This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
File: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft (raw, json)
Hash identifier: YG9T7bDw2KVafA/HmaZ66VMVcRHcD3v+SCxqOwD++SU=
Subject key identifier: 56:AB:93:D1:BF:F7:9F:8E:8B:F1:94:55:D8:F9:64:16:4B:AE:59:97
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 019B6D6A47E1BA2919183FAAF82CB126FEE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
Manifest number: 17A3
Signing time: Tue 30 Dec 2025 04:00:40 +0000
Manifest this update: Tue 30 Dec 2025 04:00:40 +0000
Manifest next update: Wed 31 Dec 2025 04:00:40 +0000
Files and hashes: 1: 4glHJuD_KCBMnry_AIvlu5gy6-M.roa (hash: lhemPw8+U7+39+MkBxEYrWnD1G0tgMlJ/+cnZ3q/F8U=)
2: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl (hash: cq9WC7y+bwDHlG82YnwIMkqDVq6BwnI6Ou6vpauE+Ic=)
3: K9DBCJ0-OAE3o-OFlGFCn38jP1I.roa (hash: 6P77ASxKGjA6KEo+/324fY8nnGYUFzIMa60GccsP2nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 31 Dec 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:6d:6a:47:e1:ba:29:19:18:3f:aa:f8:2c:b1:26:fe:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Dec 30 04:00:40 2025 GMT
Not After : Dec 31 04:00:40 2025 GMT
Subject: CN=56ab93d1bff79f8e8bf19455d8f964164bae5997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:31:f1:5d:f9:ca:00:87:f5:d0:d0:54:b8:3f:
29:b4:33:60:79:e3:4e:88:d6:ba:da:59:22:12:57:
85:15:f2:1b:81:65:cb:00:95:df:9f:29:f2:de:a5:
cf:03:f4:89:ca:2a:c5:c5:41:2e:9a:36:ac:ff:ad:
f0:86:36:93:05:d4:86:bb:f0:11:1a:32:20:ee:ca:
9c:21:bb:5e:cf:47:73:3a:47:03:59:13:a9:66:df:
85:0a:71:1c:fc:e1:49:ae:d6:a9:d8:cf:38:85:b5:
69:1e:88:d6:59:58:0d:e6:a3:38:97:1a:e4:6f:24:
44:b8:ea:df:3e:e4:de:f8:a5:a2:4a:02:c3:93:4a:
d0:26:67:a2:0f:0b:6e:0b:55:25:34:a5:db:df:60:
94:d3:21:0f:a9:e3:ef:e0:3f:f2:06:0c:e2:13:76:
f3:b6:d8:2d:16:c0:04:bb:27:d1:7b:c6:0d:b5:e4:
9a:94:dd:f2:ea:3b:1c:25:5d:00:f4:87:28:b0:1c:
bb:0f:e4:4c:82:bd:3e:16:22:88:54:75:6c:5e:74:
30:a8:e6:07:29:1a:18:c1:d2:bb:08:09:f3:51:dc:
e1:79:90:d8:13:82:86:cc:51:b7:81:87:33:51:41:
7d:80:7b:c0:a4:bb:0c:3b:57:ff:27:28:49:48:30:
1c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AB:93:D1:BF:F7:9F:8E:8B:F1:94:55:D8:F9:64:16:4B:AE:59:97
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f8:73:6d:84:86:89:44:3e:2f:96:09:3c:f9:fb:7a:d9:18:
39:6d:88:d0:b7:d9:b5:bc:0c:cf:d9:f7:69:dc:f4:19:19:2c:
92:3a:58:ae:73:a8:92:62:ce:86:57:ee:4f:2b:00:b2:bb:57:
95:66:b5:f6:29:1a:da:c4:93:07:8f:16:b7:8c:3b:87:60:11:
70:24:b2:29:b6:24:82:4b:ac:9e:48:44:47:da:56:ca:11:15:
08:63:45:d0:f4:9d:b0:cd:0a:89:41:34:cc:1f:49:1b:b8:87:
6f:a0:dc:a0:78:87:d8:43:e3:8d:60:9c:e1:56:aa:a2:6e:9e:
c6:8f:a3:9e:2e:af:58:a7:26:3c:10:a0:5b:d7:46:a5:64:57:
f7:12:7a:ce:fb:8b:71:07:45:80:d3:09:c1:a4:cf:9e:a8:cb:
1a:99:c6:c1:ec:29:b4:4a:ec:51:68:e0:27:a4:45:14:63:fe:
f0:cc:23:e7:8a:cf:d6:fc:a0:c1:d6:31:51:b0:f4:93:e3:27:
ae:0a:8d:1a:53:3e:fe:83:1b:14:46:aa:6e:58:de:e0:56:c0:
1d:cf:5c:31:d6:43:46:d7:13:2d:44:05:b2:3d:8b:3c:b3:0b:
3f:6a:b1:da:a1:7e:c7:c8:4a:bb:df:00:a6:e4:1d:ea:43:f9:
4e:02:ec:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 10:32:47 2025 by rpki-client