This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft File: 75pS4318rMafjv78dTO8CxjLXmc.mft (raw, json) Hash identifier: ZAWdOjOVbcfFr+u8P3NRlMBUjGwPdWk/QIkzwMoCFYg= Subject key identifier: FA:97:A1:9D:BB:CA:B9:4E:CE:D4:2F:9E:E4:7F:90:20:89:39:B3:29 Authority key identifier: EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67 Certificate issuer: /CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67 Certificate serial: 019B3C7DDED47B830EF6CFA94CD9CF154575 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft Manifest number: 0949 Signing time: Sat 20 Dec 2025 16:00:40 +0000 Manifest this update: Sat 20 Dec 2025 16:00:40 +0000 Manifest next update: Sun 21 Dec 2025 16:00:40 +0000 Files and hashes: 1: 75pS4318rMafjv78dTO8CxjLXmc.crl (hash: XYH1ai45Qlce11yWXUfYTp5gUxi90wxeASoi0fxnlXg=) 2: V1xvVOGY5BJ_I9u5C9ObZ-YSnJg.roa (hash: NClt/SHG+/tXhhv3Y/klJlIO43Syulf2MR3J6Q5EBlA=) 3: qsZrdnkoO0E25hqGWNb8Z9dNerM.roa (hash: hAyilmx8AWlJmwYPt85XuLAx4M2nXqrLORTF4xGEO6s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:de:d4:7b:83:0e:f6:cf:a9:4c:d9:cf:15:45:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67 Validity Not Before: Dec 20 16:00:40 2025 GMT Not After : Dec 21 16:00:40 2025 GMT Subject: CN=fa97a19dbbcab94eced42f9ee47f90208939b329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:29:82:03:2b:79:73:d4:c1:42:2d:57:1b:66: 66:92:2e:2c:46:25:04:54:cc:04:b0:ba:b3:73:8a: ff:2f:f7:55:25:c9:c3:57:18:fe:b5:93:5d:5f:8a: 46:09:f2:bb:86:00:b2:2d:12:fc:fb:2b:31:95:65: 5f:0e:ba:97:07:00:be:b3:6f:3e:1e:d9:ab:b3:19: f0:45:23:23:b5:3f:d3:67:9e:78:d1:88:22:e4:00: 44:13:34:7f:02:e4:84:18:a3:90:15:59:10:89:56: 97:9c:72:26:34:d6:9e:a8:b8:e4:a1:72:ca:54:51: f9:a7:7a:06:75:16:39:dd:ef:8c:6c:45:79:b7:e8: 1b:5b:dc:34:11:17:20:40:66:b4:b4:9c:10:5b:9b: 0d:0f:7f:c9:97:0b:60:55:71:77:81:4a:ff:85:36: 7f:a2:f0:ef:1b:de:12:ae:35:f1:6e:79:4d:8d:7e: a2:4f:d5:6a:81:2b:6b:0f:f0:2e:5a:0d:c3:7c:96: 2e:12:2a:1f:9f:6e:f5:e6:96:76:5a:a2:58:96:35: a7:1b:d5:35:b6:44:82:b7:4b:3f:8d:cd:7b:16:83: aa:f6:6b:aa:7a:54:38:df:55:89:84:c6:0c:fa:6e: 97:4d:c6:01:a7:ef:03:dd:e3:e3:32:37:23:5a:c8: a6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:97:A1:9D:BB:CA:B9:4E:CE:D4:2F:9E:E4:7F:90:20:89:39:B3:29 X509v3 Authority Key Identifier: keyid:EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:4e:67:e7:1e:11:b1:97:d0:8a:fc:ee:a0:8c:90:d5:4e:5f: 