This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft File: 63yFxELMq3Xizm3inbX9APMmdJ0.mft (raw, json) Hash identifier: +Uyv6ys0h4/cJAMh+OFsov6xh+Cpn+9B+l0Q7r7svE4= Subject key identifier: 8D:A7:89:72:D1:AF:91:04:49:36:0E:37:00:37:B2:C3:6A:EB:08:15 Authority key identifier: EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D Certificate issuer: /CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d Certificate serial: 019B63C30414C9884841A23A3975EF43286D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft Manifest number: 12A4 Signing time: Sun 28 Dec 2025 07:01:23 +0000 Manifest this update: Sun 28 Dec 2025 07:01:23 +0000 Manifest next update: Mon 29 Dec 2025 07:01:23 +0000 Files and hashes: 1: 63yFxELMq3Xizm3inbX9APMmdJ0.crl (hash: 6J4i3UIZ/y0J7fUIeBbGe17bPxDeik4N0QzLzD5UTJw=) 2: fA_2P2jt8DuWvjRgi0qDLxLu8Uw.roa (hash: SzZb8wCnKFHeHDxJHKqTuj/wLWWWWYz/mnokDgrqWtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:c3:04:14:c9:88:48:41:a2:3a:39:75:ef:43:28:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d Validity Not Before: Dec 28 07:01:23 2025 GMT Not After : Dec 29 07:01:23 2025 GMT Subject: CN=8da78972d1af910449360e370037b2c36aeb0815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:26:34:3e:41:d6:9b:8d:47:c1:4e:6f:bc:b6: 3d:0d:cb:ed:ba:0d:b3:7d:cf:d1:82:57:ce:78:55: db:99:1c:f5:ff:84:04:96:04:92:f8:bd:40:49:61: fd:5f:02:29:87:54:1f:50:24:79:6e:c7:50:43:e7: 80:2a:d5:f5:ce:3a:10:5f:a5:4b:b2:15:b4:5d:bc: 34:36:8c:56:7a:1a:aa:2f:b5:07:d3:97:f9:80:25: 2e:16:97:33:50:ed:4d:a1:a7:f4:74:ac:d8:34:6d: 76:84:61:0f:31:9a:1f:08:27:f0:96:41:82:5d:d3: a1:13:eb:19:ca:cc:29:ba:cd:3f:b7:ba:51:02:a0: b9:8a:3c:d2:11:a6:9c:8e:5c:c9:44:34:91:ae:47: 98:0e:7c:a7:43:08:93:39:ae:30:d8:ea:67:59:19: b0:ac:3f:a3:19:c0:db:1d:81:ee:94:13:a6:4c:af: ef:62:61:3c:b3:0a:ab:ae:d5:d0:5b:05:b1:1c:41: e8:9a:df:a9:5f:d7:26:e3:cd:47:de:e3:f0:89:f3: 25:6b:ad:cc:df:5c:7f:9e:93:69:7a:7f:86:b2:35: c4:a5:14:19:dc:c1:bc:ed:ed:29:d7:92:37:44:d5: 1f:af:9d:67:f5:7a:5f:35:54:6e:f3:90:bb:75:b3: 21:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A7:89:72:D1:AF:91:04:49:36:0E:37:00:37:B2:C3:6A:EB:08:15 X509v3 Authority Key Identifier: keyid:EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ed:6d:90:ba:e0:6b:d4:1f:fa:2b:6f:c8:13:05:ff:83:d8: 95:da:4e:3f:a4:e8:db:20:ea:dc:ba:2f:d7:0a:66:d8:72:d6: