This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft File: 73OcDASkJxtarWLBGSKeGPraX9M.mft (raw, json) Hash identifier: PU/bZ12PHk9uhQqIsTruyfPr6zVkVaMvQth1VbuzwnY= Subject key identifier: AE:79:24:45:08:92:CE:55:AA:07:E3:D7:AF:78:DB:81:35:DF:79:13 Authority key identifier: EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3 Certificate issuer: /CN=ef739c0c04a4271b5aad62c119229e18fada5fd3 Certificate serial: 019AF3899A3C7FB9C70046BE527DE27942A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft Manifest number: 0F27 Signing time: Sat 06 Dec 2025 12:01:12 +0000 Manifest this update: Sat 06 Dec 2025 12:01:12 +0000 Manifest next update: Sun 07 Dec 2025 12:01:12 +0000 Files and hashes: 1: 73OcDASkJxtarWLBGSKeGPraX9M.crl (hash: i3inWf/uTnJtDByB1sLcmPE9Oj2wlX+nCX8jj5BP3wc=) 2: GO5PY0agBoKkma7NteMSdFbX44k.roa (hash: jwM1qR7KbSYH5wU03Z7/YrapkXuYuB0WPqYmk8E3608=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:9a:3c:7f:b9:c7:00:46:be:52:7d:e2:79:42:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef739c0c04a4271b5aad62c119229e18fada5fd3 Validity Not Before: Dec 6 12:01:12 2025 GMT Not After : Dec 7 12:01:12 2025 GMT Subject: CN=ae7924450892ce55aa07e3d7af78db8135df7913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d3:45:57:ba:e5:fc:f3:a8:d2:3e:04:66:1e: 09:25:12:71:9c:75:0d:df:69:8c:20:ff:f4:36:18: 47:18:2c:55:34:0d:80:6b:d8:05:a8:92:1f:24:46: 4d:92:60:ed:29:3d:65:1c:26:73:c0:81:ae:2a:5c: 4e:46:2b:05:d9:20:6f:90:3b:63:a4:17:4b:9f:22: 06:7c:4a:c5:a9:15:fa:f8:2c:2b:b2:59:27:75:3a: 12:e0:73:9a:69:79:ca:ad:fc:47:ad:2d:f1:02:cf: aa:48:98:e1:55:ee:04:bc:69:05:b8:37:b1:c1:f6: 6a:e7:03:4b:0c:49:29:7c:10:68:95:9e:ad:e5:bf: 9f:02:da:38:07:96:22:f7:69:2b:e1:33:26:9e:18: 96:84:3e:89:a7:c9:b3:b8:d0:e5:0b:05:1f:fc:60: ed:63:f5:50:29:a2:da:13:3a:e8:ae:0c:ad:01:5c: 8f:bb:ec:24:80:b4:48:b4:d2:d0:ca:1b:3d:2d:00: bf:4a:30:1e:46:96:f7:e6:54:d3:58:02:52:1d:5d: 6b:76:cc:7a:bc:ef:01:91:4e:15:39:71:a7:1d:66: 87:0f:2d:de:cc:5e:36:2e:67:2b:f2:6c:50:a7:74: dc:7e:1a:75:b9:78:64:61:99:64:f1:8f:39:43:14: 54:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:79:24:45:08:92:CE:55:AA:07:E3:D7:AF:78:DB:81:35:DF:79:13 X509v3 Authority Key Identifier: keyid:EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:c8:18:b1:de:42:a0:ac:b6:eb:be:df:dc:9c:d8:3c:dd:a1: c6:3d:0f:f1:50:11:78:13:74:69:0d:36:08:9b:b5:f0:99:bf: 