This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft File: 76cMuEnjg3RRvXmvfcfgNZY-YEM.mft (raw, json) Hash identifier: V75g+HSijxLl5Rg55NEan/XDNbWfIaNV7pIrTjIrqsY= Subject key identifier: 2C:31:66:1B:AD:0F:78:0D:88:5B:36:58:25:63:F2:33:E5:AA:79:60 Authority key identifier: EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43 Certificate issuer: /CN=efa70cb849e3837451bd79af7dc7e035963e6043 Certificate serial: 019B3EA3BAC32654FF37AEAAF2396B6F5C21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft Manifest number: 1097 Signing time: Sun 21 Dec 2025 02:01:16 +0000 Manifest this update: Sun 21 Dec 2025 02:01:16 +0000 Manifest next update: Mon 22 Dec 2025 02:01:16 +0000 Files and hashes: 1: 76cMuEnjg3RRvXmvfcfgNZY-YEM.crl (hash: PGak/3qGLgTrxgjLAvmHsalHm34LWaWUtk4wnhtr9I8=) 2: gJcVJ0djrH5rQDUfK1fCsLicbs0.roa (hash: FiBwswjBHp729mKlojR2ulY+J6meIBspX0VFQpsAgtk=) 3: gPnJRGAbg_gsEG5lsQLMQZ_aN3E.roa (hash: DPgRiY1XTMHzjxPysYXSL0RUck6B0Hjs2YcV10aS3mY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 02:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:ba:c3:26:54:ff:37:ae:aa:f2:39:6b:6f:5c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efa70cb849e3837451bd79af7dc7e035963e6043 Validity Not Before: Dec 21 02:01:16 2025 GMT Not After : Dec 22 02:01:16 2025 GMT Subject: CN=2c31661bad0f780d885b36582563f233e5aa7960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1b:02:d4:c7:91:32:6e:bf:69:73:85:16:ef: 97:69:10:23:6a:ff:4e:cc:0b:60:4e:c1:9d:b9:b8: 48:f1:52:87:e1:61:25:5f:f3:25:3c:57:51:6a:c8: b8:84:70:d6:47:46:5d:fd:bd:d2:5b:7c:5e:24:aa: 2d:0b:02:44:3d:f7:e0:3d:8e:37:c0:75:eb:9c:3e: ff:9e:5e:53:60:f5:be:68:b8:c5:98:d2:51:42:62: d8:1f:b8:fb:ae:69:fa:43:e8:59:fb:19:e9:32:2a: 0b:21:e9:31:d1:46:f8:02:c8:5f:ba:90:ca:cb:41: 0f:21:00:fb:f5:e3:b0:cc:3a:0f:5b:36:85:a7:4a: f6:aa:5d:e0:41:95:f0:45:87:f4:5f:44:9b:01:95: e1:ff:14:1b:7d:20:55:49:c1:a9:0c:36:68:96:53: d6:15:e7:50:9b:6b:fa:85:f1:cd:25:a3:ff:ca:31: 90:ed:c0:6c:4b:cf:8d:e3:93:ff:ba:f7:4d:32:de: f9:ff:74:21:f6:c3:c5:53:65:58:8d:85:d2:4c:a3: 3c:93:cd:ab:99:0f:38:9d:23:71:73:e3:d3:3b:00: 49:ab:e5:fb:09:26:22:6f:08:d0:47:fb:b9:7c:ee: f7:52:03:cc:4d:9c:ed:3e:23:55:94:ef:02:b5:5b: ed:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:31:66:1B:AD:0F:78:0D:88:5B:36:58:25:63:F2:33:E5:AA:79:60 X509v3 Authority Key Identifier: keyid:EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:6b:40:ab:69:4e:73:98:2e:98:ea:ac:66:75:d2:80:af:77: 