This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft File: 72eEaVdKzAPXguYygf9E-qqz-Ec.mft (raw, json) Hash identifier: wI4t9qEujfxOT6uR34eAEWalxSjKIaMarBpgI3Cv0vU= Subject key identifier: C3:23:14:4F:64:38:A2:5D:68:83:39:92:D5:9C:41:ED:6B:C6:2B:A0 Authority key identifier: EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47 Certificate issuer: /CN=ef678469574acc03d782e63281ff44faaab3f847 Certificate serial: 019AF23FBBF3751FF4BA4EE70E8A25F1647C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft Manifest number: 12CC Signing time: Sat 06 Dec 2025 06:00:54 +0000 Manifest this update: Sat 06 Dec 2025 06:00:54 +0000 Manifest next update: Sun 07 Dec 2025 06:00:54 +0000 Files and hashes: 1: 4mzcp9MGPOcBj8vWEpghNUUZwrg.roa (hash: FMPgZ78dma8cFYdFXzHOT5nVPlXdvUP/dSywWfkO/HA=) 2: 72eEaVdKzAPXguYygf9E-qqz-Ec.crl (hash: A26YTTfImZ9kDlwCHt7AaTIg4AAONyy2KgGPuYAyCvY=) 3: YraDuYuMIlkEmdPd43lQxmtLVG0.roa (hash: vscD5TcTDxAgQFa013w668xvOsNW4c0gyN2OgXv6DfA=) 4: d-hrh1vUeLOY7U3kjW0I7g-GU8w.roa (hash: Y/cX56/Qn9APSgO+9XrU6NbdQMlq0ISTF7taZqp4egQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:bb:f3:75:1f:f4:ba:4e:e7:0e:8a:25:f1:64:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef678469574acc03d782e63281ff44faaab3f847 Validity Not Before: Dec 6 06:00:54 2025 GMT Not After : Dec 7 06:00:54 2025 GMT Subject: CN=c323144f6438a25d68833992d59c41ed6bc62ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4a:f3:91:a2:9e:e5:80:c8:05:c3:19:e2:32: ae:21:7d:77:46:00:3d:97:31:c8:aa:ae:ab:d5:f4: 69:c3:a8:f8:1c:9b:61:1e:fb:5c:08:57:8a:65:f8: 83:bd:d1:05:db:d1:08:82:5f:e9:14:50:7a:a2:39: 19:fe:bd:ba:48:9b:6f:46:f2:6c:ae:bd:2d:5c:e4: 9a:ad:39:f3:3c:7a:65:a2:f9:a1:6d:c3:87:f8:0f: ec:92:a4:0b:02:23:6a:17:f4:c8:bb:a1:61:51:a5: cd:e5:04:63:07:1c:80:57:11:99:27:88:59:00:66: e5:11:c7:11:e1:fc:ed:2e:42:07:d7:1c:cb:9f:a2: 1f:3c:f7:97:a7:43:83:a1:16:52:34:5c:64:8d:dd: b4:cf:68:4c:da:dc:40:34:e9:74:d7:ea:a4:31:31: 8d:3d:2e:a3:45:59:74:cc:13:dc:b0:2e:12:11:ad: 22:ea:70:ae:d5:d7:3e:88:a7:27:59:0c:c7:c5:38: 7b:0e:09:7b:bd:25:ea:ed:4b:71:00:74:4a:58:2a: a7:c4:d5:ad:c8:9e:19:f5:79:61:e6:29:66:37:f4: de:a5:38:c4:d6:9d:c0:91:e1:a1:e8:d0:2f:85:5c: a5:d8:14:ea:7d:8b:c1:ce:06:3e:26:e6:50:e1:04: 8f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:23:14:4F:64:38:A2:5D:68:83:39:92:D5:9C:41:ED:6B:C6:2B:A0 X509v3 Authority Key Identifier: keyid:EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:9d:d3:4a:6d:7f:d5:ee:40:63:07:c7:a7:a3:35:29:f9:6d: d2:eb:79:e0:29:7d:e3:bf:fc:e8:c5:a2:e2:55:ff:c8:92:1a: 5d:32:c4:14:fd:07:a0:e9:07:34:b8:04:f7:bc:91:70:0b:b7: 93:46:08:cd:47:fc:ad:a8:f3:4b:39:71:47:53:6d:a0:82:ed: fd:e4:b5:a9:fd:29:36:6d:30:51:16:f0:49:9c:b0:c9:61:31: 5f:ba:fd:7f:1f:09:35:8f:95:86:10:2a:a0:51:c7:c5:ae:9c: 20:79:ab:3f:59:3e:c4:b4:d8:80:09:ec:af:e7:3b:51:8c:fc: 98:86:7d:bb:5c:3e:11:61:e6:c1:fd:b3:2a:c2:c7:07:23:5e: fb:51:08:39:39:55:9d:25:1c:71:ab:84:c0:69:9f:f3:6a:51: 62:60:de:5d:5f:b8:41:61:38:10:e9:ce:f3:45:d4:b4:f2:7a: 93:dd:a5:c5:4b:a9:f8:39:83:e2:51:cd:59:54:9e:ad:10:d1: 60:ed:a1:6e:e6:b2:03:37:6f:63:63:31:b9:df:16:67:e9:ef: f6:d7:54:96:d6:d0:48:71:60:cc:cc:0d:41:47:92:64:93:5d: 9f:a4:a5:a8:86:cb:62:62:4a:7b:86:f7:f0:10:03:0c:62:52: 62:dc:e9:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7vzdR/0uk7nDool8WR8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNjc4NDY5NTc0YWNjMDNkNzgyZTYzMjgxZmY0NGZhYWFi M2Y4NDcwHhcNMjUxMjA2MDYwMDU0WhcNMjUxMjA3MDYwMDU0WjAzMTEwLwYDVQQD EyhjMzIzMTQ0ZjY0MzhhMjVkNjg4MzM5OTJkNTljNDFlZDZiYzYyYmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0rzkaKe5YDIBcMZ4jKuIX13RgA9 lzHIqq6r1fRpw6j4HJthHvtcCFeKZfiDvdEF29EIgl/pFFB6ojkZ/r26SJtvRvJs rr0tXOSarTnzPHplovmhbcOH+A/skqQLAiNqF/TIu6FhUaXN5QRjBxyAVxGZJ4hZ AGblEccR4fztLkIH1xzLn6IfPPeXp0ODoRZSNFxkjd20z2hM2txANOl01+qkMTGN PS6jRVl0zBPcsC4SEa0i6nCu1dc+iKcnWQzHxTh7Dgl7vSXq7UtxAHRKWCqnxNWt yJ4Z9Xlh5ilmN/TepTjE1p3AkeGh6NAvhVyl2BTqfYvBzgY+JuZQ4QSPPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMjFE9kOKJdaIM5ktWcQe1rxiugMB8GA1UdIwQY MBaAFO9nhGlXSswD14LmMoH/RPqqs/hHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzJlRWFWZEt6QVBYZ3VZeWdmOUUtcXF6LUVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iNDY3M2ItMjEwYi00ZTVhLTg3NmEt ZGMwNTllNjliMWQwLzEvNzJlRWFWZEt6QVBYZ3VZeWdmOUUtcXF6LUVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iNDY3M2ItMjEwYi00ZTVhLTg3NmEtZGMwNTllNjliMWQw LzEvNzJlRWFWZEt6QVBYZ3VZeWdmOUUtcXF6LUVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq53TSm1/ 1e5AYwfHp6M1Kflt0ut54Cl947/86MWi4lX/yJIaXTLEFP0HoOkHNLgE97yRcAu3 k0YIzUf8rajzSzlxR1NtoILt/eS1qf0pNm0wURbwSZywyWExX7r9fx8JNY+VhhAq oFHHxa6cIHmrP1k+xLTYgAnsr+c7UYz8mIZ9u1w+EWHmwf2zKsLHByNe+1EIOTlV nSUccauEwGmf82pRYmDeXV+4QWE4EOnO80XUtPJ6k92lxUup+DmD4lHNWVSerRDR YO2hbuayAzdvY2Mxud8WZ+nv9tdUltbQSHFgzMwNQUeSZJNdn6SlqIbLYmJKe4b3 8BADDGJSYtzpiw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:35 2025 by rpki-client