This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.mft File: 73_V0zBhqd6SCvHCoTUT1G3SRhI.mft (raw, json) Hash identifier: twbDbi8gxXmvfWKAaAPhr+EEaXD+axBJGIzUVGEd6yo= Subject key identifier: 3C:93:D8:3C:A6:10:AF:A6:DC:62:44:72:C6:0B:60:7B:E0:99:0D:6C Authority key identifier: EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12 Certificate issuer: /CN=ef7fd5d33061a9de920af1c2a13513d46dd24612 Certificate serial: 019B0FA5DBFAF21980C19EF8D3239957DE3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.mft Manifest number: 1777 Signing time: Thu 11 Dec 2025 23:01:26 +0000 Manifest this update: Thu 11 Dec 2025 23:01:26 +0000 Manifest next update: Fri 12 Dec 2025 23:01:26 +0000 Files and hashes: 1: 73_V0zBhqd6SCvHCoTUT1G3SRhI.crl (hash: NE5Q+oc4KdUqXuO5/39NmpCeoTrUByVbC+6pOJ8XNdA=) 2: XpYkEceOcNVMjE9iA-7wdH8wU4Y.roa (hash: ZveXXYUwOKQW6NWsOhOjeqI3QtT8i2gAi2nt9BB+rrk=) 3: aOgL8M0VDCoJFBbKjHHipw7CgK0.roa (hash: JxHs1uM5GfGFdmpY3+A1A8dI63STuU0UQ0HROiRxjIM=) 4: fuNTm9OkKgw1mC4KKOVTy1qgwlI.roa (hash: U1l6Z979R3w3BYeOJyPvuo9cktUgt6LoAxySgYlXj8c=) 5: hB9kQl1Y6rBahp990wuCw4pSfNg.roa (hash: jB2Ttg5gS2jisY59LQMkSanJOv0YUDqMHRUuoIatX+k=) 6: hp5ect9lYgBo8YeD0kYGPqIVIWE.roa (hash: bU8CEDTNnsMFjBYJstxXTlTuXwJC6lBr3bl7i7JNilc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.mft rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:db:fa:f2:19:80:c1:9e:f8:d3:23:99:57:de:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef7fd5d33061a9de920af1c2a13513d46dd24612 Validity Not Before: Dec 11 23:01:26 2025 GMT Not After : Dec 12 23:01:26 2025 GMT Subject: CN=3c93d83ca610afa6dc624472c60b607be0990d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8a:dd:fc:a3:9b:47:20:e5:11:00:4b:c6:f5: d1:93:52:07:f4:6d:35:d5:99:4d:03:05:b4:50:b7: 33:bf:86:3b:6b:08:17:db:6a:81:53:e8:8d:4d:57: 1f:5e:af:e7:e5:3f:ca:59:86:6e:bb:96:99:46:e0: f4:4a:af:b2:06:64:7b:ac:c3:8a:7f:5f:c6:66:99: 01:78:3e:58:24:39:54:ba:dc:1c:bc:de:78:76:59: b8:1a:8d:bc:8c:b3:ed:f2:3d:1f:83:13:b4:db:98: fe:9e:30:f5:32:11:b2:58:7e:6c:f6:c4:fa:f4:75: 0e:87:91:fe:b8:31:7f:d7:c4:d9:ef:f6:9b:c1:07: 21:c6:b1:05:07:e2:68:17:15:32:8d:55:0a:9e:ac: 91:1c:4d:64:21:ce:13:0c:bc:a3:dc:27:62:ff:c6: d3:7c:50:86:5f:07:3f:96:05:8f:8d:74:f0:5a:1a: 71:4d:c8:60:dc:f0:a5:4c:15:1a:16:ac:25:7a:ab: 97:2c:91:19:aa:58:99:31:59:c8:7e:34:ed:36:f7: af:91:a7:72:d6:76:cc:35:d1:ea:b0:29:26:93:f2: 1d:1a:ea:d9:7b:58:b6:f3:91:ce:10:31:26:cb:cf: 37:d1:52:5a:33:75:eb:f0:92:53:4b:f4:ad:ca:6c: cb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:93:D8:3C:A6:10:AF:A6:DC:62:44:72:C6:0B:60:7B:E0:99:0D:6C