This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft File: 73OcDASkJxtarWLBGSKeGPraX9M.mft (raw, json) Hash identifier: vDbbbCNhHpcOqcbXuw/2XBOoCtibGrkd0MMWUK5wMcQ= Subject key identifier: F8:21:39:68:15:95:5A:31:F6:46:B7:00:24:83:68:64:A7:A4:2A:04 Authority key identifier: EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3 Certificate issuer: /CN=ef739c0c04a4271b5aad62c119229e18fada5fd3 Certificate serial: 019BF8ADC51A005062E40B6D66423269F507 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft Manifest number: 0FAF Signing time: Mon 26 Jan 2026 05:01:36 +0000 Manifest this update: Mon 26 Jan 2026 05:01:36 +0000 Manifest next update: Tue 27 Jan 2026 05:01:36 +0000 Files and hashes: 1: 73OcDASkJxtarWLBGSKeGPraX9M.crl (hash: WwSnDWs7DIjFjHq2yqXoIMuUVPzMNH09vPlI3MCZ2wg=) 2: SlpF7r7mXCWXhPzZBmODYnXQ2AQ.roa (hash: jMJC3ZxPYgXKuHU+fXZq1zQnba0EbcW6rqUVC+m4QQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:c5:1a:00:50:62:e4:0b:6d:66:42:32:69:f5:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef739c0c04a4271b5aad62c119229e18fada5fd3 Validity Not Before: Jan 26 05:01:36 2026 GMT Not After : Jan 27 05:01:36 2026 GMT Subject: CN=f821396815955a31f646b70024836864a7a42a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f3:ce:b8:cb:03:c9:58:d7:ff:7f:1b:09:17: 47:59:23:7f:f3:5c:b2:ba:60:ba:ad:8e:4a:9c:18: 01:99:0a:e7:3e:69:32:3b:44:3f:b3:78:13:87:ea: e0:cb:f6:bf:e1:f8:a3:16:48:20:a0:b2:22:93:27: de:3b:f8:62:cb:f0:3e:9c:89:8e:d8:18:ec:af:34: 03:23:a1:b6:8c:b7:98:e5:ad:05:24:5f:4a:83:fc: a4:0e:61:79:4c:f8:2f:d3:b3:ea:33:d0:6a:99:be: 38:3a:c7:77:b3:f1:83:e1:72:c2:3d:51:49:8d:b4: 1f:89:da:08:cb:ab:10:92:de:e1:43:44:d1:92:12: cc:89:aa:82:de:9e:a6:11:63:cd:53:b5:98:6f:cf: 64:b7:f4:81:f9:cc:2e:34:c7:da:22:a0:6e:c2:6f: 87:62:54:bd:4c:d4:9e:86:d3:32:81:95:7d:e3:be: a0:6c:10:22:e9:47:f3:72:ef:4c:c1:11:5c:fd:a2: a7:b9:f6:95:09:a2:74:6c:73:ba:04:ec:c2:a8:fd: 2e:8b:ec:e1:bd:84:37:95:99:1e:20:d3:fc:d4:04: 5c:c0:7d:50:fe:00:77:e6:0b:62:37:ef:4d:b8:72: f8:2d:7b:b5:3d:c7:da:32:3f:54:07:b3:7d:48:ca: 8b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:21:39:68:15:95:5A:31:F6:46:B7:00:24:83:68:64:A7:A4:2A:04 X509v3 Authority Key Identifier: keyid:EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c8:ff:a8:6f:45:07:28:cb:66:28:6b:b1:39:54:0f:a1:4f: e5:51:e6:6c:1d:48:85:14:80:c3:51:5c:ec:20:cd:a7:44:ac: 