This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft File: 72eEaVdKzAPXguYygf9E-qqz-Ec.mft (raw, json) Hash identifier: ipR/NaHPIpchxe0rQNICWQJL4gz6UhB2UGYqpadmZJw= Subject key identifier: 71:89:72:D1:98:21:30:BD:CC:CD:25:05:F1:48:6B:6A:1E:CA:6B:23 Authority key identifier: EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47 Certificate issuer: /CN=ef678469574acc03d782e63281ff44faaab3f847 Certificate serial: 019B31FA38325F04D1233162CCD91266D78E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft Manifest number: 12ED Signing time: Thu 18 Dec 2025 15:00:40 +0000 Manifest this update: Thu 18 Dec 2025 15:00:40 +0000 Manifest next update: Fri 19 Dec 2025 15:00:40 +0000 Files and hashes: 1: 4mzcp9MGPOcBj8vWEpghNUUZwrg.roa (hash: FMPgZ78dma8cFYdFXzHOT5nVPlXdvUP/dSywWfkO/HA=) 2: 72eEaVdKzAPXguYygf9E-qqz-Ec.crl (hash: Nyd4q7RvQqvE5BZdYyvNNVWeVkzdGw0S7M6+1mSChc0=) 3: YraDuYuMIlkEmdPd43lQxmtLVG0.roa (hash: vscD5TcTDxAgQFa013w668xvOsNW4c0gyN2OgXv6DfA=) 4: d-hrh1vUeLOY7U3kjW0I7g-GU8w.roa (hash: Y/cX56/Qn9APSgO+9XrU6NbdQMlq0ISTF7taZqp4egQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:38:32:5f:04:d1:23:31:62:cc:d9:12:66:d7:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef678469574acc03d782e63281ff44faaab3f847 Validity Not Before: Dec 18 15:00:40 2025 GMT Not After : Dec 19 15:00:40 2025 GMT Subject: CN=718972d1982130bdcccd2505f1486b6a1eca6b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:1b:b3:a5:c4:da:91:19:c5:cc:ea:b0:f3: 4e:7a:df:0c:22:5b:24:06:44:79:f6:cb:85:5c:9c: d3:2a:00:c0:4a:e9:93:a4:51:ed:dd:dd:02:e7:b0: e4:39:64:57:9c:98:72:ab:75:34:d0:39:a2:c5:e7: 22:fa:d8:71:70:77:60:c9:88:aa:41:cc:a2:95:48: 6d:cb:7e:04:07:8d:b3:93:c8:ca:20:9f:b1:8a:88: 73:ba:c7:08:c5:8e:1d:a9:f0:84:fd:80:69:0c:3a: 78:89:d1:31:4a:73:fc:da:ea:d8:bc:66:50:d4:79: c8:2b:c7:24:9c:fb:1d:47:fc:d1:4f:c7:ac:51:21: 0e:f9:ab:99:4d:16:66:e9:14:61:59:bf:4b:ca:50: ac:7e:17:08:72:4f:c1:ea:2e:cf:e5:51:37:0b:67: 38:dc:64:34:2c:f2:f5:20:0e:5a:b5:02:72:d2:6e: 41:65:24:25:e7:1b:b2:c9:a0:2a:84:13:ec:c4:a1: 41:69:6b:b0:96:51:4b:a4:04:b3:9f:c6:2e:16:e7: 84:2e:95:e9:aa:e7:d2:22:d3:bb:36:47:25:69:a2: 5b:00:4b:63:40:bb:bb:d2:00:c5:20:af:ae:91:18: 8c:05:80:cd:4a:b8:b8:8d:91:63:a4:81:0c:d8:d4: 52:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:89:72:D1:98:21:30:BD:CC:CD:25:05:F1:48:6B:6A:1E:CA:6B:23 X509v3 Authority Key Identifier: keyid:EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:09:37:19:f8:9b:82:b7:9b:96:5e:a5:5d:8a:e6:67:fe:07: 