This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft File: 73OcDASkJxtarWLBGSKeGPraX9M.mft (raw, json) Hash identifier: 6hnipDPCXJzd+cf3imHC8JQWeFPjmmUlwUoOqtAxpms= Subject key identifier: 21:65:A7:DE:28:59:7F:AD:67:48:C4:DE:E6:92:21:6F:15:0D:46:7A Authority key identifier: EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3 Certificate issuer: /CN=ef739c0c04a4271b5aad62c119229e18fada5fd3 Certificate serial: 019B183B4196EAD819BF3AEFD06861827CE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft Manifest number: 0F3A Signing time: Sat 13 Dec 2025 15:01:35 +0000 Manifest this update: Sat 13 Dec 2025 15:01:35 +0000 Manifest next update: Sun 14 Dec 2025 15:01:35 +0000 Files and hashes: 1: 73OcDASkJxtarWLBGSKeGPraX9M.crl (hash: yyyzc365L8UYQLObGKaHeNm6Hk3s4SI+N7GMiKHFrlQ=) 2: GO5PY0agBoKkma7NteMSdFbX44k.roa (hash: jwM1qR7KbSYH5wU03Z7/YrapkXuYuB0WPqYmk8E3608=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 15:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:3b:41:96:ea:d8:19:bf:3a:ef:d0:68:61:82:7c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef739c0c04a4271b5aad62c119229e18fada5fd3 Validity Not Before: Dec 13 15:01:35 2025 GMT Not After : Dec 14 15:01:35 2025 GMT Subject: CN=2165a7de28597fad6748c4dee692216f150d467a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4a:44:b8:ba:06:51:83:33:cd:e0:a8:81:33: fd:31:af:07:3b:a9:d5:fd:db:f7:f8:5d:59:46:22: 54:0a:9f:31:6b:bc:8f:b4:41:49:a5:03:f1:1e:7d: 1e:cf:1c:64:d6:b7:a6:a0:50:b9:14:0a:9a:d7:2f: a7:3a:29:1f:9d:2e:41:42:3f:79:d9:74:9d:21:15: 2a:2e:ec:04:da:c2:37:6d:65:ac:21:2a:19:22:2f: ca:a8:64:c1:a8:ba:33:59:a2:7d:d1:31:8a:12:dd: 73:77:6d:c0:46:59:91:71:b4:1b:0f:ef:ba:33:a1: 9d:60:aa:73:74:30:e6:01:03:89:27:1e:d7:67:fc: 85:02:d9:a0:02:bb:54:3f:f4:e2:97:6f:47:f5:05: ff:24:72:8d:e6:9a:2f:31:88:99:73:4d:d9:48:79: 06:8e:ec:97:00:ef:2c:b2:b1:b4:fa:8b:ee:75:3c: 89:30:47:9a:c0:28:15:f3:cb:ed:5e:c3:06:9d:b7: 90:6a:26:88:49:68:59:c0:2c:60:8a:29:61:69:4b: 5e:02:e2:01:1e:b7:44:0b:25:75:e2:7b:53:e2:70: 41:15:c9:1d:e2:f5:e2:0b:50:1d:cb:11:ea:99:9c: a4:61:87:64:f1:0c:fa:0f:e1:17:10:cc:0e:5b:de: ff:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:65:A7:DE:28:59:7F:AD:67:48:C4:DE:E6:92:21:6F:15:0D:46:7A X509v3 Authority Key Identifier: keyid:EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5d:be:19:ca:b7:49:de:4a:9a:2f:d3:5f:d7:23:90:18:fa: 