This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft File: _L65swLOtvWNMntJTYFFlDO-c40.mft (raw, json) Hash identifier: yhyVhGLgXJCBQIK5/Q97K9RI7CWdUGX4SN7odhjXuwY= Subject key identifier: 1B:33:A4:F2:62:39:A6:13:A8:23:95:12:D5:53:06:E1:03:AC:E5:5A Authority key identifier: FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D Certificate issuer: /CN=fcbeb9b302ceb6f58d327b494d81459433be738d Certificate serial: 019B1F87E00CAF060BCE9FB1EAA9893DE45F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft Manifest number: 1145 Signing time: Mon 15 Dec 2025 01:02:36 +0000 Manifest this update: Mon 15 Dec 2025 01:02:36 +0000 Manifest next update: Tue 16 Dec 2025 01:02:36 +0000 Files and hashes: 1: 4FgyXjSTtWGyFOXdnX2-aAmOOA8.roa (hash: InpaFw/32Nb/Zr2vPmUWS5J9SJuIWTtmwm6Og2V6cjc=) 2: _L65swLOtvWNMntJTYFFlDO-c40.crl (hash: p8TK8XFPzPTJ26t5Tc+35V84SZt3UpzDOuWzMNMznLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:87:e0:0c:af:06:0b:ce:9f:b1:ea:a9:89:3d:e4:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcbeb9b302ceb6f58d327b494d81459433be738d Validity Not Before: Dec 15 01:02:36 2025 GMT Not After : Dec 16 01:02:36 2025 GMT Subject: CN=1b33a4f26239a613a8239512d55306e103ace55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:50:88:95:13:35:fa:26:12:a5:80:3d:f5:9f: 34:f8:69:45:1b:28:2a:6d:00:96:24:be:91:cc:97: c8:00:46:89:28:5f:9f:53:24:66:40:27:67:07:8e: 6c:ba:de:34:b4:a7:3e:ca:4b:1b:67:74:ab:2f:0c: 47:b4:00:de:83:2c:34:db:37:76:82:9f:ae:49:dd: 23:d5:d9:f3:63:b6:bd:bd:b6:c8:d4:68:2b:c3:6e: 82:25:73:a6:a1:a8:b1:c7:33:31:11:1d:66:dd:ed: dc:06:4d:b1:a0:71:38:8d:86:6d:a6:d4:6c:c5:3b: 8e:e3:af:49:37:79:5a:2a:c6:41:bb:3d:93:be:93: ad:3b:40:1b:51:e9:7b:70:19:06:b6:a3:4c:9d:24: d6:7e:66:52:6e:a3:f1:0c:4a:ea:91:dc:b6:27:b6: ef:74:94:dc:3b:f0:14:a5:66:87:5e:b5:8e:d0:01: e0:27:62:56:27:11:80:a8:3f:3d:bf:8c:b0:13:3b: 55:72:3e:24:d4:88:72:61:00:4d:df:1a:b5:a5:ba: 87:fa:fb:15:24:7f:f9:25:19:8c:73:1e:fe:6d:6b: 4e:6a:9d:ab:b4:22:24:d9:5d:0a:a7:2f:66:ac:3d: a3:1e:51:d0:25:d3:a9:27:d5:32:73:6a:d0:84:6b: 56:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:33:A4:F2:62:39:A6:13:A8:23:95:12:D5:53:06:E1:03:AC:E5:5A X509v3 Authority Key Identifier: keyid:FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:e4:37:0e:cb:f5:19:f0:a8:bc:d8:06:7e:71:9f:b5:43:5f: 85:64:bf:66:5d:d0:3d:f4:cd:3a:55:94:50:cf:6b:0f:f7:9e: