This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft File: 75S8y9TC4P-PeqsEXhSjEfOy-f4.mft (raw, json) Hash identifier: Zq2DrfDuotvA/j5Js21+W/uM6R4SYiRwQOlOp07ZkU4= Subject key identifier: 9F:43:06:A5:D2:1D:B6:21:DB:70:FC:EC:0B:DA:25:31:DF:2F:EB:D3 Authority key identifier: EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE Certificate issuer: /CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe Certificate serial: 019B38D822F78091906D50618A0C119950A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft Manifest number: 0378 Signing time: Fri 19 Dec 2025 23:00:47 +0000 Manifest this update: Fri 19 Dec 2025 23:00:47 +0000 Manifest next update: Sat 20 Dec 2025 23:00:47 +0000 Files and hashes: 1: 75S8y9TC4P-PeqsEXhSjEfOy-f4.crl (hash: JhhDQv04tc5BB/7npJXphmHBvEak2s7usfGtGlDyFe4=) 2: x_UGYHPi4KGbhasIbcCsyLRrLvc.roa (hash: TZUXAFaKqC1GafLAz2qnfFwZj2ZE2C3Lq2YMTRrQmKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:22:f7:80:91:90:6d:50:61:8a:0c:11:99:50:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe Validity Not Before: Dec 19 23:00:47 2025 GMT Not After : Dec 20 23:00:47 2025 GMT Subject: CN=9f4306a5d21db621db70fcec0bda2531df2febd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d0:4a:bc:85:55:1a:40:fb:a8:7a:a6:e7:39: 73:89:21:4a:a2:a2:87:72:30:24:d0:10:3d:ee:84: 68:f1:25:b3:5e:2c:e0:f9:91:11:bd:4a:4c:f9:73: b0:1d:a1:d2:0b:9f:12:23:70:7f:74:02:42:e1:8f: f5:17:31:bb:18:e7:97:bd:89:18:0f:b4:a2:36:c7: d4:d3:98:fa:bd:8e:cc:c1:fd:34:95:ab:83:c4:ab: 35:e3:35:83:6f:24:ae:9c:a2:c2:2a:14:f7:c8:d2: 5d:75:7a:c7:11:1f:6d:d5:31:03:aa:ff:a8:85:c4: 4a:d0:84:1c:21:bf:d1:14:d7:0a:da:f6:cb:e7:58: 0c:e5:09:0e:0d:ed:77:db:71:97:d5:2a:65:b8:ea: e5:e7:a5:48:25:2e:ab:20:3a:1e:db:c8:fb:9e:d1: f3:0d:23:db:b4:b0:be:71:d8:4e:a5:a7:44:49:63: 26:52:5c:00:23:07:25:84:fa:50:89:e2:4c:b4:d4: 78:d4:3f:1c:58:f3:fd:3b:53:39:72:30:24:35:2a: f8:c3:7d:8e:e6:23:0a:2b:84:0c:ca:9d:7a:77:5f: 41:2c:d9:eb:d6:75:b5:a2:d0:bc:9f:c8:c4:ea:2d: 57:d8:fb:28:56:6d:46:c9:00:c9:52:99:d7:ca:2c: ff:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:43:06:A5:D2:1D:B6:21:DB:70:FC:EC:0B:DA:25:31:DF:2F:EB:D3 X509v3 Authority Key Identifier: keyid:EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:1d:9f:11:c3:60:ff:41:90:46:08:7d:2e:d1:2c:5b:f0:dc: 5d:a8:25:41:c2:42:d4:09:3f:24:61:85:e6:75:3c:e1:5a:51: 