This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft File: 735cdfZIrGkrFLwiLiwYDIY7ReI.mft (raw, json) Hash identifier: TefHNRlT9rvS9jRe8PORmU44us2hKkYHU02tnm2X1HE= Subject key identifier: E7:32:D6:98:82:95:D4:43:53:A5:96:6E:34:32:C9:C7:F2:C3:5F:4E Authority key identifier: EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2 Certificate issuer: /CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2 Certificate serial: 019B21757003171E6EEA6C1BDB70A41A304E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft Manifest number: 0418 Signing time: Mon 15 Dec 2025 10:01:42 +0000 Manifest this update: Mon 15 Dec 2025 10:01:42 +0000 Manifest next update: Tue 16 Dec 2025 10:01:42 +0000 Files and hashes: 1: 735cdfZIrGkrFLwiLiwYDIY7ReI.crl (hash: pZqehGmj5vPhYhHy8w3tuogDXx9ThhE9BTOHFwIYPUw=) 2: YvnoPFlwVSBiKu9iqRFpzb0xlh4.roa (hash: FIC2N81bANGcoREXZdDhNQ3XBvgX/G7WyyZfKBc7yTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:70:03:17:1e:6e:ea:6c:1b:db:70:a4:1a:30:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2 Validity Not Before: Dec 15 10:01:42 2025 GMT Not After : Dec 16 10:01:42 2025 GMT Subject: CN=e732d6988295d44353a5966e3432c9c7f2c35f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b8:99:f9:38:39:24:f5:6a:82:14:a0:85:3e: 46:3b:da:df:e4:21:bd:c4:1b:02:ce:06:91:d3:99: 87:87:2d:18:10:b2:16:f3:37:f2:aa:9f:0e:bf:e4: e1:31:e3:7f:b8:2f:a4:6b:cd:68:d4:5a:52:03:fe: 07:aa:f9:b7:48:93:33:3b:33:02:48:7a:35:f5:26: e2:76:4a:69:55:6a:1f:9a:e4:c6:0d:59:8f:b1:23: 6f:42:ad:c0:0d:5b:bb:50:3c:66:53:8b:f8:de:20: e3:bb:33:77:3b:dc:c5:9f:55:db:9e:36:a9:f4:21: 7d:f6:fb:fc:39:8e:74:df:00:dd:d1:99:64:65:a1: 4f:f5:f7:6a:52:c4:86:e5:ee:e6:28:a1:f2:b6:a5: 0d:8e:55:90:5d:e2:18:d8:8e:d0:d2:d1:1d:ef:3b: 97:3b:ca:9c:24:3f:ef:e5:04:26:26:1e:6d:66:81: 88:18:a5:92:4b:ac:fe:60:de:ff:d6:26:39:2e:f1: b2:c0:8a:6c:52:d1:4a:20:d1:1b:19:02:d3:2f:66: 9c:74:64:5a:1a:04:32:40:9d:db:3c:48:07:e7:a0: 7d:c8:45:9c:a5:05:23:86:b0:c6:51:49:a9:ae:48: 3b:f0:f3:72:b2:9f:f2:b9:27:3f:1c:6a:46:14:09: b3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:32:D6:98:82:95:D4:43:53:A5:96:6E:34:32:C9:C7:F2:C3:5F:4E X509v3 Authority Key Identifier: keyid:EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:c2:9e:d9:71:ee:fd:a7:c8:84:9e:5b:3a:84:24:59:8c:eb: 09:b5:13:eb:30:cd:d2:9d:e0:f2:91:08:da:02:06:96:29:06: 