This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft File: 65fOljUzDxRxFMZG72qTR9aJFjs.mft (raw, json) Hash identifier: qW8eJbXHeciTnUw5+nV7w7EprNw+mFBhnwxx9z16RNg= Subject key identifier: 31:4B:43:D6:47:FF:52:4A:6D:AB:21:05:D0:95:6E:83:94:4A:1D:A0 Authority key identifier: EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B Certificate issuer: /CN=eb97ce9635330f147114c646ef6a9347d689163b Certificate serial: 019AF2091BD0AA339D07F599FA4F50C1769A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft Manifest number: 16F0 Signing time: Sat 06 Dec 2025 05:01:14 +0000 Manifest this update: Sat 06 Dec 2025 05:01:14 +0000 Manifest next update: Sun 07 Dec 2025 05:01:14 +0000 Files and hashes: 1: 65fOljUzDxRxFMZG72qTR9aJFjs.crl (hash: 2JIexs93o5SK0IAVauuFl0E2EW+eQUM2jIcZ9ZtyIJs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:1b:d0:aa:33:9d:07:f5:99:fa:4f:50:c1:76:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb97ce9635330f147114c646ef6a9347d689163b Validity Not Before: Dec 6 05:01:14 2025 GMT Not After : Dec 7 05:01:14 2025 GMT Subject: CN=314b43d647ff524a6dab2105d0956e83944a1da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:90:56:b1:f5:db:f1:5c:81:43:f0:55:e3:b0: 3e:8e:12:66:0f:e7:07:fa:07:6b:2b:f9:b5:46:06: 03:a7:b5:74:81:41:3b:93:e5:5d:a6:de:31:dd:40: 87:ff:18:a5:58:e9:20:cb:5d:97:fc:46:31:4a:8f: 1d:a4:54:69:d7:1d:76:73:de:55:24:ee:c3:26:d7: ff:d8:1d:9a:bc:6b:40:ca:6c:e2:f2:9e:49:85:0e: ca:ca:c6:59:ba:f6:e7:8c:65:65:a0:23:8b:80:de: 73:b3:84:0b:90:9e:ca:75:26:5a:f6:e6:4c:00:40: 8b:35:44:59:57:74:8e:25:4f:f7:6a:61:e6:79:77: ad:5b:65:af:04:f1:80:97:35:12:ea:74:55:3b:fb: c8:2c:0b:0c:a8:b2:e7:a6:a2:3c:9d:e7:12:65:02: 26:65:7e:ad:e8:b4:e2:e1:38:d5:d1:04:3e:ec:ac: 8d:f3:69:e3:6a:ce:8b:8d:a3:fa:9f:c8:f7:a6:52: 92:99:bd:58:33:52:35:75:7b:00:19:4c:1d:5c:ec: 20:b2:9d:33:8c:d8:3e:4f:ff:2a:fb:de:af:23:1c: f0:e5:dd:5e:b7:d9:e1:bc:f9:44:78:65:85:b5:d2: aa:c9:fc:bc:76:79:00:3b:c0:ab:96:f8:1d:a9:ad: bc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4B:43:D6:47:FF:52:4A:6D:AB:21:05:D0:95:6E:83:94:4A:1D:A0 X509v3 Authority Key Identifier: keyid:EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:39:95:2e:63:41:90:d4:fc:42:78:6b:58:aa:86:87:ae:ca: 86:cf:ed:24:5c:7f:15:0c:7d:0b:48:1e:08:bb:ee:b9:19:20: 6a:4e:52:34:3a:56:4a:fe:6e:0a:2d:41:15:3f:f7:18:5a:ce: 