This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft File: rb65YXJeTVu08lSJhtlvzG00nmQ.mft (raw, json) Hash identifier: kVrTUWotJCKJNBeDo5Rvr2dI2ffj9PqbwrBC3rtPKiU= Subject key identifier: 98:62:40:FD:70:E3:E2:23:52:17:82:E2:F8:9B:06:D6:F9:EF:CE:59 Authority key identifier: AD:BE:B9:61:72:5E:4D:5B:B4:F2:54:89:86:D9:6F:CC:6D:34:9E:64 Certificate issuer: /CN=adbeb961725e4d5bb4f2548986d96fcc6d349e64 Certificate serial: 019B48B981EE60FC5C6CF5E067D96DF59E8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb65YXJeTVu08lSJhtlvzG00nmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft Manifest number: 03C6 Signing time: Tue 23 Dec 2025 01:01:15 +0000 Manifest this update: Tue 23 Dec 2025 01:01:15 +0000 Manifest next update: Wed 24 Dec 2025 01:01:15 +0000 Files and hashes: 1: rb65YXJeTVu08lSJhtlvzG00nmQ.crl (hash: /rrW2kkN2ev4/MwhiOzQitoe9GQJcaUodbnM5byy3gg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rb65YXJeTVu08lSJhtlvzG00nmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:81:ee:60:fc:5c:6c:f5:e0:67:d9:6d:f5:9e:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adbeb961725e4d5bb4f2548986d96fcc6d349e64 Validity Not Before: Dec 23 01:01:15 2025 GMT Not After : Dec 24 01:01:15 2025 GMT Subject: CN=986240fd70e3e223521782e2f89b06d6f9efce59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:95:7d:b8:a8:e2:0c:66:af:3e:84:fd:9c:7d: 9e:87:bf:91:a5:64:81:07:f9:9e:96:e9:e5:85:06: 54:54:06:53:5b:96:81:63:8c:18:21:c1:62:a0:27: a4:f2:ab:7a:94:90:f1:55:6b:a1:4a:a8:a5:18:ff: a3:95:8f:ea:55:71:e2:c8:4b:94:1d:b7:f5:ee:71: 08:62:91:96:eb:1e:40:f1:33:c3:dd:69:0c:7d:27: 1a:a3:19:77:79:6e:52:0c:c9:31:d9:a0:eb:78:3b: 3f:e4:e5:da:68:9c:98:0c:21:06:7c:87:10:98:96: 3d:9a:f7:7c:dd:00:a2:74:da:50:8a:fe:7c:1d:79: 67:0f:52:43:0c:d7:8d:15:d8:fc:f9:06:60:4a:29: 12:f4:74:c9:0e:00:82:b7:14:ab:61:57:a8:38:0b: 4a:5d:b5:b3:01:0f:42:1b:c4:40:13:43:1b:f0:a7: 36:7d:22:8d:51:19:a1:66:2d:d5:21:aa:6f:5b:57: 06:3b:b7:f0:d9:de:7f:4d:0b:ab:39:c3:0c:5f:d5: bf:b4:7d:72:b3:31:34:73:40:42:a2:cb:c3:0e:9c: a3:46:fc:66:0a:c3:a0:ba:ce:3b:36:11:2e:14:ea: d9:3d:a7:7b:92:e4:74:de:ec:7c:43:dc:3c:e7:ce: 9a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:62:40:FD:70:E3:E2:23:52:17:82:E2:F8:9B:06:D6:F9:EF:CE:59 X509v3 Authority Key Identifier: keyid:AD:BE:B9:61:72:5E:4D:5B:B4:F2:54:89:86:D9:6F:CC:6D:34:9E:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb65YXJeTVu08lSJhtlvzG00nmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:ad:72:84:c2:13:49:7c:fb:92:e6:93:48:3a:e3:67:88:ec: 