5d:f4:0e:65:cb:ff:da:69:0d:3f:db:f4:b9:0d:27:b8:7b:17: 00:d9:90:f8:70:ba:ec:90:f3:37:44:c6:8e:f7:03:1f:78:c4: 60:2d:19:01:9f:2e:da:37:da:38:0f:0a:ac:06:e6:76:96:4a: 20:d5:60:b7:12:db:03:d2:fe:1e:37:e5:9c:ac:bf:15:f6:92: a4:aa:7b:7d:44:71:83:87:80:55:f6:22:89:8d:26:48:f6:d8: 81:62:0f:37:82:a8:23:f7:26:48:84:54:7b:3a:c5:91:a8:2f: 88:23:f0:b5:38:e4:1b:7a:c1:14:b9:46:f7:51:a1:b4:f1:3e: 9b:ad:29:6d:9f:28:85:d0:68:a7:7b:13:59:f9:a8:9e:76:ba: b9:34:1e:fd:24:ba:17:69:2b:a8:e9:0a:59:90:d4:44:a7:c7: aa:e4:fe:d4:6d:91:3a:22:1a:a5:82:14:ef:22:d0:a0:a6:11: e2:0a:50:6f:67:ba:15:39:ea:bf:d1:09:8b:18:d5:35:19:d2: 0d:b3:f3:b8:53:69:d4:7e:95:ac:98:da:fc:59:d2:fa:43:df: 5f:79:3c:bb:ce:51:12:27:c0:49:0e:54:92:2c:70:f6:3c:b5: 32:98:65:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+jgyXwTRIzFizNkSZteOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNjc4NDY5NTc0YWNjMDNkNzgyZTYzMjgxZmY0NGZhYWFi M2Y4NDcwHhcNMjUxMjE4MTUwMDQwWhcNMjUxMjE5MTUwMDQwWjAzMTEwLwYDVQQD Eyg3MTg5NzJkMTk4MjEzMGJkY2NjZDI1MDVmMTQ4NmI2YTFlY2E2YjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPkbs6XE2pEZxczqsPNOet8MIlsk BkR59suFXJzTKgDASumTpFHt3d0C57DkOWRXnJhyq3U00Dmixeci+thxcHdgyYiq QcyilUhty34EB42zk8jKIJ+xiohzuscIxY4dqfCE/YBpDDp4idExSnP82urYvGZQ 1HnIK8cknPsdR/zRT8esUSEO+auZTRZm6RRhWb9LylCsfhcIck/B6i7P5VE3C2c4 3GQ0LPL1IA5atQJy0m5BZSQl5xuyyaAqhBPsxKFBaWuwllFLpASzn8YuFueELpXp qufSItO7NkclaaJbAEtjQLu70gDFIK+ukRiMBYDNSri4jZFjpIEM2NRScQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGJctGYITC9zM0lBfFIa2oeymsjMB8GA1UdIwQY MBaAFO9nhGlXSswD14LmMoH/RPqqs/hHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzJlRWFWZEt6QVBYZ3VZeWdmOUUtcXF6LUVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iNDY3M2ItMjEwYi00ZTVhLTg3NmEt ZGMwNTllNjliMWQwLzEvNzJlRWFWZEt6QVBYZ3VZeWdmOUUtcXF6LUVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iNDY3M2ItMjEwYi00ZTVhLTg3NmEtZGMwNTllNjliMWQw LzEvNzJlRWFWZEt6QVBYZ3VZeWdmOUUtcXF6LUVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwk3Gfib grebll6lXYrmZ/4HXfQOZcv/2mkNP9v0uQ0nuHsXANmQ+HC67JDzN0TGjvcDH3jE YC0ZAZ8u2jfaOA8KrAbmdpZKINVgtxLbA9L+HjflnKy/FfaSpKp7fURxg4eAVfYi iY0mSPbYgWIPN4KoI/cmSIRUezrFkagviCPwtTjkG3rBFLlG91GhtPE+m60pbZ8o hdBop3sTWfmonna6uTQe/SS6F2krqOkKWZDURKfHquT+1G2ROiIapYIU7yLQoKYR 4gpQb2e6FTnqv9EJixjVNRnSDbPzuFNp1H6VrJja/FnS+kPfX3k8u85REifASQ5U kixw9jy1MphlGw== -----END CERTIFICATE-----Generated at Thu Dec 18 19:12:51 2025 by rpki-client