19:f4:3c:cd:8e:7b:c9:45:9a:c0:13:09:ba:aa:c3:0c:1d:72: f9:d8:e0:cd:c7:38:ac:8c:5d:8c:f5:be:4c:32:c8:95:28:65: 44:9a:fd:e4:4a:12:d2:1c:2c:98:36:65:80:7d:2b:2a:65:89: 8c:99:df:ed:20:7c:4c:ba:d9:2d:36:8b:16:26:2f:5b:46:68: 53:c5:a8:2b:0f:d6:2c:c4:0c:ca:40:6c:72:09:15:f2:57:e0: 25:a6:ee:6c:16:45:31:b5:29:a5:32:f3:e7:f0:05:69:d4:b7: ef:cd:21:e8:ce:90:3c:19:bd:76:b7:ab:2e:50:d2:e4:c7:ad: bf:8d:fd:a0:41:7f:fd:e1:9e:dc:3c:32:c4:a4:98:75:ea:e1: e1:f5:18:91:31:71:ec:39:e0:08:e8:80:b1:13:d9:f3:22:e1: 51:79:ef:50:4a:1a:58:6b:d9:c8:ee:a9:9e:8a:3b:c5:82:ab: 58:a4:28:78:5d:70:fb:ad:55:ef:a4:be:44:c5:7d:77:2d:e3: f2:aa:46:30:2c:21:68:9b:13:ff:eb:c6:1c:db:ae:82:f4:26: 0c:e2:71:fa:da:b6:16:87:c5:df:90:3b:ea:55:5e:9a:f7:c8: da:1a:73:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYO0GW6tgZvzrv0GhhgnzpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNzM5YzBjMDRhNDI3MWI1YWFkNjJjMTE5MjI5ZTE4ZmFk YTVmZDMwHhcNMjUxMjEzMTUwMTM1WhcNMjUxMjE0MTUwMTM1WjAzMTEwLwYDVQQD EygyMTY1YTdkZTI4NTk3ZmFkNjc0OGM0ZGVlNjkyMjE2ZjE1MGQ0NjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0pEuLoGUYMzzeCogTP9Ma8HO6nV /dv3+F1ZRiJUCp8xa7yPtEFJpQPxHn0ezxxk1remoFC5FAqa1y+nOikfnS5BQj95 2XSdIRUqLuwE2sI3bWWsISoZIi/KqGTBqLozWaJ90TGKEt1zd23ARlmRcbQbD++6 M6GdYKpzdDDmAQOJJx7XZ/yFAtmgArtUP/Til29H9QX/JHKN5povMYiZc03ZSHkG juyXAO8ssrG0+ovudTyJMEeawCgV88vtXsMGnbeQaiaISWhZwCxgiilhaUteAuIB HrdECyV14ntT4nBBFckd4vXiC1AdyxHqmZykYYdk8Qz6D+EXEMwOW97/zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFlp94oWX+tZ0jE3uaSIW8VDUZ6MB8GA1UdIwQY MBaAFO9znAwEpCcbWq1iwRkinhj62l/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzNPY0RBU2tKeHRhcldMQkdTS2VHUHJhWDlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yODUxOWYtZGM0OC00ZjMxLWEzNWUt OTllZTRhODk4NWMzLzEvNzNPY0RBU2tKeHRhcldMQkdTS2VHUHJhWDlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8yODUxOWYtZGM0OC00ZjMxLWEzNWUtOTllZTRhODk4NWMz LzEvNzNPY0RBU2tKeHRhcldMQkdTS2VHUHJhWDlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW12+Gcq3 Sd5Kmi/TX9cjkBj6GfQ8zY57yUWawBMJuqrDDB1y+djgzcc4rIxdjPW+TDLIlShl RJr95EoS0hwsmDZlgH0rKmWJjJnf7SB8TLrZLTaLFiYvW0ZoU8WoKw/WLMQMykBs cgkV8lfgJabubBZFMbUppTLz5/AFadS3780h6M6QPBm9drerLlDS5Metv439oEF/ /eGe3DwyxKSYderh4fUYkTFx7DngCOiAsRPZ8yLhUXnvUEoaWGvZyO6pnoo7xYKr WKQoeF1w+61V76S+RMV9dy3j8qpGMCwhaJsT/+vGHNuugvQmDOJx+tq2FofF35A7 6lVemvfI2hpz7w== -----END CERTIFICATE-----Generated at Sun Dec 14 00:04:20 2025 by rpki-client