87:17:09:07:ab:67:98:47:d8:43:9f:a4:f6:a1:80:71:98:2a: 27:c9:f8:a6:a9:bb:d8:74:41:e2:33:2f:99:2b:77:b9:fc:2b: c4:8c:27:45:44:95:aa:89:c7:50:c2:55:93:28:a5:71:e6:8d: 51:c0:e4:da:d4:af:ed:76:54:06:56:f5:45:f2:1b:5e:8b:4b: c6:8b:1e:83:dd:dd:e9:c6:41:3b:03:98:20:08:42:29:52:9e: 98:04:9b:cb:b0:3b:1e:6f:b9:5a:3c:16:fc:28:c2:4f:6c:8a: 12:4c:46:84:02:99:5a:45:64:31:69:db:56:e1:6e:56:c4:df: 47:fb:04:0e:8c:11:4a:2c:8e:37:93:f3:0d:af:f0:ef:13:5f: 03:b4:a5:60:48:a7:17:d3:76:50:28:f7:4a:0f:bb:e0:39:18: 16:d8:10:29:5e:1f:7e:97:ae:ac:d7:cd:f4:a3:71:17:81:ca: 67:91:3e:88:a6:18:00:b6:b4:c5:6b:5c:df:88:85:10:20:08: 6b:57:8b:95:96:9d:2e:05:3b:bc:92:24:36:35:1b:ac:8c:48: 17:ea:83:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42CL3gJGQbVBhigwRmVCnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmOTRiY2NiZDRjMmUwZmY4ZjdhYWIwNDVlMTRhMzExZjNi MmY5ZmUwHhcNMjUxMjE5MjMwMDQ3WhcNMjUxMjIwMjMwMDQ3WjAzMTEwLwYDVQQD Eyg5ZjQzMDZhNWQyMWRiNjIxZGI3MGZjZWMwYmRhMjUzMWRmMmZlYmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9BKvIVVGkD7qHqm5zlziSFKoqKH cjAk0BA97oRo8SWzXizg+ZERvUpM+XOwHaHSC58SI3B/dAJC4Y/1FzG7GOeXvYkY D7SiNsfU05j6vY7Mwf00lauDxKs14zWDbySunKLCKhT3yNJddXrHER9t1TEDqv+o hcRK0IQcIb/RFNcK2vbL51gM5QkODe1323GX1SpluOrl56VIJS6rIDoe28j7ntHz DSPbtLC+cdhOpadESWMmUlwAIwclhPpQieJMtNR41D8cWPP9O1M5cjAkNSr4w32O 5iMKK4QMyp16d19BLNnr1nW1otC8n8jE6i1X2PsoVm1GyQDJUpnXyiz/0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9DBqXSHbYh23D87AvaJTHfL+vTMB8GA1UdIwQY MBaAFO+UvMvUwuD/j3qrBF4UoxHzsvn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzVTOHk5VEM0UC1QZXFzRVhoU2pFZk95LWY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iZWMyNTMtOWMyOS00NzhjLTk3MTEt Y2I2M2Q2ZmJiZmM3LzEvNzVTOHk5VEM0UC1QZXFzRVhoU2pFZk95LWY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iZWMyNTMtOWMyOS00NzhjLTk3MTEtY2I2M2Q2ZmJiZmM3 LzEvNzVTOHk5VEM0UC1QZXFzRVhoU2pFZk95LWY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIR2fEcNg /0GQRgh9LtEsW/DcXaglQcJC1Ak/JGGF5nU84VpRhxcJB6tnmEfYQ5+k9qGAcZgq J8n4pqm72HRB4jMvmSt3ufwrxIwnRUSVqonHUMJVkyilceaNUcDk2tSv7XZUBlb1 RfIbXotLxoseg93d6cZBOwOYIAhCKVKemASby7A7Hm+5WjwW/CjCT2yKEkxGhAKZ WkVkMWnbVuFuVsTfR/sEDowRSiyON5PzDa/w7xNfA7SlYEinF9N2UCj3Sg+74DkY FtgQKV4ffpeurNfN9KNxF4HKZ5E+iKYYALa0xWtc34iFECAIa1eLlZadLgU7vJIk NjUbrIxIF+qDjQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:31:36 2025 by rpki-client