This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft File: 62eoQOQaxm-PNZzL1lNUyRcEK78.mft (raw, json) Hash identifier: /n3YW4V2bFh70V6Vt8ZDpIBwFvxVmeRyUEtkyvrElEk= Subject key identifier: 1D:45:17:55:0E:1B:04:9B:B6:D2:DF:8C:22:20:39:87:C6:64:2F:DA Authority key identifier: EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF Certificate issuer: /CN=eb67a840e41ac66f8f359ccbd65354c917042bbf Certificate serial: 019AF5783C765C7F8E7106C64DCDA64BEAAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft Manifest number: 0B91 Signing time: Sat 06 Dec 2025 21:01:28 +0000 Manifest this update: Sat 06 Dec 2025 21:01:28 +0000 Manifest next update: Sun 07 Dec 2025 21:01:28 +0000 Files and hashes: 1: 62eoQOQaxm-PNZzL1lNUyRcEK78.crl (hash: EzFPRuFrlAlUPgp7kFy3iPrrfDzgGZEK3hggV8DkNxM=) 2: ydc0mYwR1Dzs-G0ezBD3ZjOvohc.roa (hash: uyL4dK+GxQJBMXh9UYIbcUhltwwIoPW7biUU7zD77zg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:3c:76:5c:7f:8e:71:06:c6:4d:cd:a6:4b:ea:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb67a840e41ac66f8f359ccbd65354c917042bbf Validity Not Before: Dec 6 21:01:28 2025 GMT Not After : Dec 7 21:01:28 2025 GMT Subject: CN=1d4517550e1b049bb6d2df8c22203987c6642fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e6:21:74:a3:bf:ff:13:95:4c:e3:73:35:44: a3:b2:83:bf:68:e5:0c:aa:59:a9:ee:86:c6:49:36: 82:5c:0a:f8:77:ee:d5:9d:4c:eb:93:4c:58:61:71: ae:1f:2d:dd:43:65:e3:b5:7f:5f:80:13:ff:b5:c5: 8f:74:f8:e7:62:dc:07:11:de:fb:aa:48:d6:d7:e2: 6d:ff:e4:0f:ee:69:6d:9d:75:c2:33:4c:06:d0:0d: 21:7b:b7:f5:51:b7:75:9a:b9:b7:44:9a:e6:fd:80: b7:b1:db:bd:f1:7c:5c:8a:53:70:12:50:41:69:d4: e5:87:ea:a0:fc:29:2b:7d:e9:9c:18:2e:c9:b8:d3: 42:2c:f6:d7:02:6e:ca:b1:30:9f:d0:bb:c4:52:2b: 94:d8:42:a8:65:71:c4:9c:c1:ec:d2:9f:1c:c7:73: cc:c0:fc:ab:f0:29:7e:9e:cc:c8:9b:48:8c:84:23: af:4e:b4:2b:13:98:82:79:e3:54:39:e2:14:a9:b7: f4:f1:98:3c:5c:30:c3:69:b8:bf:14:89:f9:fe:f6: bc:46:26:cd:99:69:32:10:4b:76:6f:c1:4f:f0:6f: d5:bf:ff:5e:df:13:7b:68:f8:ab:a0:ec:94:63:10: 31:43:c3:61:20:3c:72:92:a6:c2:0f:2c:ae:6c:45: bc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:45:17:55:0E:1B:04:9B:B6:D2:DF:8C:22:20:39:87:C6:64:2F:DA X509v3 Authority Key Identifier: keyid:EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:79:e8:66:94:1e:73:50:87:f0:63:d6:7c:81:e0:2f:3e:5b: a1:53:1a:53:a9:db:dc:0b:12:2c:d9:a7:ee:e9:3e:9a:d9:ed: 