This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft File: B_65rg-oknBF-DQjdDxKc6J6dKc.mft (raw, json) Hash identifier: xc+AOLaQpwBiHzH9zvOn8Y24qhEVA5b/tIDGVA1R6cc= Subject key identifier: A4:D3:34:17:A7:60:77:85:3E:2E:FB:6E:0B:23:A1:15:68:9F:98:E5 Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7 Certificate issuer: /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7 Certificate serial: 019AEFE3345BFAD0B74932D5BE0F5D3F3F26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 19:00:35 +0000 Manifest this update: Fri 05 Dec 2025 19:00:35 +0000 Manifest next update: Sat 06 Dec 2025 19:00:35 +0000 Files and hashes: 1: AqdNwPQNkfVczluLWSpSFMC_l4c.roa (hash: kZGRYpxYYa0OYlHbt48zpjPJ6+jRCPnuaKjcS//r4hs=) 2: B_65rg-oknBF-DQjdDxKc6J6dKc.crl (hash: zcixIiQZycNX3zlSIAYvGxKUEySBPGrR/EnFfDn/vj0=) 3: MDHJbiBM7aXqQpL5aKkW2vBf5wk.roa (hash: WSV4LQJShI0X02CRQl4dfytl6WA7n85th9+MfrRp6Q8=) 4: p_-2LRJT-n9yo2P0iTcZXfHP8hY.roa (hash: SE2mVBRY6QTTS2fRPv5Fxi4HtlMSW0YEJmExzyBWATQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:e3:34:5b:fa:d0:b7:49:32:d5:be:0f:5d:3f:3f:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7 Validity Not Before: Dec 5 19:00:35 2025 GMT Not After : Dec 6 19:00:35 2025 GMT Subject: CN=a4d33417a76077853e2efb6e0b23a115689f98e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6a:aa:d5:f6:67:58:e8:b5:c1:99:be:64:3e: 62:0e:9f:5d:78:4d:ec:75:aa:bf:a4:07:34:55:de: 54:2b:4c:f0:d7:87:d9:84:94:c8:5f:69:5b:09:fc: 07:9c:29:d5:8d:c5:71:30:03:16:db:ba:63:15:9d: 91:e2:e0:7f:bf:7d:8e:0f:e2:78:91:16:ac:0a:52: b6:5f:34:33:27:93:2f:90:8b:cd:d9:67:73:1c:72: fd:87:e9:56:bb:ec:4b:f5:7e:4e:a3:43:a8:c6:f0: 5d:d9:89:57:4e:07:5d:eb:72:10:4b:16:dd:c8:56: ce:5f:8f:39:66:43:e0:a0:14:9a:dd:0b:c7:f5:b7: 29:e3:a7:4f:36:ae:af:fe:aa:83:4e:b9:19:d5:ce: 52:19:3f:37:4b:8c:18:c9:9d:66:94:21:11:b3:8d: 9e:84:e2:83:ef:99:f2:85:86:f5:18:fa:f1:17:e7: 51:57:a6:fe:fe:39:57:ed:1a:64:80:e5:ec:fa:2a: 50:0d:21:c5:ec:64:e0:c1:6b:ec:11:20:c5:72:82: bd:d9:38:d6:73:cf:c6:de:18:c6:14:aa:e5:ea:4a: ec:0f:d2:c3:33:10:07:0a:69:ba:92:84:dc:b8:a1: 24:23:2a:79:1c:95:32:29:c8:fb:9b:28:f7:e5:47: 08:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D3:34:17:A7:60:77:85:3E:2E:FB:6E:0B:23:A1:15:68:9F:98:E5 X509v3 Authority Key Identifier: keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:a0:15:29:ce:14:9f:76:90:59:5d:03:08:73:cb:db:8e:31: