This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft File: aM73Itq-WXXKT5uoYWOI7GxlaiA.mft (raw, json) Hash identifier: PX7iQ5Zs/3hz4j5AlCPSo+4rKnQv0E/psDcVrCjch9w= Subject key identifier: FA:56:86:82:C1:A8:10:9D:AA:20:7D:DC:2F:5C:CD:65:66:80:23:9F Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20 Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20 Certificate serial: 019B3DFEB67AC18611EAC0C3A72FD7B782F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft Manifest number: 0C72 Signing time: Sat 20 Dec 2025 23:01:01 +0000 Manifest this update: Sat 20 Dec 2025 23:01:01 +0000 Manifest next update: Sun 21 Dec 2025 23:01:01 +0000 Files and hashes: 1: F66nmw_9gnfRz1vGxzlxmQMgQys.roa (hash: V2QUSY1nIUt0LG1yVgyvdzAwGo/lvS6oHhY3urqyJbE=) 2: IdMP5mSXjXy5RCG7h8iUYBC-7wU.roa (hash: Ak+0cLrZuuXp8cAQmKH4z3k18zZ0o3zgplicC1IedBk=) 3: aM73Itq-WXXKT5uoYWOI7GxlaiA.crl (hash: olCXx4n1Lkt0mhWjQfuOzPgh7UxuIQA7OD/JySDm0Yk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:b6:7a:c1:86:11:ea:c0:c3:a7:2f:d7:b7:82:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20 Validity Not Before: Dec 20 23:01:01 2025 GMT Not After : Dec 21 23:01:01 2025 GMT Subject: CN=fa568682c1a8109daa207ddc2f5ccd656680239f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c3:d7:cf:de:86:cc:ee:ee:3b:5d:8c:c3:f3: 8b:ee:17:35:8e:a5:0b:d5:b9:74:a4:0a:f4:77:ab: ea:d9:4b:00:c1:8d:2e:51:e7:79:83:8d:18:ca:ac: ee:22:c9:2b:ef:b5:0d:49:b9:c1:6b:68:78:1d:bd: b8:c1:5e:42:a5:a4:3b:39:6a:bb:b5:ff:a8:a4:08: ab:f5:9d:50:09:cb:fd:97:eb:5e:de:88:fb:42:96: 24:82:f6:48:fa:bc:43:96:ab:9d:bc:e9:c2:3c:19: b0:f5:de:2d:45:51:3f:c9:06:27:c9:0d:e6:ec:6b: c7:28:71:3f:22:69:1c:29:29:d0:80:f3:22:c6:e1: 1a:49:40:ed:b4:6c:2b:9d:ad:10:b3:b0:35:64:f3: 43:ea:ac:f9:41:6d:22:6e:51:f7:3c:13:ee:ba:19: 61:69:ea:d8:69:e1:a1:93:ca:71:fc:5a:61:35:85: 63:fc:3b:70:f2:40:f7:c2:05:11:00:fd:37:04:ae: 9e:36:ca:fa:0c:30:12:dc:36:18:9a:5f:f6:17:b4: 84:32:bb:83:c8:94:8a:00:40:4f:50:5b:ab:d0:ff: 52:df:b0:d9:1b:2f:7a:e4:3e:ef:5e:37:80:63:6b: 87:97:2b:44:9b:fc:f6:a4:f0:8a:3d:64:d1:97:d5: d0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:56:86:82:C1:A8:10:9D:AA:20:7D:DC:2F:5C:CD:65:66:80:23:9F X509v3 Authority Key Identifier: keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:05:02:c6:43:7d:f4:64:40:0b:96:29:12:e1:56:96:c4:b0: 