9a:f6:b2:3f:0b:46:dc:e3:e0:e8:5c:a7:dd:2d:45:29:43:a8: b6:4c:76:cb:51:16:97:5c:9e:96:0f:db:01:24:d7:42:39:6d: 5a:75:86:b8:31:c6:21:be:27:16:6c:06:19:16:70:22:4d:8a: 6d:68:f8:9e:19:a1:3d:eb:a6:90:8a:5a:a8:cc:c3:7a:26:44: e3:2f:53:6b:52:14:00:d9:98:bc:26:31:e8:ca:b5:8f:68:61: a0:31:9e:a4:d1:4e:5f:70:51:e9:14:1b:89:bb:25:6c:af:02: 0a:28:da:0b:60:07:36:b7:97:4e:4b:b3:a8:c4:d7:2d:11:b1: f9:2c:78:ca:49:ff:0d:6e:c6:c6:4c:67:56:39:9b:72:fe:0a: bb:61:a5:be:9b:5a:eb:27:2d:40:32:fa:b4:f6:75:29:b1:f6: fa:6d:7f:bc:28:65:27:7b:c5:8e:42:91:16:77:de:11:73:b4: 44:dd:a7:3b:80:f1:66:5d:fe:11:3d:b3:c7:79:0f:56:1d:fe: ae:c9:d5:75:7e:d4:c6:91:c9:e8:79:ef:34:ba:68:8b:cc:25: b7:98:f1:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdXADFx5u6mwb23CkGjBOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmN2U1Yzc1ZjY0OGFjNjkyYjE0YmMyMjJlMmMxODBjODYz YjQ1ZTIwHhcNMjUxMjE1MTAwMTQyWhcNMjUxMjE2MTAwMTQyWjAzMTEwLwYDVQQD EyhlNzMyZDY5ODgyOTVkNDQzNTNhNTk2NmUzNDMyYzljN2YyYzM1ZjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLiZ+Tg5JPVqghSghT5GO9rf5CG9 xBsCzgaR05mHhy0YELIW8zfyqp8Ov+ThMeN/uC+ka81o1FpSA/4Hqvm3SJMzOzMC SHo19SbidkppVWofmuTGDVmPsSNvQq3ADVu7UDxmU4v43iDjuzN3O9zFn1Xbnjap 9CF99vv8OY503wDd0ZlkZaFP9fdqUsSG5e7mKKHytqUNjlWQXeIY2I7Q0tEd7zuX O8qcJD/v5QQmJh5tZoGIGKWSS6z+YN7/1iY5LvGywIpsUtFKINEbGQLTL2acdGRa GgQyQJ3bPEgH56B9yEWcpQUjhrDGUUmprkg78PNysp/yuSc/HGpGFAmzKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcy1piCldRDU6WWbjQyycfyw19OMB8GA1UdIwQY MBaAFO9+XHX2SKxpKxS8Ii4sGAyGO0XiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzM1Y2RmWklyR2tyRkx3aUxpd1lESVk3UmVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9hMTQyYTktYTAwYS00MjM1LWI3MWYt ZTZiMjBiMDlmODY2LzEvNzM1Y2RmWklyR2tyRkx3aUxpd1lESVk3UmVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9hMTQyYTktYTAwYS00MjM1LWI3MWYtZTZiMjBiMDlmODY2 LzEvNzM1Y2RmWklyR2tyRkx3aUxpd1lESVk3UmVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8Ke2XHu /afIhJ5bOoQkWYzrCbUT6zDN0p3g8pEI2gIGlikGmvayPwtG3OPg6Fyn3S1FKUOo tkx2y1EWl1yelg/bASTXQjltWnWGuDHGIb4nFmwGGRZwIk2KbWj4nhmhPeumkIpa qMzDeiZE4y9Ta1IUANmYvCYx6Mq1j2hhoDGepNFOX3BR6RQbibslbK8CCijaC2AH NreXTkuzqMTXLRGx+Sx4ykn/DW7GxkxnVjmbcv4Ku2Glvpta6yctQDL6tPZ1KbH2 +m1/vChlJ3vFjkKRFnfeEXO0RN2nO4DxZl3+ET2zx3kPVh3+rsnVdX7UxpHJ6Hnv NLpoi8wlt5jxeg== -----END CERTIFICATE-----Generated at Mon Dec 15 13:21:02 2025 by rpki-client