e6:eb:bb:bf:ff:a4:cd:7b:09:71:47:ea:bd:7b:69:be:2b:67: 8e:61:71:39:e5:0b:36:9e:1a:8f:cd:6a:9f:d5:c0:2e:98:f8: db:1e:f3:a9:32:95:29:6d:ac:41:07:ec:a2:52:ba:ee:1a:3e: 4b:14:5a:7f:46:1e:2a:fa:d1:7e:29:be:fe:21:01:78:d5:0d: 17:44:38:b7:b2:ea:f8:16:dc:7c:ae:e5:6d:bf:48:56:ec:de: 48:8d:04:65:38:ab:5b:ac:eb:58:a1:66:6e:6f:f9:ed:6e:f9: 22:8d:a2:60:e1:e4:a0:69:90:55:5d:ff:70:d6:da:6e:0f:e2: cb:57:b2:52:fa:bd:f7:4f:3d:02:28:79:d2:6f:f0:11:b9:3d: 61:48:ed:4c:34:d2:ce:34:f4:65:3b:70:d8:25:8b:bb:a2:e5: c2:07:a5:80:4f:41:91:62:e6:bd:37:02:98:2b:54:04:ef:28: 3c:6d:0a:77:ac:b7:ef:10:d9:74:b7:2e:18:62:27:1e:9e:22: 57:b9:ab:4e:54:54:4e:c9:49:48:3a:39:04:d8:e7:6a:81:99: 45:52:bd:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfh+AMrwYLzp+x6qmJPeRfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYmViOWIzMDJjZWI2ZjU4ZDMyN2I0OTRkODE0NTk0MzNi ZTczOGQwHhcNMjUxMjE1MDEwMjM2WhcNMjUxMjE2MDEwMjM2WjAzMTEwLwYDVQQD EygxYjMzYTRmMjYyMzlhNjEzYTgyMzk1MTJkNTUzMDZlMTAzYWNlNTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1CIlRM1+iYSpYA99Z80+GlFGygq bQCWJL6RzJfIAEaJKF+fUyRmQCdnB45sut40tKc+yksbZ3SrLwxHtADegyw02zd2 gp+uSd0j1dnzY7a9vbbI1Ggrw26CJXOmoaixxzMxER1m3e3cBk2xoHE4jYZtptRs xTuO469JN3laKsZBuz2TvpOtO0AbUel7cBkGtqNMnSTWfmZSbqPxDErqkdy2J7bv dJTcO/AUpWaHXrWO0AHgJ2JWJxGAqD89v4ywEztVcj4k1IhyYQBN3xq1pbqH+vsV JH/5JRmMcx7+bWtOap2rtCIk2V0Kpy9mrD2jHlHQJdOpJ9Uyc2rQhGtWKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBszpPJiOaYTqCOVEtVTBuEDrOVaMB8GA1UdIwQY MBaAFPy+ubMCzrb1jTJ7SU2BRZQzvnONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0w2NXN3TE90dldOTW50SlRZRkZsRE8tYzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xYzhiNjktNGI3Yi00YmZkLWJjZTUt MzdhZmJkZjRkODQ3LzEvX0w2NXN3TE90dldOTW50SlRZRkZsRE8tYzQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8xYzhiNjktNGI3Yi00YmZkLWJjZTUtMzdhZmJkZjRkODQ3 LzEvX0w2NXN3TE90dldOTW50SlRZRkZsRE8tYzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2+Q3Dsv1 GfCovNgGfnGftUNfhWS/Zl3QPfTNOlWUUM9rD/ee5uu7v/+kzXsJcUfqvXtpvitn jmFxOeULNp4aj81qn9XALpj42x7zqTKVKW2sQQfsolK67ho+SxRaf0YeKvrRfim+ /iEBeNUNF0Q4t7Lq+BbcfK7lbb9IVuzeSI0EZTirW6zrWKFmbm/57W75Io2iYOHk oGmQVV3/cNbabg/iy1eyUvq99089Aih50m/wEbk9YUjtTDTSzjT0ZTtw2CWLu6Ll wgelgE9BkWLmvTcCmCtUBO8oPG0Kd6y37xDZdLcuGGInHp4iV7mrTlRUTslJSDo5 BNjnaoGZRVK9eg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:58:51 2025 by rpki-client