This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft File: 73i8lpqDBzNu9ARPPf7x_hNjgrM.mft (raw, json) Hash identifier: 9A85LT7Cqgj5doh1IQ/buROlWTtQ5y03SMdzTlv+EdU= Subject key identifier: 9E:55:7B:FE:94:D6:9D:BF:9A:08:37:02:84:AD:95:9E:D2:4E:8A:CB Authority key identifier: EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3 Certificate issuer: /CN=ef78bc969a8307336ef4044f3dfef1fe136382b3 Certificate serial: 019B2FD4F344DAAE13CBFE1995E42776D273 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft Manifest number: 0D49 Signing time: Thu 18 Dec 2025 05:00:43 +0000 Manifest this update: Thu 18 Dec 2025 05:00:43 +0000 Manifest next update: Fri 19 Dec 2025 05:00:43 +0000 Files and hashes: 1: 73i8lpqDBzNu9ARPPf7x_hNjgrM.crl (hash: UcCSSa3ZyMdIZ8uHyzG9KADdw3MYZV+hwSkBADVKoVI=) 2: uuMH9xwnTCchffmAJa-oKrLfAYc.roa (hash: gi00uqlY9uodrepVtMPHWYj2E0gYu71bOvNoVXlRiVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d4:f3:44:da:ae:13:cb:fe:19:95:e4:27:76:d2:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef78bc969a8307336ef4044f3dfef1fe136382b3 Validity Not Before: Dec 18 05:00:43 2025 GMT Not After : Dec 19 05:00:43 2025 GMT Subject: CN=9e557bfe94d69dbf9a08370284ad959ed24e8acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:58:ef:2d:78:2c:99:64:bb:83:6a:f7:10:d1: 85:1c:a5:f4:5e:c5:e4:ad:d0:85:d6:ce:2a:f7:c8: 49:87:b1:87:b9:db:70:65:75:e6:e0:da:e5:0c:83: 8f:09:5e:d7:ad:db:13:16:1a:3d:26:00:47:e0:d9: 00:25:de:a6:93:bf:90:0a:79:ee:a0:ac:a7:4e:3e: e2:2c:4d:fe:ef:da:7f:74:e9:7c:60:4b:99:60:01: 6a:a5:47:01:b5:b0:f2:f1:35:2c:e3:32:22:71:1e: cb:67:94:2b:58:80:6e:a5:94:0d:31:fc:57:84:66: 0c:86:9d:83:b9:f2:c4:93:e1:32:e1:b2:e5:fd:95: 15:48:7b:59:85:fa:09:fa:d2:92:3e:bc:84:49:15: f7:c4:49:98:ab:f1:ea:d4:87:9d:11:8a:c8:41:2d: 54:d8:a8:a8:06:51:de:c1:aa:d1:78:de:87:3b:6a: e0:e4:c1:b4:bf:b7:8b:87:95:30:8b:37:82:0e:46: a6:f6:6c:c7:a4:12:58:5c:cc:31:51:70:d2:3f:95: d9:6b:5c:8e:65:c2:33:77:39:9d:19:00:2f:d7:06: 5b:4f:2d:79:e6:0a:17:5a:22:61:07:27:8e:ef:ce: a0:5f:68:54:96:03:a6:c9:7f:7d:c1:bc:0c:47:59: c8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:55:7B:FE:94:D6:9D:BF:9A:08:37:02:84:AD:95:9E:D2:4E:8A:CB X509v3 Authority Key Identifier: keyid:EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:8c:f0:52:0d:0c:58:20:e4:44:c7:10:68:0b:e8:45:4b:42: f1:3d:3b:5e:3a:36:43:f8:de:e9:4c:1f:b2:ec:7b:ac:b3:f9: d6:eb:4d:6a:df:c3:34:36:4a:32:12:ca:14:ae:d8:f2:8f:12: f8:c8:2b:3a:bb:09:2b:a1:8f:c3:83:61:a6:11:d5:f1:96:8d: 97:48:bd:b9:fe:df:fb:a6:50:8c:b3:e9:fc:17:78:e5:d0:9b: 6c:e5:cb:96:f1:4a:e8:ea:6a:17:fc:c7:ce:a8:b9:09:f3:83: 0f:3d:93:dd:65:2a:6c:7e:85:83:d8:f0:bc:39:53:51:30:5e: e1:c3:ce:3f:06:e9:52:8d:ca:ca:92:3e:3b:8a:82:55:4f:55: 47:f9:1f:f1:96:6d:62:8e:9e:a7:d8:79:03:63:5c:44:69:1b: 12:cb:b5:37:1c:45:62:bc:35:d1:fc:d0:fa:3b:19:c4:0e:b3: c4:46:4e:0a:da:d1:d1:13:69:94:5b:e6:df:99:5e:15:c8:4c: 47:fd:db:31:d0:cb:08:32:10:ed:f7:9a:ad:e8:f0:d2:d8:6e: 58:28:08:2d:4a:b5:ce:64:00:e9:16:a4:ba:79:88:cc:39:3b: fb:58:46:14:8b:d0:9e:ad:a8:17:c3:d9:b2:ec:b3:95:11:ac: 01:19:cd:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1PNE2q4Ty/4ZleQndtJzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNzhiYzk2OWE4MzA3MzM2ZWY0MDQ0ZjNkZmVmMWZlMTM2 MzgyYjMwHhcNMjUxMjE4MDUwMDQzWhcNMjUxMjE5MDUwMDQzWjAzMTEwLwYDVQQD Eyg5ZTU1N2JmZTk0ZDY5ZGJmOWEwODM3MDI4NGFkOTU5ZWQyNGU4YWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVjvLXgsmWS7g2r3ENGFHKX0XsXk rdCF1s4q98hJh7GHudtwZXXm4NrlDIOPCV7XrdsTFho9JgBH4NkAJd6mk7+QCnnu oKynTj7iLE3+79p/dOl8YEuZYAFqpUcBtbDy8TUs4zIicR7LZ5QrWIBupZQNMfxX hGYMhp2DufLEk+Ey4bLl/ZUVSHtZhfoJ+tKSPryESRX3xEmYq/Hq1IedEYrIQS1U 2KioBlHewarReN6HO2rg5MG0v7eLh5UwizeCDkam9mzHpBJYXMwxUXDSP5XZa1yO ZcIzdzmdGQAv1wZbTy155goXWiJhByeO786gX2hUlgOmyX99wbwMR1nI+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5Ve/6U1p2/mgg3AoStlZ7STorLMB8GA1UdIwQY MBaAFO94vJaagwczbvQETz3+8f4TY4KzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzNpOGxwcURCek51OUFSUFBmN3hfaE5qZ3JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lNGJkNmEtYWRhZi00OGM4LWI5OTkt NTM1NzBhMWFiZDA0LzEvNzNpOGxwcURCek51OUFSUFBmN3hfaE5qZ3JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9lNGJkNmEtYWRhZi00OGM4LWI5OTktNTM1NzBhMWFiZDA0 LzEvNzNpOGxwcURCek51OUFSUFBmN3hfaE5qZ3JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfozwUg0M WCDkRMcQaAvoRUtC8T07Xjo2Q/je6Uwfsux7rLP51utNat/DNDZKMhLKFK7Y8o8S +MgrOrsJK6GPw4NhphHV8ZaNl0i9uf7f+6ZQjLPp/Bd45dCbbOXLlvFK6OpqF/zH zqi5CfODDz2T3WUqbH6Fg9jwvDlTUTBe4cPOPwbpUo3KypI+O4qCVU9VR/kf8ZZt Yo6ep9h5A2NcRGkbEsu1NxxFYrw10fzQ+jsZxA6zxEZOCtrR0RNplFvm35leFchM R/3bMdDLCDIQ7fearejw0thuWCgILUq1zmQA6RakunmIzDk7+1hGFIvQnq2oF8PZ suyzlRGsARnNmw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:12:51 2025 by rpki-client