This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft File: 758eOCZUELPCqSLTFpxPKZUUGi0.mft (raw, json) Hash identifier: 63c/p2rhCtaGz+OStsCAMDQdwbMc9Mdf8MYSatwBb5E= Subject key identifier: 89:19:BC:49:41:F4:FE:6C:4C:54:78:59:F0:09:E5:F5:5C:8F:0E:EB Authority key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D Certificate issuer: /CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d Certificate serial: 019B427FFBDFBDAA81EFA88828383FFF9365 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft Manifest number: 1790 Signing time: Sun 21 Dec 2025 20:00:42 +0000 Manifest this update: Sun 21 Dec 2025 20:00:42 +0000 Manifest next update: Mon 22 Dec 2025 20:00:42 +0000 Files and hashes: 1: 758eOCZUELPCqSLTFpxPKZUUGi0.crl (hash: wGrOdcIoLVABjVElvX5in4ybrXTrWqyx8N0zJOB2aKQ=) 2: CG86pKUu_y2jdcDvGNLrjVfNuYw.roa (hash: 8UXLIyC5V8xl/dbxdW3uIxQsfpv3PqBesoY8agFjjgQ=) 3: OvDQAFDgS_IBra9JqbE082lFsMM.roa (hash: ABgvwYUiIoOP2ig1Lzsqgs3CVWMcVEoqfF36W8k4440=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:7f:fb:df:bd:aa:81:ef:a8:88:28:38:3f:ff:93:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d Validity Not Before: Dec 21 20:00:42 2025 GMT Not After : Dec 22 20:00:42 2025 GMT Subject: CN=8919bc4941f4fe6c4c547859f009e5f55c8f0eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e7:34:ff:17:d9:86:57:41:2f:00:58:e6:64: 48:be:1e:ae:0c:5b:c1:8f:54:70:d7:34:ed:d1:38: 7c:4d:44:d3:25:86:3f:dd:bc:28:34:c8:58:77:56: 2d:34:00:b6:91:cc:9b:a8:98:38:96:08:42:80:a9: 2b:6f:a5:90:6f:d7:56:4a:f1:ba:ad:c4:37:42:f4: 94:0c:c3:8e:50:71:89:28:e6:b5:57:cc:46:2a:5a: 77:19:54:da:cc:d0:48:0c:63:28:72:c1:41:c2:50: 86:4f:c3:93:bb:52:c6:47:96:df:1a:ab:6c:46:bd: a1:76:23:b3:55:67:00:a1:f6:3f:f6:bb:69:77:c4: 31:d9:e0:f4:ac:90:65:a0:b0:04:b5:0e:8f:7a:fa: db:98:e2:42:b5:1f:42:d2:5c:11:44:25:c4:01:13: c7:28:1a:dd:b9:8a:dd:45:54:9f:8d:b3:90:b0:ff: aa:44:31:3d:c9:29:00:3b:3c:75:25:2d:a5:52:1d: d0:fe:c8:07:41:15:14:b4:41:f4:29:71:38:9a:ad: d6:05:7d:86:7f:ea:8d:db:b4:0e:db:6e:3a:03:f5: 77:88:52:c3:ff:40:fd:68:34:9b:78:05:98:eb:1a: d0:10:c7:96:78:fb:22:3c:04:a6:18:d7:1a:4d:48: 9a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:19:BC:49:41:F4:FE:6C:4C:54:78:59:F0:09:E5:F5:5C:8F:0E:EB X509v3 Authority Key Identifier: keyid:EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:0f:ee:c2:48:0b:cd:48:72:41:96:85:f0:ef:1a:bf:2d:5b: 