15:30:98:d9:26:96:da:18:df:f4:ba:26:1f:da:6a:bf:ef:e9: 45:69:86:b9:81:98:8e:42:4a:8b:f0:18:9e:1f:41:9e:19:d7: d7:e4:61:21:19:ac:c9:4d:a4:73:68:28:85:d4:60:38:f3:3e: b7:77:ee:9d:15:f7:02:8d:7a:53:21:e6:9d:53:64:3a:4e:b8: e6:b3:fb:c1:70:e9:66:21:39:98:8a:fc:2f:f5:29:d2:e0:6b: e9:56:69:d8:b8:cd:83:da:03:df:8f:86:93:15:da:42:06:f2: bd:7e:ea:92:aa:45:24:58:1c:76:92:9d:ae:d0:c2:3d:84:84: 2e:19:39:00:cb:82:33:cc:6a:08:ce:7f:8a:69:fe:3a:a4:1d: b3:e8:ff:6a:0d:32:17:63:a9:8a:03:7b:d2:77:f5:95:7e:25: 0d:c8:15:94:b2:79:60:12:33:a3:20:41:15:a6:43:67:8d:e5: 8f:a4:8b:1d:a9:36:32:bf:61:32:e5:13:54:ca:15:1d:42:b8: 6c:05:09:0d:44:fc:fb:4d:e1:df:58:bf:8c:34:5c:e0:73:7f: 8a:db:5c:37:96:a1:cc:fc:c9:94:18:8a:82:a0:ea:39:85:4e: dc:c2:74:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o7rDJlT/N66q8jlrb1whMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYTcwY2I4NDllMzgzNzQ1MWJkNzlhZjdkYzdlMDM1OTYz ZTYwNDMwHhcNMjUxMjIxMDIwMTE2WhcNMjUxMjIyMDIwMTE2WjAzMTEwLwYDVQQD EygyYzMxNjYxYmFkMGY3ODBkODg1YjM2NTgyNTYzZjIzM2U1YWE3OTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BsC1MeRMm6/aXOFFu+XaRAjav9O zAtgTsGdubhI8VKH4WElX/MlPFdRasi4hHDWR0Zd/b3SW3xeJKotCwJEPffgPY43 wHXrnD7/nl5TYPW+aLjFmNJRQmLYH7j7rmn6Q+hZ+xnpMioLIekx0Ub4AshfupDK y0EPIQD79eOwzDoPWzaFp0r2ql3gQZXwRYf0X0SbAZXh/xQbfSBVScGpDDZollPW FedQm2v6hfHNJaP/yjGQ7cBsS8+N45P/uvdNMt75/3Qh9sPFU2VYjYXSTKM8k82r mQ84nSNxc+PTOwBJq+X7CSYibwjQR/u5fO73UgPMTZztPiNVlO8CtVvtVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwxZhutD3gNiFs2WCVj8jPlqnlgMB8GA1UdIwQY MBaAFO+nDLhJ44N0Ub15r33H4DWWPmBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZjTXVFbmpnM1JSdlhtdmZjZmdOWlktWUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82OTJiMWUtYzlmZS00M2UwLWI3MjIt NTNhNjA0ODA3NjFkLzEvNzZjTXVFbmpnM1JSdlhtdmZjZmdOWlktWUVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS82OTJiMWUtYzlmZS00M2UwLWI3MjItNTNhNjA0ODA3NjFk LzEvNzZjTXVFbmpnM1JSdlhtdmZjZmdOWlktWUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALWtAq2lO c5gumOqsZnXSgK93FTCY2SaW2hjf9LomH9pqv+/pRWmGuYGYjkJKi/AYnh9BnhnX 1+RhIRmsyU2kc2gohdRgOPM+t3funRX3Ao16UyHmnVNkOk645rP7wXDpZiE5mIr8 L/Up0uBr6VZp2LjNg9oD34+GkxXaQgbyvX7qkqpFJFgcdpKdrtDCPYSELhk5AMuC M8xqCM5/imn+OqQds+j/ag0yF2OpigN70nf1lX4lDcgVlLJ5YBIzoyBBFaZDZ43l j6SLHak2Mr9hMuUTVMoVHUK4bAUJDUT8+03h31i/jDRc4HN/ittcN5ahzPzJlBiK gqDqOYVO3MJ0VA== -----END CERTIFICATE-----Generated at Sun Dec 21 11:51:53 2025 by rpki-client