This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft File: rb65YXJeTVu08lSJhtlvzG00nmQ.mft (raw, json) Hash identifier: ae8QTP2RQASbSmr7/RF4mabmmzMg0juIIS2el4k++Gw= Subject key identifier: EC:8D:0A:08:77:C2:8D:34:DE:DF:60:CF:99:25:B7:AF:CB:53:75:E3 Authority key identifier: AD:BE:B9:61:72:5E:4D:5B:B4:F2:54:89:86:D9:6F:CC:6D:34:9E:64 Certificate issuer: /CN=adbeb961725e4d5bb4f2548986d96fcc6d349e64 Certificate serial: 019AF1D20BE5FC3B423730CFC3A9D09D8A22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb65YXJeTVu08lSJhtlvzG00nmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft Manifest number: 0399 Signing time: Sat 06 Dec 2025 04:01:05 +0000 Manifest this update: Sat 06 Dec 2025 04:01:05 +0000 Manifest next update: Sun 07 Dec 2025 04:01:05 +0000 Files and hashes: 1: rb65YXJeTVu08lSJhtlvzG00nmQ.crl (hash: aShHj/5hjI3xx/6fjVmWntTJBDkDLcgOFPoswjFW9Qc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rb65YXJeTVu08lSJhtlvzG00nmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:0b:e5:fc:3b:42:37:30:cf:c3:a9:d0:9d:8a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adbeb961725e4d5bb4f2548986d96fcc6d349e64 Validity Not Before: Dec 6 04:01:05 2025 GMT Not After : Dec 7 04:01:05 2025 GMT Subject: CN=ec8d0a0877c28d34dedf60cf9925b7afcb5375e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b3:f0:49:f6:f7:6d:c0:58:e6:35:ce:c6:77: 37:02:11:fb:68:6c:d3:aa:b2:9a:31:34:77:7d:20: b5:b3:6f:42:1b:0e:ab:eb:6e:60:2e:72:d4:6c:f3: ff:68:fb:98:63:cd:6e:24:a9:67:3c:45:66:38:71: 1e:d0:13:88:f4:b6:9f:60:40:c2:b7:15:8b:e7:9b: 81:ee:e1:95:48:7f:86:05:7f:98:15:12:c1:f4:64: 6f:b3:64:34:06:cc:75:e6:99:8c:8d:e8:e1:5c:0b: 54:22:ae:78:a1:cb:f8:8e:df:63:5a:31:12:08:9d: 11:42:86:84:9c:07:7e:02:9d:bc:4b:4a:97:67:1a: 2e:1c:75:db:82:fe:56:46:02:54:42:c5:aa:1f:73: 57:1d:6d:2d:35:0a:f8:60:1d:b0:c3:9c:09:30:cf: 69:f6:2f:a7:91:06:37:74:85:11:02:50:90:d2:16: 35:ba:54:8f:0d:7e:8c:46:82:40:59:b8:6e:53:c3: b9:67:ec:d3:cb:57:a0:cc:41:0c:88:95:b2:63:93: 3a:eb:00:ad:f8:21:67:3b:26:2b:2d:15:3c:99:e6: 03:fc:88:e2:24:5f:36:02:6c:3f:e3:3e:8e:d3:fb: 14:31:13:00:ac:7a:fe:cd:c3:54:d4:88:db:38:c1: fe:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8D:0A:08:77:C2:8D:34:DE:DF:60:CF:99:25:B7:AF:CB:53:75:E3 X509v3 Authority Key Identifier: keyid:AD:BE:B9:61:72:5E:4D:5B:B4:F2:54:89:86:D9:6F:CC:6D:34:9E:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb65YXJeTVu08lSJhtlvzG00nmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:af:a2:e3:65:2a:f3:e8:c3:4d:de:06:55:b7:e6:a2:16:b0: 