This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft File: 735cdfZIrGkrFLwiLiwYDIY7ReI.mft (raw, json) Hash identifier: YGDWaWUG53aNn5N6XNTqBYyLjkSTEulhbSAbI2xNZCY= Subject key identifier: 1B:4E:B5:EF:B9:C2:86:FA:CF:E6:BE:7D:D2:16:1D:0D:B9:96:49:8C Authority key identifier: EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2 Certificate issuer: /CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2 Certificate serial: 019B30E8BD8F1E4A26BDE46D052FA7D2A086 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft Manifest number: 0420 Signing time: Thu 18 Dec 2025 10:01:57 +0000 Manifest this update: Thu 18 Dec 2025 10:01:57 +0000 Manifest next update: Fri 19 Dec 2025 10:01:57 +0000 Files and hashes: 1: 735cdfZIrGkrFLwiLiwYDIY7ReI.crl (hash: 06VS383mPppZgR6VwcXi8j0JeJgO4GyXZnPs+Xj2TPI=) 2: YvnoPFlwVSBiKu9iqRFpzb0xlh4.roa (hash: FIC2N81bANGcoREXZdDhNQ3XBvgX/G7WyyZfKBc7yTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:bd:8f:1e:4a:26:bd:e4:6d:05:2f:a7:d2:a0:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2 Validity Not Before: Dec 18 10:01:57 2025 GMT Not After : Dec 19 10:01:57 2025 GMT Subject: CN=1b4eb5efb9c286facfe6be7dd2161d0db996498c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:63:71:7b:cd:ba:c0:5f:b2:7c:46:01:f5: 23:56:51:93:e0:98:d8:1d:b4:a2:bb:df:88:90:1c: 9c:22:0c:45:c4:2b:13:2b:94:05:45:c8:e8:49:bc: 4a:7c:e6:8c:4b:de:59:29:ff:c6:0e:73:3b:cb:88: 5e:7f:37:99:da:f3:90:a0:c8:f0:63:84:b8:4a:37: 72:1d:2b:5d:e3:a4:35:16:84:35:27:02:c7:1a:fc: f6:3c:28:26:6b:b7:38:79:2b:54:2a:54:2e:f5:dd: 71:25:61:f2:86:4d:60:0c:b5:ef:7a:29:bf:22:34: 54:a8:21:88:82:c1:13:22:6e:fd:17:f3:f4:06:e2: 5a:73:04:7a:44:95:5b:1e:cb:4f:2b:be:da:36:21: a2:10:b8:e9:82:45:37:a4:4b:0d:ab:53:56:09:c2: d1:62:54:47:0c:c9:1e:32:89:06:39:62:c4:5a:eb: 20:77:d3:bc:60:42:f1:bc:c7:86:46:24:85:5c:ba: df:8a:b1:41:28:75:8f:1a:f9:a1:5a:7a:e9:c1:fc: d4:72:bb:dc:b0:05:ea:dd:34:16:44:62:0c:81:72: 82:a9:7c:16:6a:a9:c4:a2:1a:92:10:fe:b2:44:bf: fd:1d:45:6d:c1:9d:2f:2d:97:d1:52:c8:4a:ce:e8: 4e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4E:B5:EF:B9:C2:86:FA:CF:E6:BE:7D:D2:16:1D:0D:B9:96:49:8C X509v3 Authority Key Identifier: keyid:EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:cd:5f:3a:b7:f4:27:62:6f:c6:98:db:7e:ca:3f:71:3c:3a: f9:0e:de:fd:33:ef:c0:7b:41:91:c6:b5:df:6d:c9:f7:52:0d: 