This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft File: 735cdfZIrGkrFLwiLiwYDIY7ReI.mft (raw, json) Hash identifier: ld+Z7Pg5D4tiTFI8al/6dgwRKKF1zL8rDzD+fKPgoGE= Subject key identifier: DE:FC:3F:27:C1:68:49:30:71:AB:2F:CB:FD:5F:43:9C:EE:A5:97:6F Authority key identifier: EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2 Certificate issuer: /CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2 Certificate serial: 019AF12DF1D177E9B4DC8FDCF8E1E61B3F15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft Manifest number: 03FF Signing time: Sat 06 Dec 2025 01:01:51 +0000 Manifest this update: Sat 06 Dec 2025 01:01:51 +0000 Manifest next update: Sun 07 Dec 2025 01:01:51 +0000 Files and hashes: 1: 735cdfZIrGkrFLwiLiwYDIY7ReI.crl (hash: Kj5aYrU18xpsaAkx8oHvQD7BSX7kc4LAZiplIUv0tjw=) 2: YvnoPFlwVSBiKu9iqRFpzb0xlh4.roa (hash: FIC2N81bANGcoREXZdDhNQ3XBvgX/G7WyyZfKBc7yTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f1:d1:77:e9:b4:dc:8f:dc:f8:e1:e6:1b:3f:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2 Validity Not Before: Dec 6 01:01:51 2025 GMT Not After : Dec 7 01:01:51 2025 GMT Subject: CN=defc3f27c168493071ab2fcbfd5f439ceea5976f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:89:cf:3a:8f:72:93:ff:a6:d3:cc:06:83:6b: 38:4e:b8:4e:8c:9c:f9:15:82:b1:18:ca:95:46:56: 60:d5:55:ed:2d:a6:66:b3:e9:48:7d:04:0b:6a:7f: 7c:0f:b6:89:50:a8:11:5a:17:6e:d4:60:ec:d5:b9: c9:8d:91:0a:98:f1:13:54:79:32:28:92:3d:f5:30: 33:13:f9:23:75:38:d6:74:26:c2:52:16:82:5e:a1: 12:2a:3e:37:c0:e1:af:e2:15:60:bf:8c:55:e6:81: 75:c3:df:c0:92:4d:d3:c1:f8:a0:51:43:74:84:09: e0:d6:20:1a:2e:3c:c8:af:c8:ae:3c:f5:af:c0:13: ef:1f:10:23:85:99:20:db:55:63:8f:95:5a:de:e2: a3:03:0c:f5:b3:b5:ca:40:1c:92:06:09:d3:7e:ca: dc:c8:91:4f:8a:66:b6:a6:eb:b2:1b:1a:f4:49:89: 65:a9:c9:cd:07:70:38:d0:41:95:e5:b3:9d:8c:10: b5:a3:4f:c9:38:2a:db:16:39:c6:24:cf:3f:ab:6a: 62:49:6f:d8:ea:62:60:6b:f1:b7:59:c7:69:ef:de: 38:80:81:e5:62:e2:9d:bb:1b:3a:ff:8d:85:e5:20: cd:3c:f1:0a:66:6e:93:38:a7:ea:c7:98:50:bc:23: dd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FC:3F:27:C1:68:49:30:71:AB:2F:CB:FD:5F:43:9C:EE:A5:97:6F X509v3 Authority Key Identifier: keyid:EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4e:05:c1:86:56:f8:af:06:f9:a5:7b:89:de:42:b4:d7:74: 32:b2:d7:87:51:7c:b0:1e:a7:a2:80:c4:27:b2:3c:5d:8a:d8: 