32:ba:df:49:ec:28:d6:90:69:d1:89:bc:32:b4:b4:4c:f7:e8: 22:b4:94:50:59:9c:0b:1e:1c:7d:07:f4:2f:da:e8:1b:bb:13: 3c:dd:79:41:71:c1:4d:31:07:91:3d:84:cc:f0:9c:49:64:6d: 55:fb:3f:99:9a:b1:03:60:d8:6a:d9:d5:64:19:16:ed:bc:72: 7f:76:20:03:8f:88:17:0a:f0:2e:15:4f:31:98:ef:0e:e6:55: 5f:3d:10:22:7f:fd:c4:af:35:eb:24:b9:ff:aa:04:78:f1:6c: 83:c4:fa:48:01:1e:d1:29:6c:a0:9a:c7:25:33:ab:85:ad:aa: 62:40:99:aa:e1:65:e1:5b:6f:18:06:e1:4f:6b:1e:79:8a:28: 5a:2d:2f:db:31:2e:ec:e0:8d:ed:27:63:e6:c2:cd:c6:41:a2: 53:a8:0b:13:d8:bf:c6:a4:9c:6f:f7:a7:9b:03:fa:8d:07:dd: c3:1a:09:a9:36:72:48:b0:a9:a3:9e:17:44:cd:87:45:21:87: b3:19:e2:5e:9e:ac:37:81:67:2b:b6:db:d3:28:31:f3:b4:3f: 53:a0:1b:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eDx2XH+OcQbGTc2mS+quMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNjdhODQwZTQxYWM2NmY4ZjM1OWNjYmQ2NTM1NGM5MTcw NDJiYmYwHhcNMjUxMjA2MjEwMTI4WhcNMjUxMjA3MjEwMTI4WjAzMTEwLwYDVQQD EygxZDQ1MTc1NTBlMWIwNDliYjZkMmRmOGMyMjIwMzk4N2M2NjQyZmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+YhdKO//xOVTONzNUSjsoO/aOUM qlmp7obGSTaCXAr4d+7VnUzrk0xYYXGuHy3dQ2XjtX9fgBP/tcWPdPjnYtwHEd77 qkjW1+Jt/+QP7mltnXXCM0wG0A0he7f1Ubd1mrm3RJrm/YC3sdu98XxcilNwElBB adTlh+qg/CkrfemcGC7JuNNCLPbXAm7KsTCf0LvEUiuU2EKoZXHEnMHs0p8cx3PM wPyr8Cl+nszIm0iMhCOvTrQrE5iCeeNUOeIUqbf08Zg8XDDDabi/FIn5/va8RibN mWkyEEt2b8FP8G/Vv/9e3xN7aPiroOyUYxAxQ8NhIDxykqbCDyyubEW8owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1FF1UOGwSbttLfjCIgOYfGZC/aMB8GA1UdIwQY MBaAFOtnqEDkGsZvjzWcy9ZTVMkXBCu/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjJlb1FPUWF4bS1QTlp6TDFsTlV5UmNFSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wMzQwOTUtOTFlNS00MWIyLWE2YmMt MzRmY2M0MTg3MTQ0LzEvNjJlb1FPUWF4bS1QTlp6TDFsTlV5UmNFSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wMzQwOTUtOTFlNS00MWIyLWE2YmMtMzRmY2M0MTg3MTQ0 LzEvNjJlb1FPUWF4bS1QTlp6TDFsTlV5UmNFSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3noZpQe c1CH8GPWfIHgLz5boVMaU6nb3AsSLNmn7uk+mtntMrrfSewo1pBp0Ym8MrS0TPfo IrSUUFmcCx4cfQf0L9roG7sTPN15QXHBTTEHkT2EzPCcSWRtVfs/mZqxA2DYatnV ZBkW7bxyf3YgA4+IFwrwLhVPMZjvDuZVXz0QIn/9xK816yS5/6oEePFsg8T6SAEe 0SlsoJrHJTOrha2qYkCZquFl4VtvGAbhT2seeYooWi0v2zEu7OCN7Sdj5sLNxkGi U6gLE9i/xqScb/enmwP6jQfdwxoJqTZySLCpo54XRM2HRSGHsxniXp6sN4FnK7bb 0ygx87Q/U6Ab+Q== -----END CERTIFICATE-----Generated at Sun Dec 7 00:34:11 2025 by rpki-client