45:e0:d2:dc:9c:0a:d2:5f:de:48:c6:d0:80:f4:23:fd:ea:41: 28:80:bb:0f:a6:bc:39:13:7e:cd:55:6c:16:85:ab:68:02:a4: 76:67:c2:83:2b:a1:70:23:67:c8:55:5a:18:b3:ee:89:7f:9c: 94:7a:e8:63:02:eb:c3:34:c0:7e:f9:da:d0:9e:e7:63:c2:c0: f6:80:2f:0c:74:a4:91:5c:05:56:7d:33:d7:b1:92:71:63:83: 48:e0:e3:b3:44:e9:f4:da:71:73:f4:08:9d:df:2c:88:09:22: 89:42:43:2b:3e:c6:8d:b3:22:d9:2d:02:02:b0:73:b2:83:d0: 0c:4e:4a:87:c0:6e:74:2e:7e:2e:2f:1b:95:4b:05:86:d2:8e: cb:07:8e:78:d1:10:28:87:ec:20:a4:55:fd:e1:b9:4f:ac:a0: 78:b7:b4:75:01:f7:21:e9:fe:77:9e:01:78:10:b1:56:2d:7b: 81:2e:e8:0f:e2:d1:ef:9e:81:74:1a:2a:3c:a2:3e:a2:4f:70: 33:bc:4a:e0:7e:9b:e1:f0:20:80:c6:2e:49:c9:8c:57:2e:c6: 55:37:40:33:26:e1:7e:fa:a1:1a:92:d4:16:42:d8:b2:09:e7: 6b:85:a9:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/rZ6wYYR6sDDpy/Xt4L0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4Y2VmNzIyZGFiZTU5NzVjYTRmOWJhODYxNjM4OGVjNmM2 NTZhMjAwHhcNMjUxMjIwMjMwMTAxWhcNMjUxMjIxMjMwMTAxWjAzMTEwLwYDVQQD EyhmYTU2ODY4MmMxYTgxMDlkYWEyMDdkZGMyZjVjY2Q2NTY2ODAyMzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8PXz96GzO7uO12Mw/OL7hc1jqUL 1bl0pAr0d6vq2UsAwY0uUed5g40YyqzuIskr77UNSbnBa2h4Hb24wV5CpaQ7OWq7 tf+opAir9Z1QCcv9l+te3oj7QpYkgvZI+rxDlqudvOnCPBmw9d4tRVE/yQYnyQ3m 7GvHKHE/ImkcKSnQgPMixuEaSUDttGwrna0Qs7A1ZPND6qz5QW0iblH3PBPuuhlh aerYaeGhk8px/FphNYVj/Dtw8kD3wgURAP03BK6eNsr6DDAS3DYYml/2F7SEMruD yJSKAEBPUFur0P9S37DZGy965D7vXjeAY2uHlytEm/z2pPCKPWTRl9XQ2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpWhoLBqBCdqiB93C9czWVmgCOfMB8GA1UdIwQY MBaAFGjO9yLavll1yk+bqGFjiOxsZWogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83OTBjMTUtMjA1OC00YzM5LTkwY2It Y2Q2NzdhYjQzMWFhLzEvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi83OTBjMTUtMjA1OC00YzM5LTkwY2ItY2Q2NzdhYjQzMWFh LzEvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQUCxkN9 9GRAC5YpEuFWlsSwReDS3JwK0l/eSMbQgPQj/epBKIC7D6a8ORN+zVVsFoWraAKk dmfCgyuhcCNnyFVaGLPuiX+clHroYwLrwzTAfvna0J7nY8LA9oAvDHSkkVwFVn0z 17GScWODSODjs0Tp9Npxc/QInd8siAkiiUJDKz7GjbMi2S0CArBzsoPQDE5Kh8Bu dC5+Li8blUsFhtKOyweOeNEQKIfsIKRV/eG5T6ygeLe0dQH3Ien+d54BeBCxVi17 gS7oD+LR756BdBoqPKI+ok9wM7xK4H6b4fAggMYuScmMVy7GVTdAMybhfvqhGpLU FkLYsgnna4WpkQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:07:11 2025 by rpki-client