This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft File: 75S8y9TC4P-PeqsEXhSjEfOy-f4.mft (raw, json) Hash identifier: Srk8Z5HRKZwD9Mq6arwMWgwWWSlIRqiL04lwYSOWzAo= Subject key identifier: DB:5D:D4:09:09:40:AC:15:1C:A5:86:64:F0:2A:38:62:C2:12:68:90 Authority key identifier: EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE Certificate issuer: /CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe Certificate serial: 019BF651B8FB302D0A4D2E158F1011A93DF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft Manifest number: 03DB Signing time: Sun 25 Jan 2026 18:01:49 +0000 Manifest this update: Sun 25 Jan 2026 18:01:49 +0000 Manifest next update: Mon 26 Jan 2026 18:01:49 +0000 Files and hashes: 1: 75S8y9TC4P-PeqsEXhSjEfOy-f4.crl (hash: OVlHhsbUuj3VJByZkeWHpwtCycF7oKNNuHI96F2TV5E=) 2: T402uwWdle2-wACzD9ONw9UX7Q0.roa (hash: qH2p5m4fwAtgkEGn5eHmdKfPUlYPjTmqTH+gzJaccXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:b8:fb:30:2d:0a:4d:2e:15:8f:10:11:a9:3d:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe Validity Not Before: Jan 25 18:01:49 2026 GMT Not After : Jan 26 18:01:49 2026 GMT Subject: CN=db5dd4090940ac151ca58664f02a3862c2126890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0f:c3:f1:bb:46:28:e4:d9:c6:52:63:e7:50: 34:a1:af:ae:69:48:88:2f:8d:d8:1d:0f:ff:0f:f2: 4d:f1:48:1f:42:85:37:ec:7b:15:74:0c:01:4e:68: fe:8a:2d:3f:33:42:b8:a5:2c:11:32:b5:df:b4:c1: 60:b1:d5:83:55:4a:69:92:27:cb:e7:23:9e:d2:04: 95:b0:73:a3:13:37:56:e5:43:11:7f:80:a3:5a:c6: 0f:4b:46:cb:0d:b0:e0:26:c8:db:18:00:57:03:80: a5:ca:ca:f2:54:86:a6:69:b4:b0:db:6d:99:33:01: 39:42:2b:c4:e5:aa:dd:1e:55:5a:cc:67:a2:6e:60: 59:03:2a:e0:15:d9:2c:ae:a2:2a:40:ea:20:73:e3: ab:3d:33:29:09:5e:87:37:39:52:95:d5:4b:9f:d0: f8:5c:4d:42:a3:05:44:00:51:92:c6:12:fb:2e:7b: ab:00:3a:aa:f4:e3:4d:71:02:db:8c:98:c4:bf:19: 5b:f3:fa:df:3b:a9:9c:72:e1:33:71:ec:a2:7a:3d: 5c:2e:a3:8b:e1:6f:51:53:03:16:93:df:6d:3e:69: bc:f3:77:44:7b:40:84:c0:4c:fc:6a:e5:8d:2c:c7: 47:04:15:70:10:23:1d:13:dc:09:aa:9b:05:00:9d: 26:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:5D:D4:09:09:40:AC:15:1C:A5:86:64:F0:2A:38:62:C2:12:68:90 X509v3 Authority Key Identifier: keyid:EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c6:2e:73:25:19:af:26:cf:f3:db:2b:1b:ba:03:27:c8:44: 65:80:eb:7e:de:5f:16:88:7a:c3:fa:19:0f:5a:6f:78:1d:f0: