This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft File: v62CMaRsZBx6swHXv77w3Ams1M4.mft (raw, json) Hash identifier: /RV+BZDVWuWLh3XrSR5vfCnqev6X+ZDlu6S9xoKxWz4= Subject key identifier: 4E:83:87:8A:45:61:24:5D:72:05:0E:5B:0C:DA:DE:6E:20:CA:93:EC Authority key identifier: BF:AD:82:31:A4:6C:64:1C:7A:B3:01:D7:BF:BE:F0:DC:09:AC:D4:CE Certificate issuer: /CN=bfad8231a46c641c7ab301d7bfbef0dc09acd4ce Certificate serial: 019B514E71A0F1C8B6BF7FCAD9EEC539E0EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft Manifest number: 1466 Signing time: Wed 24 Dec 2025 17:00:53 +0000 Manifest this update: Wed 24 Dec 2025 17:00:53 +0000 Manifest next update: Thu 25 Dec 2025 17:00:53 +0000 Files and hashes: 1: PVx9315HXPnPOTLeQcr5qcZngYo.roa (hash: kEXPY9i0jPlv+x61rf6B3m34sobHRCkgbuQLWEQLQ8s=) 2: v62CMaRsZBx6swHXv77w3Ams1M4.crl (hash: 6sftLFJubOu2TwfEacynx5UVx+/w1Qj1WWgO87NARUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:71:a0:f1:c8:b6:bf:7f:ca:d9:ee:c5:39:e0:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfad8231a46c641c7ab301d7bfbef0dc09acd4ce Validity Not Before: Dec 24 17:00:53 2025 GMT Not After : Dec 25 17:00:53 2025 GMT Subject: CN=4e83878a4561245d72050e5b0cdade6e20ca93ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ae:a1:11:cb:22:20:f5:8a:2c:f2:13:4f:b6: 43:08:8d:29:93:97:e0:3f:4c:76:ab:f9:cd:2c:bc: 8c:c6:7c:4d:e6:2b:85:fa:8c:e8:54:4f:22:ac:a7: 0d:e6:2c:f7:fc:a2:09:a4:e3:53:f2:99:bd:9a:94: 3b:b3:d8:86:b7:49:b5:c2:7d:b5:ee:a4:d0:3c:d7: a3:ba:f5:18:80:ff:1c:b9:3f:38:e1:80:d6:37:ec: 23:ef:ba:d1:fa:5e:79:1a:0b:2e:57:fd:20:35:e0: 98:49:d5:f3:c7:bb:c3:26:a5:a8:45:a6:d6:4b:39: b0:2b:f2:f7:a6:16:b0:a8:8a:fa:32:60:97:4a:5a: 87:b9:7b:b0:97:d4:b7:73:bb:e3:c0:aa:f0:36:0c: db:83:d6:58:30:56:90:a8:af:62:be:f1:4c:9e:6a: e9:5c:07:f5:25:8d:f2:4c:ed:5b:1b:cd:e2:b4:2d: 1e:51:d7:20:1e:71:87:98:15:46:87:d3:05:e8:32: a0:8e:f8:81:06:b4:f5:74:ca:39:a1:ae:5a:ef:b7: 93:04:c1:7b:fa:cb:10:78:54:61:35:a4:01:4d:96: 7b:d7:fa:d3:72:bb:67:f7:36:e0:6e:87:80:b6:10: 5c:24:b1:9f:e9:bd:f4:f1:54:cf:bf:e7:4c:a3:52: 3e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:83:87:8A:45:61:24:5D:72:05:0E:5B:0C:DA:DE:6E:20:CA:93:EC X509v3 Authority Key Identifier: keyid:BF:AD:82:31:A4:6C:64:1C:7A:B3:01:D7:BF:BE:F0:DC:09:AC:D4:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:4e:98:f3:16:ef:6f:b2:4e:41:90:b3:a9:d1:20:6e:b1:e7: e0:60:6b:d2:bd:9d:0d:f6:a6:13:8b:72:43:ed:99:84:93:bb: 26:38:13:69:6b:69:10:89:47:08:0f:70:8e:a0:ab:72:1d:e1: 98:1d:ba:02:78:cf:09:e9:1e:93:98:97:17:d0:71:f7:ba:57: 79:6c:3a:17:a2:3c:07:83:8f:a3:f5:7c:12:78:55:d0:74:cd: 5b:2c:bd:01:d8:52:80:ee:78:2b:a9:5b:c1:6e:0a:87:ac:4f: de:a7:ce:e0:cb:df:35:9c:79:53:59:82:a7:75:39:e9:8d:53: 20:58:c7:60:38:fb:0d:25:dc:09:5b:7f:fa:96:52:8d:86:4d: 29:62:0a:a0:e4:8d:26:2e:37:7a:a1:e5:5c:60:9f:ab:3d:97: cc:ca:93:55:e3:9d:36:f1:a2:9b:04:f5:2a:8a:ca:a3:76:ba: 5d:92:b6:0d:8d:78:70:15:3a:42:9f:d3:83:ae:07:6b:8e:c5: 64:6c:0c:91:ab:c0:98:f7:2f:10:93:78:b1:5e:94:eb:e8:9f: 5e:0a:0a:c4:d7:59:ce:2a:a4:bc:eb:5a:43:29:c7:ab:af:1e: 6a:04:16:43:eb:8b:f1:e5:a9:f4:ae:3f:e9:4c:54:d8:cc:e6: 75:5d:d5:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRTnGg8ci2v3/K2e7FOeDqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYWQ4MjMxYTQ2YzY0MWM3YWIzMDFkN2JmYmVmMGRjMDlh Y2Q0Y2UwHhcNMjUxMjI0MTcwMDUzWhcNMjUxMjI1MTcwMDUzWjAzMTEwLwYDVQQD Eyg0ZTgzODc4YTQ1NjEyNDVkNzIwNTBlNWIwY2RhZGU2ZTIwY2E5M2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla6hEcsiIPWKLPITT7ZDCI0pk5fg P0x2q/nNLLyMxnxN5iuF+ozoVE8irKcN5iz3/KIJpONT8pm9mpQ7s9iGt0m1wn21 7qTQPNejuvUYgP8cuT844YDWN+wj77rR+l55GgsuV/0gNeCYSdXzx7vDJqWoRabW SzmwK/L3phawqIr6MmCXSlqHuXuwl9S3c7vjwKrwNgzbg9ZYMFaQqK9ivvFMnmrp XAf1JY3yTO1bG83itC0eUdcgHnGHmBVGh9MF6DKgjviBBrT1dMo5oa5a77eTBMF7 +ssQeFRhNaQBTZZ71/rTcrtn9zbgboeAthBcJLGf6b308VTPv+dMo1I+VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6Dh4pFYSRdcgUOWwza3m4gypPsMB8GA1UdIwQY MBaAFL+tgjGkbGQcerMB17++8NwJrNTOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjYyQ01hUnNaQng2c3dIWHY3N3czQW1zMU00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zMzc5MDAtMzgwZS00OWQ4LWFmNGUt OWRkNDJjMTcxMTEyLzEvdjYyQ01hUnNaQng2c3dIWHY3N3czQW1zMU00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8zMzc5MDAtMzgwZS00OWQ4LWFmNGUtOWRkNDJjMTcxMTEy LzEvdjYyQ01hUnNaQng2c3dIWHY3N3czQW1zMU00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyk6Y8xbv b7JOQZCzqdEgbrHn4GBr0r2dDfamE4tyQ+2ZhJO7JjgTaWtpEIlHCA9wjqCrch3h mB26AnjPCekek5iXF9Bx97pXeWw6F6I8B4OPo/V8EnhV0HTNWyy9AdhSgO54K6lb wW4Kh6xP3qfO4MvfNZx5U1mCp3U56Y1TIFjHYDj7DSXcCVt/+pZSjYZNKWIKoOSN Ji43eqHlXGCfqz2XzMqTVeOdNvGimwT1KorKo3a6XZK2DY14cBU6Qp/Tg64Ha47F ZGwMkavAmPcvEJN4sV6U6+ifXgoKxNdZziqkvOtaQynHq68eagQWQ+uL8eWp9K4/ 6UxU2MzmdV3V5g== -----END CERTIFICATE-----Generated at Wed Dec 24 23:27:54 2025 by rpki-client