This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.mft File: 73_V0zBhqd6SCvHCoTUT1G3SRhI.mft (raw, json) Hash identifier: wHQZWGPdfTHJ+ZlLNFVOqMv3O9azj8SWwFtQYldksM0= Subject key identifier: FD:0F:FA:B6:72:B8:D3:48:DB:83:37:02:43:08:09:92:B7:07:60:BE Authority key identifier: EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12 Certificate issuer: /CN=ef7fd5d33061a9de920af1c2a13513d46dd24612 Certificate serial: 019B3DFE6BC5D98C2666F55FDF82C2C4D97A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.mft Manifest number: 178F Signing time: Sat 20 Dec 2025 23:00:42 +0000 Manifest this update: Sat 20 Dec 2025 23:00:42 +0000 Manifest next update: Sun 21 Dec 2025 23:00:42 +0000 Files and hashes: 1: 73_V0zBhqd6SCvHCoTUT1G3SRhI.crl (hash: UGEuiV5LYHkD50UMFidfblyo95H8dF6Wk5ZkuD9WvVI=) 2: XpYkEceOcNVMjE9iA-7wdH8wU4Y.roa (hash: ZveXXYUwOKQW6NWsOhOjeqI3QtT8i2gAi2nt9BB+rrk=) 3: aOgL8M0VDCoJFBbKjHHipw7CgK0.roa (hash: JxHs1uM5GfGFdmpY3+A1A8dI63STuU0UQ0HROiRxjIM=) 4: fuNTm9OkKgw1mC4KKOVTy1qgwlI.roa (hash: U1l6Z979R3w3BYeOJyPvuo9cktUgt6LoAxySgYlXj8c=) 5: hB9kQl1Y6rBahp990wuCw4pSfNg.roa (hash: jB2Ttg5gS2jisY59LQMkSanJOv0YUDqMHRUuoIatX+k=) 6: hp5ect9lYgBo8YeD0kYGPqIVIWE.roa (hash: bU8CEDTNnsMFjBYJstxXTlTuXwJC6lBr3bl7i7JNilc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.mft rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:6b:c5:d9:8c:26:66:f5:5f:df:82:c2:c4:d9:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef7fd5d33061a9de920af1c2a13513d46dd24612 Validity Not Before: Dec 20 23:00:42 2025 GMT Not After : Dec 21 23:00:42 2025 GMT Subject: CN=fd0ffab672b8d348db83370243080992b70760be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:30:5b:f7:70:fb:cb:5e:75:31:2c:9a:54:ed: a8:7a:10:09:89:59:4d:48:21:ae:fd:6f:cb:47:70: cc:2f:f1:c3:51:f3:55:0b:55:02:54:83:ce:c8:21: cd:f3:f0:5e:02:6b:89:8c:b3:56:86:00:0f:39:e8: d4:22:55:a1:6d:1b:85:0e:56:d6:12:9d:8e:6b:e0: 6d:32:b1:96:64:10:ab:d9:95:d1:17:0f:83:5e:d0: 9d:78:54:8b:6c:06:dd:f9:33:2a:61:be:0e:b6:58: 62:41:11:b2:0a:9a:44:90:2a:4c:12:30:5c:d7:d8: a1:4e:32:be:0a:3a:78:43:38:8a:b8:c4:6b:39:63: 78:1a:ab:de:d2:3a:1c:78:4f:21:9b:f1:d5:e0:33: 4f:ae:49:d6:bf:f2:77:15:92:81:a0:29:c9:16:e7: 16:0e:b9:cf:f0:61:71:47:54:e1:69:7b:74:ad:46: 19:67:5f:26:ee:61:12:20:e2:92:c6:cd:d0:2a:a5: c7:6f:67:22:e5:a6:b2:ff:cf:9c:96:92:73:2d:c1: 6d:34:37:ec:e7:a4:b3:18:45:79:ac:e7:8e:a9:92: ed:29:6e:2b:08:27:03:61:ac:19:02:0c:87:d8:e2: 7e:10:ff:fa:0d:75:e6:aa:55:95:23:b0:2f:2d:aa: 21:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0F:FA:B6:72:B8:D3:48:DB:83:37:02:43:08:09:92:B7:07:60:BE