2e:b0:ac:b2:b0:a4:b8:8b:db:c8:15:0c:e8:8c:d0:ee:0b:73: 93:5f:18:7a:1b:9f:30:44:b1:df:47:83:72:e0:bd:85:6f:e1: e8:d9:01:d6:ae:77:d3:2c:ba:78:56:40:df:59:ea:85:9f:be: fc:65:7c:d8:61:a2:a7:61:31:5c:3e:9a:6a:fc:8d:7b:4f:c7: 36:4d:75:48:2c:8a:4b:1c:7d:b2:32:6a:09:ec:4f:d1:8a:0a: fa:f7:0a:5b:d9:f4:cc:d9:5c:ad:8b:c5:f8:6a:ce:72:dc:e9: 6c:33:34:19:46:98:28:0d:c2:58:04:8c:a0:db:3d:c7:2b:6a: 56:2b:a0:be:f4:af:0c:94:a2:5d:c7:66:da:73:2c:24:6c:8c: 31:09:59:fe:94:84:60:2a:88:25:f4:99:6b:50:d7:67:f3:f7: af:33:d7:fc:17:08:e8:af:b6:09:80:93:80:b6:a6:f6:29:07: b2:c1:cd:1e:b8:c9:77:bc:d7:f9:34:05:1a:ff:91:69:30:e4: 97:46:08:5a:0f:34:ff:33:ef:76:f1:c0:4c:ff:d6:0f:d5:b4: 25:ba:10:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZo8f7nHAEa+Un3ieUKgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNzM5YzBjMDRhNDI3MWI1YWFkNjJjMTE5MjI5ZTE4ZmFk YTVmZDMwHhcNMjUxMjA2MTIwMTEyWhcNMjUxMjA3MTIwMTEyWjAzMTEwLwYDVQQD EyhhZTc5MjQ0NTA4OTJjZTU1YWEwN2UzZDdhZjc4ZGI4MTM1ZGY3OTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtNFV7rl/POo0j4EZh4JJRJxnHUN 32mMIP/0NhhHGCxVNA2Aa9gFqJIfJEZNkmDtKT1lHCZzwIGuKlxORisF2SBvkDtj pBdLnyIGfErFqRX6+CwrslkndToS4HOaaXnKrfxHrS3xAs+qSJjhVe4EvGkFuDex wfZq5wNLDEkpfBBolZ6t5b+fAto4B5Yi92kr4TMmnhiWhD6Jp8mzuNDlCwUf/GDt Y/VQKaLaEzrorgytAVyPu+wkgLRItNLQyhs9LQC/SjAeRpb35lTTWAJSHV1rdsx6 vO8BkU4VOXGnHWaHDy3ezF42Lmcr8mxQp3Tcfhp1uXhkYZlk8Y85QxRUkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK55JEUIks5Vqgfj169424E133kTMB8GA1UdIwQY MBaAFO9znAwEpCcbWq1iwRkinhj62l/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzNPY0RBU2tKeHRhcldMQkdTS2VHUHJhWDlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yODUxOWYtZGM0OC00ZjMxLWEzNWUt OTllZTRhODk4NWMzLzEvNzNPY0RBU2tKeHRhcldMQkdTS2VHUHJhWDlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8yODUxOWYtZGM0OC00ZjMxLWEzNWUtOTllZTRhODk4NWMz LzEvNzNPY0RBU2tKeHRhcldMQkdTS2VHUHJhWDlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8gYsd5C oKy2677f3JzYPN2hxj0P8VAReBN0aQ02CJu18Jm/LrCssrCkuIvbyBUM6IzQ7gtz k18YehufMESx30eDcuC9hW/h6NkB1q530yy6eFZA31nqhZ++/GV82GGip2ExXD6a avyNe0/HNk11SCyKSxx9sjJqCexP0YoK+vcKW9n0zNlcrYvF+GrOctzpbDM0GUaY KA3CWASMoNs9xytqViugvvSvDJSiXcdm2nMsJGyMMQlZ/pSEYCqIJfSZa1DXZ/P3 rzPX/BcI6K+2CYCTgLam9ikHssHNHrjJd7zX+TQFGv+RaTDkl0YIWg80/zPvdvHA TP/WD9W0JboQOA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:42:19 2025 by rpki-client