This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft File: 76AvL3KWXJ4cmy1X6j_BL8-skQM.mft (raw, json) Hash identifier: AIrPKC2gfrLrnFb4rVhvYiyZTF5s3zV6nF8BKkGsPRc= Subject key identifier: BA:F8:88:2D:EC:56:A9:15:E3:94:13:5D:20:5E:D0:03:E1:3D:59:ED Authority key identifier: EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03 Certificate issuer: /CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103 Certificate serial: 019B72FEE0623C658BC995EDD3CB8E78ADF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft Manifest number: 179F Signing time: Wed 31 Dec 2025 06:01:04 +0000 Manifest this update: Wed 31 Dec 2025 06:01:04 +0000 Manifest next update: Thu 01 Jan 2026 06:01:04 +0000 Files and hashes: 1: 76AvL3KWXJ4cmy1X6j_BL8-skQM.crl (hash: IIQHpNI0MjqeakXNQptxpZrP+G9qSKK2FaaHpsHpP4Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:fe:e0:62:3c:65:8b:c9:95:ed:d3:cb:8e:78:ad:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103 Validity Not Before: Dec 31 06:01:04 2025 GMT Not After : Jan 1 06:01:04 2026 GMT Subject: CN=baf8882dec56a915e394135d205ed003e13d59ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:37:60:94:6b:e6:a8:41:3d:ad:ae:e3:0c:2b: 02:4b:de:dc:3d:b5:85:1e:75:c8:94:c2:47:8c:f5: d0:e8:01:44:bb:27:57:8c:85:ce:bd:60:ec:88:ac: ab:64:30:02:72:0e:af:0a:ea:9d:2b:6f:9c:9a:c0: 1c:8d:ab:26:4f:9c:e0:d2:b7:24:ad:34:f8:72:b3: a1:32:01:7c:a5:d4:55:32:6b:f1:38:12:4e:9c:a0: 0a:dc:2c:7c:35:c2:ef:fe:cf:50:d1:3a:38:f0:f1: 47:3b:86:68:79:51:3c:5e:3e:20:73:f7:90:e7:9f: 0b:7d:bb:6f:7e:7d:63:8b:04:f3:81:6c:c0:a7:01: e5:68:58:00:d5:44:82:88:79:5b:9a:1d:55:6b:d4: 95:ab:6e:7f:87:c3:d3:92:82:d7:62:90:df:f8:f4: c5:48:35:41:dc:1f:7e:52:14:16:e8:62:f2:64:cb: 27:03:df:b1:64:e8:90:a9:da:ea:f5:ea:57:72:0f: 2d:08:88:3e:d6:05:26:5e:d6:8b:93:5f:60:db:4b: e1:7e:60:12:43:4a:b6:71:64:d7:b1:d9:17:37:9c: 67:d6:2d:bd:cd:25:05:30:dd:70:68:00:94:e0:90: 2d:47:aa:5c:ad:d8:86:90:32:ac:44:f4:2f:89:ee: 62:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F8:88:2D:EC:56:A9:15:E3:94:13:5D:20:5E:D0:03:E1:3D:59:ED X509v3 Authority Key Identifier: keyid:EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:9b:bc:5f:79:69:d7:21:a1:e6:62:63:b0:5f:94:2c:56:c3: 64:af:30:e7:4d:0f:a1:1a:ea:06:ad:47:c5:1f:cd:ac:f7:85: f3:6e:73:dc:8d:79:19:35:5c:63:b1:fd:9b:d7:9f:7e:5d:c8: 85:0e:83:bd:61:39:f0:ef:3a:f1:48:4d:c4:2f:74:1a:87:0c: 2d:e3:61:69:f0:35:fa:b1:f7:4d:a6:82:05:dc:7f:ce:2c:cc: c3:20:4a:96:23:76:c9:a8:e9:e8:b2:ef:15:07:11:2e:07:41: 30:3d:c6:94:3e:0a:af:8f:a1:3e:04:b5:25:ad:23:70:00:c0: a4:54:58:61:0f:98:37:b5:ad:84:1a:ab:eb:f8:4b:73:9c:60: 2e:c2:91:ed:5a:34:22:57:7d:86:7e:d8:ac:6a:41:9e:b9:62: 9c:0d:67:af:72:7d:82:69:15:59:dd:d1:cc:f9:83:34:45:85: 8e:e7:20:20:1f:a2:8f:cb:b4:37:46:95:b2:cb:88:53:16:49: dc:87:fd:51:b5:20:23:15:26:5b:65:5c:71:c2:08:f1:d4:dc: ec:98:7a:ba:1e:51:80:93:66:6a:e0:e0:15:11:02:4c:5a:ce: 70:a5:0f:6e:22:85:2f:14:24:78:83:88:8d:21:e7:34:7d:34: 11:e3:7b:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZty/uBiPGWLyZXt08uOeK30MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYTAyZjJmNzI5NjVjOWUxYzliMmQ1N2VhM2ZjMTJmY2Zh YzkxMDMwHhcNMjUxMjMxMDYwMTA0WhcNMjYwMTAxMDYwMTA0WjAzMTEwLwYDVQQD EyhiYWY4ODgyZGVjNTZhOTE1ZTM5NDEzNWQyMDVlZDAwM2UxM2Q1OWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDdglGvmqEE9ra7jDCsCS97cPbWF HnXIlMJHjPXQ6AFEuydXjIXOvWDsiKyrZDACcg6vCuqdK2+cmsAcjasmT5zg0rck rTT4crOhMgF8pdRVMmvxOBJOnKAK3Cx8NcLv/s9Q0To48PFHO4ZoeVE8Xj4gc/eQ 558Lfbtvfn1jiwTzgWzApwHlaFgA1USCiHlbmh1Va9SVq25/h8PTkoLXYpDf+PTF SDVB3B9+UhQW6GLyZMsnA9+xZOiQqdrq9epXcg8tCIg+1gUmXtaLk19g20vhfmAS Q0q2cWTXsdkXN5xn1i29zSUFMN1waACU4JAtR6pcrdiGkDKsRPQvie5i0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLr4iC3sVqkV45QTXSBe0APhPVntMB8GA1UdIwQY MBaAFO+gLy9yllyeHJstV+o/wS/PrJEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZBdkwzS1dYSjRjbXkxWDZqX0JMOC1za1FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81OGRjNWQtODlhYi00MmJkLThiYWEt NDg4OTI2Y2ZkYzJkLzEvNzZBdkwzS1dYSjRjbXkxWDZqX0JMOC1za1FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS81OGRjNWQtODlhYi00MmJkLThiYWEtNDg4OTI2Y2ZkYzJk LzEvNzZBdkwzS1dYSjRjbXkxWDZqX0JMOC1za1FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZu8X3lp 1yGh5mJjsF+ULFbDZK8w500PoRrqBq1HxR/NrPeF825z3I15GTVcY7H9m9effl3I hQ6DvWE58O868UhNxC90GocMLeNhafA1+rH3TaaCBdx/zizMwyBKliN2yajp6LLv FQcRLgdBMD3GlD4Kr4+hPgS1Ja0jcADApFRYYQ+YN7WthBqr6/hLc5xgLsKR7Vo0 Ild9hn7YrGpBnrlinA1nr3J9gmkVWd3RzPmDNEWFjucgIB+ij8u0N0aVssuIUxZJ 3If9UbUgIxUmW2VcccII8dTc7Jh6uh5RgJNmauDgFRECTFrOcKUPbiKFLxQkeIOI jSHnNH00EeN7cw== -----END CERTIFICATE-----Generated at Wed Dec 31 09:02:42 2025 by rpki-client