35:6d:8e:24:24:bf:ed:38:23:63:73:4e:0e:a8:6c:2c:68:72: ca:0c:f8:89:f8:bd:da:89:74:c1:31:66:aa:a6:f8:65:86:80: cc:f3:6c:69:92:56:8f:00:3d:98:a9:17:d7:37:70:59:6e:f4: 47:d4:ad:e6:f8:17:d8:a2:64:0c:ed:bf:a1:0e:76:9c:50:80: 73:c5:4d:44:d0:6c:52:8d:a7:bb:cd:2d:4e:c2:e6:db:d9:2e: 3a:60:b9:52:c6:0b:3a:a7:2e:09:2a:74:dd:4e:43:55:d7:d9: 35:d1:75:52:e0:a5:9c:1c:3f:55:bf:66:73:95:17:e3:5e:95: 6c:e0:bc:da:9d:86:6c:cd:a7:58:2d:d2:40:d2:d6:de:75:a3: 5a:db:9e:67:4a:97:3b:08:f4:59:96:8d:b5:b2:aa:7f:69:78: ee:9a:e9:4a:a4:24:ff:fc:9d:ac:a3:14:fc:c9:de:a7:77:3a: 34:a5:14:01:e2:a6:52:11:32:4b:bb:94:cc:3b:54:3b:a9:94: ae:4f:18:68:65:e4:3f:84:0d:15:5a:56:1b:e7:49:50:40:7e: 2e:31:cd:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rcUaAFBi5AttZkIyafUHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNzM5YzBjMDRhNDI3MWI1YWFkNjJjMTE5MjI5ZTE4ZmFk YTVmZDMwHhcNMjYwMTI2MDUwMTM2WhcNMjYwMTI3MDUwMTM2WjAzMTEwLwYDVQQD EyhmODIxMzk2ODE1OTU1YTMxZjY0NmI3MDAyNDgzNjg2NGE3YTQyYTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvPOuMsDyVjX/38bCRdHWSN/81yy umC6rY5KnBgBmQrnPmkyO0Q/s3gTh+rgy/a/4fijFkggoLIikyfeO/hiy/A+nImO 2BjsrzQDI6G2jLeY5a0FJF9Kg/ykDmF5TPgv07PqM9Bqmb44Osd3s/GD4XLCPVFJ jbQfidoIy6sQkt7hQ0TRkhLMiaqC3p6mEWPNU7WYb89kt/SB+cwuNMfaIqBuwm+H YlS9TNSehtMygZV9476gbBAi6Ufzcu9MwRFc/aKnufaVCaJ0bHO6BOzCqP0ui+zh vYQ3lZkeINP81ARcwH1Q/gB35gtiN+9NuHL4LXu1PcfaMj9UB7N9SMqLoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPghOWgVlVox9ka3ACSDaGSnpCoEMB8GA1UdIwQY MBaAFO9znAwEpCcbWq1iwRkinhj62l/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzNPY0RBU2tKeHRhcldMQkdTS2VHUHJhWDlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yODUxOWYtZGM0OC00ZjMxLWEzNWUt OTllZTRhODk4NWMzLzEvNzNPY0RBU2tKeHRhcldMQkdTS2VHUHJhWDlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8yODUxOWYtZGM0OC00ZjMxLWEzNWUtOTllZTRhODk4NWMz LzEvNzNPY0RBU2tKeHRhcldMQkdTS2VHUHJhWDlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGsj/qG9F ByjLZihrsTlUD6FP5VHmbB1IhRSAw1Fc7CDNp0SsNW2OJCS/7TgjY3NODqhsLGhy ygz4ifi92ol0wTFmqqb4ZYaAzPNsaZJWjwA9mKkX1zdwWW70R9St5vgX2KJkDO2/ oQ52nFCAc8VNRNBsUo2nu80tTsLm29kuOmC5UsYLOqcuCSp03U5DVdfZNdF1UuCl nBw/Vb9mc5UX416VbOC82p2GbM2nWC3SQNLW3nWjWtueZ0qXOwj0WZaNtbKqf2l4 7prpSqQk//ydrKMU/Mnep3c6NKUUAeKmUhEyS7uUzDtUO6mUrk8YaGXkP4QNFVpW G+dJUEB+LjHN4Q== -----END CERTIFICATE-----Generated at Mon Jan 26 08:00:45 2026 by rpki-client