This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft File: 75S8y9TC4P-PeqsEXhSjEfOy-f4.mft (raw, json) Hash identifier: JYF/nxk+QcxiTbBgKFNuyPaQ/aUU90cPleLqK1D5NQk= Subject key identifier: 6D:C7:E4:B0:E5:41:00:41:0C:10:D6:B0:D4:7C:6C:2E:2E:2E:44:DD Authority key identifier: EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE Certificate issuer: /CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe Certificate serial: 019AF540AFCE4FF5E2E8B86342989B98C0A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft Manifest number: 0355 Signing time: Sat 06 Dec 2025 20:00:48 +0000 Manifest this update: Sat 06 Dec 2025 20:00:48 +0000 Manifest next update: Sun 07 Dec 2025 20:00:48 +0000 Files and hashes: 1: 75S8y9TC4P-PeqsEXhSjEfOy-f4.crl (hash: PzdQre0XZybU5xvDJGw7d/iCECEdXsQRdV9nG75wd84=) 2: x_UGYHPi4KGbhasIbcCsyLRrLvc.roa (hash: TZUXAFaKqC1GafLAz2qnfFwZj2ZE2C3Lq2YMTRrQmKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:af:ce:4f:f5:e2:e8:b8:63:42:98:9b:98:c0:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe Validity Not Before: Dec 6 20:00:48 2025 GMT Not After : Dec 7 20:00:48 2025 GMT Subject: CN=6dc7e4b0e54100410c10d6b0d47c6c2e2e2e44dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:02:63:3a:42:02:e2:f5:2b:57:bd:77:01:b2: 00:ab:24:9d:b7:5b:4a:92:82:79:8c:87:3a:09:b5: 19:4c:5d:37:82:2f:13:0f:ec:8d:20:ee:03:e9:b5: 57:83:90:3e:0b:3b:1c:cf:88:86:6e:22:8d:ec:64: 83:4e:9e:5b:33:c1:b3:3c:7c:68:4c:5d:1a:22:21: 01:d2:0f:39:5f:0b:ca:36:19:ea:ec:81:88:42:21: 30:32:39:36:d1:27:ec:37:d5:b9:be:f2:a9:43:ee: c7:06:30:8e:01:c7:15:9e:e5:69:68:33:2c:81:e0: 44:c7:0d:3d:61:2f:e9:65:54:38:f3:6d:59:6c:99: f0:2a:29:26:d8:3c:69:f2:53:d4:8b:4e:4d:0c:f1: dc:83:ff:68:db:6d:dc:2e:bd:9a:43:9a:f0:a0:19: 60:65:bc:2a:93:2d:72:93:24:76:fb:d4:ce:bd:03: 04:13:d5:bd:99:be:06:ea:97:8b:a8:41:6e:0a:07: f5:a2:a8:a7:df:06:2a:26:2d:55:4f:c4:84:a2:51: 95:e1:89:d9:35:4e:66:12:15:03:db:6c:c2:0a:1a: 12:12:47:63:fd:e0:f2:32:c0:1b:ab:0e:c3:fc:fc: 2d:fe:e7:2a:4b:de:d6:83:ad:41:e9:92:ba:d8:60: 8c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C7:E4:B0:E5:41:00:41:0C:10:D6:B0:D4:7C:6C:2E:2E:2E:44:DD X509v3 Authority Key Identifier: keyid:EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:4d:07:2b:7f:6b:24:27:e6:b8:04:ee:89:5d:0f:5c:08:e3: 38:cb:52:8c:41:a6:b2:e0:f8:e3:67:67:e0:f2:ac:da:e2:83: 