This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft File: 63-M4hWMPflQU5Fx2exS39UVY-Q.mft (raw, json) Hash identifier: XpWlFHZ+D08CISTV+uWx9/Q0ss6H4AJMByWHWhvHUjg= Subject key identifier: 58:51:13:39:36:9E:EF:76:43:D4:91:D3:3D:30:7D:D2:EF:C8:34:44 Authority key identifier: EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4 Certificate issuer: /CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4 Certificate serial: 019AF1D23E59DB544065263C37861D9FDED3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft Manifest number: 05BC Signing time: Sat 06 Dec 2025 04:01:18 +0000 Manifest this update: Sat 06 Dec 2025 04:01:18 +0000 Manifest next update: Sun 07 Dec 2025 04:01:18 +0000 Files and hashes: 1: 63-M4hWMPflQU5Fx2exS39UVY-Q.crl (hash: X2a5M3HWo7ZFcvKisn25yDwGTDWZZEOvjClJ2vRQpoc=) 2: DPTDWBpdKrc9YDbO3iE7iMsVeAQ.roa (hash: fxH7j3HYZ2DZdpLTyIS3kM2MJPIcdJrQ7M2HUQ6LWKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3e:59:db:54:40:65:26:3c:37:86:1d:9f:de:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4 Validity Not Before: Dec 6 04:01:18 2025 GMT Not After : Dec 7 04:01:18 2025 GMT Subject: CN=58511339369eef7643d491d33d307dd2efc83444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:47:a2:2a:63:f9:34:cb:d2:6e:51:10:b5:6c: 98:9c:77:c5:ee:4f:41:6f:83:60:dc:8b:0f:72:c8: d3:fe:0d:51:78:52:31:f3:ca:fe:66:26:63:ea:bf: 6b:7b:44:fe:ff:b3:30:a4:5c:0d:cd:51:5d:e4:04: 4c:89:2e:da:44:68:1a:15:fa:4e:e8:5c:e4:f5:0e: d5:73:d1:92:2c:ea:4a:56:28:fb:e9:f1:27:c0:a1: c2:2a:eb:a9:e5:7b:c1:62:cb:eb:d8:10:be:ce:09: b9:1b:b0:13:ec:bb:a0:d0:f5:cd:5e:0f:1c:4f:cb: 4c:66:68:e5:df:a0:e7:0e:69:db:7b:36:da:d4:24: b3:cf:61:d7:dd:d2:f5:6a:7d:5b:63:80:e3:f0:21: ea:7c:fa:ff:29:4a:ca:fa:7f:69:c6:01:2a:2b:02: a9:45:84:40:57:48:51:50:96:fd:54:87:f0:f5:29: a3:d2:22:22:ec:53:78:de:3f:f7:83:b2:a7:22:ec: 8c:49:01:ca:29:84:26:e4:7b:7b:aa:06:53:30:4f: e5:95:7a:5a:a2:2e:15:c9:0c:c2:db:6a:46:68:9a: 7f:e1:bb:15:76:08:2e:f7:2c:a2:55:d4:12:ec:31: fe:21:12:63:47:8f:40:6d:f7:1f:54:94:b6:ba:ac: 55:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:51:13:39:36:9E:EF:76:43:D4:91:D3:3D:30:7D:D2:EF:C8:34:44 X509v3 Authority Key Identifier: keyid:EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:d6:fb:30:f5:b9:2d:b4:61:8f:32:4e:b3:a0:c5:7e:fa:03: 54:ed:ee:e4:44:8e:0b:d4:16:0e:c9:f2:4b:50:e0:4c:dc:61: 