This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft File: n73cYxPvxLZyp-KzKuPESE_l9jA.mft (raw, json) Hash identifier: bwryln354PKseyOFW+VGYwhemE2EeBMYXZqX8T7hSKY= Subject key identifier: 17:74:00:09:F0:2A:D1:4B:2E:B7:20:71:A3:20:C6:D3:91:67:99:D4 Authority key identifier: 9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30 Certificate issuer: /CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630 Certificate serial: 019AF50A3CD61A79F7ED2049F510020F5670 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft Manifest number: 12CD Signing time: Sat 06 Dec 2025 19:01:20 +0000 Manifest this update: Sat 06 Dec 2025 19:01:20 +0000 Manifest next update: Sun 07 Dec 2025 19:01:20 +0000 Files and hashes: 1: boDA4PQiCnDxp3aC4mFfCKLLJrE.roa (hash: qzJMKZb9GADDw4cKKxLUhJ/VrvT205N7vn0KRws/PGE=) 2: n73cYxPvxLZyp-KzKuPESE_l9jA.crl (hash: Q932h25vuRuWwg1i3pvB+qsi7MTji2zjccHdZrdMTV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:3c:d6:1a:79:f7:ed:20:49:f5:10:02:0f:56:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630 Validity Not Before: Dec 6 19:01:20 2025 GMT Not After : Dec 7 19:01:20 2025 GMT Subject: CN=17740009f02ad14b2eb72071a320c6d3916799d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:57:75:dd:7c:47:56:32:21:a2:67:0a:00:52: c4:8a:34:ca:73:4d:54:df:6e:6f:2e:a4:c5:07:10: d8:2a:e6:0c:d1:b3:b3:8a:ad:8b:ad:80:a0:8e:c8: 6c:cb:2d:34:0b:e2:df:fb:79:92:ac:b8:28:2b:2d: 55:b3:85:4a:69:f0:47:77:31:11:5e:f4:76:16:b9: 7b:c8:a9:52:2e:74:01:49:5d:d0:96:d5:99:b5:a2: e7:1b:3d:1e:74:8d:18:44:25:75:c1:0f:9d:05:0a: 70:16:fe:10:89:f0:14:f8:0c:dd:a1:60:e0:b2:cb: 6a:fc:0d:cc:51:47:5f:ea:9b:0f:49:d0:26:f7:53: 39:2d:2b:c8:d1:6f:df:67:89:f1:75:1e:f9:dc:2a: 76:7e:61:f6:b5:d9:c6:20:59:f5:7c:2b:04:81:b3: 56:29:51:3f:ff:9d:03:8d:f8:e8:95:1c:96:39:3b: 4c:3b:9e:a5:bc:a0:59:04:e9:44:98:d6:57:4f:5f: 56:c2:b2:2a:77:48:56:0b:a3:12:f9:3c:08:f8:8b: f0:eb:a7:4c:cf:20:e5:74:de:c0:4c:50:bd:07:3a: 48:9a:32:bf:c5:4b:8e:82:d3:ca:6b:bb:31:94:4a: 7b:80:5c:79:7b:fb:d3:d8:e4:b3:70:d1:02:5d:a2: dd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:74:00:09:F0:2A:D1:4B:2E:B7:20:71:A3:20:C6:D3:91:67:99:D4 X509v3 Authority Key Identifier: keyid:9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:84:b7:6d:05:30:bd:48:d3:a2:8e:e7:d2:98:58:64:f2:ca: b5:45:25:0e:4b:46:54:b7:f0:92:1c:07:cd:55:07:2f:e6:2d: 