This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft File: 733R6-5RP_oxjNyIuBrBjP5yazA.mft (raw, json) Hash identifier: Wx0SJr/kmK5fZQWuWmlCu9OnpNNIzy1RlAuT5TgXss0= Subject key identifier: 77:EF:5C:AC:68:8B:45:BF:74:87:92:CB:86:44:EE:C6:1D:41:AF:E9 Authority key identifier: EF:7D:D1:EB:EE:51:3F:FA:31:8C:DC:88:B8:1A:C1:8C:FE:72:6B:30 Certificate issuer: /CN=ef7dd1ebee513ffa318cdc88b81ac18cfe726b30 Certificate serial: 019B3D22FC7B2819E5C0E1E2B145C069D3D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft Manifest number: 1651 Signing time: Sat 20 Dec 2025 19:01:01 +0000 Manifest this update: Sat 20 Dec 2025 19:01:01 +0000 Manifest next update: Sun 21 Dec 2025 19:01:01 +0000 Files and hashes: 1: 733R6-5RP_oxjNyIuBrBjP5yazA.crl (hash: MxmK7nUjQUoBQ+NhJCZeCvqio9Wct5yW/NRAUVxNvWE=) 2: j5HF96yv7cLigcHPzuSioYP7qZU.roa (hash: EZSm2GEOWgRxvLjs00cTfuWYkp01jcIX3AmXq7a4GFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:fc:7b:28:19:e5:c0:e1:e2:b1:45:c0:69:d3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef7dd1ebee513ffa318cdc88b81ac18cfe726b30 Validity Not Before: Dec 20 19:01:01 2025 GMT Not After : Dec 21 19:01:01 2025 GMT Subject: CN=77ef5cac688b45bf748792cb8644eec61d41afe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4f:ec:36:be:a2:31:03:09:3c:c6:d6:78:ac: ce:ee:4b:a3:a6:0a:d5:7f:10:a3:71:77:a6:50:43: e8:77:55:79:03:35:35:fa:b6:30:19:6c:23:6d:bf: 9f:db:63:2b:e9:d2:83:64:a6:63:9c:de:eb:ee:68: 62:a5:64:6d:b4:07:16:2b:3b:48:97:4b:d6:e9:83: d0:6e:75:ff:64:88:70:7e:da:42:7c:3a:ac:e7:5f: 0e:a3:d9:29:cb:99:29:11:16:f0:9b:ba:81:6d:1c: 0c:10:c1:66:a7:b0:a3:d0:df:19:b3:61:ab:89:87: f7:32:4d:c9:4c:07:3f:b7:cf:61:cd:38:a3:e5:6b: ee:71:cd:7d:d3:53:64:40:b2:63:71:d9:41:e9:98: 55:9c:82:09:58:71:e4:11:52:76:0f:a8:48:0d:12: 66:67:7a:ed:51:1c:a2:5b:cf:39:4c:91:b0:44:28: 1b:7e:6b:31:64:4a:78:8b:e6:87:36:66:cf:5f:67: b0:1d:01:25:3b:fb:be:72:8b:db:f5:d5:4f:fc:f3: 48:ae:fd:3d:e4:90:40:95:81:fc:54:fd:89:26:28: 7b:8b:33:62:95:04:a4:5f:20:2b:c0:5f:b0:18:88: 8e:6b:33:11:e6:be:25:1a:0a:da:71:13:74:5d:69: 61:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:EF:5C:AC:68:8B:45:BF:74:87:92:CB:86:44:EE:C6:1D:41:AF:E9 X509v3 Authority Key Identifier: keyid:EF:7D:D1:EB:EE:51:3F:FA:31:8C:DC:88:B8:1A:C1:8C:FE:72:6B:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:9c:40:13:a4:51:fd:62:e7:20:f9:94:fd:90:43:e5:d6:a0: 