This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft File: 733R6-5RP_oxjNyIuBrBjP5yazA.mft (raw, json) Hash identifier: 1qH6dYclwpS76z8B+vNL1w/xvyjkixAAs2MKyCTwTag= Subject key identifier: E7:DF:68:08:0B:41:A4:96:14:94:0F:8D:30:C7:26:03:46:84:7A:68 Authority key identifier: EF:7D:D1:EB:EE:51:3F:FA:31:8C:DC:88:B8:1A:C1:8C:FE:72:6B:30 Certificate issuer: /CN=ef7dd1ebee513ffa318cdc88b81ac18cfe726b30 Certificate serial: 019AF1D1EE494162275A811C92DBD45B69AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft Manifest number: 162A Signing time: Sat 06 Dec 2025 04:00:58 +0000 Manifest this update: Sat 06 Dec 2025 04:00:58 +0000 Manifest next update: Sun 07 Dec 2025 04:00:58 +0000 Files and hashes: 1: 733R6-5RP_oxjNyIuBrBjP5yazA.crl (hash: Ea9fBqLQztOFsSr01SghLN8Kh24kNbRg/69GhLUXagY=) 2: j5HF96yv7cLigcHPzuSioYP7qZU.roa (hash: EZSm2GEOWgRxvLjs00cTfuWYkp01jcIX3AmXq7a4GFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ee:49:41:62:27:5a:81:1c:92:db:d4:5b:69:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef7dd1ebee513ffa318cdc88b81ac18cfe726b30 Validity Not Before: Dec 6 04:00:58 2025 GMT Not After : Dec 7 04:00:58 2025 GMT Subject: CN=e7df68080b41a49614940f8d30c7260346847a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b3:bc:a4:e6:08:9b:6b:92:cd:38:95:ae:27: fa:6e:2f:7c:70:30:21:d4:5e:d1:bb:b9:fa:62:78: 52:5f:83:c1:28:c4:f3:1f:51:1f:0a:17:48:0d:6d: e2:2f:ab:97:22:74:c4:a2:aa:fc:27:4c:83:7b:90: ee:b2:3b:92:7d:35:5b:99:74:55:89:a2:b7:79:8b: 1b:86:3c:1f:e6:39:92:78:2e:70:d7:10:4f:7f:ae: ec:33:f8:2e:65:b6:75:60:d2:8e:35:f8:99:92:95: ca:b4:d4:20:92:a8:80:ed:89:40:97:c5:49:33:e5: 44:b5:e9:28:ef:ac:74:77:01:f1:a4:d1:20:a4:34: 81:74:20:8c:68:22:5b:10:dc:85:31:9c:c4:26:96: 39:53:a5:0e:f1:5e:ce:77:2e:fc:2f:ae:f6:39:d0: 8b:57:8d:ce:7c:5c:c3:37:dd:34:af:38:e6:ee:de: 58:c2:ae:c4:e9:3c:31:0b:45:f3:2a:f9:41:c1:b3: 61:8f:4f:2f:7e:a6:e6:fd:87:0a:94:10:54:9c:87: 3f:d4:48:cf:af:a2:e4:17:ce:bd:4f:0e:55:a6:f7: 0e:5f:03:36:6a:62:39:ed:ec:32:36:bc:bd:2a:af: a5:85:4a:8b:91:49:11:24:7e:14:fb:fe:52:b9:bd: 8c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:DF:68:08:0B:41:A4:96:14:94:0F:8D:30:C7:26:03:46:84:7A:68 X509v3 Authority Key Identifier: keyid:EF:7D:D1:EB:EE:51:3F:FA:31:8C:DC:88:B8:1A:C1:8C:FE:72:6B:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:b4:66:79:be:53:6c:ee:5e:fd:f7:c1:80:7b:c0:e8:b8:dc: 