This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft File: 74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft (raw, json) Hash identifier: rtsgVBaxL+UQJBg4JCd7CLKP+KRlQ8sc293g1RJT0nc= Subject key identifier: 43:CF:9C:D8:3E:30:DC:AD:01:7A:69:B6:0A:CB:30:4F:BF:41:80:EB Authority key identifier: EF:80:3A:49:0F:D6:20:35:18:BB:E6:44:BC:72:09:AF:B7:7E:C7:B4 Certificate issuer: /CN=ef803a490fd6203518bbe644bc7209afb77ec7b4 Certificate serial: 019B37C54DBF58ADF24D8483B52FD33F86BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft Manifest number: 091F Signing time: Fri 19 Dec 2025 18:00:35 +0000 Manifest this update: Fri 19 Dec 2025 18:00:35 +0000 Manifest next update: Sat 20 Dec 2025 18:00:35 +0000 Files and hashes: 1: 74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl (hash: kX2pGSvx3QMW/F5S265ZDNIoQY3d9bCBlO4Ep8wOgC0=) 2: ScldZDNPQSfRnsRt5khqoPE91NU.roa (hash: KUeiCd9GvmA+LCWqv73j10Yntn6kGl4O83uDHMjp9xg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:4d:bf:58:ad:f2:4d:84:83:b5:2f:d3:3f:86:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef803a490fd6203518bbe644bc7209afb77ec7b4 Validity Not Before: Dec 19 18:00:35 2025 GMT Not After : Dec 20 18:00:35 2025 GMT Subject: CN=43cf9cd83e30dcad017a69b60acb304fbf4180eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fa:24:80:19:e0:17:ab:5b:be:74:3b:91:c1: 5f:45:e7:06:e8:1b:a6:1e:3e:78:24:79:65:68:ea: 9f:cd:ff:ce:a5:70:e5:16:6c:74:d9:38:dd:b9:5a: 27:0a:0f:c6:44:34:87:4f:be:74:61:dc:1f:b9:ce: fc:65:1b:de:fa:83:ac:a8:81:5d:cd:04:34:37:42: 5a:0b:77:2d:f9:3b:5e:ab:ec:d6:8d:63:05:25:b8: 79:43:14:39:45:38:55:57:30:ba:88:ac:09:68:e2: cd:ca:89:9a:39:5d:2a:80:20:94:22:56:3a:96:f9: 4e:bc:7b:2f:56:9d:0f:ee:84:9f:2d:b1:3a:33:63: bf:dc:d6:63:97:43:27:3b:ba:67:8a:d1:6e:cd:91: 05:f2:88:e4:f0:96:b7:6b:cd:65:da:80:92:8b:cb: fe:e9:e1:bc:37:2b:51:bf:d2:3e:b9:c6:0b:8b:10: 93:d8:e8:b5:f3:04:59:d3:10:a6:90:7c:1e:bf:84: 2d:26:e9:84:35:0d:8e:63:dd:00:ba:d8:60:04:34: 43:90:d6:91:43:82:ed:7b:cd:a7:99:03:e7:d7:f3: f1:16:a6:28:ff:f2:60:a8:2d:60:47:b5:54:d2:e0: f4:2d:e1:78:d3:d8:0a:3f:16:0b:46:af:43:90:94: bf:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CF:9C:D8:3E:30:DC:AD:01:7A:69:B6:0A:CB:30:4F:BF:41:80:EB X509v3 Authority Key Identifier: keyid:EF:80:3A:49:0F:D6:20:35:18:BB:E6:44:BC:72:09:AF:B7:7E:C7:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:81:3c:0f:72:d5:8b:fb:a1:ac:b9:fa:39:db:b7:6f:fe:be: