This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft File: _L65swLOtvWNMntJTYFFlDO-c40.mft (raw, json) Hash identifier: 7+f2ziul0tq1kebTeNmEcK/bD/AN/RBnmd3ZmdPkbA0= Subject key identifier: 51:16:54:1C:1B:6D:74:6A:40:F1:26:C3:9E:6F:27:49:C4:2D:FD:99 Authority key identifier: FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D Certificate issuer: /CN=fcbeb9b302ceb6f58d327b494d81459433be738d Certificate serial: 019AF31C69C01BA8973B3D1E64B63E2FE7D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft Manifest number: 112E Signing time: Sat 06 Dec 2025 10:01:56 +0000 Manifest this update: Sat 06 Dec 2025 10:01:56 +0000 Manifest next update: Sun 07 Dec 2025 10:01:56 +0000 Files and hashes: 1: 4FgyXjSTtWGyFOXdnX2-aAmOOA8.roa (hash: InpaFw/32Nb/Zr2vPmUWS5J9SJuIWTtmwm6Og2V6cjc=) 2: _L65swLOtvWNMntJTYFFlDO-c40.crl (hash: Fwj9xUcxFfROuekLmn6kq9783Gz4cBOHHC23t/ZgPJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:69:c0:1b:a8:97:3b:3d:1e:64:b6:3e:2f:e7:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcbeb9b302ceb6f58d327b494d81459433be738d Validity Not Before: Dec 6 10:01:56 2025 GMT Not After : Dec 7 10:01:56 2025 GMT Subject: CN=5116541c1b6d746a40f126c39e6f2749c42dfd99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b6:4c:ac:77:df:eb:7d:8a:9a:a5:d5:f9:b5: 68:2b:87:b6:d4:77:bb:42:bf:3d:da:40:65:53:df: 5c:44:58:c8:fb:35:fb:53:bf:74:8e:e2:72:56:d7: b3:32:b0:6b:bd:72:16:9f:ef:17:29:26:3e:0f:9d: b3:38:b7:75:69:d1:f0:af:73:e4:fc:b8:4c:97:80: d8:cb:6b:d5:fb:36:2f:c3:d8:3f:9b:27:83:cb:34: fa:77:b8:a4:4f:ea:ef:d2:9b:5a:ca:13:33:24:d1: 05:da:44:af:e5:e7:e9:db:cb:4c:05:d3:4b:08:11: 27:a1:84:e2:8d:85:b0:c6:f8:53:78:33:a5:b0:a4: e7:54:96:16:fa:4f:95:e2:06:3c:93:c6:7f:86:5d: 15:02:fa:bd:2c:e2:a0:72:73:09:39:70:6f:fc:08: ab:92:42:fd:b1:85:36:6d:35:96:25:b8:c3:f3:5d: 0c:fa:34:96:c0:d7:49:61:27:68:17:99:3d:90:ea: 7b:18:d2:00:de:4b:dd:94:dc:2d:2e:39:76:6f:7c: 7a:2f:8a:e8:df:cf:3a:dd:e4:4d:7e:46:a4:22:d3: ca:c6:64:31:55:23:09:bf:1b:97:cb:b2:40:21:1a: 27:c2:9a:3c:d2:f5:ea:c3:b0:80:64:86:a7:bc:99: 29:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:16:54:1C:1B:6D:74:6A:40:F1:26:C3:9E:6F:27:49:C4:2D:FD:99 X509v3 Authority Key Identifier: keyid:FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:37:ff:91:f4:6a:8a:3b:a7:01:45:6a:f8:12:88:d3:09:88: 91:d5:2b:74:37:54:74:94:e3:82:26:9f:d2:b0:e9:2a:70:15: 