This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft File: 76AvL3KWXJ4cmy1X6j_BL8-skQM.mft (raw, json) Hash identifier: jqLAVHmifAwmqe9buRlFbNa21UujQcOUniMVUHog9X4= Subject key identifier: 2A:1F:11:A1:1F:89:40:2C:08:58:47:E0:F5:A1:33:1E:5F:60:1A:25 Authority key identifier: EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03 Certificate issuer: /CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103 Certificate serial: 019B638BE08DE1F094DB6734F2766DCA7E34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft Manifest number: 1797 Signing time: Sun 28 Dec 2025 06:01:09 +0000 Manifest this update: Sun 28 Dec 2025 06:01:09 +0000 Manifest next update: Mon 29 Dec 2025 06:01:09 +0000 Files and hashes: 1: 76AvL3KWXJ4cmy1X6j_BL8-skQM.crl (hash: m9miIDQHxGAEVUI9RXRIsCR0xjs2Gb8rGJydR217p78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:8b:e0:8d:e1:f0:94:db:67:34:f2:76:6d:ca:7e:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103 Validity Not Before: Dec 28 06:01:09 2025 GMT Not After : Dec 29 06:01:09 2025 GMT Subject: CN=2a1f11a11f89402c085847e0f5a1331e5f601a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:61:aa:39:98:cd:47:4c:57:b4:d0:e1:0a:8b: 68:bd:65:86:71:b1:a3:85:98:d7:9c:a3:92:b4:fb: 1a:87:5c:78:0d:e6:ba:28:3a:fc:67:a6:fe:87:76: 3b:c5:8d:07:bc:18:47:70:ea:58:5d:b6:ab:ab:9a: 70:96:56:bc:ca:77:07:97:64:01:3e:f8:ff:ed:09: e8:34:8b:85:42:b6:f5:f6:5c:06:e4:bb:26:e8:bb: f7:fc:9a:77:c3:9e:8e:36:86:0d:10:1c:b0:cd:97: d7:7d:60:97:79:4d:7f:cd:23:94:54:30:d6:f9:b4: 08:20:71:af:d7:3a:5d:f0:a5:c6:ec:9e:87:52:3c: e7:63:d7:aa:72:a7:54:2d:06:01:74:8e:42:e9:f4: 5b:ea:a3:0d:37:db:90:d6:52:87:67:ef:4f:fb:c4: 9f:47:23:61:f0:82:bc:92:28:8e:3f:05:6a:9d:06: 61:67:b5:d5:45:51:da:f2:65:8e:dc:bb:46:ed:cc: 8b:ab:82:a9:a4:14:f6:66:fa:cb:dc:b1:b6:bf:f2: f3:81:9f:5a:70:61:a5:60:06:26:72:6d:23:bd:e6: 6f:85:5e:23:f0:4b:8d:11:2a:35:1c:b7:84:70:9c: 4d:79:e9:e4:c7:4f:a7:76:27:72:3b:24:ca:12:f7: 4a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1F:11:A1:1F:89:40:2C:08:58:47:E0:F5:A1:33:1E:5F:60:1A:25 X509v3 Authority Key Identifier: keyid:EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:81:f8:6b:9c:aa:ee:00:ed:30:99:b5:fb:6a:f0:74:e7:61: 38:d9:d1:e6:5b:13:19:88:4a:6a:5f:f2:f2:60:b2:e3:a2:f0: c3:83:10:04:a9:47:9a:d7:b8:dd:80:3f:a9:8b:f5:7d:31:a0: 