This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft File: 76R3JGPNvhK3OxatDSUW8H1jgw0.mft (raw, json) Hash identifier: h0QIugZOxolmofODKKGFVyGQKBt6wKyvn84oiUyLCTg= Subject key identifier: D5:A0:74:7C:78:34:7C:49:5A:9B:15:BA:DA:CE:8C:33:8E:54:18:F8 Authority key identifier: EF:A4:77:24:63:CD:BE:12:B7:3B:16:AD:0D:25:16:F0:7D:63:83:0D Certificate issuer: /CN=efa4772463cdbe12b73b16ad0d2516f07d63830d Certificate serial: 019AF65388C713DEC3FA81C7F5360A0E41D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft Manifest number: 16F8 Signing time: Sun 07 Dec 2025 01:01:00 +0000 Manifest this update: Sun 07 Dec 2025 01:01:00 +0000 Manifest next update: Mon 08 Dec 2025 01:01:00 +0000 Files and hashes: 1: 76R3JGPNvhK3OxatDSUW8H1jgw0.crl (hash: zCRmPQdOpQmkg/bkWx1XFH32iPZI0jp3AspJkNoSlDI=) 2: r6Jaw29g1mePtFZFZIng6b8nKYM.roa (hash: 9ikRBErIwY2EEAVFfzEcrKdNA7iL3tbIPzYY8GWz3Bk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.crl rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:88:c7:13:de:c3:fa:81:c7:f5:36:0a:0e:41:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efa4772463cdbe12b73b16ad0d2516f07d63830d Validity Not Before: Dec 7 01:01:00 2025 GMT Not After : Dec 8 01:01:00 2025 GMT Subject: CN=d5a0747c78347c495a9b15badace8c338e5418f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1f:25:4d:09:64:6b:60:02:92:af:a9:95:3f: 41:d9:5e:0a:a8:83:39:c2:8e:e2:57:54:f3:b1:bd: 64:6e:16:74:f3:53:55:30:9a:90:79:f0:6e:69:1f: 5f:30:a9:37:30:fc:b0:86:40:57:3f:19:1f:0b:e4: cf:cf:8b:04:96:99:d1:a5:46:5f:d7:90:13:e8:88: 52:68:fc:dc:7d:2a:df:41:25:55:f3:e3:e3:92:25: 05:0e:95:04:ea:73:60:c0:ad:d4:20:6a:7f:e5:b8: d9:38:f8:88:d5:24:3a:bb:6e:a9:66:09:7b:41:b5: 17:67:6b:39:1e:e5:bb:2b:9c:a6:c7:47:df:88:f0: ef:19:68:cd:c4:48:ac:49:b9:c3:97:88:b5:6b:6c: 9a:fd:09:28:fd:b5:f4:89:80:4e:3e:76:2f:1c:dc: 4d:8e:ec:09:89:4c:b6:8b:16:f4:55:5a:71:5c:c3: c2:12:66:63:a6:36:df:1f:49:2b:ac:47:1c:89:1e: 82:4a:2a:e5:d4:2e:9a:80:71:36:82:20:db:15:3f: 74:01:93:fc:18:cb:01:eb:3d:2f:ba:d3:75:7e:80: f0:49:5c:5a:24:b0:b7:79:e0:b8:f3:82:67:30:ed: 66:0c:ca:e6:48:38:b7:27:be:0c:5b:68:df:e2:b6: 52:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A0:74:7C:78:34:7C:49:5A:9B:15:BA:DA:CE:8C:33:8E:54:18:F8 X509v3 Authority Key Identifier: keyid:EF:A4:77:24:63:CD:BE:12:B7:3B:16:AD:0D:25:16:F0:7D:63:83:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:26:0e:bd:aa:05:09:75:06:d2:3b:42:7e:2e:48:8b:7d:3f: 