This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft File: _L65swLOtvWNMntJTYFFlDO-c40.mft (raw, json) Hash identifier: IgBvshiKH+dnQfGWs1al+CLM3gdmTaaHJVCvJPQewcQ= Subject key identifier: A4:1F:39:E3:B5:E4:DC:82:9A:4D:88:A6:D5:FE:D0:5E:7E:3B:7E:DF Authority key identifier: FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D Certificate issuer: /CN=fcbeb9b302ceb6f58d327b494d81459433be738d Certificate serial: 019B51BE00FA462C89629F40179E383D7C9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft Manifest number: 115F Signing time: Wed 24 Dec 2025 19:02:45 +0000 Manifest this update: Wed 24 Dec 2025 19:02:45 +0000 Manifest next update: Thu 25 Dec 2025 19:02:45 +0000 Files and hashes: 1: 4FgyXjSTtWGyFOXdnX2-aAmOOA8.roa (hash: InpaFw/32Nb/Zr2vPmUWS5J9SJuIWTtmwm6Og2V6cjc=) 2: _L65swLOtvWNMntJTYFFlDO-c40.crl (hash: 0QsK8dT5u78zajpVW3HXuCULWKAwRxszKI8ITXIqcAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:be:00:fa:46:2c:89:62:9f:40:17:9e:38:3d:7c:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcbeb9b302ceb6f58d327b494d81459433be738d Validity Not Before: Dec 24 19:02:45 2025 GMT Not After : Dec 25 19:02:45 2025 GMT Subject: CN=a41f39e3b5e4dc829a4d88a6d5fed05e7e3b7edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:59:2c:78:2f:95:32:5a:7b:01:7d:e1:c5:e7: ca:6b:51:c7:1e:d6:aa:5f:0b:59:6b:2d:30:31:89: 80:ef:9e:06:30:da:31:74:27:37:2c:cf:cf:8c:87: f0:85:db:97:bb:3b:89:b3:d2:cb:23:30:fd:0b:8b: a5:3e:b6:a7:52:4c:61:f9:7e:03:fa:34:46:91:ed: b8:da:74:6f:58:3a:18:34:bb:f1:8e:23:cd:3c:14: 8e:da:5a:e1:43:50:01:22:ee:69:33:66:85:29:fe: 40:39:b6:29:0d:85:68:4d:f8:70:bd:e8:2d:be:9e: 1b:0b:b4:8a:61:c7:8f:40:4f:09:1e:2a:c0:bc:50: b9:46:6a:96:f6:45:a8:89:eb:d8:23:90:19:a6:c9: 8d:1e:7e:a0:45:64:b4:93:f3:ac:b5:fe:37:79:4c: 7e:6c:36:0b:36:bf:18:79:08:e5:04:8f:cb:4d:a0: cb:f7:ae:6f:9e:c7:85:69:8a:5a:75:3b:11:b3:de: 80:82:c9:ba:b2:85:6d:90:bc:cd:dc:ac:1f:da:f5: 5d:ab:25:49:39:e3:99:86:bf:e9:87:20:07:ae:b0: 63:5f:ec:70:6c:be:90:1c:93:d5:15:4c:e2:0f:49: 79:bd:ec:4e:b8:91:4b:18:c9:16:b7:b7:7e:7c:75: 83:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1F:39:E3:B5:E4:DC:82:9A:4D:88:A6:D5:FE:D0:5E:7E:3B:7E:DF X509v3 Authority Key Identifier: keyid:FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:4d:87:2a:bf:01:50:56:cd:b2:15:1c:18:0c:c3:4a:aa:f6: e4:2b:35:9f:26:bf:4b:ad:33:aa:03:39:10:70:fd:1d:8c:80: cb:1c:6c:fe:4b:70:a4:ba:23:ab:15:7a:e9:be:ad:a5:58:dd: 57:f1:a8:c4:21:1d:a9:c4:20:f6:6f:98:48:50:9c:27:2f:4b: 22:a2:aa:b5:ec:95:4f:84:9d:a3:57:e8:03:43:02:6d:06:86: b7:ff:65:21:9c:8c:08:bd:d3:e7:38:66:5d:d9:2f:7e:69:d3: d4:5a:ee:66:be:13:42:55:ef:62:46:75:b2:61:fe:c6:f3:90: c5:71:b1:6e:bc:b6:cc:75:ba:1c:9e:1e:14:88:73:14:7e:23: 14:2b:cb:30:8f:c5:86:af:fc:64:80:9a:8b:8d:f3:8c:6e:e5: 3d:b3:3d:ff:d4:90:57:66:75:2f:af:ca:d6:08:41:57:07:1d: cc:f6:c0:7f:56:c8:81:9c:51:33:b9:fe:b6:c3:00:bc:a2:30: 43:dd:87:1d:6c:c2:4f:9c:62:4b:32:b0:94:d3:e7:c8:5f:5d: 1d:da:d2:20:f6:05:f9:44:6b:9a:c6:c8:ad:45:da:8c:f2:70: c9:36:84:0c:0c:ea:ab:00:78:ee:16:95:8a:47:5e:6a:28:49: 57:fb:f1:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvgD6RiyJYp9AF544PXybMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYmViOWIzMDJjZWI2ZjU4ZDMyN2I0OTRkODE0NTk0MzNi ZTczOGQwHhcNMjUxMjI0MTkwMjQ1WhcNMjUxMjI1MTkwMjQ1WjAzMTEwLwYDVQQD EyhhNDFmMzllM2I1ZTRkYzgyOWE0ZDg4YTZkNWZlZDA1ZTdlM2I3ZWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlkseC+VMlp7AX3hxefKa1HHHtaq XwtZay0wMYmA754GMNoxdCc3LM/PjIfwhduXuzuJs9LLIzD9C4ulPranUkxh+X4D +jRGke242nRvWDoYNLvxjiPNPBSO2lrhQ1ABIu5pM2aFKf5AObYpDYVoTfhwvegt vp4bC7SKYcePQE8JHirAvFC5RmqW9kWoievYI5AZpsmNHn6gRWS0k/Ostf43eUx+ bDYLNr8YeQjlBI/LTaDL965vnseFaYpadTsRs96Agsm6soVtkLzN3Kwf2vVdqyVJ OeOZhr/phyAHrrBjX+xwbL6QHJPVFUziD0l5vexOuJFLGMkWt7d+fHWDqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQfOeO15NyCmk2IptX+0F5+O37fMB8GA1UdIwQY MBaAFPy+ubMCzrb1jTJ7SU2BRZQzvnONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0w2NXN3TE90dldOTW50SlRZRkZsRE8tYzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xYzhiNjktNGI3Yi00YmZkLWJjZTUt MzdhZmJkZjRkODQ3LzEvX0w2NXN3TE90dldOTW50SlRZRkZsRE8tYzQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8xYzhiNjktNGI3Yi00YmZkLWJjZTUtMzdhZmJkZjRkODQ3 LzEvX0w2NXN3TE90dldOTW50SlRZRkZsRE8tYzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1U2HKr8B UFbNshUcGAzDSqr25Cs1nya/S60zqgM5EHD9HYyAyxxs/ktwpLojqxV66b6tpVjd V/GoxCEdqcQg9m+YSFCcJy9LIqKqteyVT4Sdo1foA0MCbQaGt/9lIZyMCL3T5zhm XdkvfmnT1FruZr4TQlXvYkZ1smH+xvOQxXGxbry2zHW6HJ4eFIhzFH4jFCvLMI/F hq/8ZICai43zjG7lPbM9/9SQV2Z1L6/K1ghBVwcdzPbAf1bIgZxRM7n+tsMAvKIw Q92HHWzCT5xiSzKwlNPnyF9dHdrSIPYF+URrmsbIrUXajPJwyTaEDAzqqwB47haV ikdeaihJV/vxXg== -----END CERTIFICATE-----Generated at Wed Dec 24 21:46:13 2025 by rpki-client