This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft File: 73VRezFhoEd2JBMwFhQhdnmoJgg.mft (raw, json) Hash identifier: EqWWLZx2ZBnm3TwnKtIfAXuUXt6E00S/OM187SzE8Hk= Subject key identifier: 52:16:95:0C:28:D0:ED:CF:98:6A:3F:74:23:9C:C7:2E:55:75:93:DA Authority key identifier: EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08 Certificate issuer: /CN=ef75517b3161a047762413301614217679a82608 Certificate serial: 019AF4D2AB9ADB1FAA611D71B696F939F332 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft Manifest number: 0650 Signing time: Sat 06 Dec 2025 18:00:38 +0000 Manifest this update: Sat 06 Dec 2025 18:00:38 +0000 Manifest next update: Sun 07 Dec 2025 18:00:38 +0000 Files and hashes: 1: 73VRezFhoEd2JBMwFhQhdnmoJgg.crl (hash: 72wgd5NrzOkIEJQYzTC7olt4Ig9d6/aACm1S9ZruqC4=) 2: I9DHGKx_AzmEJdMn8QvC9F9ySxQ.roa (hash: dPotTh32y5QoI9nrsrf5Jji9m8QedErHZ0IgteKV744=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:ab:9a:db:1f:aa:61:1d:71:b6:96:f9:39:f3:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef75517b3161a047762413301614217679a82608 Validity Not Before: Dec 6 18:00:38 2025 GMT Not After : Dec 7 18:00:38 2025 GMT Subject: CN=5216950c28d0edcf986a3f74239cc72e557593da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:89:40:ec:76:3a:15:74:67:a7:ac:f2:c6:5b: a5:f7:fd:90:cf:84:29:ea:cf:05:31:b0:b6:cf:83: ed:f6:16:4c:49:39:6a:a2:2d:f8:a4:72:21:8d:ed: 11:33:45:0d:ce:c6:0d:5a:05:30:ef:b9:2d:a3:e2: a9:23:18:b6:45:e2:88:9f:3e:69:60:a9:c9:03:56: ad:bc:46:47:0d:13:ac:1a:b7:f4:95:b9:f7:aa:23: 91:2c:4f:fa:44:a6:86:0a:cf:36:3a:93:6b:bc:89: 86:3b:f2:f2:29:7b:5e:6b:32:d3:ab:50:00:49:08: 63:2c:76:4c:f6:76:51:e5:21:ca:48:0f:3e:13:d4: d2:9a:21:5d:16:a3:3e:aa:b5:2a:3f:a6:99:34:a4: 39:0d:9a:94:93:b9:7b:a2:dc:ae:f6:3e:db:e4:e9: da:d0:84:82:b3:40:82:25:f2:46:03:61:92:ff:22: f3:b3:b5:23:ac:08:91:4b:a7:b7:f9:e8:73:41:c7: 4d:14:92:aa:10:07:ac:ad:3f:d7:8b:9a:8d:a8:a4: 05:b8:53:96:fc:f8:fd:4c:1d:09:a7:59:25:ac:cc: 96:90:75:7f:25:8a:d6:97:ae:bc:5b:20:77:e2:59: 0c:b2:bf:ef:d9:6f:28:8c:4d:30:3c:f4:54:66:55: ff:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:16:95:0C:28:D0:ED:CF:98:6A:3F:74:23:9C:C7:2E:55:75:93:DA X509v3 Authority Key Identifier: keyid:EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:6d:bf:26:6d:51:3d:78:7a:18:20:27:2a:58:2c:89:5d:be: 0b:3a:20:c3:38:ed:71:47:b2:5b:f2:1c:b4:42:05:18:30:1c: 