This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft File: 63yFxELMq3Xizm3inbX9APMmdJ0.mft (raw, json) Hash identifier: Kj7A8iIp76IPbeTQJYyZx73M2vwyyeNbcQFN32C1cpo= Subject key identifier: A9:D4:2B:94:A9:2C:C0:98:C5:18:64:56:84:44:34:C9:9E:E2:8A:E6 Authority key identifier: EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D Certificate issuer: /CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d Certificate serial: 019AF1D2287910CD76D6659FF12B94C8960C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft Manifest number: 1269 Signing time: Sat 06 Dec 2025 04:01:13 +0000 Manifest this update: Sat 06 Dec 2025 04:01:13 +0000 Manifest next update: Sun 07 Dec 2025 04:01:13 +0000 Files and hashes: 1: 63yFxELMq3Xizm3inbX9APMmdJ0.crl (hash: FEOg7C4iQ/JpxTpL31tBV9pInEAov2baCeEnLVNAwuQ=) 2: fA_2P2jt8DuWvjRgi0qDLxLu8Uw.roa (hash: SzZb8wCnKFHeHDxJHKqTuj/wLWWWWYz/mnokDgrqWtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:28:79:10:cd:76:d6:65:9f:f1:2b:94:c8:96:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d Validity Not Before: Dec 6 04:01:13 2025 GMT Not After : Dec 7 04:01:13 2025 GMT Subject: CN=a9d42b94a92cc098c5186456844434c99ee28ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fa:85:f7:e2:6a:0a:49:90:e4:4f:12:7d:1a: 29:02:0f:a6:ce:04:c2:0d:99:c9:bd:8d:0f:fb:d4: 71:72:1b:5c:43:f0:a5:1a:79:e3:36:21:22:67:d8: 17:90:7d:c0:1a:62:aa:4b:3d:a1:c7:e0:b9:0b:af: 7b:af:c9:fd:3e:74:16:5e:d4:53:31:29:15:ed:7f: db:2d:2f:5d:db:8e:ce:ea:df:73:a5:52:59:d9:57: 72:6d:b2:55:c3:58:30:a0:d4:76:da:cd:3c:0e:b7: f5:6b:7e:69:9a:13:26:c7:05:ba:fe:c7:23:36:02: 4b:8c:f6:71:9d:92:fe:12:13:93:23:95:e2:cf:f5: 5d:87:e9:65:78:e5:17:c1:63:05:12:b8:b4:8d:dd: ed:50:41:6f:06:df:53:35:c3:97:9a:d7:c2:e6:10: 11:61:04:4b:80:10:23:75:56:b4:e8:9c:ab:01:01: e1:bd:61:49:bd:91:a4:0c:e8:80:78:e0:c5:5d:ac: 2e:74:d2:d5:b6:c9:7b:96:bd:af:1b:e0:be:af:fd: 42:cc:e4:92:f4:d7:93:30:28:9f:15:da:33:ac:35: b5:99:2d:3b:c8:d5:57:74:22:02:b3:27:a1:b9:e6: 82:17:f0:82:9a:bc:a0:18:b9:e8:7a:fc:67:5c:9f: 1e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D4:2B:94:A9:2C:C0:98:C5:18:64:56:84:44:34:C9:9E:E2:8A:E6 X509v3 Authority Key Identifier: keyid:EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:2e:c0:47:34:e9:50:b6:da:4c:db:be:87:e5:6c:67:70:39: f7:22:cf:c1:a7:a1:a3:e5:1f:ee:a8:34:58:0c:08:81:f3:6b: 