9d:61:25:a4:20:45:f8:30:6b:8b:3e:bd:1a:93:2a:45:60:44: c2:17:ba:28:82:b6:41:c4:4c:c0:6d:b4:08:86:3c:13:75:ca: ee:20:8d:4e:50:1d:87:51:c9:36:e1:6f:ac:99:bc:d8:bb:8c: f1:11:44:a6:bb:ec:5f:5b:9c:08:7c:13:be:fc:28:8f:cb:84: d8:bc:1c:62:b6:80:5e:91:75:bc:0d:aa:fc:8f:3b:5f:ae:5f: 08:b5:56:4a:fa:25:3b:1b:87:cf:40:09:19:00:84:a4:17:fa: 3b:b6:0b:58:a0:c7:81:4d:4d:8a:fe:e4:91:77:8b:cc:41:bf: 5c:6e:18:a9:84:3b:7c:4e:09:86:5c:eb:d6:8e:28:0f:2e:b8: cf:f6:36:84:3b:e2:80:fe:44:9a:55:03:fe:ae:d7:d4:f9:e4: 72:b3:95:ab:c4:4e:b9:a8:99:5f:f3:e6:ef:f6:5a:d8:4b:58: 36:6c:14:f4:99:e5:7c:e6:d2:20:3c:01:b4:5c:42:ef:f1:1e: 65:aa:35:d5:b5:19:ac:90:87:83:a9:8e:3b:f3:33:2e:8b:ae: 10:5e:99:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QK/OT/Xi6LhjQpibmMCmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmOTRiY2NiZDRjMmUwZmY4ZjdhYWIwNDVlMTRhMzExZjNi MmY5ZmUwHhcNMjUxMjA2MjAwMDQ4WhcNMjUxMjA3MjAwMDQ4WjAzMTEwLwYDVQQD Eyg2ZGM3ZTRiMGU1NDEwMDQxMGMxMGQ2YjBkNDdjNmMyZTJlMmU0NGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwJjOkIC4vUrV713AbIAqySdt1tK koJ5jIc6CbUZTF03gi8TD+yNIO4D6bVXg5A+Czscz4iGbiKN7GSDTp5bM8GzPHxo TF0aIiEB0g85XwvKNhnq7IGIQiEwMjk20SfsN9W5vvKpQ+7HBjCOAccVnuVpaDMs geBExw09YS/pZVQ4821ZbJnwKikm2Dxp8lPUi05NDPHcg/9o223cLr2aQ5rwoBlg Zbwqky1ykyR2+9TOvQMEE9W9mb4G6peLqEFuCgf1oqin3wYqJi1VT8SEolGV4YnZ NU5mEhUD22zCChoSEkdj/eDyMsAbqw7D/Pwt/ucqS97Wg61B6ZK62GCMXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3H5LDlQQBBDBDWsNR8bC4uLkTdMB8GA1UdIwQY MBaAFO+UvMvUwuD/j3qrBF4UoxHzsvn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzVTOHk5VEM0UC1QZXFzRVhoU2pFZk95LWY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iZWMyNTMtOWMyOS00NzhjLTk3MTEt Y2I2M2Q2ZmJiZmM3LzEvNzVTOHk5VEM0UC1QZXFzRVhoU2pFZk95LWY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iZWMyNTMtOWMyOS00NzhjLTk3MTEtY2I2M2Q2ZmJiZmM3 LzEvNzVTOHk5VEM0UC1QZXFzRVhoU2pFZk95LWY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPE0HK39r JCfmuATuiV0PXAjjOMtSjEGmsuD442dn4PKs2uKDnWElpCBF+DBriz69GpMqRWBE whe6KIK2QcRMwG20CIY8E3XK7iCNTlAdh1HJNuFvrJm82LuM8RFEprvsX1ucCHwT vvwoj8uE2LwcYraAXpF1vA2q/I87X65fCLVWSvolOxuHz0AJGQCEpBf6O7YLWKDH gU1Niv7kkXeLzEG/XG4YqYQ7fE4Jhlzr1o4oDy64z/Y2hDvigP5EmlUD/q7X1Pnk crOVq8ROuaiZX/Pm7/Za2EtYNmwU9JnlfObSIDwBtFxC7/EeZao11bUZrJCHg6mO O/MzLouuEF6ZtQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:17:30 2025 by rpki-client