4a:64:61:13:b2:b4:5c:87:41:cb:e2:c8:2f:52:76:cc:d8:b6: 61:68:be:b9:66:0b:49:8a:75:46:8b:fd:07:40:9c:fe:85:9a: 71:15:64:b2:59:4a:f0:a9:67:ba:3d:81:6b:7c:d9:df:61:66: 1c:2e:58:08:a1:40:b2:ef:77:ca:f2:b2:3f:d6:35:b2:eb:de: 16:f2:cc:8d:bc:92:47:67:c7:32:cb:41:5b:70:80:06:3a:cc: 65:3c:f3:3e:a9:ca:9e:60:29:34:1e:0f:e3:9b:9d:e3:67:e7: cb:52:bf:44:25:04:67:8d:a9:8b:be:31:59:ca:37:17:d3:ac: bb:f9:5e:b4:df:81:97:36:4e:6b:98:e4:27:56:27:a4:d0:95: fc:65:d5:4d:c6:01:eb:84:d0:af:78:6b:b8:24:d6:6d:28:d8: b6:1a:ae:10:90:d1:65:4c:4c:c9:2b:3d:9c:b3:a4:84:c1:95: d5:16:79:38:d4:7e:14:97:e7:1d:9b:8d:5c:13:fe:ee:ab:5c: 5c:02:90:6d:c2:48:51:c9:e5:22:03:3b:10:6d:64:9e:c4:f2: 2b:fb:5c:45:76:58:6a:8a:5d:45:29:d4:42:08:e9:54:45:26: 52:98:e5:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCf/vfvaqB76iIKDg//5NlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmOWYxZTM4MjY1NDEwYjNjMmE5MjJkMzE2OWM0ZjI5OTUx NDFhMmQwHhcNMjUxMjIxMjAwMDQyWhcNMjUxMjIyMjAwMDQyWjAzMTEwLwYDVQQD Eyg4OTE5YmM0OTQxZjRmZTZjNGM1NDc4NTlmMDA5ZTVmNTVjOGYwZWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxec0/xfZhldBLwBY5mRIvh6uDFvB j1Rw1zTt0Th8TUTTJYY/3bwoNMhYd1YtNAC2kcybqJg4lghCgKkrb6WQb9dWSvG6 rcQ3QvSUDMOOUHGJKOa1V8xGKlp3GVTazNBIDGMocsFBwlCGT8OTu1LGR5bfGqts Rr2hdiOzVWcAofY/9rtpd8Qx2eD0rJBloLAEtQ6PevrbmOJCtR9C0lwRRCXEARPH KBrduYrdRVSfjbOQsP+qRDE9ySkAOzx1JS2lUh3Q/sgHQRUUtEH0KXE4mq3WBX2G f+qN27QO2246A/V3iFLD/0D9aDSbeAWY6xrQEMeWePsiPASmGNcaTUianQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkZvElB9P5sTFR4WfAJ5fVcjw7rMB8GA1UdIwQY MBaAFO+fHjgmVBCzwqki0xacTymVFBotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzU4ZU9DWlVFTFBDcVNMVEZweFBLWlVVR2kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kNmZiMWMtOTVjMy00YmZmLTg1NTYt ODA1N2RhNzU0NDUyLzEvNzU4ZU9DWlVFTFBDcVNMVEZweFBLWlVVR2kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kNmZiMWMtOTVjMy00YmZmLTg1NTYtODA1N2RhNzU0NDUy LzEvNzU4ZU9DWlVFTFBDcVNMVEZweFBLWlVVR2kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJA/uwkgL zUhyQZaF8O8avy1bSmRhE7K0XIdBy+LIL1J2zNi2YWi+uWYLSYp1Rov9B0Cc/oWa cRVksllK8Klnuj2Ba3zZ32FmHC5YCKFAsu93yvKyP9Y1suveFvLMjbySR2fHMstB W3CABjrMZTzzPqnKnmApNB4P45ud42fny1K/RCUEZ42pi74xWco3F9Osu/letN+B lzZOa5jkJ1YnpNCV/GXVTcYB64TQr3hruCTWbSjYthquEJDRZUxMySs9nLOkhMGV 1RZ5ONR+FJfnHZuNXBP+7qtcXAKQbcJIUcnlIgM7EG1knsTyK/tcRXZYaopdRSnU QgjpVEUmUpjltQ== -----END CERTIFICATE-----Generated at Mon Dec 22 01:45:07 2025 by rpki-client