This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft File: 62eoQOQaxm-PNZzL1lNUyRcEK78.mft (raw, json) Hash identifier: YiXxX2LpTu/vVcKXIEvOVr9hEB/efmHKcs+sX/cTVJY= Subject key identifier: 1A:31:32:3A:A4:04:C6:C5:A6:5B:2E:A9:40:22:26:A9:57:A2:E0:6D Authority key identifier: EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF Certificate issuer: /CN=eb67a840e41ac66f8f359ccbd65354c917042bbf Certificate serial: 019B5FAF7A70C25E326CE3A16C41F4F4300E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft Manifest number: 0BC8 Signing time: Sat 27 Dec 2025 12:01:34 +0000 Manifest this update: Sat 27 Dec 2025 12:01:34 +0000 Manifest next update: Sun 28 Dec 2025 12:01:34 +0000 Files and hashes: 1: 62eoQOQaxm-PNZzL1lNUyRcEK78.crl (hash: 9Ml4Y1NzwbAZvPimAPP2XsFAArMNinwo1V4rjF73Xgo=) 2: ydc0mYwR1Dzs-G0ezBD3ZjOvohc.roa (hash: uyL4dK+GxQJBMXh9UYIbcUhltwwIoPW7biUU7zD77zg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 12:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:af:7a:70:c2:5e:32:6c:e3:a1:6c:41:f4:f4:30:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb67a840e41ac66f8f359ccbd65354c917042bbf Validity Not Before: Dec 27 12:01:34 2025 GMT Not After : Dec 28 12:01:34 2025 GMT Subject: CN=1a31323aa404c6c5a65b2ea9402226a957a2e06d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:56:21:c3:8f:1d:2e:46:a3:08:5a:ec:09:7e: 37:76:36:40:f8:60:31:8e:b9:94:ab:ca:a9:93:0b: f0:c7:50:57:56:6e:7c:69:38:0f:74:62:de:73:ab: 5c:5c:f7:f2:ed:59:9c:09:8a:b0:69:2f:4c:8a:51: db:70:cc:e3:bd:f5:40:70:ab:85:ed:d2:03:cb:4f: 21:2f:ae:65:b2:25:be:a3:c3:5b:ed:b1:bf:c1:29: df:c7:96:d6:1e:6d:e8:ae:5a:40:cc:8c:99:0f:aa: 15:8c:19:af:f7:70:fd:da:29:c2:32:71:29:61:5d: 7b:40:2f:42:17:3a:81:7c:e9:f9:44:2d:90:b9:31: 4a:08:ca:92:c0:10:e9:d0:07:1e:37:0c:9f:42:c1: c7:1b:72:15:9d:57:7a:9e:64:08:93:55:c6:5a:e4: 05:c5:4a:c4:ee:63:d3:39:f7:27:d6:4f:4c:f9:03: 4c:54:ce:2c:07:ac:5e:84:fe:47:36:f7:e9:bf:d2: 48:40:4a:37:a1:fc:76:c2:a4:cb:7c:55:35:3d:a9: d4:f2:31:c6:f0:58:20:56:9c:75:b0:e1:b0:05:90: 0e:1f:67:cd:e2:13:b6:de:78:c6:ff:b2:d9:63:41: 17:64:b4:8c:ce:11:3d:dc:51:ba:42:48:f8:dd:5f: 02:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:31:32:3A:A4:04:C6:C5:A6:5B:2E:A9:40:22:26:A9:57:A2:E0:6D X509v3 Authority Key Identifier: keyid:EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:96:15:dc:0f:2d:0d:a7:16:f3:9e:fc:e5:8a:b2:fb:17:30: ef:92:f2:d9:e2:31:3c:e9:7f:29:16:97:bc:7c:05:c5:51:0e: 24:03:ff:52:fa:c8:68:55:7a:48:55:73:48:12:9e:fb:60:69: 17:06:fa:3a:64:4d:4f:31:73:64:6d:a4:fa:8e:02:05:3a:48: 65:06:3a:1e:7c:04:20:67:68:0f:46:7b:34:a5:e6:51:30:5b: 72:c7:8d:05:dd:ea:57:f9:34:5f:c1:4d:74:94:40:b5:0e:b0: 2c:e5:39:f3:15:0b:09:fd:d5:04:0e:1f:99:6c:38:17:d5:64: 79:0c:c0:79:2b:2e:70:c4:ef:ed:ce:3e:73:70:84:31:0d:58: 88:67:a9:99:51:8e:b1:e7:3f:cf:f0:eb:90:b9:2c:c9:d4:4a: c6:32:d4:8f:14:d9:2d:0d:42:fd:31:29:bf:4f:65:58:b9:43: d0:c7:9f:36:a8:73:87:c3:38:85:60:77:48:72:13:ef:09:ea: de:4f:67:58:9a:1d:38:14:a4:8d:52:44:32:af:be:c5:8b:a6: 52:a6:fa:80:52:20:92:e3:d8:41:cd:14:bd:d7:27:02:a1:ac: a5:e0:a0:05:fa:fc:05:10:56:c1:23:6b:07:be:7a:77:6d:90: 68:ae:99:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfr3pwwl4ybOOhbEH09DAOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNjdhODQwZTQxYWM2NmY4ZjM1OWNjYmQ2NTM1NGM5MTcw NDJiYmYwHhcNMjUxMjI3MTIwMTM0WhcNMjUxMjI4MTIwMTM0WjAzMTEwLwYDVQQD EygxYTMxMzIzYWE0MDRjNmM1YTY1YjJlYTk0MDIyMjZhOTU3YTJlMDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VYhw48dLkajCFrsCX43djZA+GAx jrmUq8qpkwvwx1BXVm58aTgPdGLec6tcXPfy7VmcCYqwaS9MilHbcMzjvfVAcKuF 7dIDy08hL65lsiW+o8Nb7bG/wSnfx5bWHm3orlpAzIyZD6oVjBmv93D92inCMnEp YV17QC9CFzqBfOn5RC2QuTFKCMqSwBDp0AceNwyfQsHHG3IVnVd6nmQIk1XGWuQF xUrE7mPTOfcn1k9M+QNMVM4sB6xehP5HNvfpv9JIQEo3ofx2wqTLfFU1PanU8jHG 8FggVpx1sOGwBZAOH2fN4hO23njG/7LZY0EXZLSMzhE93FG6Qkj43V8ClQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoxMjqkBMbFplsuqUAiJqlXouBtMB8GA1UdIwQY MBaAFOtnqEDkGsZvjzWcy9ZTVMkXBCu/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjJlb1FPUWF4bS1QTlp6TDFsTlV5UmNFSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wMzQwOTUtOTFlNS00MWIyLWE2YmMt MzRmY2M0MTg3MTQ0LzEvNjJlb1FPUWF4bS1QTlp6TDFsTlV5UmNFSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wMzQwOTUtOTFlNS00MWIyLWE2YmMtMzRmY2M0MTg3MTQ0 LzEvNjJlb1FPUWF4bS1QTlp6TDFsTlV5UmNFSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJYV3A8t DacW85785Yqy+xcw75Ly2eIxPOl/KRaXvHwFxVEOJAP/UvrIaFV6SFVzSBKe+2Bp Fwb6OmRNTzFzZG2k+o4CBTpIZQY6HnwEIGdoD0Z7NKXmUTBbcseNBd3qV/k0X8FN dJRAtQ6wLOU58xULCf3VBA4fmWw4F9VkeQzAeSsucMTv7c4+c3CEMQ1YiGepmVGO sec/z/DrkLksydRKxjLUjxTZLQ1C/TEpv09lWLlD0MefNqhzh8M4hWB3SHIT7wnq 3k9nWJodOBSkjVJEMq++xYumUqb6gFIgkuPYQc0UvdcnAqGspeCgBfr8BRBWwSNr B756d22QaK6Z/A== -----END CERTIFICATE-----Generated at Sat Dec 27 19:27:58 2025 by rpki-client