This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft File: 65YJgugr-emHVEUAkwjefsvQXFQ.mft (raw, json) Hash identifier: DowZnSk8zoUPTkOnvEDGOco95nJ0JhTZ6KnTTUmmPoA= Subject key identifier: 2E:BB:1B:41:AC:7E:FF:19:9E:B5:D0:6E:AB:F3:42:7D:AD:38:25:0C Authority key identifier: EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54 Certificate issuer: /CN=eb960982e82bf9e9875445009308de7ecbd05c54 Certificate serial: 019B2BF8D7257CE0DCDD7B782FD499A0CFA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft Manifest number: 0CB3 Signing time: Wed 17 Dec 2025 11:01:26 +0000 Manifest this update: Wed 17 Dec 2025 11:01:26 +0000 Manifest next update: Thu 18 Dec 2025 11:01:26 +0000 Files and hashes: 1: 65YJgugr-emHVEUAkwjefsvQXFQ.crl (hash: SUnFauyZc1FSpKfL/laWVKV4NMHZgTdOtz4wRddRcuA=) 2: JvCEdLPfAAXf7WSbuJj-4ekh7Es.roa (hash: vnxJ3sIoSk6fiP+z46/46h6rm1KHxuwXM0sR4DgXnI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 11:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:d7:25:7c:e0:dc:dd:7b:78:2f:d4:99:a0:cf:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb960982e82bf9e9875445009308de7ecbd05c54 Validity Not Before: Dec 17 11:01:26 2025 GMT Not After : Dec 18 11:01:26 2025 GMT Subject: CN=2ebb1b41ac7eff199eb5d06eabf3427dad38250c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:36:b2:89:ba:e2:35:1c:d3:cc:f3:c9:e4:79: 8a:ce:94:fa:06:8e:6a:4d:4f:df:88:5f:61:3b:62: 2e:4a:00:02:75:b8:b3:40:d3:a7:0c:08:d4:d8:58: 0b:07:60:a2:ed:cf:40:55:0f:93:2d:e6:01:46:9c: 92:73:f5:d8:3c:dc:7f:73:ec:73:15:a8:c7:fc:a0: e0:9f:48:9f:c8:95:c1:79:c1:c1:58:ac:d4:38:00: de:84:b2:de:cf:fe:85:e6:57:eb:dc:b6:fd:b8:be: 2a:68:fa:0d:4b:bb:97:aa:84:50:f5:05:8e:15:a7: 87:36:39:93:dc:ba:f2:14:dc:29:7f:48:33:4a:81: 85:16:8e:ae:94:92:68:47:8c:f1:a8:8c:e9:bb:90: a1:a2:a8:51:92:b8:34:16:17:a6:1a:ab:8e:10:13: 09:64:ad:c6:14:b0:08:59:5b:86:8f:ea:90:e8:c8: 1b:cb:6f:10:9c:4a:20:fa:3e:d5:dc:f7:43:a7:ae: 14:3b:55:ce:e4:a2:ac:2f:5c:c9:61:7f:9f:96:87: 07:67:3f:ec:a3:77:f3:82:41:d5:05:9f:7b:c4:fb: 75:d9:f2:3c:f9:1f:67:52:44:08:5e:37:78:83:12: a0:ef:f7:00:01:c6:a8:8a:a1:2c:b1:70:99:51:cf: eb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BB:1B:41:AC:7E:FF:19:9E:B5:D0:6E:AB:F3:42:7D:AD:38:25:0C X509v3 Authority Key Identifier: keyid:EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:0e:5f:0c:f8:83:c9:5a:03:5b:8b:00:bc:dc:a3:15:7d:8d: 