This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft File: its62HX3YlxjkjZZ8UKVjbeHijI.mft (raw, json) Hash identifier: nNQEviHD9aTbU6Ff4ft0Q3Gl85Me7Sy6ISvg6HKmUW8= Subject key identifier: 00:09:EA:95:EB:CB:85:E8:F4:44:A7:1D:CC:43:B2:55:D6:F4:4D:34 Authority key identifier: 8A:DB:3A:D8:75:F7:62:5C:63:92:36:59:F1:42:95:8D:B7:87:8A:32 Certificate issuer: /CN=8adb3ad875f7625c63923659f142958db7878a32 Certificate serial: 019AF50A4FBA87F7BEDF72DAD84DEC191F9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 19:01:24 +0000 Manifest this update: Sat 06 Dec 2025 19:01:24 +0000 Manifest next update: Sun 07 Dec 2025 19:01:24 +0000 Files and hashes: 1: its62HX3YlxjkjZZ8UKVjbeHijI.crl (hash: dDL6LcC//ng1EAGMl7262oqZ46WiXFA+FMksN17tvQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.crl rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:4f:ba:87:f7:be:df:72:da:d8:4d:ec:19:1f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8adb3ad875f7625c63923659f142958db7878a32 Validity Not Before: Dec 6 19:01:24 2025 GMT Not After : Dec 7 19:01:24 2025 GMT Subject: CN=0009ea95ebcb85e8f444a71dcc43b255d6f44d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:17:76:a4:b4:9f:59:55:b7:5f:82:76:55:18: 7c:9c:6e:4a:67:86:11:fc:a3:29:01:16:0c:ae:4a: 4f:77:d5:3b:b3:f3:af:c0:39:d6:60:d6:fc:8f:ec: 7b:32:4d:54:c3:1a:76:57:61:80:f2:e9:c0:04:a9: 68:fb:06:6d:15:aa:76:e7:d7:87:4a:f0:de:1d:81: 4a:d5:9f:ed:35:21:3c:97:54:85:76:ea:88:01:ed: a7:ea:a5:3c:58:6c:98:2c:dd:f1:27:43:2b:75:b7: de:f2:58:7c:06:dc:d8:9b:08:46:83:97:39:bc:d8: 2c:b6:d4:fb:f7:2f:26:eb:91:d4:48:fe:19:3f:6f: 20:5f:03:f7:d6:d3:4a:0d:77:56:8c:c6:8b:5c:08: d6:4a:03:a1:0f:bd:cb:10:ee:6f:c6:55:bb:ef:47: 29:c7:1f:2e:e3:62:b8:cc:12:4f:3f:ec:9b:1f:ca: ee:64:4c:05:aa:0f:f8:ca:89:5e:61:0a:6a:52:93: cc:52:69:33:50:7e:d0:dc:0e:fe:e1:d9:51:34:ad: cc:ee:f5:86:b4:01:c9:c5:f4:c6:b3:a3:b5:78:9c: 70:ea:4b:c9:63:c1:a0:39:49:6d:26:3c:d7:87:a2: e2:8e:b4:db:da:4d:7b:99:75:99:70:36:74:a3:41: a3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:09:EA:95:EB:CB:85:E8:F4:44:A7:1D:CC:43:B2:55:D6:F4:4D:34 X509v3 Authority Key Identifier: keyid:8A:DB:3A:D8:75:F7:62:5C:63:92:36:59:F1:42:95:8D:B7:87:8A:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:f4:93:a5:c5:a3:66:74:e4:e3:ad:38:c2:37:bc:eb:38:6a: b9:a8:ce:c3:0b:d5:77:15:cd:5a:57:64:b9:c4:74:b8:80:48: a3:6c:2d:1e:8b:04:39:bb:3a:30:c5:2c:ee:5f:03:32:ef:28: ed:24:ee:22:1f:a0:de:75:d5:6d:9b:fd:22:8a:9a:39:e0:c5: 4b:37:5b:b2:0d:69:11:28:e3:e1:d4:36:57:03:d1:44:49:14: d8:ac:90:44:07:65:dc:f2:95:7b:cb:e6:dc:2a:5a:86:17:58: e8:6f:9b:f0:93:3c:79:40:34:c0:28:29:1c:dd:50:89:8f:e7: c4:53:14:3f:e3:9d:59:8b:29:28:4d:01:74:e8:ab:c5:61:83: 4a:49:17:94:9b:e8:68:3a:ad:87:0a:3f:fe:6f:62:a8:eb:95: 17:50:1f:8a:32:54:31:97:95:5c:b8:a9:7b:d5:bc:88:4d:44: 93:4d:30:0c:f6:e6:a8:5e:4a:ed:a1:fa:5c:58:80:33:8b:38: 37:54:b5:d6:60:51:2b:06:81:44:3b:50:92:16:07:e2:75:46: 67:39:cb:c5:2f:8c:c1:a6:03:1d:c2:20:8f:14:63:c6:55:a9: 2a:e0:2d:44:60:6b:15:ec:34:4d:b2:08:47:a5:6f:2a:6d:1b: 8e:3b:0b:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Ck+6h/e+33La2E3sGR+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZGIzYWQ4NzVmNzYyNWM2MzkyMzY1OWYxNDI5NThkYjc4 NzhhMzIwHhcNMjUxMjA2MTkwMTI0WhcNMjUxMjA3MTkwMTI0WjAzMTEwLwYDVQQD EygwMDA5ZWE5NWViY2I4NWU4ZjQ0NGE3MWRjYzQzYjI1NWQ2ZjQ0ZDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxd2pLSfWVW3X4J2VRh8nG5KZ4YR /KMpARYMrkpPd9U7s/OvwDnWYNb8j+x7Mk1Uwxp2V2GA8unABKlo+wZtFap259eH SvDeHYFK1Z/tNSE8l1SFduqIAe2n6qU8WGyYLN3xJ0Mrdbfe8lh8BtzYmwhGg5c5 vNgsttT79y8m65HUSP4ZP28gXwP31tNKDXdWjMaLXAjWSgOhD73LEO5vxlW770cp xx8u42K4zBJPP+ybH8ruZEwFqg/4yoleYQpqUpPMUmkzUH7Q3A7+4dlRNK3M7vWG tAHJxfTGs6O1eJxw6kvJY8GgOUltJjzXh6LijrTb2k17mXWZcDZ0o0GjBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAJ6pXry4Xo9ESnHcxDslXW9E00MB8GA1UdIwQY MBaAFIrbOth192JcY5I2WfFClY23h4oyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRzNjJIWDNZbHhqa2paWjhVS1ZqYmVIaWpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xODdmMGItNGJlOS00NzRhLWI0MzUt ODg1YmM1NGRjZTYyLzEvaXRzNjJIWDNZbHhqa2paWjhVS1ZqYmVIaWpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8xODdmMGItNGJlOS00NzRhLWI0MzUtODg1YmM1NGRjZTYy LzEvaXRzNjJIWDNZbHhqa2paWjhVS1ZqYmVIaWpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKfSTpcWj ZnTk4604wje86zhquajOwwvVdxXNWldkucR0uIBIo2wtHosEObs6MMUs7l8DMu8o 7STuIh+g3nXVbZv9IoqaOeDFSzdbsg1pESjj4dQ2VwPRREkU2KyQRAdl3PKVe8vm 3CpahhdY6G+b8JM8eUA0wCgpHN1QiY/nxFMUP+OdWYspKE0BdOirxWGDSkkXlJvo aDqthwo//m9iqOuVF1AfijJUMZeVXLipe9W8iE1Ek00wDPbmqF5K7aH6XFiAM4s4 N1S11mBRKwaBRDtQkhYH4nVGZznLxS+MwaYDHcIgjxRjxlWpKuAtRGBrFew0TbII R6VvKm0bjjsLQw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:25:11 2025 by rpki-client