a5:5f:29:20:31:47:54:80:0f:26:64:a8:55:51:f8:56:6c:00: 21:3e:a9:1b:a3:84:30:5f:d8:b1:fc:94:f6:40:b1:b5:12:a1: 83:0c:35:02:dc:f4:7f:0c:ee:47:66:ba:99:36:eb:39:65:c6: 34:05:87:1d:4b:f4:f5:41:5f:d7:b7:60:0f:39:3c:eb:48:ce: 9a:81:65:7e:51:cc:24:fe:06:cb:5e:59:1c:69:34:90:40:bf: 18:c5:89:40:ea:70:59:89:01:44:e0:87:51:0c:18:7a:d8:47: a4:7b:47:1e:12:81:42:e6:7c:3e:66:6d:ca:da:ac:2e:87:56: 15:ba:0f:78:f2:e5:33:ca:5f:53:7a:bb:41:4b:b5:bf:70:6c: 18:e0:6a:25:48:52:a5:15:5a:b5:5d:0f:c9:6b:58:5c:a4:c6: 0c:4a:c9:ca:86:31:61:e0:ff:74:85:a1:11:5d:bd:e8:9d:64: 8b:9f:b3:c6:64:64:9b:64:17:f5:ab:6d:c9:16:23:67:3e:0a: 51:71:c1:72:e7:0f:8d:4c:2e:46:02:55:a6:89:1d:fb:a8:87: 38:80:48:59:5f:55:07:2a:de:dd:d6:6a:6f:5c:1a:06:98:bf: 6b:c6:d2:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrv4zRb+tC3STLVvg9dPz8mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZmViOWFlMGZhODkyNzA0NWY4MzQyMzc0M2M0YTczYTI3 YTc0YTcwHhcNMjUxMjA1MTkwMDM1WhcNMjUxMjA2MTkwMDM1WjAzMTEwLwYDVQQD EyhhNGQzMzQxN2E3NjA3Nzg1M2UyZWZiNmUwYjIzYTExNTY4OWY5OGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Wqq1fZnWOi1wZm+ZD5iDp9deE3s daq/pAc0Vd5UK0zw14fZhJTIX2lbCfwHnCnVjcVxMAMW27pjFZ2R4uB/v32OD+J4 kRasClK2XzQzJ5MvkIvN2WdzHHL9h+lWu+xL9X5Oo0OoxvBd2YlXTgdd63IQSxbd yFbOX485ZkPgoBSa3QvH9bcp46dPNq6v/qqDTrkZ1c5SGT83S4wYyZ1mlCERs42e hOKD75nyhYb1GPrxF+dRV6b+/jlX7RpkgOXs+ipQDSHF7GTgwWvsESDFcoK92TjW c8/G3hjGFKrl6krsD9LDMxAHCmm6koTcuKEkIyp5HJUyKcj7myj35UcISwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTTNBenYHeFPi77bgsjoRVon5jlMB8GA1UdIwQY MBaAFAf+ua4PqJJwRfg0I3Q8SnOienSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl82NXJnLW9rbkJGLURRamREeEtjNko2ZEtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82M2U1YTUtNWQ0Zi00M2VlLWFmNzAt ZGM3M2Y5ZDliZTI5LzEvQl82NXJnLW9rbkJGLURRamREeEtjNko2ZEtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy82M2U1YTUtNWQ0Zi00M2VlLWFmNzAtZGM3M2Y5ZDliZTI5 LzEvQl82NXJnLW9rbkJGLURRamREeEtjNko2ZEtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp6AVKc4U n3aQWV0DCHPL244xpV8pIDFHVIAPJmSoVVH4VmwAIT6pG6OEMF/YsfyU9kCxtRKh gww1Atz0fwzuR2a6mTbrOWXGNAWHHUv09UFf17dgDzk860jOmoFlflHMJP4Gy15Z HGk0kEC/GMWJQOpwWYkBROCHUQwYethHpHtHHhKBQuZ8PmZtytqsLodWFboPePLl M8pfU3q7QUu1v3BsGOBqJUhSpRVatV0PyWtYXKTGDErJyoYxYeD/dIWhEV296J1k i5+zxmRkm2QX9attyRYjZz4KUXHBcucPjUwuRgJVpokd+6iHOIBIWV9VByre3dZq b1waBpi/a8bS0A== -----END CERTIFICATE-----Generated at Fri Dec 5 23:02:57 2025 by rpki-client