24:54:ce:fb:a5:ff:9b:b0:43:8f:b6:3e:09:89:ac:7d:60:ff: ea:23:c6:b4:02:ff:6d:40:7b:d9:1f:31:8e:23:27:a4:3b:c1: a2:92:58:77:8f:f1:a9:35:4a:59:16:3b:9c:a7:f5:68:be:f5: 24:19:4a:0e:4f:f4:79:5e:51:3c:27:5d:7d:1c:10:0a:15:9a: 41:05:ba:bf:f8:f2:c7:d8:42:b4:ca:94:c1:75:14:5e:ca:7e: 62:79:ea:4b:8a:79:cf:3e:e3:c6:d7:78:0a:f0:82:f3:68:50: 61:e7:bb:3c:89:60:33:f4:a6:7d:47:0c:c0:9c:07:92:bf:51: f5:aa:16:da:7d:e3:e2:ea:fc:13:36:a4:99:67:59:e1:50:71: 29:36:21:89:de:a3:9d:e2:ad:0e:0c:ec:fe:0d:2b:79:04:40: 36:c7:d1:e5:8e:bb:f1:b9:4c:a1:cf:07:d3:b6:df:14:3d:9a: ba:e3:ee:d9:82:cd:17:a6:79:70:69:68:17:7b:19:41:1b:ba: 7d:80:58:5a:6f:e0:87:fe:9a:c5:f6:96:84:45:70:cd:b5:79: 7e:73:38:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00qua2x+qYR1xtpb5OfMyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNzU1MTdiMzE2MWEwNDc3NjI0MTMzMDE2MTQyMTc2Nzlh ODI2MDgwHhcNMjUxMjA2MTgwMDM4WhcNMjUxMjA3MTgwMDM4WjAzMTEwLwYDVQQD Eyg1MjE2OTUwYzI4ZDBlZGNmOTg2YTNmNzQyMzljYzcyZTU1NzU5M2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYlA7HY6FXRnp6zyxlul9/2Qz4Qp 6s8FMbC2z4Pt9hZMSTlqoi34pHIhje0RM0UNzsYNWgUw77kto+KpIxi2ReKInz5p YKnJA1atvEZHDROsGrf0lbn3qiORLE/6RKaGCs82OpNrvImGO/LyKXteazLTq1AA SQhjLHZM9nZR5SHKSA8+E9TSmiFdFqM+qrUqP6aZNKQ5DZqUk7l7otyu9j7b5Ona 0ISCs0CCJfJGA2GS/yLzs7UjrAiRS6e3+ehzQcdNFJKqEAesrT/Xi5qNqKQFuFOW /Pj9TB0Jp1klrMyWkHV/JYrWl668WyB34lkMsr/v2W8ojE0wPPRUZlX/UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFIWlQwo0O3PmGo/dCOcxy5VdZPaMB8GA1UdIwQY MBaAFO91UXsxYaBHdiQTMBYUIXZ5qCYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzNWUmV6RmhvRWQySkJNd0ZoUWhkbm1vSmdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9lZWVhZWUtMDhkNy00ZTI0LTg0ZGQt MzA3YjQ5NzFlMjY2LzEvNzNWUmV6RmhvRWQySkJNd0ZoUWhkbm1vSmdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9lZWVhZWUtMDhkNy00ZTI0LTg0ZGQtMzA3YjQ5NzFlMjY2 LzEvNzNWUmV6RmhvRWQySkJNd0ZoUWhkbm1vSmdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsG2/Jm1R PXh6GCAnKlgsiV2+CzogwzjtcUeyW/IctEIFGDAcJFTO+6X/m7BDj7Y+CYmsfWD/ 6iPGtAL/bUB72R8xjiMnpDvBopJYd4/xqTVKWRY7nKf1aL71JBlKDk/0eV5RPCdd fRwQChWaQQW6v/jyx9hCtMqUwXUUXsp+YnnqS4p5zz7jxtd4CvCC82hQYee7PIlg M/SmfUcMwJwHkr9R9aoW2n3j4ur8EzakmWdZ4VBxKTYhid6jneKtDgzs/g0reQRA NsfR5Y678blMoc8H07bfFD2auuPu2YLNF6Z5cGloF3sZQRu6fYBYWm/gh/6axfaW hEVwzbV5fnM4Rg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:18:10 2025 by rpki-client