8a:f4:61:5c:0d:62:5f:50:bf:cf:ee:d9:81:42:3f:72:8d:4e: d9:b6:6c:1c:5b:8a:ae:2b:50:1c:9f:a5:2b:6d:5d:b2:12:08: 8f:40:45:74:ac:99:9f:f2:36:ae:62:88:64:c2:86:c4:e6:ac: 04:cd:8a:b6:9f:e0:df:e9:8e:96:3a:f2:a3:2c:a9:f5:04:a1: 55:69:1f:53:6f:d0:c1:d3:3f:bc:7e:33:10:4c:08:eb:25:20: f6:65:bb:b0:63:5e:72:d2:20:c0:81:19:99:b5:06:15:01:23: 06:b0:cc:63:af:e8:55:04:a7:03:9a:a7:52:11:64:56:82:69: 70:86:dd:ec:22:dd:e7:69:31:b6:c4:b8:df:a6:6e:93:07:5f: dd:0c:71:bc:1e:4d:42:a3:6c:07:ac:1b:b3:b7:56:d0:fc:57: a5:7d:f3:52:d1:8c:e0:4b:fc:01:f4:09:6c:84:01:ee:a8:83: c8:22:be:3e:51:cf:7b:8b:46:d7:70:38:b7:a3:cb:a8:be:11: 22:c5:20:05:34:e7:71:56:38:f1:0c:3a:4c:fb:5d:91:9e:c4: f1:77:c2:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfHRd+m03I/c+OHmGz8VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmN2U1Yzc1ZjY0OGFjNjkyYjE0YmMyMjJlMmMxODBjODYz YjQ1ZTIwHhcNMjUxMjA2MDEwMTUxWhcNMjUxMjA3MDEwMTUxWjAzMTEwLwYDVQQD EyhkZWZjM2YyN2MxNjg0OTMwNzFhYjJmY2JmZDVmNDM5Y2VlYTU5NzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4nPOo9yk/+m08wGg2s4TrhOjJz5 FYKxGMqVRlZg1VXtLaZms+lIfQQLan98D7aJUKgRWhdu1GDs1bnJjZEKmPETVHky KJI99TAzE/kjdTjWdCbCUhaCXqESKj43wOGv4hVgv4xV5oF1w9/Akk3TwfigUUN0 hAng1iAaLjzIr8iuPPWvwBPvHxAjhZkg21Vjj5Va3uKjAwz1s7XKQBySBgnTfsrc yJFPima2puuyGxr0SYllqcnNB3A40EGV5bOdjBC1o0/JOCrbFjnGJM8/q2piSW/Y 6mJga/G3Wcdp7944gIHlYuKduxs6/42F5SDNPPEKZm6TOKfqx5hQvCPd8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN78PyfBaEkwcasvy/1fQ5zupZdvMB8GA1UdIwQY MBaAFO9+XHX2SKxpKxS8Ii4sGAyGO0XiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzM1Y2RmWklyR2tyRkx3aUxpd1lESVk3UmVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9hMTQyYTktYTAwYS00MjM1LWI3MWYt ZTZiMjBiMDlmODY2LzEvNzM1Y2RmWklyR2tyRkx3aUxpd1lESVk3UmVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9hMTQyYTktYTAwYS00MjM1LWI3MWYtZTZiMjBiMDlmODY2 LzEvNzM1Y2RmWklyR2tyRkx3aUxpd1lESVk3UmVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG04FwYZW +K8G+aV7id5CtNd0MrLXh1F8sB6nooDEJ7I8XYrYivRhXA1iX1C/z+7ZgUI/co1O 2bZsHFuKritQHJ+lK21dshIIj0BFdKyZn/I2rmKIZMKGxOasBM2Ktp/g3+mOljry oyyp9QShVWkfU2/QwdM/vH4zEEwI6yUg9mW7sGNectIgwIEZmbUGFQEjBrDMY6/o VQSnA5qnUhFkVoJpcIbd7CLd52kxtsS436Zukwdf3QxxvB5NQqNsB6wbs7dW0PxX pX3zUtGM4Ev8AfQJbIQB7qiDyCK+PlHPe4tG13A4t6PLqL4RIsUgBTTncVY48Qw6 TPtdkZ7E8XfCzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:47 2025 by rpki-client