This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft File: 73i8lpqDBzNu9ARPPf7x_hNjgrM.mft (raw, json) Hash identifier: L19owgNPuOnLZeFPiNB5r3z+rbSpwA1blEO1qTTvVKo= Subject key identifier: AA:93:CF:00:8D:5E:C7:BB:35:A2:E5:79:CA:99:BB:6B:D8:E1:7D:02 Authority key identifier: EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3 Certificate issuer: /CN=ef78bc969a8307336ef4044f3dfef1fe136382b3 Certificate serial: 019B225070FA43DBA56F8777F02D12D9F1B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft Manifest number: 0D42 Signing time: Mon 15 Dec 2025 14:00:55 +0000 Manifest this update: Mon 15 Dec 2025 14:00:55 +0000 Manifest next update: Tue 16 Dec 2025 14:00:55 +0000 Files and hashes: 1: 73i8lpqDBzNu9ARPPf7x_hNjgrM.crl (hash: dvbheNHSB0B34RxU32B/+FTpOWZFWnqhOgzwOyytIEE=) 2: uuMH9xwnTCchffmAJa-oKrLfAYc.roa (hash: gi00uqlY9uodrepVtMPHWYj2E0gYu71bOvNoVXlRiVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:70:fa:43:db:a5:6f:87:77:f0:2d:12:d9:f1:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef78bc969a8307336ef4044f3dfef1fe136382b3 Validity Not Before: Dec 15 14:00:55 2025 GMT Not After : Dec 16 14:00:55 2025 GMT Subject: CN=aa93cf008d5ec7bb35a2e579ca99bb6bd8e17d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6a:e9:28:b4:32:e9:84:cf:39:24:18:1c:c9: 58:f1:90:21:36:3b:04:37:7f:fb:9a:c5:8f:bf:4e: a8:7f:c9:71:39:8b:34:7f:4e:2e:76:b4:8b:95:8a: 00:09:57:c9:52:0d:a3:d3:ce:e4:79:f2:27:a5:e2: 46:bd:e9:84:ab:58:16:de:f9:eb:6f:82:33:5c:eb: 90:45:17:c7:31:c4:f1:12:74:60:97:2a:b6:bb:d1: 97:b0:ec:b7:1c:ad:bf:20:45:8f:d9:2b:c7:af:49: 40:b2:ed:99:7a:50:3d:98:ff:09:27:6b:52:0a:3e: 5c:26:97:7b:9f:fc:5a:64:25:13:78:91:23:af:70: 24:3e:a6:ec:ad:3b:8b:73:a0:68:a4:55:60:91:21: e7:63:1f:0a:94:70:29:68:f7:8d:5e:f7:cd:00:b3: 53:15:10:4a:04:0a:9a:92:d0:4d:0a:01:3b:73:1e: 78:52:42:d2:a2:68:00:16:e8:50:b9:53:d0:4f:b4: dd:9d:93:4d:70:70:91:38:9c:96:e5:ed:31:5f:2b: b5:04:d7:13:17:84:30:57:10:1c:2f:03:e8:1e:07: 8d:69:f4:3e:6b:f6:30:d5:f6:cc:bd:73:70:f9:bc: 16:1a:c5:7d:68:1a:56:96:75:f7:2c:9f:d2:78:be: 78:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:93:CF:00:8D:5E:C7:BB:35:A2:E5:79:CA:99:BB:6B:D8:E1:7D:02 X509v3 Authority Key Identifier: keyid:EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:6c:7a:9f:aa:77:7b:f3:8a:3f:d4:93:34:15:4d:a7:69:4e: f8:cf:27:94:ea:e8:1a:a9:86:83:a6:68:9a:26:4a:a4:a2:cf: