This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
File: 73OcDASkJxtarWLBGSKeGPraX9M.mft (raw, json)
Hash identifier: Y7Vh7cxkJo1GLKPBpesOF3byPLK6rIE/wTdb4BOxtP8=
Subject key identifier: C6:55:9B:0E:AB:16:3B:18:65:A4:F9:C2:A0:62:78:65:C5:72:85:AA
Authority key identifier: EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
Certificate issuer: /CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Certificate serial: 019C0443AC50E64485BED29AF9AFC8623F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
Manifest number: 0FB5
Signing time: Wed 28 Jan 2026 11:01:09 +0000
Manifest this update: Wed 28 Jan 2026 11:01:09 +0000
Manifest next update: Thu 29 Jan 2026 11:01:09 +0000
Files and hashes: 1: 73OcDASkJxtarWLBGSKeGPraX9M.crl (hash: JWhmpEDVXexviliH0lg8uvlZ/2JBEDm6iS2GrGSjj1Y=)
2: SlpF7r7mXCWXhPzZBmODYnXQ2AQ.roa (hash: jMJC3ZxPYgXKuHU+fXZq1zQnba0EbcW6rqUVC+m4QQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Jan 2026 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:04:43:ac:50:e6:44:85:be:d2:9a:f9:af:c8:62:3f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Validity
Not Before: Jan 28 11:01:09 2026 GMT
Not After : Jan 29 11:01:09 2026 GMT
Subject: CN=c6559b0eab163b1865a4f9c2a0627865c57285aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4c:e5:95:09:c3:50:bd:79:bc:0b:7b:b8:20:
5b:ba:bd:fa:e9:61:19:db:50:89:b9:f8:1b:ad:e8:
8b:04:8d:f5:85:4a:4a:74:ca:6e:ca:51:09:ad:1a:
2e:7d:0b:cb:d3:64:7d:a7:6c:31:2e:bc:26:3c:4f:
ae:27:ce:9b:6a:5d:61:73:8a:e8:e5:31:81:d4:d8:
9d:63:f0:98:60:db:b7:44:39:11:a0:14:94:a9:a7:
c9:86:ef:79:b7:c0:6a:07:e6:5e:82:47:65:81:6f:
0f:a9:3c:86:38:bb:1f:52:1e:6e:cd:de:41:72:02:
1d:51:5b:50:e2:c3:e6:67:58:bf:2e:df:9b:6b:e0:
ba:56:8d:d6:00:d3:a3:95:80:9a:38:36:f2:40:ab:
89:a4:7a:1f:a0:45:65:3d:57:f8:99:e1:ab:53:14:
ab:75:e3:4b:38:88:7b:e9:c0:9d:be:ec:6e:70:59:
d4:62:da:49:bc:c2:61:60:f4:39:b8:c5:44:65:59:
31:9c:30:08:61:f8:da:40:c4:30:53:71:a7:01:c2:
6d:fb:80:ef:73:7c:7f:ca:58:cf:64:31:80:c4:11:
0d:a0:f3:e6:95:ce:ea:a9:00:6d:5e:44:48:db:1b:
63:bd:b1:56:dc:f4:3a:7e:ba:a1:38:3e:31:02:7f:
b8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:55:9B:0E:AB:16:3B:18:65:A4:F9:C2:A0:62:78:65:C5:72:85:AA
X509v3 Authority Key Identifier:
keyid:EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:98:9e:64:c4:63:27:2d:81:14:6b:85:19:e1:22:7b:da:0f:
07:b4:6f:bf:32:a3:6e:c3:df:6e:94:79:20:1d:9c:7f:d4:40:
27:b9:f4:03:f1:d4:58:be:51:40:b4:dd:36:7a:8c:6d:78:32:
6b:9d:c1:7a:fb:99:ec:1d:07:ff:d9:b1:49:4d:a7:2d:d9:20:
69:f7:4b:f7:83:40:ef:6e:e5:cf:2e:db:41:b8:8b:f2:6b:af:
d8:0d:7b:b9:e0:4d:cb:1f:49:bd:4d:91:19:02:6a:b3:42:d1:
4a:04:24:4c:17:70:da:01:2f:f4:c0:e8:9c:5c:89:fe:12:bc:
95:6d:34:d6:57:82:d4:7e:7f:41:1c:b2:e8:39:0d:46:57:84:
a5:6f:63:d6:65:9e:57:32:8d:44:5c:eb:4a:7f:36:13:cd:bb:
74:b6:94:1a:b2:b6:68:b9:9b:1d:28:45:22:22:7d:d1:d0:37:
23:15:e4:4e:49:2e:3a:5d:68:b2:5a:cf:eb:ce:2a:3e:f6:57:
a0:9d:b4:c9:1f:cb:eb:d1:e9:08:de:bf:0d:cf:61:40:e6:f4:
96:16:21:56:09:ad:4c:78:f6:30:55:02:44:ff:04:66:02:79:
99:75:13:ed:25:82:0d:2d:87:e2:78:17:e1:01:0e:cc:e5:12:
84:e6:09:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 17:54:27 2026 by rpki-client