This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft File: _z73u2pGuvTbG6633ySkDB1MFU8.mft (raw, json) Hash identifier: mfNsL/nYECmM9a5QkPHA2MYY3yByK4ELp+VzKNelhSg= Subject key identifier: 0B:C5:0C:C8:64:DC:4E:DE:AB:84:5D:65:85:E7:82:F4:96:D0:23:8F Authority key identifier: FF:3E:F7:BB:6A:46:BA:F4:DB:1B:AE:B7:DF:24:A4:0C:1D:4C:15:4F Certificate issuer: /CN=ff3ef7bb6a46baf4db1baeb7df24a40c1d4c154f Certificate serial: 019B21760B853318AE15F821FAF91AF70744 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft Manifest number: 0427 Signing time: Mon 15 Dec 2025 10:02:22 +0000 Manifest this update: Mon 15 Dec 2025 10:02:22 +0000 Manifest next update: Tue 16 Dec 2025 10:02:22 +0000 Files and hashes: 1: CyralhGuX94DIISxgcLaFGkuwEE.roa (hash: jbaQiBUIOwYyUUxeUd5k0D2sxSHilcS8Ozj2S6lNjj0=) 2: _z73u2pGuvTbG6633ySkDB1MFU8.crl (hash: kk3IVMT+QNltoiL1NxWAnTqJ8C5iyZlb0fHsKy3fyiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:0b:85:33:18:ae:15:f8:21:fa:f9:1a:f7:07:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3ef7bb6a46baf4db1baeb7df24a40c1d4c154f Validity Not Before: Dec 15 10:02:22 2025 GMT Not After : Dec 16 10:02:22 2025 GMT Subject: CN=0bc50cc864dc4edeab845d6585e782f496d0238f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ce:a5:b9:27:4b:60:f0:79:98:1a:8d:b5:89: dc:77:0a:da:49:7d:cd:56:09:fd:7e:e5:d2:f7:62: 56:9b:71:39:c2:e2:10:e2:76:3d:7e:12:de:24:b5: 84:88:33:27:06:12:8c:d4:60:e7:19:74:64:e3:4c: 81:1e:81:a4:8c:e3:d5:3e:66:35:22:ab:b1:94:ba: 0d:d9:a3:7e:80:3a:1f:3b:7d:8d:3d:52:c9:ab:56: dc:63:07:5c:54:92:91:4b:46:54:15:20:b6:e3:0f: 0a:ad:a9:0b:47:4c:e8:91:7f:81:ae:1d:f1:de:83: ea:cd:76:16:41:50:95:66:2b:47:28:5f:cb:87:a6: 2e:ab:db:1d:ac:63:0e:26:18:a0:a7:35:dc:3b:ee: 8c:c2:86:20:55:dc:ae:55:ac:28:1e:bc:78:f9:fe: df:3c:39:2b:2e:0c:02:e4:c6:20:3b:98:fb:18:8d: f4:25:e0:14:52:75:68:eb:63:07:2b:7a:66:d0:ac: 92:92:62:56:b4:6f:39:0b:34:46:b7:e4:65:24:93: c7:22:3b:72:3e:2f:34:f8:35:58:98:64:4b:70:f4: bb:f0:ff:68:4a:4e:2d:c7:aa:8d:4b:2f:66:b0:46: 49:d8:30:5c:8e:c4:b8:94:f9:35:af:f4:91:02:1a: 35:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C5:0C:C8:64:DC:4E:DE:AB:84:5D:65:85:E7:82:F4:96:D0:23:8F X509v3 Authority Key Identifier: keyid:FF:3E:F7:BB:6A:46:BA:F4:DB:1B:AE:B7:DF:24:A4:0C:1D:4C:15:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:a0:7a:7f:a8:c5:dd:00:c7:21:b5:90:9c:1b:0b:db:5c:4e: f9:6c:aa:be:ff:0d:ea:94:00:7e:34:09:37:f5:59:35:36:37: f8:9e:79:19:48:45:eb:5d:e6:68:02:81:fd:9b:34:a3:86:b1: d2:2b:34:a4:a4:4e:63:0b:e0:20:f6:ab:ed:d6:7d:28:07:95: ff:98:dd:85:10:b7:08:e6:55:25:8f:ec:fd:a0:7a:e2:26:dc: c8:d7:7e:09:b6:19:01:b0:b4:1e:70:0f:bc:6d:8e:f7:af:d7: ca:41:c6:c2:29:28:90:89:a1:a3:a4:c1:08:1f:e4:98:0a:78: 20:d2:43:63:a3:be:5c:db:69:bd:63:11:72:4f:03:63:0f:f6: 34:66:a5:87:45:f7:0e:4a:40:e9:61:46:65:33:b2:6b:f0:aa: aa:6b:b8:66:57:81:27:bc:52:a9:76:59:99:83:e7:7b:79:02: dd:68:bf:d8:70:e2:06:b3:1d:ec:90:7f:b8:7b:6e:ed:73:8c: d5:bb:4a:2a:fa:5e:ad:2d:09:13:85:e0:c6:bc:fd:40:ac:f6: d5:02:5a:98:ab:95:96:fd:91:ab:37:e3:45:26:1a:43:be:35: 32:66:4b:fb:68:8d:8b:72:4e:2e:28:f5:45:2c:3b:6a:a5:6e: ce:df:b3:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdguFMxiuFfgh+vka9wdEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmM2VmN2JiNmE0NmJhZjRkYjFiYWViN2RmMjRhNDBjMWQ0 YzE1NGYwHhcNMjUxMjE1MTAwMjIyWhcNMjUxMjE2MTAwMjIyWjAzMTEwLwYDVQQD EygwYmM1MGNjODY0ZGM0ZWRlYWI4NDVkNjU4NWU3ODJmNDk2ZDAyMzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM6luSdLYPB5mBqNtYncdwraSX3N Vgn9fuXS92JWm3E5wuIQ4nY9fhLeJLWEiDMnBhKM1GDnGXRk40yBHoGkjOPVPmY1 IquxlLoN2aN+gDofO32NPVLJq1bcYwdcVJKRS0ZUFSC24w8KrakLR0zokX+Brh3x 3oPqzXYWQVCVZitHKF/Lh6Yuq9sdrGMOJhigpzXcO+6MwoYgVdyuVawoHrx4+f7f PDkrLgwC5MYgO5j7GI30JeAUUnVo62MHK3pm0KySkmJWtG85CzRGt+RlJJPHIjty Pi80+DVYmGRLcPS78P9oSk4tx6qNSy9msEZJ2DBcjsS4lPk1r/SRAho1awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvFDMhk3E7eq4RdZYXngvSW0COPMB8GA1UdIwQY MBaAFP8+97tqRrr02xuut98kpAwdTBVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3o3M3UycEd1dlRiRzY2MzN5U2tEQjFNRlU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82ODcxYTAtYWZiMi00NWFiLWFkZGUt NjJiZTFmMDJhYjBjLzEvX3o3M3UycEd1dlRiRzY2MzN5U2tEQjFNRlU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi82ODcxYTAtYWZiMi00NWFiLWFkZGUtNjJiZTFmMDJhYjBj LzEvX3o3M3UycEd1dlRiRzY2MzN5U2tEQjFNRlU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs6B6f6jF 3QDHIbWQnBsL21xO+Wyqvv8N6pQAfjQJN/VZNTY3+J55GUhF613maAKB/Zs0o4ax 0is0pKROYwvgIPar7dZ9KAeV/5jdhRC3COZVJY/s/aB64ibcyNd+CbYZAbC0HnAP vG2O96/XykHGwikokImho6TBCB/kmAp4INJDY6O+XNtpvWMRck8DYw/2NGalh0X3 DkpA6WFGZTOya/Cqqmu4ZleBJ7xSqXZZmYPne3kC3Wi/2HDiBrMd7JB/uHtu7XOM 1btKKvperS0JE4Xgxrz9QKz21QJamKuVlv2RqzfjRSYaQ741MmZL+2iNi3JOLij1 RSw7aqVuzt+zAA== -----END CERTIFICATE-----Generated at Mon Dec 15 12:04:42 2025 by rpki-client