This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft File: B_65rg-oknBF-DQjdDxKc6J6dKc.mft (raw, json) Hash identifier: 1m+9DZr5wbo3V6EtUtgcvQqjMvaxa6WfKIvkD8a0YtQ= Subject key identifier: 1B:7A:BB:8A:3B:91:AF:57:EA:90:F7:42:16:A9:E7:2A:2B:07:F5:EF Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7 Certificate issuer: /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7 Certificate serial: 019AF5AE5EDB482D1259A8B42B355A4AE86A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 22:00:36 +0000 Manifest this update: Sat 06 Dec 2025 22:00:36 +0000 Manifest next update: Sun 07 Dec 2025 22:00:36 +0000 Files and hashes: 1: AqdNwPQNkfVczluLWSpSFMC_l4c.roa (hash: kZGRYpxYYa0OYlHbt48zpjPJ6+jRCPnuaKjcS//r4hs=) 2: B_65rg-oknBF-DQjdDxKc6J6dKc.crl (hash: Tc8dVXT0pO3+2HfXQ9aHWRYVapwAw89JWIfs1xqzhdw=) 3: MDHJbiBM7aXqQpL5aKkW2vBf5wk.roa (hash: WSV4LQJShI0X02CRQl4dfytl6WA7n85th9+MfrRp6Q8=) 4: p_-2LRJT-n9yo2P0iTcZXfHP8hY.roa (hash: SE2mVBRY6QTTS2fRPv5Fxi4HtlMSW0YEJmExzyBWATQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:5e:db:48:2d:12:59:a8:b4:2b:35:5a:4a:e8:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7 Validity Not Before: Dec 6 22:00:36 2025 GMT Not After : Dec 7 22:00:36 2025 GMT Subject: CN=1b7abb8a3b91af57ea90f74216a9e72a2b07f5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9f:34:4a:35:ac:4d:58:77:6d:e4:68:af:f3: 1d:a3:04:cd:be:8f:9e:45:dc:eb:1b:5e:fa:c1:a3: 90:d9:a1:01:3b:20:94:40:b6:d3:03:48:5f:f3:a0: 5b:b9:97:5e:8c:b9:1d:21:71:7e:ca:a5:68:0b:83: 08:ba:be:71:ca:70:ea:ed:e7:6b:92:c5:3c:90:2d: 1a:57:e8:a3:74:be:25:a5:01:f2:9d:ef:9a:c6:ba: 12:aa:3a:45:81:2a:dc:c7:ca:2f:0c:4d:95:5d:61: 87:45:98:6f:d1:c1:b3:7b:f2:ca:dc:9a:d1:a6:20: f1:97:98:8d:84:e1:a7:09:b1:7d:23:f5:2b:46:ad: 08:73:2d:e1:f3:f1:d6:c1:c7:56:5e:0f:80:82:bb: 4f:31:96:79:28:60:6b:a3:4f:7e:09:c4:c3:29:7a: 28:f0:83:b1:3c:6f:a4:db:6f:71:8b:dc:0e:bd:8b: 46:02:7f:1b:38:5e:3a:a6:df:10:6f:da:83:03:23: d2:6c:29:67:da:6d:0f:a4:e5:0a:ed:65:74:43:1c: 07:13:a5:1d:0c:73:73:5d:bb:de:9a:61:b1:d6:aa: a7:8c:60:57:cb:5b:27:d0:cb:c0:4d:82:98:88:83: fe:42:f9:61:ce:eb:62:b4:ed:0d:77:a4:bb:17:f8: 52:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7A:BB:8A:3B:91:AF:57:EA:90:F7:42:16:A9:E7:2A:2B:07:F5:EF X509v3 Authority Key Identifier: keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:e3:56:a2:31:37:07:f8:a6:9c:c3:a7:4e:aa:71:d7:6a:23: 