This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft File: 63yFxELMq3Xizm3inbX9APMmdJ0.mft (raw, json) Hash identifier: U1UQ4wduhPK4CJvcN9o/Jg5bBl5G0LgqBNrQmokntp4= Subject key identifier: 51:7D:60:43:13:4D:AE:9A:A1:28:2E:88:94:A9:3B:A2:EB:D4:CD:60 Authority key identifier: EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D Certificate issuer: /CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d Certificate serial: 019B337B3DBC48BF85ED207977FEFBAD1094 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft Manifest number: 128B Signing time: Thu 18 Dec 2025 22:01:13 +0000 Manifest this update: Thu 18 Dec 2025 22:01:13 +0000 Manifest next update: Fri 19 Dec 2025 22:01:13 +0000 Files and hashes: 1: 63yFxELMq3Xizm3inbX9APMmdJ0.crl (hash: f238EYFuxMe7+jPMliLxGsNo0b+wxPMg2fNDDnu9EBc=) 2: fA_2P2jt8DuWvjRgi0qDLxLu8Uw.roa (hash: SzZb8wCnKFHeHDxJHKqTuj/wLWWWWYz/mnokDgrqWtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:3d:bc:48:bf:85:ed:20:79:77:fe:fb:ad:10:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d Validity Not Before: Dec 18 22:01:13 2025 GMT Not After : Dec 19 22:01:13 2025 GMT Subject: CN=517d6043134dae9aa1282e8894a93ba2ebd4cd60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:12:6e:ff:a9:4f:68:0a:07:b6:6f:35:e0:73: ef:08:d8:0b:91:f2:12:db:63:a5:2b:e2:4c:44:89: 3f:f9:6a:3c:5b:ae:d5:28:e6:f6:2b:c1:b7:9c:bb: f3:47:ad:c6:c6:bc:f7:02:5b:de:3f:44:e1:44:88: a5:0b:2c:8b:01:32:dc:f1:8a:56:32:ba:69:c3:ad: 4c:fb:b6:dc:85:9b:ec:d4:59:3d:c8:d9:be:2d:db: 0d:3b:f8:5e:4b:b7:94:54:21:6e:7b:32:55:66:17: 21:a2:a8:c5:8f:a9:95:5f:6e:d0:8b:69:04:6c:df: c9:81:92:00:15:c5:97:94:2c:68:19:34:8d:fe:41: 0d:74:f2:94:1f:c7:5e:e7:63:19:3d:6b:4e:28:08: f0:35:84:74:b8:0b:f0:2a:50:ff:f1:55:7f:00:06: eb:64:53:a5:6e:b9:c2:13:1f:8a:7c:83:67:91:8d: 81:60:cb:76:4f:0e:f9:d1:a0:71:0f:d5:f5:ca:1c: 7a:0b:16:67:b2:ab:22:86:3c:6d:10:81:34:79:e6: 1d:00:84:72:61:17:a2:e7:e6:cd:de:b4:2b:e9:92: 7c:b6:ff:8a:5f:a8:44:59:9b:1c:66:f2:37:a0:ca: 3a:ba:4f:c9:79:53:ea:49:2b:ab:bd:17:76:b7:5a: 20:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7D:60:43:13:4D:AE:9A:A1:28:2E:88:94:A9:3B:A2:EB:D4:CD:60 X509v3 Authority Key Identifier: keyid:EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:7a:c5:4c:f9:a6:75:c3:fd:bc:33:50:b5:db:43:53:a8:d1: 4a:7d:15:71:e4:43:35:8e:d0:06:ed:a5:b5:3e:ee:be:ba:8f: 