a0:67:05:1f:f2:fb:7a:90:8c:e4:8d:17:63:b7:ee:37:7e:f8: de:1f:a3:c9:13:9d:4a:72:33:ed:99:33:7c:4d:c9:05:68:b2: a1:07:74:33:99:11:f4:44:01:27:28:1a:d6:d1:69:81:b0:59: 2a:d8:b5:7a:b8:b9:32:2a:13:1f:3f:9f:82:47:63:ab:6b:26: ea:64:5a:f4:2f:6c:d9:56:52:6f:08:51:9f:da:9d:2f:87:fd: f7:bc:b5:89:bf:f6:1a:27:dd:89:04:ad:ff:a1:74:32:1b:bf: 8c:de:f7:78:fb:ff:af:0a:36:aa:79:fe:6c:44:20:5b:64:06: c2:bb:8e:c1:27:be:b5:1c:6c:77:83:ca:1a:c9:c9:a8:ba:21: 9a:5e:48:b3:f8:a3:1e:29:cd:f6:3f:01:3b:60:5a:5b:61:1b: 31:2e:a9:21:4f:38:b0:fc:cc:b1:92:1c:ea:07:af:0c:81:f6: d7:d9:23:90:a7:8b:c0:3d:d8:20:a7:05:de:8e:d9:f1:9b:76: b2:f6:f2:64:55:ef:b9:8a:85:17:95:12:3d:b6:53:ef:c0:a2: 85:44:b7:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiUHD6Q9ulb4d38C0S2fG3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNzhiYzk2OWE4MzA3MzM2ZWY0MDQ0ZjNkZmVmMWZlMTM2 MzgyYjMwHhcNMjUxMjE1MTQwMDU1WhcNMjUxMjE2MTQwMDU1WjAzMTEwLwYDVQQD EyhhYTkzY2YwMDhkNWVjN2JiMzVhMmU1NzljYTk5YmI2YmQ4ZTE3ZDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2rpKLQy6YTPOSQYHMlY8ZAhNjsE N3/7msWPv06of8lxOYs0f04udrSLlYoACVfJUg2j087kefInpeJGvemEq1gW3vnr b4IzXOuQRRfHMcTxEnRglyq2u9GXsOy3HK2/IEWP2SvHr0lAsu2ZelA9mP8JJ2tS Cj5cJpd7n/xaZCUTeJEjr3AkPqbsrTuLc6BopFVgkSHnYx8KlHApaPeNXvfNALNT FRBKBAqaktBNCgE7cx54UkLSomgAFuhQuVPQT7TdnZNNcHCROJyW5e0xXyu1BNcT F4QwVxAcLwPoHgeNafQ+a/Yw1fbMvXNw+bwWGsV9aBpWlnX3LJ/SeL54AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqTzwCNXse7NaLlecqZu2vY4X0CMB8GA1UdIwQY MBaAFO94vJaagwczbvQETz3+8f4TY4KzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzNpOGxwcURCek51OUFSUFBmN3hfaE5qZ3JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lNGJkNmEtYWRhZi00OGM4LWI5OTkt NTM1NzBhMWFiZDA0LzEvNzNpOGxwcURCek51OUFSUFBmN3hfaE5qZ3JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9lNGJkNmEtYWRhZi00OGM4LWI5OTktNTM1NzBhMWFiZDA0 LzEvNzNpOGxwcURCek51OUFSUFBmN3hfaE5qZ3JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmx6n6p3 e/OKP9STNBVNp2lO+M8nlOroGqmGg6ZomiZKpKLPoGcFH/L7epCM5I0XY7fuN374 3h+jyROdSnIz7ZkzfE3JBWiyoQd0M5kR9EQBJyga1tFpgbBZKti1eri5MioTHz+f gkdjq2sm6mRa9C9s2VZSbwhRn9qdL4f997y1ib/2GifdiQSt/6F0Mhu/jN73ePv/ rwo2qnn+bEQgW2QGwruOwSe+tRxsd4PKGsnJqLohml5Is/ijHinN9j8BO2BaW2Eb MS6pIU84sPzMsZIc6gevDIH219kjkKeLwD3YIKcF3o7Z8Zt2svbyZFXvuYqFF5US PbZT78CihUS3+Q== -----END CERTIFICATE-----Generated at Mon Dec 15 16:56:23 2025 by rpki-client