This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft File: 65M6GrHHFeCzssf_oOEDhFYU03s.mft (raw, json) Hash identifier: VQR7gatmAPUeNzmZT1gTc4jKIHbtn83EwUum3d377w8= Subject key identifier: DD:B4:51:09:24:FB:48:6E:85:7A:A9:2C:18:CC:58:25:38:C0:AA:6C Authority key identifier: EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B Certificate issuer: /CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b Certificate serial: 019B3B6B4451C432B778C9A938A529EA0761 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft Manifest number: 0613 Signing time: Sat 20 Dec 2025 11:00:43 +0000 Manifest this update: Sat 20 Dec 2025 11:00:43 +0000 Manifest next update: Sun 21 Dec 2025 11:00:43 +0000 Files and hashes: 1: 65M6GrHHFeCzssf_oOEDhFYU03s.crl (hash: 7OODrlCMg+4LxsjcG8o+CSYLFJ579Nz4EOJibv3um9M=) 2: UQAL-JJc9xbj3dvWQx-rKxJywfk.roa (hash: arBBklCXAnQ+7dDU+siDZljmex4Eu/z9+wzjqqM7ap4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 11:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:44:51:c4:32:b7:78:c9:a9:38:a5:29:ea:07:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b Validity Not Before: Dec 20 11:00:43 2025 GMT Not After : Dec 21 11:00:43 2025 GMT Subject: CN=ddb4510924fb486e857aa92c18cc582538c0aa6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ee:ff:fc:39:b3:f8:e2:6f:a2:8c:e8:20:b8: 99:fc:05:6a:36:37:f5:87:56:32:7e:04:79:b8:30: 87:34:d4:5c:cc:4d:61:06:0f:3d:af:05:13:40:bd: ec:68:46:32:d0:b5:1d:f7:01:91:31:74:8a:c1:d6: d7:80:3e:ad:9a:7e:34:11:c0:6d:78:dd:15:9f:1a: 2c:df:cc:41:93:b9:07:05:70:0b:15:03:17:94:72: 3a:0d:4f:6a:f3:75:9d:02:34:d3:c4:a3:6d:6a:fa: 67:06:f3:06:63:8f:42:06:49:ea:5a:1e:43:17:da: 22:05:f8:4a:b1:c7:ec:bd:da:5b:f2:41:4e:5e:87: 0f:13:7f:35:08:41:ba:b8:52:82:4a:11:77:b5:64: f3:d2:30:07:44:0f:c8:5c:1b:74:af:30:23:ae:b9: 07:c8:a0:16:71:db:21:a1:cd:fa:3c:f3:6d:1e:04: c9:c1:21:d2:a9:92:fd:f0:9a:4e:47:01:ae:fc:b1: a8:7c:c3:ff:08:aa:c8:49:4b:fd:71:5b:3e:0e:34: e5:ad:46:02:f2:30:51:2a:12:8b:36:c4:c7:77:65: b9:c4:4f:e4:ea:47:c8:10:1e:66:2c:01:3c:59:e9: 57:5b:0e:50:5d:3d:6b:41:44:f7:25:26:05:31:4b: d0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B4:51:09:24:FB:48:6E:85:7A:A9:2C:18:CC:58:25:38:C0:AA:6C X509v3 Authority Key Identifier: keyid:EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:27:32:2d:c9:3d:7e:7e:b8:4f:23:36:73:d3:f9:7f:1d:46: 8a:43:54:e0:26:42:bb:3c:16:8d:19:8c:70:59:90:6b:fb:32: fd:93:93:5b:61:73:00:df:f9:18:91:05:e0:3a:36:0a:b7:f4: 39:a3:e8:4c:e9:11:c8:8d:68:0f:d3:06:a3:89:e8:af:ac:69: 04:4f:6f:cf:b6:4d:51:f1:08:18:9a:35:b8:25:71:0c:96:be: 93:f0:b4:05:4b:98:63:d6:69:80:00:ed:9e:42:c4:4f:fa:ca: b0:37:9e:0d:a6:59:cf:7d:92:b9:78:cd:ba:58:59:9a:80:05: 3b:e9:4a:39:88:fe:5b:0e:09:ab:f0:2f:fa:2d:9e:be:a4:8d: 63:01:0f:cc:e8:4c:98:bd:da:36:35:cd:c8:51:ab:09:25:a5: 6a:64:10:fa:f9:30:0f:f7:a4:d2:3d:a1:e7:69:8c:0c:42:60: ef:fd:c8:f1:46:10:33:df:2a:c9:c2:fe:37:c2:3e:2b:6b:a7: 82:b0:19:2d:1a:b5:47:26:e3:27:2a:df:7b:b3:47:ca:eb:45: 59:72:76:a5:fa:38:47:38:8d:14:9b:a9:13:f1:1e:40:08:70: 3f:56:8a:94:32:8f:b2:06:cb:56:29:2a:31:c9:29:d8:8c:d7: 68:52:44:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a0RRxDK3eMmpOKUp6gdhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViOTMzYTFhYjFjNzE1ZTBiM2IyYzdmZmEwZTEwMzg0NTYx NGQzN2IwHhcNMjUxMjIwMTEwMDQzWhcNMjUxMjIxMTEwMDQzWjAzMTEwLwYDVQQD EyhkZGI0NTEwOTI0ZmI0ODZlODU3YWE5MmMxOGNjNTgyNTM4YzBhYTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7e7//Dmz+OJvoozoILiZ/AVqNjf1 h1YyfgR5uDCHNNRczE1hBg89rwUTQL3saEYy0LUd9wGRMXSKwdbXgD6tmn40EcBt eN0Vnxos38xBk7kHBXALFQMXlHI6DU9q83WdAjTTxKNtavpnBvMGY49CBknqWh5D F9oiBfhKscfsvdpb8kFOXocPE381CEG6uFKCShF3tWTz0jAHRA/IXBt0rzAjrrkH yKAWcdshoc36PPNtHgTJwSHSqZL98JpORwGu/LGofMP/CKrISUv9cVs+DjTlrUYC 8jBRKhKLNsTHd2W5xE/k6kfIEB5mLAE8WelXWw5QXT1rQUT3JSYFMUvQEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN20UQkk+0huhXqpLBjMWCU4wKpsMB8GA1UdIwQY MBaAFOuTOhqxxxXgs7LH/6DhA4RWFNN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjVNNkdySEhGZUN6c3NmX29PRURoRllVMDNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80Y2UzZDgtOWRlYi00MmJmLTg5NGQt MmRkNmUxMTEzZjM0LzEvNjVNNkdySEhGZUN6c3NmX29PRURoRllVMDNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80Y2UzZDgtOWRlYi00MmJmLTg5NGQtMmRkNmUxMTEzZjM0 LzEvNjVNNkdySEhGZUN6c3NmX29PRURoRllVMDNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCcyLck9 fn64TyM2c9P5fx1GikNU4CZCuzwWjRmMcFmQa/sy/ZOTW2FzAN/5GJEF4Do2Crf0 OaPoTOkRyI1oD9MGo4nor6xpBE9vz7ZNUfEIGJo1uCVxDJa+k/C0BUuYY9ZpgADt nkLET/rKsDeeDaZZz32SuXjNulhZmoAFO+lKOYj+Ww4Jq/Av+i2evqSNYwEPzOhM mL3aNjXNyFGrCSWlamQQ+vkwD/ek0j2h52mMDEJg7/3I8UYQM98qycL+N8I+K2un grAZLRq1RybjJyrfe7NHyutFWXJ2pfo4RziNFJupE/EeQAhwP1aKlDKPsgbLVikq Mckp2IzXaFJEoA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:45:09 2025 by rpki-client