fa:7b:3f:4e:4a:94:6a:4c:54:2b:c3:45:89:7d:91:e5:3a:9f: c7:37:2b:23:2b:8a:85:7f:3d:9b:0f:ee:70:16:c7:00:d1:d7: 79:3f:94:de:28:ca:ea:f6:e3:1b:53:b3:bf:04:54:ee:55:6f: 88:36:01:45:c1:2d:dc:48:ae:01:e9:34:5a:c4:3e:ab:89:d8: f2:06:fa:04:4f:fc:8f:f2:b4:a0:d6:f8:58:41:b1:d8:5f:e5: 80:f4:bf:45:59:8c:72:52:f2:65:ac:ba:9f:c2:9c:5c:e3:5c: 31:75:e7:4c:67:b3:ce:8e:3e:d2:55:87:73:e8:4c:c1:4b:38: c6:fd:56:4b:59:5a:e0:b4:a8:c1:85:a7:76:31:9b:fc:d1:4a: e1:29:11:dc:77:7c:cc:a5:d2:8c:9a:0d:7b:32:07:35:e4:64: 9c:e9:ac:cb:1c:d3:97:65:b2:27:9c:3b:98:2c:61:ee:cb:e9: 65:2c:0c:f1:1e:c5:6a:5a:c5:c4:f2:11:bb:70:72:5d:4a:46: 93:a0:27:93:00:79:5e:33:e5:47:e9:0f:d3:6d:fc:d8:63:b4: 85:fd:46:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjwwQUyYhIQaI6OXXvQyhtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViN2M4NWM0NDJjY2FiNzVlMmNlNmRlMjlkYjVmZDAwZjMy Njc0OWQwHhcNMjUxMjI4MDcwMTIzWhcNMjUxMjI5MDcwMTIzWjAzMTEwLwYDVQQD Eyg4ZGE3ODk3MmQxYWY5MTA0NDkzNjBlMzcwMDM3YjJjMzZhZWIwODE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSY0PkHWm41HwU5vvLY9Dcvtug2z fc/RglfOeFXbmRz1/4QElgSS+L1ASWH9XwIph1QfUCR5bsdQQ+eAKtX1zjoQX6VL shW0Xbw0NoxWehqqL7UH05f5gCUuFpczUO1Noaf0dKzYNG12hGEPMZofCCfwlkGC XdOhE+sZyswpus0/t7pRAqC5ijzSEaacjlzJRDSRrkeYDnynQwiTOa4w2OpnWRmw rD+jGcDbHYHulBOmTK/vYmE8swqrrtXQWwWxHEHomt+pX9cm481H3uPwifMla63M 31x/npNpen+GsjXEpRQZ3MG87e0p15I3RNUfr51n9XpfNVRu85C7dbMhDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2niXLRr5EESTYONwA3ssNq6wgVMB8GA1UdIwQY MBaAFOt8hcRCzKt14s5t4p21/QDzJnSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjN5RnhFTE1xM1hpem0zaW5iWDlBUE1tZEowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83MmExNjgtZGMxYy00NmY0LWIzMWMt NGU2NTlkMmJlNjU0LzEvNjN5RnhFTE1xM1hpem0zaW5iWDlBUE1tZEowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83MmExNjgtZGMxYy00NmY0LWIzMWMtNGU2NTlkMmJlNjU0 LzEvNjN5RnhFTE1xM1hpem0zaW5iWDlBUE1tZEowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAde1tkLrg a9Qf+itvyBMF/4PYldpOP6To2yDq3Lov1wpm2HLW+ns/TkqUakxUK8NFiX2R5Tqf xzcrIyuKhX89mw/ucBbHANHXeT+U3ijK6vbjG1OzvwRU7lVviDYBRcEt3EiuAek0 WsQ+q4nY8gb6BE/8j/K0oNb4WEGx2F/lgPS/RVmMclLyZay6n8KcXONcMXXnTGez zo4+0lWHc+hMwUs4xv1WS1la4LSowYWndjGb/NFK4SkR3Hd8zKXSjJoNezIHNeRk nOmsyxzTl2WyJ5w7mCxh7svpZSwM8R7FalrFxPIRu3ByXUpGk6AnkwB5XjPlR+kP 02382GO0hf1GaA== -----END CERTIFICATE-----Generated at Sun Dec 28 09:52:35 2025 by rpki-client