17:d8:88:6f:dd:27:ff:96:ed:8c:ea:9d:1d:95:3b:80:cc:46: c9:3f:93:49:07:78:fd:47:31:9b:2f:46:a4:2d:ce:e6:27:08: 38:a2:db:a3:70:cb:cd:f1:55:25:f2:f4:91:ab:0a:95:ff:cb: 0e:59:2f:a6:c7:08:3d:e0:60:a1:da:f5:b5:fc:d9:e8:d9:d6: 88:cd:d6:60:bf:49:42:23:34:39:65:96:4e:ea:97:db:f0:78: a7:8c:b0:d7:02:38:fa:2a:02:5d:74:07:2d:2c:23:12:1e:8d: c8:cd:b7:48:eb:9d:af:df:ee:eb:8f:1c:01:ed:6a:ed:63:8f: 53:34:19:71:55:2b:ce:d0:7a:8d:98:35:21:cd:00:de:a0:2f: 67:89:f9:37:c9:74:c5:7d:40:b8:45:48:f0:0b:95:fd:88:08: 3c:90:1e:0b:4d:f1:18:d5:70:42:f9:66:eb:2a:5a:fb:f6:3f: 89:0e:13:b3:7f:f2:81:76:27:95:51:38:18:f8:6c:37:a4:51: 15:b4:5d:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRvQqjOdB/WZ+k9QwXaaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViOTdjZTk2MzUzMzBmMTQ3MTE0YzY0NmVmNmE5MzQ3ZDY4 OTE2M2IwHhcNMjUxMjA2MDUwMTE0WhcNMjUxMjA3MDUwMTE0WjAzMTEwLwYDVQQD EygzMTRiNDNkNjQ3ZmY1MjRhNmRhYjIxMDVkMDk1NmU4Mzk0NGExZGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5BWsfXb8VyBQ/BV47A+jhJmD+cH +gdrK/m1RgYDp7V0gUE7k+Vdpt4x3UCH/xilWOkgy12X/EYxSo8dpFRp1x12c95V JO7DJtf/2B2avGtAymzi8p5JhQ7KysZZuvbnjGVloCOLgN5zs4QLkJ7KdSZa9uZM AECLNURZV3SOJU/3amHmeXetW2WvBPGAlzUS6nRVO/vILAsMqLLnpqI8necSZQIm ZX6t6LTi4TjV0QQ+7KyN82njas6LjaP6n8j3plKSmb1YM1I1dXsAGUwdXOwgsp0z jNg+T/8q+96vIxzw5d1et9nhvPlEeGWFtdKqyfy8dnkAO8Crlvgdqa284wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFLQ9ZH/1JKbashBdCVboOUSh2gMB8GA1UdIwQY MBaAFOuXzpY1Mw8UcRTGRu9qk0fWiRY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjVmT2xqVXpEeFJ4Rk1aRzcycVRSOWFKRmpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8yNjUwNjItZDZhZS00NTgyLWFhY2Qt ZWM3NjkwMWI2ZjMxLzEvNjVmT2xqVXpEeFJ4Rk1aRzcycVRSOWFKRmpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8yNjUwNjItZDZhZS00NTgyLWFhY2QtZWM3NjkwMWI2ZjMx LzEvNjVmT2xqVXpEeFJ4Rk1aRzcycVRSOWFKRmpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDmVLmNB kNT8QnhrWKqGh67Khs/tJFx/FQx9C0geCLvuuRkgak5SNDpWSv5uCi1BFT/3GFrO F9iIb90n/5btjOqdHZU7gMxGyT+TSQd4/Ucxmy9GpC3O5icIOKLbo3DLzfFVJfL0 kasKlf/LDlkvpscIPeBgodr1tfzZ6NnWiM3WYL9JQiM0OWWWTuqX2/B4p4yw1wI4 +ioCXXQHLSwjEh6NyM23SOudr9/u648cAe1q7WOPUzQZcVUrztB6jZg1Ic0A3qAv Z4n5N8l0xX1AuEVI8AuV/YgIPJAeC03xGNVwQvlm6ypa+/Y/iQ4Ts3/ygXYnlVE4 GPhsN6RRFbRdYg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:57:14 2025 by rpki-client