This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft File: 73imvMheyK3m7M6IDuBz1jdweWU.mft (raw, json) Hash identifier: v9YXjnUnrcWqOE2a3MnK7CxkcGy8P1qS8QjsN8OB6II= Subject key identifier: AD:9D:F5:3A:4C:26:F2:C5:82:D3:A4:45:F9:73:3F:71:A3:27:E1:F5 Authority key identifier: EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65 Certificate issuer: /CN=ef78a6bcc85ec8ade6ecce880ee073d637707965 Certificate serial: 019B40919594DCE01549168E408365859C08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 11:00:41 +0000 Manifest this update: Sun 21 Dec 2025 11:00:41 +0000 Manifest next update: Mon 22 Dec 2025 11:00:41 +0000 Files and hashes: 1: 73imvMheyK3m7M6IDuBz1jdweWU.crl (hash: RaHkQr5rg9aVW532/PaYKzJa0MAz6Yc/WPh6fl71q24=) 2: 8ofg2JoTyb5e1GIiVqV2PdSesOU.roa (hash: z/SuBS1vMLBWp74A2t3I4/K0L71UAtSRqfDU9yXXBww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:95:94:dc:e0:15:49:16:8e:40:83:65:85:9c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef78a6bcc85ec8ade6ecce880ee073d637707965 Validity Not Before: Dec 21 11:00:41 2025 GMT Not After : Dec 22 11:00:41 2025 GMT Subject: CN=ad9df53a4c26f2c582d3a445f9733f71a327e1f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:94:c9:c2:f1:ea:ea:f7:d7:03:aa:7d:78:dc: b5:c2:65:e6:60:1a:3b:3a:54:1f:8a:76:64:ea:44: 84:28:d0:b9:89:fe:52:a7:33:3b:53:d7:85:62:5d: c3:c3:a1:e6:c7:e8:8e:93:27:af:f4:05:44:cf:d5: b9:10:72:f6:8f:9e:e8:21:c5:1b:4f:50:0f:a6:32: 01:1d:cc:80:b6:88:f6:ab:4f:80:a5:cb:89:8e:0d: d1:aa:2d:33:bd:a1:7a:f6:36:91:fe:27:fe:84:40: 26:52:97:f4:ed:fa:c8:33:2d:a9:1f:28:df:d6:55: ed:ec:44:9b:c9:35:7d:e2:52:53:89:26:9f:e6:59: eb:62:c3:27:d6:a5:13:16:e6:44:80:db:72:bd:b8: 76:c8:e7:50:dd:5b:af:3a:b3:05:49:81:4a:a0:93: e6:a8:ae:1c:a9:aa:9a:0e:71:c8:f8:82:3f:38:fd: a0:ec:f0:98:42:0b:2c:11:3e:58:9f:05:5f:12:51: a4:fe:44:1c:e4:a7:00:84:30:27:ea:33:b9:36:b0: 0c:a4:7a:c8:97:77:2b:78:a2:25:19:4f:bc:81:b6: ba:9e:16:a5:8c:b9:f8:92:21:95:bb:35:99:e1:5f: 8e:fd:02:95:9e:b0:0a:21:df:5d:1e:a2:e4:b8:dc: 02:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9D:F5:3A:4C:26:F2:C5:82:D3:A4:45:F9:73:3F:71:A3:27:E1:F5 X509v3 Authority Key Identifier: keyid:EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:06:ce:9f:bd:c1:fc:8e:ce:9f:ec:e0:64:5d:44:4d:41:b6: 0d:91:24:e9:87:c2:2b:66:cb:6c:85:50:fd:a7:b4:b2:9f:dd: 