4d:43:d1:6d:48:52:ab:ea:ca:5a:48:3f:44:a0:4f:5a:7b:53: fb:30:7b:34:7a:fe:23:62:43:d2:af:ac:b5:fe:77:fa:34:44: aa:f7:fd:e8:57:9f:6f:b5:3e:fe:89:90:c8:03:4a:c9:92:b7: 5a:93:06:f0:de:5c:31:82:54:04:36:b4:4f:24:f7:36:6f:89: 1e:fb:84:d7:48:41:1a:a7:88:32:38:10:7b:93:1c:7e:97:23: e9:d8:c2:b0:45:08:83:fa:61:b4:28:fe:91:35:bf:65:35:f3: 79:6b:a6:7f:cd:f1:5d:c9:09:8f:76:b8:fb:20:ec:4d:00:22: 02:35:47:05:47:2e:77:b4:0d:ab:93:e9:54:fe:70:c4:85:05: 63:d7:3d:82:51:98:7f:56:9c:0e:d3:08:c5:06:00:46:18:43: 0a:61:66:34:f8:6d:58:7f:62:c5:4b:99:ba:79:fc:f3:21:4d: 0d:24:ba:42:e1:2c:6c:34:b5:94:57:5f:78:60:50:20:5e:86: be:8e:dc:8a:99:5a:25:e4:c7:a6:68:0b:c9:56:f4:e7:b8:42: 89:59:ca:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ih5EM121mWf8SuUyJYMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViN2M4NWM0NDJjY2FiNzVlMmNlNmRlMjlkYjVmZDAwZjMy Njc0OWQwHhcNMjUxMjA2MDQwMTEzWhcNMjUxMjA3MDQwMTEzWjAzMTEwLwYDVQQD EyhhOWQ0MmI5NGE5MmNjMDk4YzUxODY0NTY4NDQ0MzRjOTllZTI4YWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/qF9+JqCkmQ5E8SfRopAg+mzgTC DZnJvY0P+9RxchtcQ/ClGnnjNiEiZ9gXkH3AGmKqSz2hx+C5C697r8n9PnQWXtRT MSkV7X/bLS9d247O6t9zpVJZ2VdybbJVw1gwoNR22s08Drf1a35pmhMmxwW6/scj NgJLjPZxnZL+EhOTI5Xiz/Vdh+lleOUXwWMFEri0jd3tUEFvBt9TNcOXmtfC5hAR YQRLgBAjdVa06JyrAQHhvWFJvZGkDOiAeODFXawudNLVtsl7lr2vG+C+r/1CzOSS 9NeTMCifFdozrDW1mS07yNVXdCICsyehueaCF/CCmrygGLnoevxnXJ8e9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnUK5SpLMCYxRhkVoRENMme4ormMB8GA1UdIwQY MBaAFOt8hcRCzKt14s5t4p21/QDzJnSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjN5RnhFTE1xM1hpem0zaW5iWDlBUE1tZEowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83MmExNjgtZGMxYy00NmY0LWIzMWMt NGU2NTlkMmJlNjU0LzEvNjN5RnhFTE1xM1hpem0zaW5iWDlBUE1tZEowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83MmExNjgtZGMxYy00NmY0LWIzMWMtNGU2NTlkMmJlNjU0 LzEvNjN5RnhFTE1xM1hpem0zaW5iWDlBUE1tZEowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjy7ARzTp ULbaTNu+h+VsZ3A59yLPwaeho+Uf7qg0WAwIgfNrTUPRbUhSq+rKWkg/RKBPWntT +zB7NHr+I2JD0q+stf53+jREqvf96Fefb7U+/omQyANKyZK3WpMG8N5cMYJUBDa0 TyT3Nm+JHvuE10hBGqeIMjgQe5Mcfpcj6djCsEUIg/phtCj+kTW/ZTXzeWumf83x XckJj3a4+yDsTQAiAjVHBUcud7QNq5PpVP5wxIUFY9c9glGYf1acDtMIxQYARhhD CmFmNPhtWH9ixUuZunn88yFNDSS6QuEsbDS1lFdfeGBQIF6Gvo7ciplaJeTHpmgL yVb057hCiVnKQw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:29 2025 by rpki-client