87:cc:e6:0d:46:e7:be:d1:a7:6c:d9:98:b1:8f:ca:ba:6a:a4: c9:68:59:49:fe:48:8d:8a:bf:23:e6:a9:2a:73:85:af:49:28: 7d:1e:b3:8f:cf:7c:2b:fe:31:35:29:87:35:89:ea:52:fe:dd: 21:48:7c:e7:0f:85:a3:31:ec:38:af:27:11:ef:e7:f0:bb:15: 5c:36:5b:67:4a:86:49:b6:c3:05:47:2e:d9:44:a9:3d:ca:8e: 17:24:97:b8:05:d0:34:43:6e:f4:15:0b:e0:c8:11:70:54:d1: 55:a6:9b:d8:3d:4c:4a:d7:85:a3:d3:ea:25:0a:ea:4c:2d:bb: b6:4b:e9:db:d1:71:81:63:44:1b:26:f0:9b:5f:79:75:cd:8b: cc:76:a3:49:b9:e5:bd:9e:b9:fa:08:b9:f5:b7:55:77:d8:e4: cd:20:5a:29:26:c4:9b:da:aa:bd:b3:f2:44:6c:bf:90:5e:45: 4e:fd:e9:38:dd:69:17:e8:fd:cb:eb:94:4f:dc:df:96:bb:05: 84:3a:e8:52:8f:4a:13:1d:2f:1e:9e:94:be:ca:6e:50:eb:b8: f4:ba:09:57:fa:fb:1c:8d:80:58:fb:d5:81:1a:87:3b:2e:6c: 31:97:e1:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0e5JQWInWoEcktvUW2mqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmN2RkMWViZWU1MTNmZmEzMThjZGM4OGI4MWFjMThjZmU3 MjZiMzAwHhcNMjUxMjA2MDQwMDU4WhcNMjUxMjA3MDQwMDU4WjAzMTEwLwYDVQQD EyhlN2RmNjgwODBiNDFhNDk2MTQ5NDBmOGQzMGM3MjYwMzQ2ODQ3YTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07O8pOYIm2uSzTiVrif6bi98cDAh 1F7Ru7n6YnhSX4PBKMTzH1EfChdIDW3iL6uXInTEoqr8J0yDe5DusjuSfTVbmXRV iaK3eYsbhjwf5jmSeC5w1xBPf67sM/guZbZ1YNKONfiZkpXKtNQgkqiA7YlAl8VJ M+VEteko76x0dwHxpNEgpDSBdCCMaCJbENyFMZzEJpY5U6UO8V7Ody78L672OdCL V43OfFzDN900rzjm7t5Ywq7E6TwxC0XzKvlBwbNhj08vfqbm/YcKlBBUnIc/1EjP r6LkF869Tw5VpvcOXwM2amI57ewyNry9Kq+lhUqLkUkRJH4U+/5Sub2MRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOffaAgLQaSWFJQPjTDHJgNGhHpoMB8GA1UdIwQY MBaAFO990evuUT/6MYzciLgawYz+cmswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzMzUjYtNVJQX294ak55SXVCckJqUDV5YXpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mOWVlNmQtNzY0MC00ZTNkLTliNDUt ZTU2ZmVjYTYxMmU3LzEvNzMzUjYtNVJQX294ak55SXVCckJqUDV5YXpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9mOWVlNmQtNzY0MC00ZTNkLTliNDUtZTU2ZmVjYTYxMmU3 LzEvNzMzUjYtNVJQX294ak55SXVCckJqUDV5YXpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLRmeb5T bO5e/ffBgHvA6Ljch8zmDUbnvtGnbNmYsY/KumqkyWhZSf5IjYq/I+apKnOFr0ko fR6zj898K/4xNSmHNYnqUv7dIUh85w+FozHsOK8nEe/n8LsVXDZbZ0qGSbbDBUcu 2USpPcqOFySXuAXQNENu9BUL4MgRcFTRVaab2D1MSteFo9PqJQrqTC27tkvp29Fx gWNEGybwm195dc2LzHajSbnlvZ65+gi59bdVd9jkzSBaKSbEm9qqvbPyRGy/kF5F Tv3pON1pF+j9y+uUT9zflrsFhDroUo9KEx0vHp6UvspuUOu49LoJV/r7HI2AWPvV gRqHOy5sMZfhMw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:50 2025 by rpki-client