This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft File: 76psy3hXNGAC5rvEmPiLnobfGAY.mft (raw, json) Hash identifier: tIOzI4i2TgmwvWxBDuYRBbiitePMygiEGHjT280/H+8= Subject key identifier: EE:5B:81:7A:84:3B:9A:37:DA:0C:BA:58:D9:23:A2:3E:EA:8B:81:E9 Authority key identifier: EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06 Certificate issuer: /CN=efaa6ccb7857346002e6bbc498f88b9e86df1806 Certificate serial: 019AF1646AA81A13BB573339B54CB64E98A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft Manifest number: 0523 Signing time: Sat 06 Dec 2025 02:01:21 +0000 Manifest this update: Sat 06 Dec 2025 02:01:21 +0000 Manifest next update: Sun 07 Dec 2025 02:01:21 +0000 Files and hashes: 1: 76psy3hXNGAC5rvEmPiLnobfGAY.crl (hash: Z73AfPi0ej6HeVIO8RIQmROcck9w6/ZScEZbRi9znr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:6a:a8:1a:13:bb:57:33:39:b5:4c:b6:4e:98:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efaa6ccb7857346002e6bbc498f88b9e86df1806 Validity Not Before: Dec 6 02:01:21 2025 GMT Not After : Dec 7 02:01:21 2025 GMT Subject: CN=ee5b817a843b9a37da0cba58d923a23eea8b81e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:18:44:7c:88:7b:dc:bc:a9:0c:b3:71:89:f1: 29:f0:bc:cd:d6:81:92:80:1e:11:07:43:c1:f4:21: 68:be:fb:d3:79:03:0f:70:49:dd:2c:12:5c:5f:93: 28:bc:b9:4f:f5:0a:c7:6a:f4:27:0a:6c:90:43:ad: d5:f6:9d:d4:f9:27:81:35:99:22:68:f0:84:a3:d2: 5f:37:be:88:69:fd:4f:36:55:98:ba:46:45:6d:c2: ae:ee:9d:cc:75:74:33:44:94:8e:d0:4b:b4:a2:a0: a8:38:30:d4:98:7a:42:14:e4:06:ba:90:63:79:38: b8:60:ea:25:80:f2:75:a1:af:33:81:71:56:ba:02: dd:3f:a1:db:7a:88:19:3f:2b:cc:52:de:58:00:cb: 6f:a0:bc:06:0a:95:2a:84:b9:e1:b1:9f:74:f5:5e: a8:92:f2:ce:17:8f:2d:0c:a0:1c:15:6d:95:8d:2e: 3d:62:24:96:36:49:60:57:43:6f:57:4c:7e:03:4d: eb:48:34:1d:3f:12:20:7d:88:15:77:44:19:e6:de: b6:dc:04:00:0a:26:07:d3:f0:75:54:d6:2f:65:68: c7:b1:50:86:91:48:b7:e0:13:97:05:9b:f0:25:c9: 97:1b:c3:8b:6e:25:24:e1:58:bd:18:5f:99:7f:a0: f8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:5B:81:7A:84:3B:9A:37:DA:0C:BA:58:D9:23:A2:3E:EA:8B:81:E9 X509v3 Authority Key Identifier: keyid:EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:48:7a:7d:88:fa:8b:45:a6:58:f0:75:bb:c4:bd:78:13:ba: ca:bd:7e:9f:b5:dc:dc:a3:8b:39:2b:2f:97:76:12:26:d7:55: 5e:55:62:eb:f1:ff:8f:d1:4d:3d:c4:1d:72:4d:2d:d1:1f:22: 7e:57:c6:97:3f:b3:a2:3f:0d:9b:44:b1:f9:3c:bf:39:6f:1d: fe:ac:eb:d7:af:8e:8d:d6:94:f1:a4:9c:ee:c1:39:71:a0:60: 2d:a2:d2:46:69:96:4e:13:40:9f:b2:37:d4:f0:70:02:a1:03: ed:e2:47:14:47:54:c6:72:50:46:3f:fc:e6:91:a5:65:c9:4b: 7f:bd:c2:f0:9b:be:5b:ca:cb:75:cc:44:88:63:db:f6:f5:6a: dd:6c:67:9e:b5:bc:f5:26:c4:6d:ec:05:54:83:60:02:b7:9e: ec:0a:ca:44:09:e4:b7:9e:56:27:d4:a4:d2:df:91:06:a7:03: 8b:b7:6d:63:a4:dc:a2:17:5e:dc:bb:b2:25:6f:bf:51:52:68: 2a:94:86:dd:02:04:65:48:57:47:5d:d4:31:93:57:9c:8f:84: e2:2a:6d:00:2f:07:d6:4e:02:c4:56:4e:88:d9:76:f5:05:3f: a2:4c:e8:41:a5:6c:ca:30:19:93:5e:e5:69:3f:dd:1e:59:57: 9b:af:74:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGqoGhO7VzM5tUy2TpimMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYWE2Y2NiNzg1NzM0NjAwMmU2YmJjNDk4Zjg4YjllODZk ZjE4MDYwHhcNMjUxMjA2MDIwMTIxWhcNMjUxMjA3MDIwMTIxWjAzMTEwLwYDVQQD EyhlZTViODE3YTg0M2I5YTM3ZGEwY2JhNThkOTIzYTIzZWVhOGI4MWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxhEfIh73LypDLNxifEp8LzN1oGS gB4RB0PB9CFovvvTeQMPcEndLBJcX5MovLlP9QrHavQnCmyQQ63V9p3U+SeBNZki aPCEo9JfN76Iaf1PNlWYukZFbcKu7p3MdXQzRJSO0Eu0oqCoODDUmHpCFOQGupBj eTi4YOolgPJ1oa8zgXFWugLdP6HbeogZPyvMUt5YAMtvoLwGCpUqhLnhsZ909V6o kvLOF48tDKAcFW2VjS49YiSWNklgV0NvV0x+A03rSDQdPxIgfYgVd0QZ5t623AQA CiYH0/B1VNYvZWjHsVCGkUi34BOXBZvwJcmXG8OLbiUk4Vi9GF+Zf6D4owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5bgXqEO5o32gy6WNkjoj7qi4HpMB8GA1UdIwQY MBaAFO+qbMt4VzRgAua7xJj4i56G3xgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZwc3kzaFhOR0FDNXJ2RW1QaUxub2JmR0FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hYTk2MTQtZjZkNy00YzMzLWI5NGIt ZDgyMGY2NWNlZDgxLzEvNzZwc3kzaFhOR0FDNXJ2RW1QaUxub2JmR0FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9hYTk2MTQtZjZkNy00YzMzLWI5NGItZDgyMGY2NWNlZDgx LzEvNzZwc3kzaFhOR0FDNXJ2RW1QaUxub2JmR0FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkh6fYj6 i0WmWPB1u8S9eBO6yr1+n7Xc3KOLOSsvl3YSJtdVXlVi6/H/j9FNPcQdck0t0R8i flfGlz+zoj8Nm0Sx+Ty/OW8d/qzr16+OjdaU8aSc7sE5caBgLaLSRmmWThNAn7I3 1PBwAqED7eJHFEdUxnJQRj/85pGlZclLf73C8Ju+W8rLdcxEiGPb9vVq3WxnnrW8 9SbEbewFVINgAree7ArKRAnkt55WJ9Sk0t+RBqcDi7dtY6Tcohde3LuyJW+/UVJo KpSG3QIEZUhXR13UMZNXnI+E4iptAC8H1k4CxFZOiNl29QU/okzoQaVsyjAZk17l aT/dHllXm690jQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:43 2025 by rpki-client