30:17:f3:c2:35:6e:3e:70:dd:24:68:ed:48:e8:56:41:6f:eb: 4f:10:1a:ae:2b:5e:e8:6a:df:7c:29:e5:2a:43:61:31:7f:29: fa:c0:8d:97:1a:37:11:cc:7a:ea:64:63:ac:ae:b2:07:5a:da: 8a:24:ed:b0:1b:59:57:cb:8a:2e:90:41:f2:4d:2e:cd:08:9a: 75:87:b1:e7:9a:02:58:79:f2:64:97:ba:72:e9:1d:9f:64:b7: 0f:0b:4d:3e:1e:48:da:8a:e2:5e:d3:53:ba:fd:94:82:e1:6e: 38:b0:4f:23:72:46:0e:20:f9:9d:0e:57:b7:cf:54:5a:b7:fd: 49:e5:fa:f0:01:ed:77:bf:86:c6:9d:0f:2a:20:67:66:41:1d: e2:10:6d:47:1e:a0:84:df:36:d2:48:fe:88:2c:30:23:47:fe: c4:ec:64:5e:0d:84:e3:88:1e:9b:67:bc:2d:52:e2:75:99:bc: bd:47:05:73:dd:6b:61:00:86:71:e0:c5:97:2a:d1:4c:f2:8c: f9:77:27:59:35:89:2f:33:e8:11:dc:3f:68:d1:c8:98:60:93: ee:ad:f7:39:a2:1f:6a:39:a3:7c:57:57:25:71:91:13:32:a4: 65:88:7a:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gvl/DtCNzDPw6nQnYoiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYmViOTYxNzI1ZTRkNWJiNGYyNTQ4OTg2ZDk2ZmNjNmQz NDllNjQwHhcNMjUxMjA2MDQwMTA1WhcNMjUxMjA3MDQwMTA1WjAzMTEwLwYDVQQD EyhlYzhkMGEwODc3YzI4ZDM0ZGVkZjYwY2Y5OTI1YjdhZmNiNTM3NWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7PwSfb3bcBY5jXOxnc3AhH7aGzT qrKaMTR3fSC1s29CGw6r625gLnLUbPP/aPuYY81uJKlnPEVmOHEe0BOI9LafYEDC txWL55uB7uGVSH+GBX+YFRLB9GRvs2Q0Bsx15pmMjejhXAtUIq54ocv4jt9jWjES CJ0RQoaEnAd+Ap28S0qXZxouHHXbgv5WRgJUQsWqH3NXHW0tNQr4YB2ww5wJMM9p 9i+nkQY3dIURAlCQ0hY1ulSPDX6MRoJAWbhuU8O5Z+zTy1egzEEMiJWyY5M66wCt +CFnOyYrLRU8meYD/IjiJF82Amw/4z6O0/sUMRMArHr+zcNU1IjbOMH+2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyNCgh3wo003t9gz5klt6/LU3XjMB8GA1UdIwQY MBaAFK2+uWFyXk1btPJUiYbZb8xtNJ5kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmI2NVlYSmVUVnUwOGxTSmh0bHZ6RzAwbm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85MjY4NjEtZDlkNy00YjU1LTkwMjQt ODNkNjI1YmYxYmYxLzEvcmI2NVlYSmVUVnUwOGxTSmh0bHZ6RzAwbm1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni85MjY4NjEtZDlkNy00YjU1LTkwMjQtODNkNjI1YmYxYmYx LzEvcmI2NVlYSmVUVnUwOGxTSmh0bHZ6RzAwbm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6+i42Uq 8+jDTd4GVbfmohawMBfzwjVuPnDdJGjtSOhWQW/rTxAarite6GrffCnlKkNhMX8p +sCNlxo3Ecx66mRjrK6yB1raiiTtsBtZV8uKLpBB8k0uzQiadYex55oCWHnyZJe6 cukdn2S3DwtNPh5I2oriXtNTuv2UguFuOLBPI3JGDiD5nQ5Xt89UWrf9SeX68AHt d7+Gxp0PKiBnZkEd4hBtRx6ghN820kj+iCwwI0f+xOxkXg2E44gem2e8LVLidZm8 vUcFc91rYQCGceDFlyrRTPKM+XcnWTWJLzPoEdw/aNHImGCT7q33OaIfajmjfFdX JXGREzKkZYh6CA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:06:07 2025 by rpki-client