This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft File: 72eEaVdKzAPXguYygf9E-qqz-Ec.mft (raw, json) Hash identifier: iHztgPSmAwh0z5F7FRHfVQ1O1o/H/QWbpexR2bVp/x0= Subject key identifier: 31:76:5B:53:53:E5:CC:0F:1A:12:FF:3B:70:24:5E:A2:49:B6:E8:25 Authority key identifier: EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47 Certificate issuer: /CN=ef678469574acc03d782e63281ff44faaab3f847 Certificate serial: 019B661E7BF5753C5408E815056A82DC0FA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft Manifest number: 1308 Signing time: Sun 28 Dec 2025 18:00:32 +0000 Manifest this update: Sun 28 Dec 2025 18:00:32 +0000 Manifest next update: Mon 29 Dec 2025 18:00:32 +0000 Files and hashes: 1: 4mzcp9MGPOcBj8vWEpghNUUZwrg.roa (hash: FMPgZ78dma8cFYdFXzHOT5nVPlXdvUP/dSywWfkO/HA=) 2: 72eEaVdKzAPXguYygf9E-qqz-Ec.crl (hash: Q4ANbkQzeHX9ArtF6B77qleGyVVJTsSQAL0qZvaZF5I=) 3: YraDuYuMIlkEmdPd43lQxmtLVG0.roa (hash: vscD5TcTDxAgQFa013w668xvOsNW4c0gyN2OgXv6DfA=) 4: d-hrh1vUeLOY7U3kjW0I7g-GU8w.roa (hash: Y/cX56/Qn9APSgO+9XrU6NbdQMlq0ISTF7taZqp4egQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:1e:7b:f5:75:3c:54:08:e8:15:05:6a:82:dc:0f:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef678469574acc03d782e63281ff44faaab3f847 Validity Not Before: Dec 28 18:00:32 2025 GMT Not After : Dec 29 18:00:32 2025 GMT Subject: CN=31765b5353e5cc0f1a12ff3b70245ea249b6e825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:25:06:39:16:90:ed:88:b8:3d:04:ff:e0:2e: cf:c9:f1:dc:3d:8b:66:a6:ea:de:93:d5:af:18:99: 55:1b:fa:33:c6:20:63:3e:89:bd:4d:08:23:4d:ac: e0:c9:9b:46:da:34:3f:b3:69:ff:af:87:89:b2:e1: 69:d5:1d:3f:cc:7f:00:d4:5b:b1:30:b7:af:d7:21: 09:d7:d2:f4:b8:ab:70:98:fd:b9:b6:25:62:f2:85: 59:8e:0b:e7:c8:bd:87:fb:df:30:a5:6d:bc:2c:87: 4c:e0:cc:3c:29:08:8d:71:50:8a:f3:a2:08:37:41: c3:75:46:6b:0a:67:bc:a9:71:68:5d:71:dd:5e:c3: c5:00:e4:31:cd:dc:0d:42:f9:47:15:3c:d1:b8:4a: 63:60:63:00:82:f3:fc:01:58:7d:4e:96:fd:82:56: 8c:be:10:17:a3:f8:42:f3:8d:42:be:1b:6c:cc:8b: a1:1f:11:b0:4f:df:59:68:45:77:90:eb:43:d2:46: 44:10:97:0a:e7:d7:3a:f8:73:4f:18:0d:f2:b3:d7: 90:c6:d6:9e:d1:8e:e3:9b:6f:2c:0e:6b:c4:e7:ca: eb:29:f5:c8:07:ca:f3:a0:2c:df:99:ad:c8:0d:9c: 6e:55:6c:da:cc:6d:10:fd:82:3e:5b:51:d0:0c:3b: 6b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:76:5B:53:53:E5:CC:0F:1A:12:FF:3B:70:24:5E:A2:49:B6:E8:25 X509v3 Authority Key Identifier: keyid:EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:35:69:d1:ae:4b:a1:c9:94:90:65:1b:09:de:61:c3:87:0c: 