This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft File: 65M6GrHHFeCzssf_oOEDhFYU03s.mft (raw, json) Hash identifier: r/HYUWPYyzZil8Kv3Cc5WXOWzLOZuuKbnNNszcrKjFE= Subject key identifier: 8B:63:41:89:CC:EA:D9:36:C1:83:95:3C:17:A7:36:68:C3:14:C5:47 Authority key identifier: EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B Certificate issuer: /CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b Certificate serial: 019B225075D356628053A3D0FA16BF0F5385 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft Manifest number: 0606 Signing time: Mon 15 Dec 2025 14:00:56 +0000 Manifest this update: Mon 15 Dec 2025 14:00:56 +0000 Manifest next update: Tue 16 Dec 2025 14:00:56 +0000 Files and hashes: 1: 65M6GrHHFeCzssf_oOEDhFYU03s.crl (hash: MRvytKyn97t6jPSNmwKqDajoi3w9DbQpe4TXRZfwJ2M=) 2: UQAL-JJc9xbj3dvWQx-rKxJywfk.roa (hash: arBBklCXAnQ+7dDU+siDZljmex4Eu/z9+wzjqqM7ap4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:75:d3:56:62:80:53:a3:d0:fa:16:bf:0f:53:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b Validity Not Before: Dec 15 14:00:56 2025 GMT Not After : Dec 16 14:00:56 2025 GMT Subject: CN=8b634189ccead936c183953c17a73668c314c547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:37:e0:ee:ab:5f:0a:22:e8:c8:09:a5:20:84: 3f:d9:fe:33:0d:8f:c4:6f:97:57:43:f8:1e:8b:cd: 4c:4a:d2:e1:5c:e3:99:fd:b0:ed:79:50:45:d0:21: 9a:0a:63:13:48:ae:6c:72:0d:29:c2:9f:5f:44:17: cb:11:a8:39:14:16:5d:b1:5b:9b:ea:13:9e:f7:fe: f8:e8:dd:9a:28:96:fc:d5:c2:a6:63:b3:62:63:d3: 87:b8:bd:f9:a7:68:0e:1a:f3:ab:59:c7:ca:04:41: c7:dd:60:e1:ed:04:af:41:d9:52:a0:3b:d7:74:8e: f5:23:70:8d:2a:87:5f:d6:d6:ff:93:5b:e8:e1:82: 35:f1:8e:98:cc:8d:6a:c9:d8:3b:64:c6:18:34:f9: 55:b4:d6:a7:40:8c:06:0d:17:f8:5a:63:64:8a:ab: 6a:84:fd:ee:94:49:b1:c1:e0:8d:21:66:ad:9e:41: c3:21:40:e8:72:b3:40:4e:07:dd:29:f0:6b:fc:50: f5:32:2b:dc:6e:48:15:93:18:23:cd:70:e5:4f:88: 8a:56:b9:31:c2:fb:bd:78:a5:c4:79:f5:63:35:db: 20:fb:92:27:86:a8:fe:74:99:6e:cf:76:d6:66:9f: 64:f1:07:e7:0f:ef:d9:14:e5:5c:c9:30:19:6a:e0: da:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:63:41:89:CC:EA:D9:36:C1:83:95:3C:17:A7:36:68:C3:14:C5:47 X509v3 Authority Key Identifier: keyid:EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:9f:b5:02:4e:b4:80:e6:ae:d7:20:fe:0e:49:f3:e7:f6:f9: a7:10:49:1f:fb:00:95:74:d2:b8:66:8a:f3:da:20:45:64:c4: b6:22:aa:1a:72:37:51:a0:fe:dd:56:d4:72:30:b6:1e:93:e2: 2f:d3:0c:b9:41:54:66:b1:15:47:51:32:39:de:9d:cf:76:7c: 05:8a:fc:14:92:00:79:89:31:f6:1c:de:72:c5:ca:df:f9:57: 05:0e:70:71:56:3b:08:70:4e:9b:6c:fd:d3:24:aa:a8:68:9e: ab:95:6b:a8:34:e0:ca:50:d1:54:1f:86:4d:cc:e0:5d:22:e3: 4f:67:bb:d7:5a:cd:7e:57:f2:4f:67:93:c3:45:39:a4:61:0f: c2:3e:7a:22:97:4a:84:24:27:48:7c:06:8a:7d:d3:a2:f7:16: d7:87:ee:a9:de:d3:b2:2b:d0:0e:22:c2:5e:bd:8a:1c:c5:e4: 0d:8d:08:7a:1e:8e:63:ed:d6:36:99:42:e0:67:91:ea:7c:91: 25:8f:21:60:40:4f:52:79:4c:48:94:c4:5d:a4:92:0b:15:d9: 6e:33:06:75:a6:d6:a6:dd:ce:7d:6b:4e:b3:cd:62:6c:82:ee: f1:31:86:18:22:47:94:36:26:47:2a:97:30:a2:0d:38:74:d0: d4:27:be:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiUHXTVmKAU6PQ+ha/D1OFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViOTMzYTFhYjFjNzE1ZTBiM2IyYzdmZmEwZTEwMzg0NTYx NGQzN2IwHhcNMjUxMjE1MTQwMDU2WhcNMjUxMjE2MTQwMDU2WjAzMTEwLwYDVQQD Eyg4YjYzNDE4OWNjZWFkOTM2YzE4Mzk1M2MxN2E3MzY2OGMzMTRjNTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Tfg7qtfCiLoyAmlIIQ/2f4zDY/E b5dXQ/gei81MStLhXOOZ/bDteVBF0CGaCmMTSK5scg0pwp9fRBfLEag5FBZdsVub 6hOe9/746N2aKJb81cKmY7NiY9OHuL35p2gOGvOrWcfKBEHH3WDh7QSvQdlSoDvX dI71I3CNKodf1tb/k1vo4YI18Y6YzI1qydg7ZMYYNPlVtNanQIwGDRf4WmNkiqtq hP3ulEmxweCNIWatnkHDIUDocrNATgfdKfBr/FD1MivcbkgVkxgjzXDlT4iKVrkx wvu9eKXEefVjNdsg+5Inhqj+dJluz3bWZp9k8QfnD+/ZFOVcyTAZauDakQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItjQYnM6tk2wYOVPBenNmjDFMVHMB8GA1UdIwQY MBaAFOuTOhqxxxXgs7LH/6DhA4RWFNN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjVNNkdySEhGZUN6c3NmX29PRURoRllVMDNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80Y2UzZDgtOWRlYi00MmJmLTg5NGQt MmRkNmUxMTEzZjM0LzEvNjVNNkdySEhGZUN6c3NmX29PRURoRllVMDNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80Y2UzZDgtOWRlYi00MmJmLTg5NGQtMmRkNmUxMTEzZjM0 LzEvNjVNNkdySEhGZUN6c3NmX29PRURoRllVMDNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZ+1Ak60 gOau1yD+Dknz5/b5pxBJH/sAlXTSuGaK89ogRWTEtiKqGnI3UaD+3VbUcjC2HpPi L9MMuUFUZrEVR1EyOd6dz3Z8BYr8FJIAeYkx9hzecsXK3/lXBQ5wcVY7CHBOm2z9 0ySqqGieq5VrqDTgylDRVB+GTczgXSLjT2e711rNflfyT2eTw0U5pGEPwj56IpdK hCQnSHwGin3TovcW14fuqd7TsivQDiLCXr2KHMXkDY0Ieh6OY+3WNplC4GeR6nyR JY8hYEBPUnlMSJTEXaSSCxXZbjMGdabWpt3OfWtOs81ibILu8TGGGCJHlDYmRyqX MKINOHTQ1Ce+gw== -----END CERTIFICATE-----Generated at Tue Dec 16 00:13:22 2025 by rpki-client