This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft File: V76Px5yTUE_CH_cPukaaTLvi8Ck.mft (raw, json) Hash identifier: GtHOumhgDcOvnt/t8GAoDYNIA5x+7VTDHTaIwnanfXs= Subject key identifier: 85:85:47:39:2C:1B:5E:DA:7B:68:BD:54:01:44:1B:50:18:F0:3C:03 Authority key identifier: 57:BE:8F:C7:9C:93:50:4F:C2:1F:F7:0F:BA:46:9A:4C:BB:E2:F0:29 Certificate issuer: /CN=57be8fc79c93504fc21ff70fba469a4cbbe2f029 Certificate serial: 019B2B8B0D2524EF9374F557B1F92CF5E65D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft Manifest number: 16C8 Signing time: Wed 17 Dec 2025 09:01:31 +0000 Manifest this update: Wed 17 Dec 2025 09:01:31 +0000 Manifest next update: Thu 18 Dec 2025 09:01:31 +0000 Files and hashes: 1: GSq3J2YJnNyhzth3hnZMQLtfyVg.roa (hash: YjJTMfChs1ee9zRQg+5qYR9IzIwhQNNIZQcGrlL7UTQ=) 2: V76Px5yTUE_CH_cPukaaTLvi8Ck.crl (hash: q14Lx/2ibSQwY/i5lwjXUVnL1iPA+EXKGmT8FjpOtmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.crl rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8b:0d:25:24:ef:93:74:f5:57:b1:f9:2c:f5:e6:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57be8fc79c93504fc21ff70fba469a4cbbe2f029 Validity Not Before: Dec 17 09:01:31 2025 GMT Not After : Dec 18 09:01:31 2025 GMT Subject: CN=858547392c1b5eda7b68bd5401441b5018f03c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b9:d7:76:87:34:d3:92:4c:f8:75:23:f9:73: 7a:a0:f6:e8:ca:d7:96:3d:00:f2:71:a9:82:f5:48: dd:7d:c4:0d:78:33:08:94:9a:eb:76:fe:d8:10:13: e5:e6:76:37:1c:4b:48:99:61:6b:9d:38:89:74:78: fe:5f:99:3b:10:2a:90:87:29:b5:fb:4f:b7:31:75: ea:74:10:3e:1f:a2:98:0f:e1:70:81:c8:04:dd:ed: ef:58:13:19:4c:22:95:b1:9d:3b:ba:cc:f6:7f:fc: 96:19:e5:f8:92:4d:dc:8b:3a:79:37:01:43:da:a6: 6b:96:1d:20:ae:88:65:81:a9:5c:ce:d5:ee:19:b7: 96:8d:bc:31:08:35:7d:c0:fc:26:f5:69:a7:09:42: ab:b9:e8:9e:c2:46:46:a1:96:32:8f:7e:56:d7:1b: 82:21:5d:21:5c:ac:50:f6:f8:9d:db:21:e5:14:88: 8f:f2:a7:f5:02:2f:d5:cb:40:44:5c:68:9d:93:46: 14:90:4e:f7:f9:65:b8:07:5b:27:ea:68:62:b7:f4: b4:8f:1d:66:6e:af:77:61:b8:30:7c:62:c2:2e:24: 85:01:38:9a:25:31:b2:56:cf:75:89:fb:99:41:0d: ed:db:23:18:6f:5c:f2:ef:a5:08:0f:76:5e:93:2a: e3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:85:47:39:2C:1B:5E:DA:7B:68:BD:54:01:44:1B:50:18:F0:3C:03 X509v3 Authority Key Identifier: keyid:57:BE:8F:C7:9C:93:50:4F:C2:1F:F7:0F:BA:46:9A:4C:BB:E2:F0:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:68:37:7b:d4:6a:81:0d:c0:09:6e:93:52:93:e9:37:15:ec: 