6b:f1:07:9a:e5:fb:97:82:cd:21:63:cb:57:5f:5a:29:f9:53: 92:ad:36:bf:27:8d:24:7f:29:dc:97:76:d6:d0:cd:0c:f4:09: 19:fc:83:4b:fa:c2:84:1a:35:e6:08:71:7e:93:54:cc:d1:3c: f6:56:b2:25:fb:2e:16:c4:69:84:f0:3e:8a:cf:d8:20:90:78: 20:46:fe:0c:1b:88:2a:f4:0e:a3:18:3e:3e:8c:17:e9:6e:00: cb:1f:49:c3:c8:2e:98:f8:81:95:49:2a:86:d0:23:42:c3:4f: 32:8c:78:f3:84:45:92:e0:77:5b:92:88:3d:40:be:3c:ae:3b: 54:e4:0a:a5:ac:bd:80:ae:8f:a2:7c:78:02:fb:0a:5b:c1:ab: c3:45:1f:f9:aa:fb:f0:81:3e:0b:ac:ce:d5:b0:c5:57:6b:5e: 66:65:0c:63:6c:e6:30:03:e4:58:cd:bd:90:d1:d7:ef:fa:56: 65:60:fa:86:9e:02:ca:2e:db:95:d0:de:6b:43:f8:fa:bb:fb: a6:f3:a8:72:af:68:a0:00:65:55:9f:53:9b:fc:a0:7a:d3:02: e2:0d:51:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0j5Z21RAZSY8N4Ydn97TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViN2Y4Y2UyMTU4YzNkZjk1MDUzOTE3MWQ5ZWM1MmRmZDUx NTYzZTQwHhcNMjUxMjA2MDQwMTE4WhcNMjUxMjA3MDQwMTE4WjAzMTEwLwYDVQQD Eyg1ODUxMTMzOTM2OWVlZjc2NDNkNDkxZDMzZDMwN2RkMmVmYzgzNDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEeiKmP5NMvSblEQtWyYnHfF7k9B b4Ng3IsPcsjT/g1ReFIx88r+ZiZj6r9re0T+/7MwpFwNzVFd5ARMiS7aRGgaFfpO 6Fzk9Q7Vc9GSLOpKVij76fEnwKHCKuup5XvBYsvr2BC+zgm5G7AT7Lug0PXNXg8c T8tMZmjl36DnDmnbezba1CSzz2HX3dL1an1bY4Dj8CHqfPr/KUrK+n9pxgEqKwKp RYRAV0hRUJb9VIfw9Smj0iIi7FN43j/3g7KnIuyMSQHKKYQm5Ht7qgZTME/llXpa oi4VyQzC22pGaJp/4bsVdggu9yyiVdQS7DH+IRJjR49AbfcfVJS2uqxVPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhREzk2nu92Q9SR0z0wfdLvyDREMB8GA1UdIwQY MBaAFOt/jOIVjD35UFORcdnsUt/VFWPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjMtTTRoV01QZmxRVTVGeDJleFMzOVVWWS1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wYjIxNDMtOTZlOS00M2QzLTg3OGQt MzY2OGYwMDA4NjQ4LzEvNjMtTTRoV01QZmxRVTVGeDJleFMzOVVWWS1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8wYjIxNDMtOTZlOS00M2QzLTg3OGQtMzY2OGYwMDA4NjQ4 LzEvNjMtTTRoV01QZmxRVTVGeDJleFMzOVVWWS1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkdb7MPW5 LbRhjzJOs6DFfvoDVO3u5ESOC9QWDsnyS1DgTNxha/EHmuX7l4LNIWPLV19aKflT kq02vyeNJH8p3Jd21tDNDPQJGfyDS/rChBo15ghxfpNUzNE89layJfsuFsRphPA+ is/YIJB4IEb+DBuIKvQOoxg+PowX6W4Ayx9Jw8gumPiBlUkqhtAjQsNPMox484RF kuB3W5KIPUC+PK47VOQKpay9gK6Ponx4AvsKW8Grw0Uf+ar78IE+C6zO1bDFV2te ZmUMY2zmMAPkWM29kNHX7/pWZWD6hp4Cyi7bldDea0P4+rv7pvOocq9ooABlVZ9T m/ygetMC4g1RFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:25:12 2025 by rpki-client