This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft File: 73imvMheyK3m7M6IDuBz1jdweWU.mft (raw, json) Hash identifier: nqIRu4F7tHtdWbLkykMXTcSiVHKCT+g7of+oncgx6bg= Subject key identifier: E8:68:7C:33:8D:F1:05:07:E5:77:36:09:E4:7A:BA:F5:2B:EB:BA:C7 Authority key identifier: EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65 Certificate issuer: /CN=ef78a6bcc85ec8ade6ecce880ee073d637707965 Certificate serial: 019AF16404CE349094433F9E8E03317B78B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 02:00:55 +0000 Manifest this update: Sat 06 Dec 2025 02:00:55 +0000 Manifest next update: Sun 07 Dec 2025 02:00:55 +0000 Files and hashes: 1: 73imvMheyK3m7M6IDuBz1jdweWU.crl (hash: zyjQC35To4uW+naNCPxBDb5z3ndjkMqp8i0irqh0vq4=) 2: 8ofg2JoTyb5e1GIiVqV2PdSesOU.roa (hash: z/SuBS1vMLBWp74A2t3I4/K0L71UAtSRqfDU9yXXBww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:04:ce:34:90:94:43:3f:9e:8e:03:31:7b:78:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef78a6bcc85ec8ade6ecce880ee073d637707965 Validity Not Before: Dec 6 02:00:55 2025 GMT Not After : Dec 7 02:00:55 2025 GMT Subject: CN=e8687c338df10507e5773609e47abaf52bebbac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5a:d6:0b:ca:18:2d:fe:87:36:a6:6a:b9:f9: 98:5d:c2:de:90:e1:76:ab:6a:58:35:56:54:16:db: 28:21:28:ad:54:7c:97:ca:d7:ca:ef:c7:bb:85:93: 71:59:4b:fc:f6:4d:d7:19:18:94:bf:a1:94:e7:a0: 06:49:0d:57:ab:83:d3:33:5a:df:1c:63:04:11:e3: 98:ba:8c:f4:a8:fc:bc:b4:21:56:98:ac:46:2e:28: 40:5c:47:28:d8:5f:b6:e0:cf:27:d5:22:35:a9:dc: 04:84:58:31:c5:3b:ba:4d:1f:6e:24:bf:1b:4d:ba: c9:12:99:5d:8f:6a:20:ef:6f:79:a8:d1:50:ea:ce: 36:b8:a4:2c:c6:a4:7b:9a:eb:d5:07:2c:81:e5:88: d8:98:e1:de:d6:7e:6d:37:c2:8d:55:9f:58:5c:c0: cd:bd:d0:1e:07:08:0b:56:5a:f9:ab:65:ba:fd:ef: 64:03:36:22:1d:d0:4a:f4:3c:9f:be:09:22:05:41: 4a:8d:f4:0b:59:e2:8f:62:04:0d:7d:5d:6b:d4:ac: ad:f3:1f:0c:43:1c:ff:9e:4b:ac:49:3e:e1:2b:23: ba:46:c2:23:2b:19:4d:21:bd:e2:59:54:80:29:67: eb:e4:92:13:e1:d4:8f:94:c0:6e:bf:06:ea:7b:aa: 00:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:68:7C:33:8D:F1:05:07:E5:77:36:09:E4:7A:BA:F5:2B:EB:BA:C7 X509v3 Authority Key Identifier: keyid:EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:4f:1a:c3:a3:bf:4f:a2:47:45:86:7e:bb:5f:28:ff:63:d6: 3b:8a:73:77:57:65:f8:1f:ad:9a:82:11:ec:b8:81:87:b5:46: 