0f:eb:25:ba:0d:65:12:e7:09:1f:a2:f7:b1:91:1a:b3:79:4a: 12:9e:bf:ae:d8:3b:fd:d4:c6:91:e2:ee:bf:1c:4d:b9:8e:75: eb:29:1e:6b:d7:98:61:5a:d3:65:23:99:bb:68:8a:ef:97:95: 4c:00:bf:36:08:9c:82:12:4c:1f:bb:81:80:e1:e4:62:56:1a: cd:58:74:b9:a6:8b:98:91:a9:01:43:0b:0b:9b:8a:5f:0b:10: 66:bf:e7:8a:87:8a:bd:99:60:ab:1c:5d:df:c6:1d:ee:86:11: a7:cd:e3:50:2c:22:b6:75:88:3e:25:df:e2:c8:bf:3e:65:59: 8b:5e:48:10:9f:98:da:9c:89:93:76:de:f7:ff:c8:93:81:d4: 9e:c4:e8:a2:c7:53:35:cb:23:b9:64:c6:19:ae:7c:e9:0b:da: 9c:93:af:5b:6b:30:32:ec:5e:63:49:7f:ec:ef:cb:0b:87:08: b3:b0:92:f8:9e:96:98:3c:ea:85:f0:37:1f:2d:0b:e8:5e:98: d7:b2:f0:81:ce:cf:5f:46:a8:34:2b:9d:47:8a:f1:01:6e:78: 9a:cd:1a:e8:5a:1c:91:14:03:61:7e:15:4b:88:b1:a1:fc:a5: 8d:e0:e1:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U4jHE97D+oHH9TYKDkHZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYTQ3NzI0NjNjZGJlMTJiNzNiMTZhZDBkMjUxNmYwN2Q2 MzgzMGQwHhcNMjUxMjA3MDEwMTAwWhcNMjUxMjA4MDEwMTAwWjAzMTEwLwYDVQQD EyhkNWEwNzQ3Yzc4MzQ3YzQ5NWE5YjE1YmFkYWNlOGMzMzhlNTQxOGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB8lTQlka2ACkq+plT9B2V4KqIM5 wo7iV1Tzsb1kbhZ081NVMJqQefBuaR9fMKk3MPywhkBXPxkfC+TPz4sElpnRpUZf 15AT6IhSaPzcfSrfQSVV8+PjkiUFDpUE6nNgwK3UIGp/5bjZOPiI1SQ6u26pZgl7 QbUXZ2s5HuW7K5ymx0ffiPDvGWjNxEisSbnDl4i1a2ya/Qko/bX0iYBOPnYvHNxN juwJiUy2ixb0VVpxXMPCEmZjpjbfH0krrEcciR6CSirl1C6agHE2giDbFT90AZP8 GMsB6z0vutN1foDwSVxaJLC3eeC484JnMO1mDMrmSDi3J74MW2jf4rZSkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWgdHx4NHxJWpsVutrOjDOOVBj4MB8GA1UdIwQY MBaAFO+kdyRjzb4StzsWrQ0lFvB9Y4MNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZSM0pHUE52aEszT3hhdERTVVc4SDFqZ3cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wNjZkYTktOTk1ZS00OGYyLWI5ZjEt ODAxY2FiNzIwZWRiLzEvNzZSM0pHUE52aEszT3hhdERTVVc4SDFqZ3cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8wNjZkYTktOTk1ZS00OGYyLWI5ZjEtODAxY2FiNzIwZWRi LzEvNzZSM0pHUE52aEszT3hhdERTVVc4SDFqZ3cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIiYOvaoF CXUG0jtCfi5Ii30/D+slug1lEucJH6L3sZEas3lKEp6/rtg7/dTGkeLuvxxNuY51 6ykea9eYYVrTZSOZu2iK75eVTAC/NgicghJMH7uBgOHkYlYazVh0uaaLmJGpAUML C5uKXwsQZr/nioeKvZlgqxxd38Yd7oYRp83jUCwitnWIPiXf4si/PmVZi15IEJ+Y 2pyJk3be9//Ik4HUnsToosdTNcsjuWTGGa586QvanJOvW2swMuxeY0l/7O/LC4cI s7CS+J6WmDzqhfA3Hy0L6F6Y17Lwgc7PX0aoNCudR4rxAW54ms0a6FockRQDYX4V S4ixofyljeDhhQ== -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:16 2025 by rpki-client