51:ae:43:f2:f6:4d:b7:79:fa:52:d5:a2:22:48:a9:32:b1:64: 8e:5d:3a:a0:10:c4:73:9f:7a:e8:b4:15:1e:75:79:ef:0d:67: e1:f4:05:82:2c:e2:0d:36:94:c4:04:5a:01:1a:07:5a:76:c1: 8c:2a:45:d5:74:13:86:40:8c:12:60:03:07:5b:2e:3e:29:46: 4a:5a:da:d6:99:4d:95:e5:7a:89:b7:3a:d8:16:4c:87:ba:2c: e8:68:4d:35:38:6e:00:9b:3a:5b:8b:58:3c:4f:e3:33:82:71: 28:ec:96:1b:3a:6f:3e:6b:05:f5:14:a0:73:6b:7a:81:4c:33: 18:f7:c2:c8:d7:3e:d3:ef:e0:7d:74:71:42:d7:62:65:e5:5e: 16:40:40:1c:e5:a0:22:d2:d2:da:11:df:89:0d:4a:6e:de:96: 37:45:e6:b2:8d:d7:56:b8:9a:9b:86:21:5d:d3:0e:ba:02:79: 41:ca:e1:a5:14:2c:14:d4:e1:e5:dc:cd:c8:58:ef:a2:54:db: fa:9c:49:53:6b:37:43:f0:7b:14:c6:04:a5:74:b9:6b:eb:f3: ec:f6:18:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkZWU3OAVSRaOQINlhZwIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNzhhNmJjYzg1ZWM4YWRlNmVjY2U4ODBlZTA3M2Q2Mzc3 MDc5NjUwHhcNMjUxMjIxMTEwMDQxWhcNMjUxMjIyMTEwMDQxWjAzMTEwLwYDVQQD EyhhZDlkZjUzYTRjMjZmMmM1ODJkM2E0NDVmOTczM2Y3MWEzMjdlMWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pTJwvHq6vfXA6p9eNy1wmXmYBo7 OlQfinZk6kSEKNC5if5SpzM7U9eFYl3Dw6Hmx+iOkyev9AVEz9W5EHL2j57oIcUb T1APpjIBHcyAtoj2q0+ApcuJjg3Rqi0zvaF69jaR/if+hEAmUpf07frIMy2pHyjf 1lXt7ESbyTV94lJTiSaf5lnrYsMn1qUTFuZEgNtyvbh2yOdQ3VuvOrMFSYFKoJPm qK4cqaqaDnHI+II/OP2g7PCYQgssET5YnwVfElGk/kQc5KcAhDAn6jO5NrAMpHrI l3creKIlGU+8gba6nhaljLn4kiGVuzWZ4V+O/QKVnrAKId9dHqLkuNwCUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2d9TpMJvLFgtOkRflzP3GjJ+H1MB8GA1UdIwQY MBaAFO94przIXsit5uzOiA7gc9Y3cHllMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzNpbXZNaGV5SzNtN002SUR1QnoxamR3ZVdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80OWFiYTQtZTYzZC00ZTA2LThhMTIt OTZmMjE2ODkzZGVjLzEvNzNpbXZNaGV5SzNtN002SUR1QnoxamR3ZVdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80OWFiYTQtZTYzZC00ZTA2LThhMTItOTZmMjE2ODkzZGVj LzEvNzNpbXZNaGV5SzNtN002SUR1QnoxamR3ZVdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQbOn73B /I7On+zgZF1ETUG2DZEk6YfCK2bLbIVQ/ae0sp/dUa5D8vZNt3n6UtWiIkipMrFk jl06oBDEc5966LQVHnV57w1n4fQFgiziDTaUxARaARoHWnbBjCpF1XQThkCMEmAD B1suPilGSlra1plNleV6ibc62BZMh7os6GhNNThuAJs6W4tYPE/jM4JxKOyWGzpv PmsF9RSgc2t6gUwzGPfCyNc+0+/gfXRxQtdiZeVeFkBAHOWgItLS2hHfiQ1Kbt6W N0Xmso3XVriam4YhXdMOugJ5QcrhpRQsFNTh5dzNyFjvolTb+pxJU2s3Q/B7FMYE pXS5a+vz7PYYIw== -----END CERTIFICATE-----Generated at Sun Dec 21 17:27:36 2025 by rpki-client