74:27:47:2d:1f:71:9e:26:58:cf:d6:6d:ab:3e:f0:87:61:fb: e5:4c:f6:d9:51:f9:16:72:d8:57:aa:a0:2d:b6:ee:db:e4:96: 26:b4:06:d4:cb:fa:64:7a:f6:44:e5:2c:09:f1:74:5e:f3:e4: 68:ee:7b:78:25:e3:94:18:22:05:a3:bd:af:86:91:14:bf:ca: d7:aa:4b:1d:c4:c1:fe:39:e5:60:d6:15:a4:a0:3a:ac:a1:30: a6:51:86:77:fc:ad:83:28:e5:c0:ee:be:4b:e5:3b:42:b6:75: 6a:17:ee:83:2a:ea:9f:9c:2d:55:0c:ce:1b:43:70:26:80:24: bf:02:37:d2:3e:d2:0c:58:c3:8b:22:09:5f:5d:76:9e:b8:11: 60:30:39:5c:42:97:af:e3:cc:c4:a3:38:0e:95:85:13:65:7e: 3d:5b:fe:ee:e6:74:c9:a4:ae:96:a5:bb:bf:4a:9f:5b:33:99: a5:f5:fb:66:cc:df:de:b8:58:6a:13:22:a0:1f:b2:16:85:bd: d3:3a:34:7f:e7:af:e8:b5:db:84:d0:be:a0:b3:f0:27:f2:2d: f0:f1:21:48:59:c8:e9:8d:e8:68:96:4a:04:b3:75:68:3b:30: 21:23:c9:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmHnv1dTxUCOgVBWqC3A+pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNjc4NDY5NTc0YWNjMDNkNzgyZTYzMjgxZmY0NGZhYWFi M2Y4NDcwHhcNMjUxMjI4MTgwMDMyWhcNMjUxMjI5MTgwMDMyWjAzMTEwLwYDVQQD EygzMTc2NWI1MzUzZTVjYzBmMWExMmZmM2I3MDI0NWVhMjQ5YjZlODI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyUGORaQ7Yi4PQT/4C7PyfHcPYtm purek9WvGJlVG/ozxiBjPom9TQgjTazgyZtG2jQ/s2n/r4eJsuFp1R0/zH8A1Fux MLev1yEJ19L0uKtwmP25tiVi8oVZjgvnyL2H+98wpW28LIdM4Mw8KQiNcVCK86II N0HDdUZrCme8qXFoXXHdXsPFAOQxzdwNQvlHFTzRuEpjYGMAgvP8AVh9Tpb9glaM vhAXo/hC841CvhtszIuhHxGwT99ZaEV3kOtD0kZEEJcK59c6+HNPGA3ys9eQxtae 0Y7jm28sDmvE58rrKfXIB8rzoCzfma3IDZxuVWzazG0Q/YI+W1HQDDtrjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDF2W1NT5cwPGhL/O3AkXqJJtuglMB8GA1UdIwQY MBaAFO9nhGlXSswD14LmMoH/RPqqs/hHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzJlRWFWZEt6QVBYZ3VZeWdmOUUtcXF6LUVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iNDY3M2ItMjEwYi00ZTVhLTg3NmEt ZGMwNTllNjliMWQwLzEvNzJlRWFWZEt6QVBYZ3VZeWdmOUUtcXF6LUVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iNDY3M2ItMjEwYi00ZTVhLTg3NmEtZGMwNTllNjliMWQw LzEvNzJlRWFWZEt6QVBYZ3VZeWdmOUUtcXF6LUVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvDVp0a5L ocmUkGUbCd5hw4cMdCdHLR9xniZYz9Ztqz7wh2H75Uz22VH5FnLYV6qgLbbu2+SW JrQG1Mv6ZHr2ROUsCfF0XvPkaO57eCXjlBgiBaO9r4aRFL/K16pLHcTB/jnlYNYV pKA6rKEwplGGd/ytgyjlwO6+S+U7QrZ1ahfugyrqn5wtVQzOG0NwJoAkvwI30j7S DFjDiyIJX112nrgRYDA5XEKXr+PMxKM4DpWFE2V+PVv+7uZ0yaSulqW7v0qfWzOZ pfX7Zszf3rhYahMioB+yFoW90zo0f+ev6LXbhNC+oLPwJ/It8PEhSFnI6Y3oaJZK BLN1aDswISPJ0Q== -----END CERTIFICATE-----Generated at Sun Dec 28 20:12:34 2025 by rpki-client