This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft File: 65YJgugr-emHVEUAkwjefsvQXFQ.mft (raw, json) Hash identifier: G8V6C5z8/MbCt1+ngCzNd5YSL3UyGmXeQBPLIhSbzQU= Subject key identifier: 84:35:AE:5B:3C:1E:06:5B:0D:57:65:F3:1D:90:00:D3:DB:EA:6E:7B Authority key identifier: EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54 Certificate issuer: /CN=eb960982e82bf9e9875445009308de7ecbd05c54 Certificate serial: 019B281BB40CC2CED2DC03078A52C3F445CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft Manifest number: 0CB1 Signing time: Tue 16 Dec 2025 17:01:02 +0000 Manifest this update: Tue 16 Dec 2025 17:01:02 +0000 Manifest next update: Wed 17 Dec 2025 17:01:02 +0000 Files and hashes: 1: 65YJgugr-emHVEUAkwjefsvQXFQ.crl (hash: JdmvV4jvD+azJhh7IDpvFd945QuiitsL0aTjOTDAwI0=) 2: JvCEdLPfAAXf7WSbuJj-4ekh7Es.roa (hash: vnxJ3sIoSk6fiP+z46/46h6rm1KHxuwXM0sR4DgXnI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:b4:0c:c2:ce:d2:dc:03:07:8a:52:c3:f4:45:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb960982e82bf9e9875445009308de7ecbd05c54 Validity Not Before: Dec 16 17:01:02 2025 GMT Not After : Dec 17 17:01:02 2025 GMT Subject: CN=8435ae5b3c1e065b0d5765f31d9000d3dbea6e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:61:15:ae:cf:8c:c1:f7:dc:6c:7b:4a:12:86: dc:c3:98:df:83:9a:1a:eb:c3:69:8a:7a:8c:31:21: 8b:fb:78:78:af:a4:42:8a:a8:45:b2:b5:f7:48:54: 77:70:eb:42:5f:dc:76:3f:5e:2b:eb:67:db:82:48: b9:41:b3:19:b0:e5:e1:b7:8f:95:b1:48:11:6f:3e: ee:94:21:62:a4:be:44:93:42:ba:3c:6a:93:4d:6c: 07:fb:80:94:53:94:9f:4d:19:18:d7:0e:36:2f:e9: fa:db:52:04:a4:a3:a3:56:a6:70:8f:1b:1e:b4:fc: 21:42:c2:25:9c:5a:33:32:30:24:1e:53:0a:cc:b6: 18:7a:1d:f2:15:4c:8a:23:3d:94:86:cb:76:f4:23: 58:3f:16:cb:52:49:85:8f:5b:0e:9e:e7:82:5b:ce: fa:6c:80:61:5f:c1:83:72:87:3d:fe:1a:8a:fc:32: c3:85:c3:30:7e:e7:da:42:5c:a7:8a:84:68:20:68: 8d:9b:c4:b6:b5:8c:d6:e2:41:90:bb:d5:59:9e:04: 28:1f:57:8a:be:97:9f:fd:76:6c:90:30:6a:41:56: 73:fc:9d:40:e2:02:28:94:2f:20:11:a6:d1:2c:29: 3f:4a:22:e1:23:c3:fe:ed:40:28:98:97:bc:fc:6b: 9c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:35:AE:5B:3C:1E:06:5B:0D:57:65:F3:1D:90:00:D3:DB:EA:6E:7B X509v3 Authority Key Identifier: keyid:EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:1c:7b:42:9c:1c:ca:af:8d:6e:5e:58:b4:b0:e5:db:32:1a: 15:5a:b9:7d:f7:bd:e8:4a:32:1b:b9:6e:da:fb:44:aa:58:c6: 