0f:6b:70:1a:75:dd:04:b3:e2:e8:56:39:5c:16:27:82:b7:47: aa:eb:50:ae:a5:cb:4d:22:cf:07:58:44:e8:e1:c7:ae:08:d0: ce:69:c9:d1:3a:20:76:e6:fb:26:b7:cf:a2:1f:74:9b:c9:ea: bb:a4:25:27:7c:6e:b6:8d:48:9e:3a:b7:ab:eb:45:c4:1d:8e: 63:83:af:46:5e:7c:7d:77:23:25:8c:c9:af:6a:cb:e8:03:d8: 33:3c:a6:6b:1a:d3:b1:90:96:c4:b6:e5:a0:e2:66:31:31:9e: 68:91:52:a8:1b:22:04:2c:3e:d9:90:81:d0:8f:c2:c0:1c:bb: 48:8b:f4:f0:10:1d:9e:d0:96:c4:32:9e:dd:06:76:0a:6f:25: 44:77:50:e8:3d:e4:17:35:a7:32:da:e5:35:29:a8:a4:d3:fa: da:2d:82:ef:86:06:bd:9a:22:12:c7:af:3c:4d:60:78:cf:19: 12:41:09:35:25:4a:4d:64:9b:13:05:bc:20:53:82:cb:ed:ab: 20:a3:e7:4b:d8:92:a5:f9:e0:7c:ed:c1:2c:84:21:29:12:88: 7b:16:1d:5d:73:4d:a2:57:9f:b9:b2:be:8b:cb:8c:ed:ee:57: 20:6e:86:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+NclfODc3Xt4L9SZoM+lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViOTYwOTgyZTgyYmY5ZTk4NzU0NDUwMDkzMDhkZTdlY2Jk MDVjNTQwHhcNMjUxMjE3MTEwMTI2WhcNMjUxMjE4MTEwMTI2WjAzMTEwLwYDVQQD EygyZWJiMWI0MWFjN2VmZjE5OWViNWQwNmVhYmYzNDI3ZGFkMzgyNTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTayibriNRzTzPPJ5HmKzpT6Bo5q TU/fiF9hO2IuSgACdbizQNOnDAjU2FgLB2Ci7c9AVQ+TLeYBRpySc/XYPNx/c+xz FajH/KDgn0ifyJXBecHBWKzUOADehLLez/6F5lfr3Lb9uL4qaPoNS7uXqoRQ9QWO FaeHNjmT3LryFNwpf0gzSoGFFo6ulJJoR4zxqIzpu5ChoqhRkrg0FhemGquOEBMJ ZK3GFLAIWVuGj+qQ6Mgby28QnEog+j7V3PdDp64UO1XO5KKsL1zJYX+flocHZz/s o3fzgkHVBZ97xPt12fI8+R9nUkQIXjd4gxKg7/cAAcaoiqEssXCZUc/r/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC67G0Gsfv8ZnrXQbqvzQn2tOCUMMB8GA1UdIwQY MBaAFOuWCYLoK/nph1RFAJMI3n7L0FxUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjVZSmd1Z3ItZW1IVkVVQWt3amVmc3ZRWEZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81OWE3MmYtMDlhNC00MWM1LTgwYjct Y2FkZmNlZjBiNWM0LzEvNjVZSmd1Z3ItZW1IVkVVQWt3amVmc3ZRWEZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi81OWE3MmYtMDlhNC00MWM1LTgwYjctY2FkZmNlZjBiNWM0 LzEvNjVZSmd1Z3ItZW1IVkVVQWt3amVmc3ZRWEZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPw5fDPiD yVoDW4sAvNyjFX2ND2twGnXdBLPi6FY5XBYngrdHqutQrqXLTSLPB1hE6OHHrgjQ zmnJ0Togdub7JrfPoh90m8nqu6QlJ3xuto1Injq3q+tFxB2OY4OvRl58fXcjJYzJ r2rL6APYMzymaxrTsZCWxLbloOJmMTGeaJFSqBsiBCw+2ZCB0I/CwBy7SIv08BAd ntCWxDKe3QZ2Cm8lRHdQ6D3kFzWnMtrlNSmopNP62i2C74YGvZoiEsevPE1geM8Z EkEJNSVKTWSbEwW8IFOCy+2rIKPnS9iSpfngfO3BLIQhKRKIexYdXXNNolefubK+ i8uM7e5XIG6G7Q== -----END CERTIFICATE-----Generated at Wed Dec 17 21:39:25 2025 by rpki-client