49:b5:08:06:f6:69:cf:44:9e:11:44:8c:11:43:88:6d:88:ca: cd:6a:2a:2c:56:2b:19:cc:fa:43:2e:eb:f6:07:25:cb:ff:ff: 91:8e:46:ad:79:c1:49:40:83:b9:0d:76:09:4f:55:20:db:06: 80:cd:cb:a6:41:9f:73:f0:88:b9:ba:d5:82:e2:15:6a:0e:7c: b1:3b:e0:f2:a5:0e:55:f8:14:31:eb:b1:cf:79:99:9c:ba:ad: c9:99:84:5c:79:8a:05:1b:3d:6e:e7:f5:e1:b5:4f:8a:82:79: 95:c7:9e:33:a3:c8:41:ec:f0:d7:bc:2c:ac:e1:80:c7:f5:15: c5:27:78:03:75:3a:36:d3:eb:1a:a7:13:58:f6:76:28:b4:cf: 76:44:3b:da:b0:9b:b3:a3:3d:56:d4:2d:20:02:e3:92:c8:7c: 64:ea:6c:dd:dd:98:05:c3:6b:5e:13:9e:cb:91:a7:d5:5d:ab: 6e:10:20:39:08:62:f9:b9:37:e2:06:af:89:de:6e:ec:40:07: 65:1a:a7:4e:d5:50:8f:c5:2b:d9:79:58:b0:aa:f6:76:0e:af: 45:68:f0:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CjzWGnn37SBJ9RACD1ZwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYmRkYzYzMTNlZmM0YjY3MmE3ZTJiMzJhZTNjNDQ4NGZl NWY2MzAwHhcNMjUxMjA2MTkwMTIwWhcNMjUxMjA3MTkwMTIwWjAzMTEwLwYDVQQD EygxNzc0MDAwOWYwMmFkMTRiMmViNzIwNzFhMzIwYzZkMzkxNjc5OWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVd13XxHVjIhomcKAFLEijTKc01U 325vLqTFBxDYKuYM0bOziq2LrYCgjshsyy00C+Lf+3mSrLgoKy1Vs4VKafBHdzER XvR2Frl7yKlSLnQBSV3QltWZtaLnGz0edI0YRCV1wQ+dBQpwFv4QifAU+AzdoWDg sstq/A3MUUdf6psPSdAm91M5LSvI0W/fZ4nxdR753Cp2fmH2tdnGIFn1fCsEgbNW KVE//50DjfjolRyWOTtMO56lvKBZBOlEmNZXT19WwrIqd0hWC6MS+TwI+Ivw66dM zyDldN7ATFC9BzpImjK/xUuOgtPKa7sxlEp7gFx5e/vT2OSzcNECXaLdaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBd0AAnwKtFLLrcgcaMgxtORZ5nUMB8GA1UdIwQY MBaAFJ+93GMT78S2cqfisyrjxEhP5fYwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjczY1l4UHZ4TFp5cC1Lekt1UEVTRV9sOWpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zZTA2OWEtMzQyMS00MGFiLTllMGMt NDVjYzJkZDZlNDkxLzEvbjczY1l4UHZ4TFp5cC1Lekt1UEVTRV9sOWpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zZTA2OWEtMzQyMS00MGFiLTllMGMtNDVjYzJkZDZlNDkx LzEvbjczY1l4UHZ4TFp5cC1Lekt1UEVTRV9sOWpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApIS3bQUw vUjToo7n0phYZPLKtUUlDktGVLfwkhwHzVUHL+YtSbUIBvZpz0SeEUSMEUOIbYjK zWoqLFYrGcz6Qy7r9gcly///kY5GrXnBSUCDuQ12CU9VINsGgM3LpkGfc/CIubrV guIVag58sTvg8qUOVfgUMeuxz3mZnLqtyZmEXHmKBRs9buf14bVPioJ5lceeM6PI Qezw17wsrOGAx/UVxSd4A3U6NtPrGqcTWPZ2KLTPdkQ72rCbs6M9VtQtIALjksh8 ZOps3d2YBcNrXhOey5Gn1V2rbhAgOQhi+bk34gavid5u7EAHZRqnTtVQj8Ur2XlY sKr2dg6vRWjw/A== -----END CERTIFICATE-----Generated at Sat Dec 6 21:01:06 2025 by rpki-client