85:d1:54:46:f4:e6:d9:dd:48:f2:da:ee:43:d7:96:e8:66:04: cd:0f:bd:91:f0:f7:8a:b4:2b:da:3b:02:6b:d1:e7:5f:10:32: 60:0b:89:2b:79:0c:33:71:75:28:68:c3:2a:d0:69:ee:d6:0c: c4:18:d8:2d:21:02:79:d5:b2:2d:8e:cc:3b:d8:b3:a7:bf:94: 34:79:db:32:7e:f9:d6:b9:cb:8e:e9:5f:ad:c4:85:7b:5b:82: 22:21:83:63:fd:23:55:0b:1c:e6:6a:18:0f:6f:5f:1c:82:54: 5a:7a:fa:24:68:73:fb:24:ff:4c:0e:d0:83:84:8a:bf:8a:1f: cc:96:d9:53:f1:4b:2b:d9:f7:35:c8:76:1f:67:6b:cc:fb:75: fd:5a:61:54:ec:38:9c:64:2b:5e:4e:59:29:e7:3b:45:a5:67: 29:d5:02:a6:19:f0:6e:d3:04:0c:cd:55:58:a2:6c:e7:ce:ba: f1:3f:58:77:94:f8:ac:f4:91:18:3e:ba:9b:00:ac:7e:f4:b5: ff:1c:be:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtji+CN4fCU22c08nZtyn40MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYTAyZjJmNzI5NjVjOWUxYzliMmQ1N2VhM2ZjMTJmY2Zh YzkxMDMwHhcNMjUxMjI4MDYwMTA5WhcNMjUxMjI5MDYwMTA5WjAzMTEwLwYDVQQD EygyYTFmMTFhMTFmODk0MDJjMDg1ODQ3ZTBmNWExMzMxZTVmNjAxYTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WGqOZjNR0xXtNDhCotovWWGcbGj hZjXnKOStPsah1x4Dea6KDr8Z6b+h3Y7xY0HvBhHcOpYXbarq5pwlla8yncHl2QB Pvj/7QnoNIuFQrb19lwG5Lsm6Lv3/Jp3w56ONoYNEBywzZfXfWCXeU1/zSOUVDDW +bQIIHGv1zpd8KXG7J6HUjznY9eqcqdULQYBdI5C6fRb6qMNN9uQ1lKHZ+9P+8Sf RyNh8IK8kiiOPwVqnQZhZ7XVRVHa8mWO3LtG7cyLq4KppBT2ZvrL3LG2v/LzgZ9a cGGlYAYmcm0jveZvhV4j8EuNESo1HLeEcJxNeenkx0+ndidyOyTKEvdKvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCofEaEfiUAsCFhH4PWhMx5fYBolMB8GA1UdIwQY MBaAFO+gLy9yllyeHJstV+o/wS/PrJEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZBdkwzS1dYSjRjbXkxWDZqX0JMOC1za1FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81OGRjNWQtODlhYi00MmJkLThiYWEt NDg4OTI2Y2ZkYzJkLzEvNzZBdkwzS1dYSjRjbXkxWDZqX0JMOC1za1FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS81OGRjNWQtODlhYi00MmJkLThiYWEtNDg4OTI2Y2ZkYzJk LzEvNzZBdkwzS1dYSjRjbXkxWDZqX0JMOC1za1FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIH4a5yq 7gDtMJm1+2rwdOdhONnR5lsTGYhKal/y8mCy46Lww4MQBKlHmte43YA/qYv1fTGg hdFURvTm2d1I8truQ9eW6GYEzQ+9kfD3irQr2jsCa9HnXxAyYAuJK3kMM3F1KGjD KtBp7tYMxBjYLSECedWyLY7MO9izp7+UNHnbMn751rnLjulfrcSFe1uCIiGDY/0j VQsc5moYD29fHIJUWnr6JGhz+yT/TA7Qg4SKv4ofzJbZU/FLK9n3Nch2H2drzPt1 /VphVOw4nGQrXk5ZKec7RaVnKdUCphnwbtMEDM1VWKJs58668T9Yd5T4rPSRGD66 mwCsfvS1/xy+1Q== -----END CERTIFICATE-----Generated at Sun Dec 28 08:09:08 2025 by rpki-client