This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft File: 73OcDASkJxtarWLBGSKeGPraX9M.mft (raw, json) Hash identifier: EOsjrh6npJJaxxtsIf/hVwaSKNRZfDUTJa6y6QPuu34= Subject key identifier: 37:12:AE:4C:14:03:E2:E9:D0:8E:CC:D3:44:57:60:D2:D9:B6:B7:54 Authority key identifier: EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3 Certificate issuer: /CN=ef739c0c04a4271b5aad62c119229e18fada5fd3 Certificate serial: 019B27AD9B75DE8DBB6156D3FF0A717112FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft Manifest number: 0F42 Signing time: Tue 16 Dec 2025 15:00:47 +0000 Manifest this update: Tue 16 Dec 2025 15:00:47 +0000 Manifest next update: Wed 17 Dec 2025 15:00:47 +0000 Files and hashes: 1: 73OcDASkJxtarWLBGSKeGPraX9M.crl (hash: 97FqK1uPl5423AXfs3tRyLgutnr9ktG9GRsU5FQTKNM=) 2: GO5PY0agBoKkma7NteMSdFbX44k.roa (hash: jwM1qR7KbSYH5wU03Z7/YrapkXuYuB0WPqYmk8E3608=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 15:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ad:9b:75:de:8d:bb:61:56:d3:ff:0a:71:71:12:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef739c0c04a4271b5aad62c119229e18fada5fd3 Validity Not Before: Dec 16 15:00:47 2025 GMT Not After : Dec 17 15:00:47 2025 GMT Subject: CN=3712ae4c1403e2e9d08eccd3445760d2d9b6b754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:10:42:9e:9a:b4:7f:f3:6a:12:82:96:7a:9e: 71:a5:cf:fe:9d:fc:4d:d0:b5:75:c8:83:db:7f:14: 0b:5b:59:0a:dd:84:4e:01:14:2c:72:36:f8:3a:b5: 5c:e9:ff:48:b3:dd:cc:73:2c:58:91:a7:93:29:d1: b0:35:96:8d:da:1d:ce:85:35:41:20:c1:57:f9:46: df:2d:6f:c6:86:64:65:81:87:21:d1:33:f9:de:12: 46:3c:cd:b5:d7:90:28:2b:ec:ec:28:37:5a:39:bd: e7:73:5e:f2:8b:f9:a3:da:a7:36:17:90:50:05:94: e5:14:a2:e8:45:a2:02:d7:e1:b6:7e:4a:75:f9:41: b4:dd:e9:77:7e:37:10:4c:2f:1f:59:80:1c:b6:5f: 25:09:d0:aa:7a:23:f9:2e:a3:35:9f:40:a8:6b:40: 75:73:8f:50:a1:cf:d4:86:9f:85:56:71:78:5f:ef: 13:e7:5f:b8:db:f8:40:f8:5c:cf:3e:b1:bf:c8:5d: df:5f:c6:16:40:55:34:14:f2:f8:fa:a2:4f:c5:fb: e6:14:8d:b9:11:81:32:c4:60:3a:f6:b8:15:f4:06: ad:08:6c:27:93:30:97:3d:ec:f6:20:1c:59:99:47: ad:e2:96:b0:00:72:a3:b6:e5:fb:91:d7:1f:8d:b8: 48:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:12:AE:4C:14:03:E2:E9:D0:8E:CC:D3:44:57:60:D2:D9:B6:B7:54 X509v3 Authority Key Identifier: keyid:EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:5d:17:19:e8:e0:7b:91:ec:80:55:e5:fb:e8:7c:b4:90:9e: 