e0:37:07:31:69:63:b9:b5:d9:b6:03:71:3d:f7:26:b8:d2:c3: 0e:e1:af:a0:38:a3:07:b3:b0:1e:56:58:21:57:ba:b8:e3:b7: 35:0e:67:00:02:80:6a:56:8c:3b:10:79:5d:f8:9e:7d:a3:b4: 17:a6:68:c9:01:e3:9d:c1:65:7e:c0:eb:15:6d:90:75:14:7b: 29:a6:58:46:09:5d:bd:6b:ed:bf:39:db:0c:e5:1c:bb:d7:9a: bc:bd:62:4b:35:a9:25:4f:60:c4:2c:be:ea:15:15:23:b0:f6: ca:af:56:cd:e8:27:fb:19:c4:3a:94:a9:d5:15:12:68:00:68: 29:05:11:f0:3a:80:22:6a:29:f5:13:cd:aa:4b:70:65:e9:de: 12:88:67:50:35:28:4a:69:38:da:b6:9a:c2:00:20:56:c0:53: 6e:20:ab:31:5f:46:86:65:d8:7d:7b:a6:7d:da:92:6c:93:37: 10:86:b8:6f:e0:ad:d5:66:8f:14:f0:16:e6:23:f1:39:25:9c: a9:62:a0:53:d6:ce:6b:8b:9c:c5:a5:35:fd:6d:6b:62:d0:2f: 81:57:e9:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Ubj7MC0KTS4VjxARqT3yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmOTRiY2NiZDRjMmUwZmY4ZjdhYWIwNDVlMTRhMzExZjNi MmY5ZmUwHhcNMjYwMTI1MTgwMTQ5WhcNMjYwMTI2MTgwMTQ5WjAzMTEwLwYDVQQD EyhkYjVkZDQwOTA5NDBhYzE1MWNhNTg2NjRmMDJhMzg2MmMyMTI2ODkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA/D8btGKOTZxlJj51A0oa+uaUiI L43YHQ//D/JN8UgfQoU37HsVdAwBTmj+ii0/M0K4pSwRMrXftMFgsdWDVUppkifL 5yOe0gSVsHOjEzdW5UMRf4CjWsYPS0bLDbDgJsjbGABXA4ClysryVIamabSw222Z MwE5QivE5ardHlVazGeibmBZAyrgFdksrqIqQOogc+OrPTMpCV6HNzlSldVLn9D4 XE1CowVEAFGSxhL7LnurADqq9ONNcQLbjJjEvxlb8/rfO6mccuEzceyiej1cLqOL 4W9RUwMWk99tPmm883dEe0CEwEz8auWNLMdHBBVwECMdE9wJqpsFAJ0mvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtd1AkJQKwVHKWGZPAqOGLCEmiQMB8GA1UdIwQY MBaAFO+UvMvUwuD/j3qrBF4UoxHzsvn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzVTOHk5VEM0UC1QZXFzRVhoU2pFZk95LWY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iZWMyNTMtOWMyOS00NzhjLTk3MTEt Y2I2M2Q2ZmJiZmM3LzEvNzVTOHk5VEM0UC1QZXFzRVhoU2pFZk95LWY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iZWMyNTMtOWMyOS00NzhjLTk3MTEtY2I2M2Q2ZmJiZmM3 LzEvNzVTOHk5VEM0UC1QZXFzRVhoU2pFZk95LWY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHsYucyUZ rybP89srG7oDJ8hEZYDrft5fFoh6w/oZD1pveB3w4DcHMWljubXZtgNxPfcmuNLD DuGvoDijB7OwHlZYIVe6uOO3NQ5nAAKAalaMOxB5XfiefaO0F6ZoyQHjncFlfsDr FW2QdRR7KaZYRgldvWvtvznbDOUcu9eavL1iSzWpJU9gxCy+6hUVI7D2yq9Wzegn +xnEOpSp1RUSaABoKQUR8DqAImop9RPNqktwZeneEohnUDUoSmk42raawgAgVsBT biCrMV9GhmXYfXumfdqSbJM3EIa4b+Ct1WaPFPAW5iPxOSWcqWKgU9bOa4ucxaU1 /W1rYtAvgVfpFw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:11:17 2026 by rpki-client