6a:94:c4:18:6d:9a:d7:aa:a5:47:53:f4:65:2c:8e:22:ba:49: 81:4a:e8:e9:1d:72:a6:71:c3:97:92:9a:c8:2d:e6:56:a7:c5: 46:cf:da:f2:65:ab:f2:42:39:e6:66:67:a8:e6:74:96:4b:8b: 68:0f:6e:e2:88:1c:f0:31:ff:5a:08:85:1d:f0:5f:9d:82:f8: 9f:ef:dc:46:4a:b0:7b:eb:dd:63:7e:b0:27:44:e6:be:6a:7b: c0:61:b7:af:ad:40:d3:af:62:36:cb:15:f1:91:3e:1e:e6:c9: 54:95:7b:6a:8a:67:77:92:19:fa:be:f0:86:84:e2:33:67:f1: b3:4c:d8:20:6b:60:dd:52:6e:e9:39:4a:40:1f:f5:ba:87:89: d0:0c:2c:93:4a:f8:61:0b:de:f0:a2:ab:46:69:b0:ab:11:0a: fa:b4:74:c1:79:8a:71:d7:f9:ad:27:77:70:94:01:fc:31:a5: 28:87:6d:7e:8e:a4:c3:f4:7b:24:4f:ac:42:81:73:00:9d:60: 7f:21:cb:1d:be:bc:82:11:71:a8:47:36:97:fd:3f:bd:21:e7: 1e:f4:60:41:1c:24:86:8e:55:a4:1b:ac:76:1d:7d:52:46:11: 39:47:bb:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rl7bSC0SWai0KzVaSuhqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZmViOWFlMGZhODkyNzA0NWY4MzQyMzc0M2M0YTczYTI3 YTc0YTcwHhcNMjUxMjA2MjIwMDM2WhcNMjUxMjA3MjIwMDM2WjAzMTEwLwYDVQQD EygxYjdhYmI4YTNiOTFhZjU3ZWE5MGY3NDIxNmE5ZTcyYTJiMDdmNWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ80SjWsTVh3beRor/MdowTNvo+e RdzrG176waOQ2aEBOyCUQLbTA0hf86BbuZdejLkdIXF+yqVoC4MIur5xynDq7edr ksU8kC0aV+ijdL4lpQHyne+axroSqjpFgSrcx8ovDE2VXWGHRZhv0cGze/LK3JrR piDxl5iNhOGnCbF9I/UrRq0Icy3h8/HWwcdWXg+AgrtPMZZ5KGBro09+CcTDKXoo 8IOxPG+k229xi9wOvYtGAn8bOF46pt8Qb9qDAyPSbCln2m0PpOUK7WV0QxwHE6Ud DHNzXbvemmGx1qqnjGBXy1sn0MvATYKYiIP+QvlhzutitO0Nd6S7F/hSLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBt6u4o7ka9X6pD3Qhap5yorB/XvMB8GA1UdIwQY MBaAFAf+ua4PqJJwRfg0I3Q8SnOienSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl82NXJnLW9rbkJGLURRamREeEtjNko2ZEtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82M2U1YTUtNWQ0Zi00M2VlLWFmNzAt ZGM3M2Y5ZDliZTI5LzEvQl82NXJnLW9rbkJGLURRamREeEtjNko2ZEtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy82M2U1YTUtNWQ0Zi00M2VlLWFmNzAtZGM3M2Y5ZDliZTI5 LzEvQl82NXJnLW9rbkJGLURRamREeEtjNko2ZEtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+NWojE3 B/imnMOnTqpx12ojapTEGG2a16qlR1P0ZSyOIrpJgUro6R1ypnHDl5KayC3mVqfF Rs/a8mWr8kI55mZnqOZ0lkuLaA9u4ogc8DH/WgiFHfBfnYL4n+/cRkqwe+vdY36w J0Tmvmp7wGG3r61A069iNssV8ZE+HubJVJV7aopnd5IZ+r7whoTiM2fxs0zYIGtg 3VJu6TlKQB/1uoeJ0Awsk0r4YQve8KKrRmmwqxEK+rR0wXmKcdf5rSd3cJQB/DGl KIdtfo6kw/R7JE+sQoFzAJ1gfyHLHb68ghFxqEc2l/0/vSHnHvRgQRwkho5VpBus dh19UkYROUe77Q== -----END CERTIFICATE-----Generated at Sat Dec 6 23:36:04 2025 by rpki-client