This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft File: 63-M4hWMPflQU5Fx2exS39UVY-Q.mft (raw, json) Hash identifier: zfzvbKeO5SPtEvGb07gWSxr7Dbev/TIYd+AhiHfNwqE= Subject key identifier: 69:55:78:91:8B:F1:25:A0:D7:95:41:82:E7:B5:94:A2:A4:14:3D:A4 Authority key identifier: EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4 Certificate issuer: /CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4 Certificate serial: 019B6B7C366A72097B6553B24F81CB79A183 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft Manifest number: 05FB Signing time: Mon 29 Dec 2025 19:01:01 +0000 Manifest this update: Mon 29 Dec 2025 19:01:01 +0000 Manifest next update: Tue 30 Dec 2025 19:01:01 +0000 Files and hashes: 1: 63-M4hWMPflQU5Fx2exS39UVY-Q.crl (hash: djE84pZJptQCPWvN1blAc4buqywcoqpzjIKOpUujX4o=) 2: DPTDWBpdKrc9YDbO3iE7iMsVeAQ.roa (hash: fxH7j3HYZ2DZdpLTyIS3kM2MJPIcdJrQ7M2HUQ6LWKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:7c:36:6a:72:09:7b:65:53:b2:4f:81:cb:79:a1:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4 Validity Not Before: Dec 29 19:01:01 2025 GMT Not After : Dec 30 19:01:01 2025 GMT Subject: CN=695578918bf125a0d7954182e7b594a2a4143da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0e:8e:7d:94:ad:4a:f5:29:df:dd:48:0c:fa: cf:a4:80:1a:62:5d:6f:f1:0d:48:2e:b9:f9:c2:ce: 1a:4c:ad:a8:48:5d:0a:18:9d:36:e5:21:d3:fa:2d: 27:5b:22:c3:26:7a:d2:db:fc:0e:8c:ee:15:6b:92: 47:08:ee:8f:1d:4f:54:3f:40:a5:b4:3a:9d:df:64: 48:a2:34:3a:ec:5a:5e:ab:56:15:36:50:2e:f7:77: a9:0e:64:d2:a7:3f:c1:ab:34:74:38:93:32:ad:f3: 16:2b:0e:0e:90:6f:23:6f:5a:fa:d1:bd:fd:dd:3e: e1:48:b5:1a:59:cb:02:15:52:0d:1c:d4:8c:48:68: 1d:c7:bf:3d:f2:a0:47:c3:1d:6d:c5:da:05:73:8e: 4e:ab:80:76:52:9c:10:18:95:c8:a4:ea:d4:30:5f: 7c:75:db:48:1d:74:f7:f7:d2:8a:82:81:7a:af:bf: 4d:9b:4f:0e:b9:f6:7c:d5:f4:3a:9e:85:55:b9:f0: ac:1a:42:88:90:3c:a5:19:3c:1d:07:cb:be:3c:8d: 45:6b:5a:70:7a:5d:c5:ff:7d:3f:66:05:9b:75:7d: 73:3e:49:29:a5:f6:a7:27:76:e2:05:ff:d5:54:d9: 71:40:6a:0b:78:fa:01:dd:c3:37:f8:b7:da:9c:45: 8c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:55:78:91:8B:F1:25:A0:D7:95:41:82:E7:B5:94:A2:A4:14:3D:A4 X509v3 Authority Key Identifier: keyid:EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:cc:a7:ee:fa:62:7d:54:e7:fd:c1:bf:ab:22:9b:36:cd:3b: a0:e8:00:c9:8f:66:5c:eb:7d:28:27:e2:9b:4f:32:09:f2:41: cb:64:30:b3:58:61:79:f3:b9:ff:7f:e4:a2:63:ca:bb:50:90: c1:fe:c1:b9:af:72:40:42:e0:d0:bc:79:26:93:0c:bb:6e:8a: 4a:5c:02:7c:87:9d:87:46:ac:cf:ef:8a:ff:40:44:18:34:a1: c4:05:52:16:10:c8:86:82:cf:d8:30:3b:8c:83:d4:20:5b:88: 8c:b9:ff:3d:84:cf:6d:b4:33:00:f7:b9:7e:21:ae:9a:89:a3: fe:2a:ef:f2:e8:11:d0:fc:3d:bd:99:a7:48:f6:f8:09:ce:c0: cc:e9:0d:34:78:2c:e5:ed:39:6b:b8:b6:9a:1c:a8:9c:93:71: cf:2e:62:ba:40:a1:73:6f:22:f7:4a:20:41:bc:ea:3e:b2:ba: 26:ac:1e:51:75:36:60:85:a3:51:6f:91:3b:7a:5c:7b:6c:64: be:99:74:ee:8b:3f:df:c7:18:a2:d5:a8:27:34:88:9f:b2:51: 0d:61:e9:4b:45:15:2d:ad:89:2f:d3:84:b4:57:7f:5e:b9:41: eb:c4:05:be:da:98:62:1a:c3:38:09:0a:cc:c6:c1:18:d6:b6: d2:b1:a6:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrfDZqcgl7ZVOyT4HLeaGDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViN2Y4Y2UyMTU4YzNkZjk1MDUzOTE3MWQ5ZWM1MmRmZDUx NTYzZTQwHhcNMjUxMjI5MTkwMTAxWhcNMjUxMjMwMTkwMTAxWjAzMTEwLwYDVQQD Eyg2OTU1Nzg5MThiZjEyNWEwZDc5NTQxODJlN2I1OTRhMmE0MTQzZGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA6OfZStSvUp391IDPrPpIAaYl1v 8Q1ILrn5ws4aTK2oSF0KGJ025SHT+i0nWyLDJnrS2/wOjO4Va5JHCO6PHU9UP0Cl tDqd32RIojQ67Fpeq1YVNlAu93epDmTSpz/BqzR0OJMyrfMWKw4OkG8jb1r60b39 3T7hSLUaWcsCFVINHNSMSGgdx7898qBHwx1txdoFc45Oq4B2UpwQGJXIpOrUMF98 ddtIHXT399KKgoF6r79Nm08OufZ81fQ6noVVufCsGkKIkDylGTwdB8u+PI1Fa1pw el3F/30/ZgWbdX1zPkkppfanJ3biBf/VVNlxQGoLePoB3cM3+LfanEWM0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlVeJGL8SWg15VBgue1lKKkFD2kMB8GA1UdIwQY MBaAFOt/jOIVjD35UFORcdnsUt/VFWPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjMtTTRoV01QZmxRVTVGeDJleFMzOVVWWS1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wYjIxNDMtOTZlOS00M2QzLTg3OGQt MzY2OGYwMDA4NjQ4LzEvNjMtTTRoV01QZmxRVTVGeDJleFMzOVVWWS1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8wYjIxNDMtOTZlOS00M2QzLTg3OGQtMzY2OGYwMDA4NjQ4 LzEvNjMtTTRoV01QZmxRVTVGeDJleFMzOVVWWS1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacyn7vpi fVTn/cG/qyKbNs07oOgAyY9mXOt9KCfim08yCfJBy2Qws1hhefO5/3/komPKu1CQ wf7Bua9yQELg0Lx5JpMMu26KSlwCfIedh0asz++K/0BEGDShxAVSFhDIhoLP2DA7 jIPUIFuIjLn/PYTPbbQzAPe5fiGumomj/irv8ugR0Pw9vZmnSPb4Cc7AzOkNNHgs 5e05a7i2mhyonJNxzy5iukChc28i90ogQbzqPrK6JqweUXU2YIWjUW+RO3pce2xk vpl07os/38cYotWoJzSIn7JRDWHpS0UVLa2JL9OEtFd/XrlB68QFvtqYYhrDOAkK zMbBGNa20rGm/w== -----END CERTIFICATE-----Generated at Tue Dec 30 00:21:31 2025 by rpki-client