6a:32:5e:09:75:c5:84:e4:9c:87:cf:6e:c4:5c:fa:be:e8:03: ea:79:42:02:14:0e:f8:a7:e4:bb:7d:bd:87:24:1e:53:9e:ac: 2c:16:b6:36:75:39:db:24:7d:e4:8d:49:ee:e3:21:ac:ab:56: 18:58:60:04:0d:2e:ea:22:de:6a:d3:04:f4:0f:75:3e:a8:e5: 69:63:75:6d:43:7f:18:8a:8e:53:47:5a:c9:8f:91:34:8d:c8: ed:ee:fe:2d:2c:2b:55:16:66:d3:08:00:de:a8:93:a1:c9:c5: 18:09:5d:58:8a:e2:ac:b1:2a:03:15:13:e5:fd:c2:62:03:41: d1:f8:5f:bc:7d:7f:f1:5f:46:b0:dd:36:39:89:65:cf:20:1a: 3b:8a:96:c0:9d:47:d8:a2:bd:49:6e:7f:3b:99:68:e5:69:f0: fe:61:bd:c6:66:a2:e0:ce:68:5d:74:d2:7e:db:6e:0f:84:1b: 0f:a0:65:6a:7f:08:4f:42:42:f1:b2:74:56:be:ef:4d:98:28: 85:37:68:a9:0b:0e:a1:63:c3:f6:69:e5:99:bd:af:8b:d6:93: 04:d6:49:7a:cf:f9:5e:6b:a2:b8:31:93:62:f4:33:34:cc:08: 82:21:7c:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriw0lJO+TdPVXsfks9eZdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YmU4ZmM3OWM5MzUwNGZjMjFmZjcwZmJhNDY5YTRjYmJl MmYwMjkwHhcNMjUxMjE3MDkwMTMxWhcNMjUxMjE4MDkwMTMxWjAzMTEwLwYDVQQD Eyg4NTg1NDczOTJjMWI1ZWRhN2I2OGJkNTQwMTQ0MWI1MDE4ZjAzYzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbnXdoc005JM+HUj+XN6oPboyteW PQDycamC9UjdfcQNeDMIlJrrdv7YEBPl5nY3HEtImWFrnTiJdHj+X5k7ECqQhym1 +0+3MXXqdBA+H6KYD+FwgcgE3e3vWBMZTCKVsZ07usz2f/yWGeX4kk3cizp5NwFD 2qZrlh0grohlgalcztXuGbeWjbwxCDV9wPwm9WmnCUKrueiewkZGoZYyj35W1xuC IV0hXKxQ9vid2yHlFIiP8qf1Ai/Vy0BEXGidk0YUkE73+WW4B1sn6mhit/S0jx1m bq93YbgwfGLCLiSFATiaJTGyVs91ifuZQQ3t2yMYb1zy76UID3Zekyrj7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWFRzksG17ae2i9VAFEG1AY8DwDMB8GA1UdIwQY MBaAFFe+j8eck1BPwh/3D7pGmky74vApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjc2UHg1eVRVRV9DSF9jUHVrYWFUTHZpOENrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xOGJlOTctZGYzYS00ZTFkLWI1NjEt NTNjNjljMWNlNTBjLzEvVjc2UHg1eVRVRV9DSF9jUHVrYWFUTHZpOENrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8xOGJlOTctZGYzYS00ZTFkLWI1NjEtNTNjNjljMWNlNTBj LzEvVjc2UHg1eVRVRV9DSF9jUHVrYWFUTHZpOENrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGg3e9Rq gQ3ACW6TUpPpNxXsajJeCXXFhOSch89uxFz6vugD6nlCAhQO+Kfku329hyQeU56s LBa2NnU52yR95I1J7uMhrKtWGFhgBA0u6iLeatME9A91PqjlaWN1bUN/GIqOU0da yY+RNI3I7e7+LSwrVRZm0wgA3qiTocnFGAldWIrirLEqAxUT5f3CYgNB0fhfvH1/ 8V9GsN02OYllzyAaO4qWwJ1H2KK9SW5/O5lo5Wnw/mG9xmai4M5oXXTSfttuD4Qb D6Blan8IT0JC8bJ0Vr7vTZgohTdoqQsOoWPD9mnlmb2vi9aTBNZJes/5XmuiuDGT YvQzNMwIgiF8Jw== -----END CERTIFICATE-----Generated at Wed Dec 17 17:52:17 2025 by rpki-client