X509v3 Authority Key Identifier: keyid:EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b0:7a:9a:79:5f:6e:5a:3f:9a:7c:cf:38:ac:99:a2:11:bf: bd:fc:20:59:7e:ef:1b:10:19:55:ae:f6:a9:e3:59:c9:9d:62: 41:09:49:8e:9b:03:85:cf:12:16:a6:09:e2:67:eb:58:7a:ba: e5:6a:bb:be:fa:7e:e1:a3:9b:98:77:ef:fd:a3:7b:6c:ac:08: c6:94:c8:b1:c6:d9:83:7d:c5:29:6e:ad:6b:5e:df:01:f3:92: 3c:49:31:6c:d1:f8:75:8b:eb:d1:4e:d9:5e:09:bf:0e:60:5e: a6:cc:9c:5c:e6:90:67:9c:be:b6:66:6b:c6:f8:8a:5f:d0:32: 44:24:5d:c9:22:f4:87:f5:4e:b3:da:f0:0c:da:5c:16:7c:e9: 77:55:13:4a:6e:c1:50:da:ef:04:af:22:47:6b:71:b8:62:2d: 97:b8:3e:99:4f:d2:b0:d0:8f:87:df:ce:4a:65:3d:b9:51:ec: 96:a3:25:4b:c2:a9:1f:5b:b9:e5:18:73:a2:60:9e:14:54:24: c5:5b:54:2e:f1:e7:01:f8:6c:29:d0:79:cd:99:d2:c5:67:3a: 30:ad:3f:ad:2d:a9:57:58:5d:ce:20:ea:02:e8:36:20:81:4e: 28:3d:10:ce:df:f5:bc:ba:16:a7:fa:d0:bf:63:fe:0b:e4:8d: 20:03:df:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpdv68hmAwZ740yOZV946MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmN2ZkNWQzMzA2MWE5ZGU5MjBhZjFjMmExMzUxM2Q0NmRk MjQ2MTIwHhcNMjUxMjExMjMwMTI2WhcNMjUxMjEyMjMwMTI2WjAzMTEwLwYDVQQD EygzYzkzZDgzY2E2MTBhZmE2ZGM2MjQ0NzJjNjBiNjA3YmUwOTkwZDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4rd/KObRyDlEQBLxvXRk1IH9G01 1ZlNAwW0ULczv4Y7awgX22qBU+iNTVcfXq/n5T/KWYZuu5aZRuD0Sq+yBmR7rMOK f1/GZpkBeD5YJDlUutwcvN54dlm4Go28jLPt8j0fgxO025j+njD1MhGyWH5s9sT6 9HUOh5H+uDF/18TZ7/abwQchxrEFB+JoFxUyjVUKnqyRHE1kIc4TDLyj3Cdi/8bT fFCGXwc/lgWPjXTwWhpxTchg3PClTBUaFqwlequXLJEZqliZMVnIfjTtNvevkady 1nbMNdHqsCkmk/IdGurZe1i285HOEDEmy8830VJaM3Xr8JJTS/StymzLJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyT2DymEK+m3GJEcsYLYHvgmQ1sMB8GA1UdIwQY MBaAFO9/1dMwYanekgrxwqE1E9Rt0kYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzNfVjB6QmhxZDZTQ3ZIQ29UVVQxRzNTUmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMzE5MGMtZTFhMC00YmE0LWIxZDgt YTEwMmJlMzgyZTUxLzEvNzNfVjB6QmhxZDZTQ3ZIQ29UVVQxRzNTUmhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yMzE5MGMtZTFhMC00YmE0LWIxZDgtYTEwMmJlMzgyZTUx LzEvNzNfVjB6QmhxZDZTQ3ZIQ29UVVQxRzNTUmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbB6mnlf blo/mnzPOKyZohG/vfwgWX7vGxAZVa72qeNZyZ1iQQlJjpsDhc8SFqYJ4mfrWHq6 5Wq7vvp+4aObmHfv/aN7bKwIxpTIscbZg33FKW6ta17fAfOSPEkxbNH4dYvr0U7Z Xgm/DmBepsycXOaQZ5y+tmZrxviKX9AyRCRdySL0h/VOs9rwDNpcFnzpd1UTSm7B UNrvBK8iR2txuGItl7g+mU/SsNCPh9/OSmU9uVHslqMlS8KpH1u55RhzomCeFFQk xVtULvHnAfhsKdB5zZnSxWc6MK0/rS2pV1hdziDqAug2IIFOKD0Qzt/1vLoWp/rQ v2P+C+SNIAPf/w== -----END CERTIFICATE-----Generated at Fri Dec 12 01:00:06 2025 by rpki-client