2a:9c:87:e8:4a:4d:a9:69:eb:75:a2:8e:8a:80:c4:5e:fa:31: e3:e8:f1:e4:a0:61:1b:6e:1f:57:30:e6:4b:05:67:a8:5b:0b: 78:ff:e8:be:03:44:5e:3e:64:60:f6:8e:6b:48:4e:4a:93:70: 02:2e:ab:48:d4:93:aa:43:72:cd:7d:36:5c:fa:88:cd:f5:23: a7:64:40:93:6e:47:f1:fc:5c:b5:ad:c9:14:94:bf:eb:97:f6: 7e:8a:15:14:8c:64:c5:56:56:9e:39:39:95:ad:5d:ce:b0:12: 77:e9:bd:3d:3e:61:a0:99:b1:0f:78:22:d2:f0:f7:3b:ec:1e: 43:ce:fa:f8:ef:00:d1:57:dc:6c:50:22:3a:e7:d5:97:44:ac: 88:79:47:dc:2f:72:d5:b6:5a:66:d3:b0:1c:de:13:60:24:fa: 8f:ef:a8:f2:d1:08:17:90:7a:0e:1d:03:a7:df:81:06:e2:ea: 58:de:04:ac:b4:65:62:6f:e1:c1:64:7e:42:3f:66:86:e4:1b: d1:2d:b2:0c:5a:5a:99:83:61:89:79:94:8e:07:f0:a8:ac:2a: e5:86:91:99:18:80:8e:5d:58:e2:98:3c:2a:bc:c0:28:ca:61: e8:a7:f2:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrZt13o27YVbT/wpxcRL+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNzM5YzBjMDRhNDI3MWI1YWFkNjJjMTE5MjI5ZTE4ZmFk YTVmZDMwHhcNMjUxMjE2MTUwMDQ3WhcNMjUxMjE3MTUwMDQ3WjAzMTEwLwYDVQQD EygzNzEyYWU0YzE0MDNlMmU5ZDA4ZWNjZDM0NDU3NjBkMmQ5YjZiNzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxBCnpq0f/NqEoKWep5xpc/+nfxN 0LV1yIPbfxQLW1kK3YROARQscjb4OrVc6f9Is93McyxYkaeTKdGwNZaN2h3OhTVB IMFX+UbfLW/GhmRlgYch0TP53hJGPM2115AoK+zsKDdaOb3nc17yi/mj2qc2F5BQ BZTlFKLoRaIC1+G2fkp1+UG03el3fjcQTC8fWYActl8lCdCqeiP5LqM1n0Coa0B1 c49Qoc/Uhp+FVnF4X+8T51+42/hA+FzPPrG/yF3fX8YWQFU0FPL4+qJPxfvmFI25 EYEyxGA69rgV9AatCGwnkzCXPez2IBxZmUet4pawAHKjtuX7kdcfjbhIUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcSrkwUA+Lp0I7M00RXYNLZtrdUMB8GA1UdIwQY MBaAFO9znAwEpCcbWq1iwRkinhj62l/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzNPY0RBU2tKeHRhcldMQkdTS2VHUHJhWDlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yODUxOWYtZGM0OC00ZjMxLWEzNWUt OTllZTRhODk4NWMzLzEvNzNPY0RBU2tKeHRhcldMQkdTS2VHUHJhWDlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8yODUxOWYtZGM0OC00ZjMxLWEzNWUtOTllZTRhODk4NWMz LzEvNzNPY0RBU2tKeHRhcldMQkdTS2VHUHJhWDlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm10XGejg e5HsgFXl++h8tJCeKpyH6EpNqWnrdaKOioDEXvox4+jx5KBhG24fVzDmSwVnqFsL eP/ovgNEXj5kYPaOa0hOSpNwAi6rSNSTqkNyzX02XPqIzfUjp2RAk25H8fxcta3J FJS/65f2fooVFIxkxVZWnjk5la1dzrASd+m9PT5hoJmxD3gi0vD3O+weQ876+O8A 0VfcbFAiOufVl0SsiHlH3C9y1bZaZtOwHN4TYCT6j++o8tEIF5B6Dh0Dp9+BBuLq WN4ErLRlYm/hwWR+Qj9mhuQb0S2yDFpamYNhiXmUjgfwqKwq5YaRmRiAjl1Y4pg8 KrzAKMph6KfyiQ== -----END CERTIFICATE-----Generated at Wed Dec 17 00:59:46 2025 by rpki-client