ef:be:80:4f:85:f1:e8:2f:8f:0f:12:0e:11:c9:91:33:6c:e8: a7:94:a0:8f:f9:77:0e:00:58:49:0b:e9:3a:81:93:76:96:50: bc:29:a0:72:66:ae:29:25:99:d3:76:12:ff:42:e0:31:6c:97: 26:e2:e9:ac:9a:e8:4c:d5:74:10:02:df:3c:63:b2:cc:0a:27: d3:dd:4e:7f:e7:d3:3e:1f:c3:85:38:f9:82:18:b4:6c:0c:5a: 1a:05:52:58:20:34:1c:9c:4e:0f:db:9b:a4:03:ca:10:a3:cb: f7:d6:4f:17:cb:8e:f7:01:c7:a1:2e:07:d2:42:a6:6e:c0:bf: 48:7d:ff:a0:6f:3e:e4:4f:6a:e0:d5:57:49:8f:ee:bd:f0:9e: ae:91:47:99:40:2e:9c:df:af:03:96:d8:60:c9:5b:e9:03:f7: b4:45:83:c9:91:33:fa:23:3a:f4:30:eb:8d:13:bb:59:6e:03: b4:e9:80:93:36:95:be:18:3d:3c:fc:c5:8c:e5:9d:2b:4b:cd: 51:2b:b3:d1:4e:59:b1:c9:6f:68:f5:1b:2a:bb:29:ab:07:01: 54:02:0b:4e:cd:e4:6a:6f:b5:c8:85:98:b2:89:c1:5c:ab:e4: 20:53:c1:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xU2/WK3yTYSDtS/TP4a7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmODAzYTQ5MGZkNjIwMzUxOGJiZTY0NGJjNzIwOWFmYjc3 ZWM3YjQwHhcNMjUxMjE5MTgwMDM1WhcNMjUxMjIwMTgwMDM1WjAzMTEwLwYDVQQD Eyg0M2NmOWNkODNlMzBkY2FkMDE3YTY5YjYwYWNiMzA0ZmJmNDE4MGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvokgBngF6tbvnQ7kcFfRecG6Bum Hj54JHllaOqfzf/OpXDlFmx02TjduVonCg/GRDSHT750Ydwfuc78ZRve+oOsqIFd zQQ0N0JaC3ct+Tteq+zWjWMFJbh5QxQ5RThVVzC6iKwJaOLNyomaOV0qgCCUIlY6 lvlOvHsvVp0P7oSfLbE6M2O/3NZjl0MnO7pnitFuzZEF8ojk8Ja3a81l2oCSi8v+ 6eG8NytRv9I+ucYLixCT2Oi18wRZ0xCmkHwev4QtJumENQ2OY90AuthgBDRDkNaR Q4Lte82nmQPn1/PxFqYo//JgqC1gR7VU0uD0LeF409gKPxYLRq9DkJS/DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPPnNg+MNytAXpptgrLME+/QYDrMB8GA1UdIwQY MBaAFO+AOkkP1iA1GLvmRLxyCa+3fse0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzRBNlNRX1dJRFVZdS1aRXZISUpyN2QteDdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC84YzQ4YWMtZDk2YS00NDFhLWIxODYt ODc4N2QwYmYxMjA3LzEvNzRBNlNRX1dJRFVZdS1aRXZISUpyN2QteDdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC84YzQ4YWMtZDk2YS00NDFhLWIxODYtODc4N2QwYmYxMjA3 LzEvNzRBNlNRX1dJRFVZdS1aRXZISUpyN2QteDdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYE8D3LV i/uhrLn6Odu3b/6+776AT4Xx6C+PDxIOEcmRM2zop5Sgj/l3DgBYSQvpOoGTdpZQ vCmgcmauKSWZ03YS/0LgMWyXJuLprJroTNV0EALfPGOyzAon091Of+fTPh/DhTj5 ghi0bAxaGgVSWCA0HJxOD9ubpAPKEKPL99ZPF8uO9wHHoS4H0kKmbsC/SH3/oG8+ 5E9q4NVXSY/uvfCerpFHmUAunN+vA5bYYMlb6QP3tEWDyZEz+iM69DDrjRO7WW4D tOmAkzaVvhg9PPzFjOWdK0vNUSuz0U5ZsclvaPUbKrspqwcBVAILTs3kam+1yIWY sonBXKvkIFPB1A== -----END CERTIFICATE-----Generated at Fri Dec 19 19:38:23 2025 by rpki-client