5c:4e:7c:f6:6b:ec:b5:5d:8c:f0:59:32:66:2b:46:f7:4d:ea: 21:ab:b1:3b:1e:82:04:be:2c:6d:bd:67:a1:81:7d:d2:e0:11: 4b:6b:76:c8:94:e6:e7:76:80:e4:d8:de:1d:a7:6c:f2:b4:cf: 96:a1:ee:df:5d:31:b2:e2:cf:47:dc:ff:0b:aa:de:27:a8:e3: d8:08:81:b6:45:21:4d:b3:6c:08:7a:09:5d:24:4f:11:ae:8c: 33:84:28:46:eb:e8:10:78:04:9c:5f:06:0d:a0:d7:d8:5d:bb: c3:36:44:95:66:f4:d8:9b:be:72:e4:cc:cb:08:1f:8d:5a:df: a9:96:a0:33:d1:75:58:ef:a7:a5:4a:ab:c9:3f:01:9d:06:72: ff:15:a7:76:85:0b:f8:a9:5c:49:46:4c:43:9d:79:d1:c4:4e: 46:5e:db:6d:27:2f:1e:a8:ee:19:33:19:78:87:9f:48:80:71: ef:1c:6a:ac:1f:9b:f7:d4:96:7a:27:a0:8e:6f:5a:be:02:b4: ba:f9:69:06:98:ae:3c:f8:ad:08:df:57:5d:54:4e:41:72:b4: 0f:5e:42:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZATONJCUQz+ejgMxe3izMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNzhhNmJjYzg1ZWM4YWRlNmVjY2U4ODBlZTA3M2Q2Mzc3 MDc5NjUwHhcNMjUxMjA2MDIwMDU1WhcNMjUxMjA3MDIwMDU1WjAzMTEwLwYDVQQD EyhlODY4N2MzMzhkZjEwNTA3ZTU3NzM2MDllNDdhYmFmNTJiZWJiYWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVrWC8oYLf6HNqZqufmYXcLekOF2 q2pYNVZUFtsoISitVHyXytfK78e7hZNxWUv89k3XGRiUv6GU56AGSQ1Xq4PTM1rf HGMEEeOYuoz0qPy8tCFWmKxGLihAXEco2F+24M8n1SI1qdwEhFgxxTu6TR9uJL8b TbrJEpldj2og7295qNFQ6s42uKQsxqR7muvVByyB5YjYmOHe1n5tN8KNVZ9YXMDN vdAeBwgLVlr5q2W6/e9kAzYiHdBK9DyfvgkiBUFKjfQLWeKPYgQNfV1r1Kyt8x8M Qxz/nkusST7hKyO6RsIjKxlNIb3iWVSAKWfr5JIT4dSPlMBuvwbqe6oAGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhofDON8QUH5Xc2CeR6uvUr67rHMB8GA1UdIwQY MBaAFO94przIXsit5uzOiA7gc9Y3cHllMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzNpbXZNaGV5SzNtN002SUR1QnoxamR3ZVdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80OWFiYTQtZTYzZC00ZTA2LThhMTIt OTZmMjE2ODkzZGVjLzEvNzNpbXZNaGV5SzNtN002SUR1QnoxamR3ZVdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80OWFiYTQtZTYzZC00ZTA2LThhMTItOTZmMjE2ODkzZGVj LzEvNzNpbXZNaGV5SzNtN002SUR1QnoxamR3ZVdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGU8aw6O/ T6JHRYZ+u18o/2PWO4pzd1dl+B+tmoIR7LiBh7VGXE589mvstV2M8FkyZitG903q IauxOx6CBL4sbb1noYF90uARS2t2yJTm53aA5NjeHads8rTPlqHu310xsuLPR9z/ C6reJ6jj2AiBtkUhTbNsCHoJXSRPEa6MM4QoRuvoEHgEnF8GDaDX2F27wzZElWb0 2Ju+cuTMywgfjVrfqZagM9F1WO+npUqryT8BnQZy/xWndoUL+KlcSUZMQ5150cRO Rl7bbScvHqjuGTMZeIefSIBx7xxqrB+b99SWeiegjm9avgK0uvlpBpiuPPitCN9X XVROQXK0D15COg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:32 2025 by rpki-client