26:bc:76:8c:36:ee:fe:75:a6:c0:5e:10:2f:98:f3:8f:40:db: 34:d9:82:70:ea:f6:f9:d2:50:48:23:17:d5:44:83:c3:e1:66: 90:2c:53:bd:95:4a:e0:b2:0e:bc:c0:c5:e1:08:94:83:1d:fd: a4:4e:ae:b6:a9:49:a7:a9:3c:55:31:d1:7d:30:7b:c4:4c:4d: 9c:d3:57:fd:9e:ca:5d:df:d3:95:44:86:dc:81:27:b4:3f:6a: 07:75:1d:f2:72:6b:a2:0d:ff:16:11:91:fa:54:62:23:da:52: de:1b:d0:9f:42:21:f3:b2:3d:84:10:2d:cb:3a:2c:e8:74:29: 94:a8:3e:70:93:74:21:bc:6c:45:2e:45:1f:36:7c:65:c5:b2: 3a:8d:69:35:75:cb:9a:f5:0b:80:67:b3:b1:75:d0:80:1a:ed: 73:58:66:8e:47:d5:3d:47:5d:56:23:0f:7e:83:1c:db:63:cb: 53:f4:9c:f9:0c:fe:75:cd:c1:82:9b:a2:b6:24:80:41:0c:1e: 06:84:94:8b:06:db:2a:b1:73:81:34:9a:e7:25:2d:99:6a:ec: 9e:4b:42:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG7QMws7S3AMHilLD9EXOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViOTYwOTgyZTgyYmY5ZTk4NzU0NDUwMDkzMDhkZTdlY2Jk MDVjNTQwHhcNMjUxMjE2MTcwMTAyWhcNMjUxMjE3MTcwMTAyWjAzMTEwLwYDVQQD Eyg4NDM1YWU1YjNjMWUwNjViMGQ1NzY1ZjMxZDkwMDBkM2RiZWE2ZTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWEVrs+MwffcbHtKEobcw5jfg5oa 68NpinqMMSGL+3h4r6RCiqhFsrX3SFR3cOtCX9x2P14r62fbgki5QbMZsOXht4+V sUgRbz7ulCFipL5Ek0K6PGqTTWwH+4CUU5SfTRkY1w42L+n621IEpKOjVqZwjxse tPwhQsIlnFozMjAkHlMKzLYYeh3yFUyKIz2Uhst29CNYPxbLUkmFj1sOnueCW876 bIBhX8GDcoc9/hqK/DLDhcMwfufaQlynioRoIGiNm8S2tYzW4kGQu9VZngQoH1eK vpef/XZskDBqQVZz/J1A4gIolC8gEabRLCk/SiLhI8P+7UAomJe8/GucEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQ1rls8HgZbDVdl8x2QANPb6m57MB8GA1UdIwQY MBaAFOuWCYLoK/nph1RFAJMI3n7L0FxUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjVZSmd1Z3ItZW1IVkVVQWt3amVmc3ZRWEZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81OWE3MmYtMDlhNC00MWM1LTgwYjct Y2FkZmNlZjBiNWM0LzEvNjVZSmd1Z3ItZW1IVkVVQWt3amVmc3ZRWEZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi81OWE3MmYtMDlhNC00MWM1LTgwYjctY2FkZmNlZjBiNWM0 LzEvNjVZSmd1Z3ItZW1IVkVVQWt3amVmc3ZRWEZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxx7Qpwc yq+Nbl5YtLDl2zIaFVq5ffe96EoyG7lu2vtEqljGJrx2jDbu/nWmwF4QL5jzj0Db NNmCcOr2+dJQSCMX1USDw+FmkCxTvZVK4LIOvMDF4QiUgx39pE6utqlJp6k8VTHR fTB7xExNnNNX/Z7KXd/TlUSG3IEntD9qB3Ud8nJrog3/FhGR+lRiI9pS3hvQn0Ih 87I9hBAtyzos6HQplKg+cJN0IbxsRS5FHzZ8ZcWyOo1pNXXLmvULgGezsXXQgBrt c1hmjkfVPUddViMPfoMc22PLU/Sc+Qz+dc3BgpuitiSAQQweBoSUiwbbKrFzgTSa 5yUtmWrsnktCWw== -----END CERTIFICATE-----Generated at Tue Dec 16 22:32:53 2025 by rpki-client