7b:ba:63:70:9b:7e:34:a3:0d:21:c2:ac:bd:66:56:c6:ad:8e: 3d:1a:ed:e4:60:d0:70:cf:03:03:11:bf:5e:b4:cc:6f:db:b2: 41:3f:66:bc:89:6f:9d:53:1d:30:da:39:82:91:96:26:1d:f8: 32:97:2f:c5:5a:1b:5c:c6:ec:6c:3e:47:6e:49:3c:fa:4f:06: 0e:d1:b7:40:ae:46:6e:1e:4d:94:9f:af:ad:4e:60:22:21:37: c1:2a:a1:3d:cc:9a:ea:9a:7b:6c:91:b5:d2:74:9d:b6:15:96: c5:09:22:f6:8c:be:9f:54:ae:50:a2:4a:e8:ae:46:15:cf:02: 23:41:63:30:46:58:82:19:17:f0:55:37:1c:b9:3f:ee:8f:e3: 9a:f0:58:ba:bc:ce:2b:84:4c:a3:e7:58:b4:9e:ee:30:ea:e4: 60:8e:35:14:5a:b7:8f:f9:b1:8f:77:64:b3:59:f9:4f:81:80: 06:98:41:76:a1:86:41:a7:1e:f5:75:ba:0a:39:1f:4d:f8:36: 94:d5:1e:6a:dc:e5:1d:23:b8:cf:93:ed:6e:55:5a:84:8f:e1: 2a:0e:1a:ac:1c:a8:44:c5:09:92:cb:06:91:c7:a3:17:c2:42: 4f:4a:d7:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuYHuYPxcbPXgZ9lt9Z6KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYmViOTYxNzI1ZTRkNWJiNGYyNTQ4OTg2ZDk2ZmNjNmQz NDllNjQwHhcNMjUxMjIzMDEwMTE1WhcNMjUxMjI0MDEwMTE1WjAzMTEwLwYDVQQD Eyg5ODYyNDBmZDcwZTNlMjIzNTIxNzgyZTJmODliMDZkNmY5ZWZjZTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZV9uKjiDGavPoT9nH2eh7+RpWSB B/melunlhQZUVAZTW5aBY4wYIcFioCek8qt6lJDxVWuhSqilGP+jlY/qVXHiyEuU Hbf17nEIYpGW6x5A8TPD3WkMfScaoxl3eW5SDMkx2aDreDs/5OXaaJyYDCEGfIcQ mJY9mvd83QCidNpQiv58HXlnD1JDDNeNFdj8+QZgSikS9HTJDgCCtxSrYVeoOAtK XbWzAQ9CG8RAE0Mb8Kc2fSKNURmhZi3VIapvW1cGO7fw2d5/TQurOcMMX9W/tH1y szE0c0BCosvDDpyjRvxmCsOgus47NhEuFOrZPad7kuR03ux8Q9w8586aGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhiQP1w4+IjUheC4vibBtb5785ZMB8GA1UdIwQY MBaAFK2+uWFyXk1btPJUiYbZb8xtNJ5kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmI2NVlYSmVUVnUwOGxTSmh0bHZ6RzAwbm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85MjY4NjEtZDlkNy00YjU1LTkwMjQt ODNkNjI1YmYxYmYxLzEvcmI2NVlYSmVUVnUwOGxTSmh0bHZ6RzAwbm1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni85MjY4NjEtZDlkNy00YjU1LTkwMjQtODNkNjI1YmYxYmYx LzEvcmI2NVlYSmVUVnUwOGxTSmh0bHZ6RzAwbm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAia1yhMIT SXz7kuaTSDrjZ4jse7pjcJt+NKMNIcKsvWZWxq2OPRrt5GDQcM8DAxG/XrTMb9uy QT9mvIlvnVMdMNo5gpGWJh34MpcvxVobXMbsbD5Hbkk8+k8GDtG3QK5Gbh5NlJ+v rU5gIiE3wSqhPcya6pp7bJG10nSdthWWxQki9oy+n1SuUKJK6K5GFc8CI0FjMEZY ghkX8FU3HLk/7o/jmvBYurzOK4RMo+dYtJ7uMOrkYI41FFq3j/mxj3dks1n5T4GA BphBdqGGQace9XW6CjkfTfg2lNUeatzlHSO4z5PtblVahI/hKg4arByoRMUJkssG kcejF8JCT0rXXA== -----END CERTIFICATE-----Generated at Tue Dec 23 06:51:46 2025 by rpki-client