJb7gVhE8kjpsarzBME8H5Jo+W0sBSyfJzF2T8Bc+4nWeU ogqdoYmd6zlEcWG3tfygfztKU8Y4DPbJp+0pHTPVF7SDk5vyLsTzqnVdqno4lLHY 0x2lcRRHFdqasA/Kk/zJwYZgsTcEkmLxBT8A8LNljyLR1r2IYZSZ6swcgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJv+hyBR0acn7uuPXAqxcFYt7JA+MB8GA1UdIwQY MBaAFOvIxKBm4sFQMT7hwIdHHzyLDeBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjhqRW9HYml3VkF4UHVIQWgwY2ZQSXNONEZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZTQ0ZTMtMWI1NC00NzllLWE1NGMt NDdlYWQ1MzcyYmZiLzEvNjhqRW9HYml3VkF4UHVIQWgwY2ZQSXNONEZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84ZTQ0ZTMtMWI1NC00NzllLWE1NGMtNDdlYWQ1MzcyYmZi LzEvNjhqRW9HYml3VkF4UHVIQWgwY2ZQSXNONEZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgEJSGEl z5KbidFA20n3n/HxkB3pqlpTDTMVWhQBMA9Jgx1+g3YFRriqyxv86rQuzIXF0eUX 1gkGAUi1mLCeu0jeBY+XsdNIWfVekAzoBAN3N6JXe5+oRNEHyKYkozablSBr4YWk cJaQKQMY5DoExIPFpeC0mL5Rcgi629V8GjVqxXYfO/MYBCQFpbRXF7coMzEsCr8w 75Ddr5fsDeaXTRtz+Z/4QDreEnZK1C/Uex4Spyj/Uieb8utTANVVrn0g8Lu7eZ4Y dmF1zTdo7qP7ZC6J48dRqyG0bY6udJXtxxSicXvZgeXfgDWJbUlZ34drz9HjASQA X6oZj8quCEIC3A== -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:48 2025 by rpki-client