57:c0:71:ec:4a:29:b3:1a:bc:92:1d:da:fb:0c:6f:23:65:a0: eb:04:a9:4d:ac:a6:00:be:60:f7:95:e7:43:58:80:81:b8:5b: 6f:49:78:8b:56:5b:b3:4c:58:89:d1:78:dc:4f:28:6a:d3:e7: e0:27:22:df:80:3e:00:7d:7a:e0:40:1c:22:b8:e2:4e:20:ac: d3:a9:c9:ec:88:d5:f5:82:bc:89:3a:b8:7d:ab:78:87:d3:1d: 5a:d3:3d:e8:67:98:3e:ed:aa:80:58:25:ba:50:48:1b:25:11: 20:c6:19:75:4c:3c:10:a7:f3:14:25:1d:86:59:20:76:88:a6: a3:a9:fd:0a:9c:71:0d:86:96:3b:f3:2b:bc:f5:0f:cc:94:a6: 68:78:ab:cd:6a:3e:e9:70:48:30:ab:42:30:c8:2c:9a:ea:c1: e7:45:2a:2c:92:20:1c:2f:b9:ff:f2:e2:84:8c:dd:bb:56:19: 69:23:47:c2:e7:61:bc:d3:f7:30:ad:b6:d4:b6:50:3f:46:44: 48:74:1a:6a:62:e7:76:ca:cb:6a:b8:d0:0e:f8:cd:0c:41:55: f7:0b:f4:58:f7:88:37:9f:59:76:0d:8e:27:e5:c7:57:79:f8: 0a:45:e4:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Ivx7KBnlwOHisUXAadPQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmN2RkMWViZWU1MTNmZmEzMThjZGM4OGI4MWFjMThjZmU3 MjZiMzAwHhcNMjUxMjIwMTkwMTAxWhcNMjUxMjIxMTkwMTAxWjAzMTEwLwYDVQQD Eyg3N2VmNWNhYzY4OGI0NWJmNzQ4NzkyY2I4NjQ0ZWVjNjFkNDFhZmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE/sNr6iMQMJPMbWeKzO7kujpgrV fxCjcXemUEPod1V5AzU1+rYwGWwjbb+f22Mr6dKDZKZjnN7r7mhipWRttAcWKztI l0vW6YPQbnX/ZIhwftpCfDqs518Oo9kpy5kpERbwm7qBbRwMEMFmp7Cj0N8Zs2Gr iYf3Mk3JTAc/t89hzTij5Wvucc1901NkQLJjcdlB6ZhVnIIJWHHkEVJ2D6hIDRJm Z3rtURyiW885TJGwRCgbfmsxZEp4i+aHNmbPX2ewHQElO/u+covb9dVP/PNIrv09 5JBAlYH8VP2JJih7izNilQSkXyArwF+wGIiOazMR5r4lGgracRN0XWlhOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHfvXKxoi0W/dIeSy4ZE7sYdQa/pMB8GA1UdIwQY MBaAFO990evuUT/6MYzciLgawYz+cmswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzMzUjYtNVJQX294ak55SXVCckJqUDV5YXpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mOWVlNmQtNzY0MC00ZTNkLTliNDUt ZTU2ZmVjYTYxMmU3LzEvNzMzUjYtNVJQX294ak55SXVCckJqUDV5YXpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9mOWVlNmQtNzY0MC00ZTNkLTliNDUtZTU2ZmVjYTYxMmU3 LzEvNzMzUjYtNVJQX294ak55SXVCckJqUDV5YXpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzJxAE6RR /WLnIPmU/ZBD5dagV8Bx7Eopsxq8kh3a+wxvI2Wg6wSpTaymAL5g95XnQ1iAgbhb b0l4i1Zbs0xYidF43E8oatPn4Cci34A+AH164EAcIrjiTiCs06nJ7IjV9YK8iTq4 fat4h9MdWtM96GeYPu2qgFglulBIGyURIMYZdUw8EKfzFCUdhlkgdoimo6n9Cpxx DYaWO/MrvPUPzJSmaHirzWo+6XBIMKtCMMgsmurB50UqLJIgHC+5//LihIzdu1YZ aSNHwudhvNP3MK221LZQP0ZESHQaamLndsrLarjQDvjNDEFV9wv0WPeIN59Zdg2O J+XHV3n4CkXkeg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:04:23 2025 by rpki-client