This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft File: 76W2I0ehtkzqSaKrOrSYPDSGH7I.mft (raw, json) Hash identifier: eHA1OQSvioijXvBUPjaQqs9zMy3WziCjjPnQhhVeXbY= Subject key identifier: 64:5A:BA:AD:52:94:D6:28:CE:5C:BE:29:62:A7:AE:5C:62:DA:01:FD Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Certificate serial: 019B3E355D0E39C50C46B6612D7423793D50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft Manifest number: 01C0 Signing time: Sun 21 Dec 2025 00:00:43 +0000 Manifest this update: Sun 21 Dec 2025 00:00:43 +0000 Manifest next update: Mon 22 Dec 2025 00:00:43 +0000 Files and hashes: 1: 76W2I0ehtkzqSaKrOrSYPDSGH7I.crl (hash: 9H4MKvTK0cF71k/l7ebDFZ3G3DW4H9yKBwPSY9V70LY=) 2: TdWCA3jMG4RcSGjTx6h7-OFQkJ0.roa (hash: i6Jk7HaD1mr34rVBZKHoNKT8LfsYuiueMYQP9x4CSCY=) 3: Wfa0ovyRJ_pd_dEUKmQa9LUPn7s.roa (hash: URIulXseWmtHdVMSkEKr6LgwVbHHo5nHTKefaj4mCqk=) 4: WnOPQ0ufHKuGIGeJgpa97dMJzZI.roa (hash: HZdjF63aWYiWvWoR/raQkcNq/IJsdTGCUZAkFXHzLn8=) 5: ZwlhiYyWQkRGz3NJHJFyM_Rg7Cg.roa (hash: 5by/fhrdm7/3f06Vze3ay8vgCnkJXF3Gh0BeggMxG98=) 6: _AP3FQaLWZZ4b07Vm6k0fkmrpNg.roa (hash: zZmmWUxFdkDgjpPPw8BHUSJ0nwj7XDsNJM3Ea4LtplY=) 7: kT-GBRdn5I-2tlMb_7_9SciQN9g.roa (hash: QjeGQjKJ8nc3raWH+8rzpohQUijqNjXsVOlYQC2T4vE=) 8: y3M_S9Lkx0bRvURYEJ1jFXn0IDE.roa (hash: J+owsHeEjZMxVahX59fSdFJZuQMT7sogFPyy4332cl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:5d:0e:39:c5:0c:46:b6:61:2d:74:23:79:3d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Validity Not Before: Dec 21 00:00:43 2025 GMT Not After : Dec 22 00:00:43 2025 GMT Subject: CN=645abaad5294d628ce5cbe2962a7ae5c62da01fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:34:54:3f:79:af:32:59:28:1e:d7:a7:bb:90: bc:1c:ce:34:ac:7f:53:64:f7:60:bf:71:88:13:33: af:25:54:e5:53:4b:e2:65:61:6f:9d:52:03:2f:81: a3:9f:9b:d9:c9:6a:15:c5:db:22:01:41:3a:12:5b: b8:6b:49:b4:0a:57:13:78:2b:cb:82:7c:32:9f:26: d1:f9:0f:c3:6c:49:17:10:06:ca:ef:df:2e:9b:00: df:da:e4:12:aa:3f:8a:52:83:29:a9:f9:9d:4d:ee: 8b:fb:17:e1:91:7c:b2:2d:34:df:65:f4:3e:dc:1a: d9:b5:f3:b5:25:ed:fd:07:5b:7b:7b:01:b1:1b:69: 0f:04:27:e4:6d:e0:57:d1:58:60:7d:a7:f6:d4:b8: fe:12:7b:f7:21:ae:80:53:ad:b2:ab:23:d0:08:24: 13:0e:6f:23:dd:1f:81:e5:29:fb:6c:14:4e:c3:0f: f8:71:ec:a0:95:a0:eb:a3:a1:75:3c:03:b3:96:49: a4:1e:39:9c:59:db:1b:72:08:34:e8:39:71:97:c0: a2:0d:20:86:b3:0a:03:5b:84:e2:94:66:83:44:d6: 7a:7e:1c:26:a2:66:f8:f1:d6:02:a4:e3:29:3a:6e: d2:86:82:f5:29:f8:41:7c:42:81:00:71:63:49:f3: 58:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5A:BA:AD:52:94:D6:28:CE:5C:BE:29:62:A7:AE:5C:62:DA:01:FD X509v3 Authority Key Identifier: keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:bc:c2:7a:2a:00:cd:e8:cd:cd:20:f4:f8:1b:b5:dd:e1:94: f6:25:42:46:dc:be:77:d4:3b:37:53:b3:28:0c:ef:79:4f:39: b5:6e:4f:be:b5:a7:ac:66:06:ef:9d:92:f3:8d:bc:0a:ad:5f: 5c:0d:7c:52:bc:5d:30:de:6e:d6:6c:82:0b:7c:f8:0f:65:7c: e2:e2:35:d9:af:3e:a4:59:91:f4:f4:de:62:f8:98:21:6a:f7: 84:ae:82:62:8b:3b:8e:91:f7:df:08:a4:dc:ce:c0:3e:01:b0: eb:2e:e9:18:bc:19:e5:eb:ff:f9:cb:3a:7e:77:2e:e9:cc:73: 93:1f:a7:73:7e:8a:2a:40:f1:f3:f3:ac:bd:1c:9b:4c:64:50: 0a:a6:bf:5b:70:8f:9c:89:a7:90:d4:e3:d4:cd:48:25:44:d3: 67:54:04:d9:43:a7:80:43:14:21:d8:e9:90:e3:ca:50:43:21: ee:3b:e6:66:22:dd:e6:9f:5c:10:d6:cd:5b:0f:bc:74:19:a8: 9a:1e:eb:b3:81:a4:e7:3b:03:bc:06:ae:c6:8c:91:68:74:57: 32:48:2a:c5:8d:fe:e6:a2:dd:34:3d:a9:6a:3e:3e:37:b2:68: b7:92:fe:d8:3d:b7:f2:50:93:18:b4:51:d8:dc:64:fc:64:28: 2e:f4:a4:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NV0OOcUMRrZhLXQjeT1QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYTViNjIzNDdhMWI2NGNlYTQ5YTJhYjNhYjQ5ODNjMzQ4 NjFmYjIwHhcNMjUxMjIxMDAwMDQzWhcNMjUxMjIyMDAwMDQzWjAzMTEwLwYDVQQD Eyg2NDVhYmFhZDUyOTRkNjI4Y2U1Y2JlMjk2MmE3YWU1YzYyZGEwMWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzRUP3mvMlkoHtenu5C8HM40rH9T ZPdgv3GIEzOvJVTlU0viZWFvnVIDL4Gjn5vZyWoVxdsiAUE6Elu4a0m0ClcTeCvL gnwynybR+Q/DbEkXEAbK798umwDf2uQSqj+KUoMpqfmdTe6L+xfhkXyyLTTfZfQ+ 3BrZtfO1Je39B1t7ewGxG2kPBCfkbeBX0Vhgfaf21Lj+Env3Ia6AU62yqyPQCCQT Dm8j3R+B5Sn7bBROww/4ceyglaDro6F1PAOzlkmkHjmcWdsbcgg06Dlxl8CiDSCG swoDW4TilGaDRNZ6fhwmomb48dYCpOMpOm7ShoL1KfhBfEKBAHFjSfNYAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGRauq1SlNYozly+KWKnrlxi2gH9MB8GA1UdIwQY MBaAFO+ltiNHobZM6kmiqzq0mDw0hh+yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQt MDEzZDJhMTFjMGE1LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQtMDEzZDJhMTFjMGE1 LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrzCeioA zejNzSD0+Bu13eGU9iVCRty+d9Q7N1OzKAzveU85tW5PvrWnrGYG752S8428Cq1f XA18UrxdMN5u1myCC3z4D2V84uI12a8+pFmR9PTeYviYIWr3hK6CYos7jpH33wik 3M7APgGw6y7pGLwZ5ev/+cs6fncu6cxzkx+nc36KKkDx8/OsvRybTGRQCqa/W3CP nImnkNTj1M1IJUTTZ1QE2UOngEMUIdjpkOPKUEMh7jvmZiLd5p9cENbNWw+8dBmo mh7rs4Gk5zsDvAauxoyRaHRXMkgqxY3+5qLdND2paj4+N7Jot5L+2D238lCTGLRR 2Nxk/GQoLvSkOw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:56:01 2025 by rpki-client