81:67:94:1d:f3:d8:1f:a8:25:9e:51:4d:35:5b:76:83:60:d1: 52:52:57:31:d3:e1:b0:6b:59:67:05:e5:b7:1e:c8:54:53:21: 82:39:68:ec:f9:d6:b3:1d:ad:ca:f2:16:d4:d3:3b:c1:c0:95: 54:8e:c7:a3:e3:4f:5e:d5:1f:32:ef:5e:1e:bb:d0:e9:bd:f1: 35:62:2f:e0:3f:ba:09:65:93:58:49:4f:39:8d:f3:0a:a8:5f: 27:4a:ca:2e:2a:35:d0:cd:10:04:da:37:2f:1a:66:05:48:66: 6a:48:cb:61:ce:f0:05:79:41:d8:33:08:45:a4:22:91:57:80: 2b:f4:05:49:49:d0:35:00:4b:d4:c7:32:12:6e:e1:f0:13:28: 10:ba:bc:a9:75:5d:d3:5e:aa:bf:7d:ec:fd:64:47:c9:4f:20: 17:ee:6a:20:66:37:15:49:97:3b:16:2e:ab:63:af:57:a8:f8: bb:24:fa:6a:f7:9f:35:22:3b:2a:88:2a:51:c3:35:b8:c9:db: 65:80:70:d2:5c:3a:44:51:44:87:fa:a5:d3:66:bc:6d:b2:b6: 64:48:25:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6L2PHkomveRtBS+n0qCGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmN2U1Yzc1ZjY0OGFjNjkyYjE0YmMyMjJlMmMxODBjODYz YjQ1ZTIwHhcNMjUxMjE4MTAwMTU3WhcNMjUxMjE5MTAwMTU3WjAzMTEwLwYDVQQD EygxYjRlYjVlZmI5YzI4NmZhY2ZlNmJlN2RkMjE2MWQwZGI5OTY0OThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/JjcXvNusBfsnxGAfUjVlGT4JjY HbSiu9+IkBycIgxFxCsTK5QFRcjoSbxKfOaMS95ZKf/GDnM7y4hefzeZ2vOQoMjw Y4S4SjdyHStd46Q1FoQ1JwLHGvz2PCgma7c4eStUKlQu9d1xJWHyhk1gDLXveim/ IjRUqCGIgsETIm79F/P0BuJacwR6RJVbHstPK77aNiGiELjpgkU3pEsNq1NWCcLR YlRHDMkeMokGOWLEWusgd9O8YELxvMeGRiSFXLrfirFBKHWPGvmhWnrpwfzUcrvc sAXq3TQWRGIMgXKCqXwWaqnEohqSEP6yRL/9HUVtwZ0vLZfRUshKzuhOvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtOte+5wob6z+a+fdIWHQ25lkmMMB8GA1UdIwQY MBaAFO9+XHX2SKxpKxS8Ii4sGAyGO0XiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzM1Y2RmWklyR2tyRkx3aUxpd1lESVk3UmVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9hMTQyYTktYTAwYS00MjM1LWI3MWYt ZTZiMjBiMDlmODY2LzEvNzM1Y2RmWklyR2tyRkx3aUxpd1lESVk3UmVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9hMTQyYTktYTAwYS00MjM1LWI3MWYtZTZiMjBiMDlmODY2 LzEvNzM1Y2RmWklyR2tyRkx3aUxpd1lESVk3UmVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATc1fOrf0 J2Jvxpjbfso/cTw6+Q7e/TPvwHtBkca1323J91INgWeUHfPYH6glnlFNNVt2g2DR UlJXMdPhsGtZZwXltx7IVFMhgjlo7PnWsx2tyvIW1NM7wcCVVI7Ho+NPXtUfMu9e HrvQ6b3xNWIv4D+6CWWTWElPOY3zCqhfJ0rKLio10M0QBNo3LxpmBUhmakjLYc7w BXlB2DMIRaQikVeAK/QFSUnQNQBL1McyEm7h8BMoELq8qXVd016qv33s/WRHyU8g F+5qIGY3FUmXOxYuq2OvV6j4uyT6avefNSI7KogqUcM1uMnbZYBw0lw6RFFEh/ql 02a8bbK2ZEglqw== -----END CERTIFICATE-----Generated at Thu Dec 18 14:08:18 2025 by rpki-client