37:17:27:19:a2:e2:62:ea:46:35:31:91:46:78:5c:3e:08:97: a7:9f:12:31:96:33:bc:24:72:63:5b:da:2a:21:24:cc:84:4f: ea:92:0e:dd:ce:54:85:75:12:b8:02:1a:98:1c:6f:3a:60:71: bf:09:7d:77:ec:7e:d2:f1:7c:fd:e1:80:4e:57:48:bc:21:98: 40:e5:25:70:dd:7c:b9:4c:64:6c:87:b2:59:e8:c1:92:fc:5d: d7:6b:ba:bc:cd:ed:1f:8e:27:d3:b3:74:93:ef:38:9c:7a:8c: af:2f:05:27:79:64:ff:23:f1:77:b2:b3:a0:d9:9e:8e:04:f2: 25:5d:79:27:5a:25:6a:58:28:5e:af:e9:6a:15:86:7f:b9:67: 86:f9:86:66:cb:1d:6c:f5:57:f9:26:97:36:62:a6:73:66:c1: 73:fb:19:bf:64:13:23:d9:2d:96:76:fb:4d:e9:af:db:c9:47: 0d:c1:ad:78:8e:c5:1f:94:d6:c6:a6:7c:f1:87:dd:ae:df:ec: 21:71:29:ae:ea:5c:9e:00:c2:cb:81:2a:7d:f8:f0:ab:5e:27: 92:39:02:60:d0:93:b4:5b:df:d9:15:25:b4:5c:98:87:7b:9d: 90:37:9a:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fd7Ue4MO9s+pTNnPFUV1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmOWE1MmUzN2Q3Y2FjYzY5ZjhlZmVmYzc1MzNiYzBiMThj YjVlNjcwHhcNMjUxMjIwMTYwMDQwWhcNMjUxMjIxMTYwMDQwWjAzMTEwLwYDVQQD EyhmYTk3YTE5ZGJiY2FiOTRlY2VkNDJmOWVlNDdmOTAyMDg5MzliMzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SmCAyt5c9TBQi1XG2Zmki4sRiUE VMwEsLqzc4r/L/dVJcnDVxj+tZNdX4pGCfK7hgCyLRL8+ysxlWVfDrqXBwC+s28+ HtmrsxnwRSMjtT/TZ5540Ygi5ABEEzR/AuSEGKOQFVkQiVaXnHImNNaeqLjkoXLK VFH5p3oGdRY53e+MbEV5t+gbW9w0ERcgQGa0tJwQW5sND3/JlwtgVXF3gUr/hTZ/ ovDvG94SrjXxbnlNjX6iT9VqgStrD/AuWg3DfJYuEiofn2715pZ2WqJYljWnG9U1 tkSCt0s/jc17FoOq9muqelQ431WJhMYM+m6XTcYBp+8D3ePjMjcjWsimXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqXoZ27yrlOztQvnuR/kCCJObMpMB8GA1UdIwQY MBaAFO+aUuN9fKzGn47+/HUzvAsYy15nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzVwUzQzMThyTWFmanY3OGRUTzhDeGpMWG1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80YzZkODgtZjgyOC00M2Y5LTk2NDEt YjFhOWJkMjg2NTFlLzEvNzVwUzQzMThyTWFmanY3OGRUTzhDeGpMWG1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy80YzZkODgtZjgyOC00M2Y5LTk2NDEtYjFhOWJkMjg2NTFl LzEvNzVwUzQzMThyTWFmanY3OGRUTzhDeGpMWG1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHk5n5x4R sZfQivzuoIyQ1U5fNxcnGaLiYupGNTGRRnhcPgiXp58SMZYzvCRyY1vaKiEkzIRP 6pIO3c5UhXUSuAIamBxvOmBxvwl9d+x+0vF8/eGATldIvCGYQOUlcN18uUxkbIey WejBkvxd12u6vM3tH44n07N0k+84nHqMry8FJ3lk/yPxd7KzoNmejgTyJV15J1ol algoXq/pahWGf7lnhvmGZssdbPVX+SaXNmKmc2bBc/sZv2QTI9ktlnb7Temv28lH DcGteI7FH5TWxqZ88Yfdrt/sIXEprupcngDCy4Eqffjwq14nkjkCYNCTtFvf2RUl tFyYh3udkDeaXw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:48:42 2025 by rpki-client