22:f3:b8:2c:17:e4:8c:49:66:fb:a2:b9:ff:66:50:dd:4d:08: b9:7c:30:a5:67:a5:79:96:e0:8f:32:a1:4b:89:c1:1c:c4:ee: 15:59:da:c1:1d:1a:c0:3e:22:b8:04:d0:3d:29:e0:71:2c:4b: 8f:dc:67:2b:5c:cb:2a:47:e5:07:b2:a7:2b:60:ff:4a:47:7d: 6f:25:7d:17:5f:2c:5e:2b:db:6b:3c:81:14:df:da:0d:0d:23: fa:17:7b:4a:ac:6f:ce:a5:c0:0c:b5:74:91:d6:16:70:8c:03: 63:4c:1d:6c:8e:76:e9:fd:f7:c5:07:15:2c:d6:8e:5a:9d:4c: 54:a8:93:5c:3f:d8:dc:c5:f7:a1:11:54:b0:e6:9b:4f:1d:b8: 84:a5:52:98:80:a2:22:ba:cc:7d:7d:0d:45:45:bb:65:c8:da: 93:c0:15:51:99:1c:63:4b:9f:59:82:34:79:77:58:25:bd:d7: cd:95:4d:cb:0c:17:c9:86:5d:87:0f:4a:24:21:31:f8:f7:8a: 3c:12:8a:c7:7d:fa:6b:a5:85:fd:35:40:1a:68:b9:71:cd:1a: db:0c:08:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHGnAG6iXOz0eZLY+L+fZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYmViOWIzMDJjZWI2ZjU4ZDMyN2I0OTRkODE0NTk0MzNi ZTczOGQwHhcNMjUxMjA2MTAwMTU2WhcNMjUxMjA3MTAwMTU2WjAzMTEwLwYDVQQD Eyg1MTE2NTQxYzFiNmQ3NDZhNDBmMTI2YzM5ZTZmMjc0OWM0MmRmZDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47ZMrHff632KmqXV+bVoK4e21He7 Qr892kBlU99cRFjI+zX7U790juJyVtezMrBrvXIWn+8XKSY+D52zOLd1adHwr3Pk /LhMl4DYy2vV+zYvw9g/myeDyzT6d7ikT+rv0ptayhMzJNEF2kSv5efp28tMBdNL CBEnoYTijYWwxvhTeDOlsKTnVJYW+k+V4gY8k8Z/hl0VAvq9LOKgcnMJOXBv/Air kkL9sYU2bTWWJbjD810M+jSWwNdJYSdoF5k9kOp7GNIA3kvdlNwtLjl2b3x6L4ro 38863eRNfkakItPKxmQxVSMJvxuXy7JAIRonwpo80vXqw7CAZIanvJkpZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEWVBwbbXRqQPEmw55vJ0nELf2ZMB8GA1UdIwQY MBaAFPy+ubMCzrb1jTJ7SU2BRZQzvnONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0w2NXN3TE90dldOTW50SlRZRkZsRE8tYzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xYzhiNjktNGI3Yi00YmZkLWJjZTUt MzdhZmJkZjRkODQ3LzEvX0w2NXN3TE90dldOTW50SlRZRkZsRE8tYzQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8xYzhiNjktNGI3Yi00YmZkLWJjZTUtMzdhZmJkZjRkODQ3 LzEvX0w2NXN3TE90dldOTW50SlRZRkZsRE8tYzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDf/kfRq ijunAUVq+BKI0wmIkdUrdDdUdJTjgiaf0rDpKnAVIvO4LBfkjElm+6K5/2ZQ3U0I uXwwpWeleZbgjzKhS4nBHMTuFVnawR0awD4iuATQPSngcSxLj9xnK1zLKkflB7Kn K2D/Skd9byV9F18sXivbazyBFN/aDQ0j+hd7SqxvzqXADLV0kdYWcIwDY0wdbI52 6f33xQcVLNaOWp1MVKiTXD/Y3MX3oRFUsOabTx24hKVSmICiIrrMfX0NRUW7Zcja k8AVUZkcY0ufWYI0eXdYJb3XzZVNywwXyYZdhw9KJCEx+PeKPBKKx336a6WF/TVA Gmi5cc0a2wwI7g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:58:25 2025 by rpki-client