X509v3 Authority Key Identifier: keyid:EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:02:cd:d8:e3:52:8c:5f:57:3a:bb:15:67:95:a9:12:95:a3: af:4b:67:31:9d:b7:52:1f:aa:49:72:8e:49:cf:30:40:6f:63: bd:cc:76:74:34:f6:05:37:5d:a8:d9:1e:66:f2:b6:d2:90:ea: c4:41:75:3b:9c:d1:84:04:78:bd:c1:72:9e:e6:37:49:40:e3: d6:c6:22:09:3a:11:fc:8f:9a:c4:b5:56:d1:b5:11:3c:da:8c: 65:f7:86:6e:c7:e6:b4:dc:23:b6:16:4c:e5:26:75:10:ad:4e: d5:6b:80:06:93:e3:b0:ee:a1:a4:8e:e3:b6:b2:50:2d:e2:ff: 4a:0a:6a:8f:09:ea:7f:82:57:73:e2:74:61:9f:45:76:1b:4c: af:73:44:c1:8f:4e:5f:28:bb:30:b3:4f:65:4a:12:4c:63:04: 8a:72:c9:82:92:32:19:b7:58:ea:ab:15:36:52:02:cf:d3:19: 79:69:6e:8f:29:17:42:ec:e5:38:d3:91:40:2b:d0:3c:cd:8c: e0:73:26:cc:4a:94:45:76:b2:be:bb:69:cf:fa:91:08:3b:28: 3c:d5:52:ee:d7:1e:89:fb:4e:d4:a9:00:c7:40:7f:3c:05:ad: e2:21:d8:7a:6a:a0:af:26:dc:1d:a4:61:4d:d1:25:18:9b:2a: f2:3f:77:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/mvF2YwmZvVf34LCxNl6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmN2ZkNWQzMzA2MWE5ZGU5MjBhZjFjMmExMzUxM2Q0NmRk MjQ2MTIwHhcNMjUxMjIwMjMwMDQyWhcNMjUxMjIxMjMwMDQyWjAzMTEwLwYDVQQD EyhmZDBmZmFiNjcyYjhkMzQ4ZGI4MzM3MDI0MzA4MDk5MmI3MDc2MGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzBb93D7y151MSyaVO2oehAJiVlN SCGu/W/LR3DML/HDUfNVC1UCVIPOyCHN8/BeAmuJjLNWhgAPOejUIlWhbRuFDlbW Ep2Oa+BtMrGWZBCr2ZXRFw+DXtCdeFSLbAbd+TMqYb4OtlhiQRGyCppEkCpMEjBc 19ihTjK+Cjp4QziKuMRrOWN4Gqve0joceE8hm/HV4DNPrknWv/J3FZKBoCnJFucW DrnP8GFxR1ThaXt0rUYZZ18m7mESIOKSxs3QKqXHb2ci5aay/8+clpJzLcFtNDfs 56SzGEV5rOeOqZLtKW4rCCcDYawZAgyH2OJ+EP/6DXXmqlWVI7AvLaohywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0P+rZyuNNI24M3AkMICZK3B2C+MB8GA1UdIwQY MBaAFO9/1dMwYanekgrxwqE1E9Rt0kYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzNfVjB6QmhxZDZTQ3ZIQ29UVVQxRzNTUmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMzE5MGMtZTFhMC00YmE0LWIxZDgt YTEwMmJlMzgyZTUxLzEvNzNfVjB6QmhxZDZTQ3ZIQ29UVVQxRzNTUmhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yMzE5MGMtZTFhMC00YmE0LWIxZDgtYTEwMmJlMzgyZTUx LzEvNzNfVjB6QmhxZDZTQ3ZIQ29UVVQxRzNTUmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtQLN2ONS jF9XOrsVZ5WpEpWjr0tnMZ23Uh+qSXKOSc8wQG9jvcx2dDT2BTddqNkeZvK20pDq xEF1O5zRhAR4vcFynuY3SUDj1sYiCToR/I+axLVW0bURPNqMZfeGbsfmtNwjthZM 5SZ1EK1O1WuABpPjsO6hpI7jtrJQLeL/Sgpqjwnqf4JXc+J0YZ9FdhtMr3NEwY9O Xyi7MLNPZUoSTGMEinLJgpIyGbdY6qsVNlICz9MZeWlujykXQuzlONORQCvQPM2M 4HMmzEqURXayvrtpz/qRCDsoPNVS7tceiftO1KkAx0B/PAWt4iHYemqgrybcHaRh TdElGJsq8j931g== -----END CERTIFICATE-----Generated at Sun Dec 21 00:52:07 2025 by rpki-client