51:ed:f0:68:8a:e2:fe:25:82:c5:75:de:3a:66:90:70:03:ca: ea:cd:26:47:01:a9:5e:aa:3f:20:9a:b0:4b:52:e4:6b:6e:88: c9:00:19:23:6a:84:5f:9f:3e:e4:76:2b:4c:dd:0d:00:3e:ab: 43:14:f5:85:a1:c3:60:b8:64:bf:31:1a:67:bf:e6:4e:3c:5d: ed:1c:ac:0c:3a:39:c3:9b:f9:d1:aa:be:cf:b3:c1:5e:3e:aa: dc:88:c9:2c:92:b5:f1:a5:48:63:d9:5b:c7:37:95:85:68:84: 98:00:bd:06:74:09:9c:fb:d8:7d:45:0b:0c:6b:d4:45:1b:41: 60:80:5c:7c:ff:d4:10:cb:9a:15:48:a5:2a:cb:db:02:42:a6: d4:70:28:fc:01:30:ab:c8:20:e9:be:a9:b8:a6:f4:de:e4:73: 99:eb:36:6d:69:f7:84:da:85:c5:a3:18:3b:5c:c2:3a:f6:1b: 6a:37:88:0f:f8:e4:7f:a9:39:b5:2c:b0:d3:11:68:d9:2b:48: d3:a0:6a:a7:66:bf:a3:7f:6c:40:d3:51:09:d2:ad:7d:0c:5f: 05:a9:54:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszez28SL+F7SB5d/77rRCUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViN2M4NWM0NDJjY2FiNzVlMmNlNmRlMjlkYjVmZDAwZjMy Njc0OWQwHhcNMjUxMjE4MjIwMTEzWhcNMjUxMjE5MjIwMTEzWjAzMTEwLwYDVQQD Eyg1MTdkNjA0MzEzNGRhZTlhYTEyODJlODg5NGE5M2JhMmViZDRjZDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxJu/6lPaAoHtm814HPvCNgLkfIS 22OlK+JMRIk/+Wo8W67VKOb2K8G3nLvzR63Gxrz3AlveP0ThRIilCyyLATLc8YpW Mrppw61M+7bchZvs1Fk9yNm+LdsNO/heS7eUVCFuezJVZhchoqjFj6mVX27Qi2kE bN/JgZIAFcWXlCxoGTSN/kENdPKUH8de52MZPWtOKAjwNYR0uAvwKlD/8VV/AAbr ZFOlbrnCEx+KfINnkY2BYMt2Tw750aBxD9X1yhx6CxZnsqsihjxtEIE0eeYdAIRy YRei5+bN3rQr6ZJ8tv+KX6hEWZscZvI3oMo6uk/JeVPqSSurvRd2t1ogXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFF9YEMTTa6aoSguiJSpO6Lr1M1gMB8GA1UdIwQY MBaAFOt8hcRCzKt14s5t4p21/QDzJnSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjN5RnhFTE1xM1hpem0zaW5iWDlBUE1tZEowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83MmExNjgtZGMxYy00NmY0LWIzMWMt NGU2NTlkMmJlNjU0LzEvNjN5RnhFTE1xM1hpem0zaW5iWDlBUE1tZEowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83MmExNjgtZGMxYy00NmY0LWIzMWMtNGU2NTlkMmJlNjU0 LzEvNjN5RnhFTE1xM1hpem0zaW5iWDlBUE1tZEowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs3rFTPmm dcP9vDNQtdtDU6jRSn0VceRDNY7QBu2ltT7uvrqPUe3waIri/iWCxXXeOmaQcAPK 6s0mRwGpXqo/IJqwS1Lka26IyQAZI2qEX58+5HYrTN0NAD6rQxT1haHDYLhkvzEa Z7/mTjxd7RysDDo5w5v50aq+z7PBXj6q3IjJLJK18aVIY9lbxzeVhWiEmAC9BnQJ nPvYfUULDGvURRtBYIBcfP/UEMuaFUilKsvbAkKm1HAo/AEwq8gg6b6puKb03uRz mes2bWn3hNqFxaMYO1zCOvYbajeID/jkf6k5tSyw0xFo2StI06Bqp2a/o39sQNNR CdKtfQxfBalUVA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:40:01 2025 by rpki-client