This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft File: do75wQS-IihL97J1bSqBc5RqOG4.mft (raw, json) Hash identifier: xPkeOUYBZ34aN/OOBzH9YaDVqVL0Te75wInfdbZnnXE= Subject key identifier: F6:FE:56:5E:1B:3D:36:64:0C:1B:EA:9B:2E:E1:FA:1F:12:B8:A0:DF Authority key identifier: 76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E Certificate issuer: /CN=768ef9c104be22284bf7b2756d2a8173946a386e Certificate serial: 019B2C2F7F31C4FAC31F5F096DFAD3F8E28A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 12:01:08 +0000 Manifest this update: Wed 17 Dec 2025 12:01:08 +0000 Manifest next update: Thu 18 Dec 2025 12:01:08 +0000 Files and hashes: 1: EJkcDznOKKWRmaypi-0UVjmIciU.roa (hash: 0CzgDka1v9BOwLuN51gJ8uTArmQf+fKvMJ7KbWRZMSo=) 2: do75wQS-IihL97J1bSqBc5RqOG4.crl (hash: ep2e52GI67HowYqsI8MLP+ZrbscDMcbGVzTO00xfQcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:7f:31:c4:fa:c3:1f:5f:09:6d:fa:d3:f8:e2:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=768ef9c104be22284bf7b2756d2a8173946a386e Validity Not Before: Dec 17 12:01:08 2025 GMT Not After : Dec 18 12:01:08 2025 GMT Subject: CN=f6fe565e1b3d36640c1bea9b2ee1fa1f12b8a0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:75:6b:09:c0:a6:bc:90:a7:ad:33:d8:e4:87: a3:22:2a:fe:25:26:6f:e9:18:d3:38:70:e6:81:9f: b8:b0:fe:ab:c4:41:b4:d8:64:8b:d5:4d:e7:ce:59: 57:ed:d2:ee:e3:d5:b7:8d:18:eb:83:36:db:8f:ad: 08:6c:9d:de:96:5f:50:60:ff:e9:9e:a0:33:df:29: 62:a6:b2:d4:46:67:40:eb:a9:d1:14:38:30:d5:c5: 22:50:eb:17:cc:93:46:26:a0:77:48:08:75:b5:e3: d9:3e:31:da:a6:4d:42:f2:c4:e5:a3:41:17:66:41: de:f2:b8:e9:4d:14:27:19:28:05:94:98:9f:57:cc: 3a:db:a3:52:f5:d3:3d:98:08:62:b9:aa:f6:f0:49: e0:3d:9a:f3:61:93:db:2f:cc:57:5b:8d:76:07:a9: f6:50:67:79:92:c3:a3:7c:58:f3:5a:ea:dd:ab:e3: ef:5b:9e:97:42:79:c6:38:f1:0a:bc:a1:06:2e:aa: bf:19:c8:44:5e:98:6f:f4:10:43:07:8b:b0:c9:b9: 2c:a3:86:13:b7:21:e6:70:af:6b:3d:93:90:65:ec: dd:5f:7f:07:6b:85:91:77:c1:0a:43:2d:83:d0:a1: a9:9f:7f:52:bb:d2:42:d0:21:36:b6:4b:52:3e:d5: 67:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:FE:56:5E:1B:3D:36:64:0C:1B:EA:9B:2E:E1:FA:1F:12:B8:A0:DF X509v3 Authority Key Identifier: keyid:76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:30:8a:25:75:58:73:c0:b5:8e:36:61:9a:5a:24:84:64:fd: f7:95:be:44:73:bd:0f:3c:a4:45:e1:c3:23:a1:77:8d:c3:11: e4:eb:5a:0c:85:1e:5f:8a:fa:2a:f8:ea:68:7d:b8:0b:95:ce: 5c:f6:10:27:ed:35:8c:26:74:18:3b:08:01:e3:75:71:3a:7d: 0f:56:ca:03:cc:b7:af:f8:90:54:ed:8a:bb:f5:d1:cd:96:02: 3d:05:a0:24:41:01:92:5a:0f:c1:6c:77:4e:e7:ed:98:2e:65: bc:24:cc:80:8e:c4:e7:11:8d:8b:16:5a:c7:14:13:a5:36:d4: c8:3a:a8:e7:f1:76:9c:2b:24:bd:f9:c9:31:62:97:65:2e:e8: 7b:91:2e:2d:85:55:79:6a:6f:7b:c1:98:96:3a:11:11:79:35: 73:11:43:29:fd:bf:39:ad:c2:f0:8c:b3:78:53:18:c7:9e:6f: 53:73:65:fe:fd:ff:40:d2:39:3b:38:0b:40:54:d5:1a:7a:28: bb:25:11:96:bb:83:85:4b:8f:77:b3:26:68:bd:fc:e8:6d:9b: 1f:28:d8:73:48:5a:a6:b7:16:d4:42:de:6f:cd:55:31:73:a6: 58:35:8b:fc:19:34:24:39:72:e7:d8:d8:0d:97:d4:39:45:96: 26:f4:68:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL38xxPrDH18JbfrT+OKKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OGVmOWMxMDRiZTIyMjg0YmY3YjI3NTZkMmE4MTczOTQ2 YTM4NmUwHhcNMjUxMjE3MTIwMTA4WhcNMjUxMjE4MTIwMTA4WjAzMTEwLwYDVQQD EyhmNmZlNTY1ZTFiM2QzNjY0MGMxYmVhOWIyZWUxZmExZjEyYjhhMGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3VrCcCmvJCnrTPY5IejIir+JSZv 6RjTOHDmgZ+4sP6rxEG02GSL1U3nzllX7dLu49W3jRjrgzbbj60IbJ3ell9QYP/p nqAz3yliprLURmdA66nRFDgw1cUiUOsXzJNGJqB3SAh1tePZPjHapk1C8sTlo0EX ZkHe8rjpTRQnGSgFlJifV8w626NS9dM9mAhiuar28EngPZrzYZPbL8xXW412B6n2 UGd5ksOjfFjzWurdq+PvW56XQnnGOPEKvKEGLqq/GchEXphv9BBDB4uwybkso4YT tyHmcK9rPZOQZezdX38Ha4WRd8EKQy2D0KGpn39Su9JC0CE2tktSPtVniwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPb+Vl4bPTZkDBvqmy7h+h8SuKDfMB8GA1UdIwQY MBaAFHaO+cEEviIoS/eydW0qgXOUajhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG83NXdRUy1JaWhMOTdKMWJTcUJjNVJxT0c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84NmI0MDItZTQzYi00YjdlLTk4ZWUt YjZiNzRjYjI5OWIwLzEvZG83NXdRUy1JaWhMOTdKMWJTcUJjNVJxT0c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84NmI0MDItZTQzYi00YjdlLTk4ZWUtYjZiNzRjYjI5OWIw LzEvZG83NXdRUy1JaWhMOTdKMWJTcUJjNVJxT0c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjCKJXVY c8C1jjZhmlokhGT995W+RHO9DzykReHDI6F3jcMR5OtaDIUeX4r6KvjqaH24C5XO XPYQJ+01jCZ0GDsIAeN1cTp9D1bKA8y3r/iQVO2Ku/XRzZYCPQWgJEEBkloPwWx3 TuftmC5lvCTMgI7E5xGNixZaxxQTpTbUyDqo5/F2nCskvfnJMWKXZS7oe5EuLYVV eWpve8GYljoREXk1cxFDKf2/Oa3C8IyzeFMYx55vU3Nl/v3/QNI5OzgLQFTVGnoo uyURlruDhUuPd7MmaL386G2bHyjYc0haprcW1ELeb81VMXOmWDWL/Bk0JDly59jY DZfUOUWWJvRoyw== -----END CERTIFICATE-----Generated at Wed Dec 17 15:12:52 2025 by rpki-client