This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft File: 76R3JGPNvhK3OxatDSUW8H1jgw0.mft (raw, json) Hash identifier: z7Ln2IHdqM3exLBQdVxKFivXqNnJxIwe32Agy4wpYy8= Subject key identifier: A0:44:4F:F2:39:30:ED:A3:D5:B5:E6:3C:B2:F6:3C:D9:DF:8C:50:BD Authority key identifier: EF:A4:77:24:63:CD:BE:12:B7:3B:16:AD:0D:25:16:F0:7D:63:83:0D Certificate issuer: /CN=efa4772463cdbe12b73b16ad0d2516f07d63830d Certificate serial: 019BF5AC63013B914EE9BC7536B4EDF31878 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft Manifest number: 177D Signing time: Sun 25 Jan 2026 15:01:13 +0000 Manifest this update: Sun 25 Jan 2026 15:01:13 +0000 Manifest next update: Mon 26 Jan 2026 15:01:13 +0000 Files and hashes: 1: 76R3JGPNvhK3OxatDSUW8H1jgw0.crl (hash: QRJyAiVSGM5qjMIPYPt7/lh6QrMywWfZUAke9u5B/Vo=) 2: N5QCogCjueurEYHGg5bKFFk7ZlY.roa (hash: CIzHGnEf1oEHhEGLujmH6EiVhy3a59ACXCm78MrefUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.crl rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:63:01:3b:91:4e:e9:bc:75:36:b4:ed:f3:18:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efa4772463cdbe12b73b16ad0d2516f07d63830d Validity Not Before: Jan 25 15:01:13 2026 GMT Not After : Jan 26 15:01:13 2026 GMT Subject: CN=a0444ff23930eda3d5b5e63cb2f63cd9df8c50bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f8:db:71:f1:06:bf:45:4e:a6:3d:eb:6b:92: a0:cf:7d:ee:b0:72:0c:01:e8:92:91:5c:a7:21:c8: af:1b:8b:9e:db:e4:2d:5d:a0:15:6b:20:27:fb:f2: b6:4a:1c:f1:a7:31:77:8e:ee:d3:82:70:a1:30:8b: a0:a1:c7:b6:fc:98:27:d6:c9:7e:e6:50:a1:5a:c1: 04:25:0b:45:59:ed:f1:14:10:8e:6e:df:e1:7d:c4: 60:bb:c4:e9:79:22:f2:ae:ea:c9:a0:32:73:11:67: c2:d9:87:a0:6f:d6:95:7c:4e:20:7d:9e:64:12:17: c4:f9:ab:1d:ed:e9:06:bd:9d:65:fb:55:a9:a9:93: 3f:4c:75:88:19:a3:ea:11:2a:42:84:37:ad:b6:72: c8:80:9e:e8:77:dd:a3:a3:9f:42:5d:f4:8a:80:da: 74:c2:f9:65:7f:85:83:3e:a5:df:22:25:92:a4:eb: 20:50:71:44:90:f1:5a:80:6a:0e:d0:91:c6:5b:31: ef:f1:bd:38:a2:3a:0e:e2:cf:7c:0f:8a:ba:06:78: b3:d6:9c:df:0b:2b:a5:d8:82:94:8b:e6:d8:1f:a9: 8a:fb:32:ab:4f:dc:17:d7:cb:b3:5e:5e:7e:03:e9: dc:bd:2b:5c:35:e1:b5:de:c0:88:82:cf:99:27:ec: 26:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:44:4F:F2:39:30:ED:A3:D5:B5:E6:3C:B2:F6:3C:D9:DF:8C:50:BD X509v3 Authority Key Identifier: keyid:EF:A4:77:24:63:CD:BE:12:B7:3B:16:AD:0D:25:16:F0:7D:63:83:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:eb:f1:dc:d5:c3:80:33:4d:3b:f5:8b:57:77:99:43:cf:40: 68:82:27:08:51:34:f0:11:af:c8:aa:50:6a:12:53:d4:22:b9: 19:30:6d:33:0e:f4:38:bd:7a:26:c5:14:48:c6:f5:fe:49:37: fe:d2:c4:e6:01:fe:d0:8e:d6:c3:b9:c1:e3:d7:2d:3c:1c:33: 1b:18:7f:07:75:e0:86:01:a0:9b:6b:ea:e2:bd:95:ae:40:ec: 03:7c:65:e8:59:6e:cb:17:b3:44:f7:79:8d:93:8b:d4:46:33: cd:95:72:18:41:04:6b:49:bf:d7:35:d5:6c:30:0b:72:72:b3: 6b:4b:24:ca:d6:4c:7e:d3:93:b5:42:d0:f5:ed:47:4c:7d:8f: 8e:f8:4c:c6:76:34:54:a1:cf:61:ef:4e:20:ee:ea:f2:c9:af: 8e:77:81:89:d1:3c:48:13:4a:39:35:a8:80:00:cd:b8:3c:95: e5:fb:f1:98:ef:ba:7c:07:e3:98:9a:f7:b5:ee:46:0f:83:fb: 1e:0d:6e:6f:4f:a3:40:3f:aa:d1:43:d0:af:2d:d9:1a:89:d6: 78:09:18:8a:90:a8:c4:7e:2d:f5:1a:e5:1a:ca:b8:c7:df:e4: cc:23:f1:1f:60:ce:7b:82:98:37:23:2e:5d:3f:93:b1:b6:30: 5d:09:45:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rGMBO5FO6bx1NrTt8xh4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYTQ3NzI0NjNjZGJlMTJiNzNiMTZhZDBkMjUxNmYwN2Q2 MzgzMGQwHhcNMjYwMTI1MTUwMTEzWhcNMjYwMTI2MTUwMTEzWjAzMTEwLwYDVQQD EyhhMDQ0NGZmMjM5MzBlZGEzZDViNWU2M2NiMmY2M2NkOWRmOGM1MGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/jbcfEGv0VOpj3ra5Kgz33usHIM AeiSkVynIcivG4ue2+QtXaAVayAn+/K2ShzxpzF3ju7TgnChMIugoce2/Jgn1sl+ 5lChWsEEJQtFWe3xFBCObt/hfcRgu8TpeSLyrurJoDJzEWfC2Yegb9aVfE4gfZ5k EhfE+asd7ekGvZ1l+1WpqZM/THWIGaPqESpChDettnLIgJ7od92jo59CXfSKgNp0 wvllf4WDPqXfIiWSpOsgUHFEkPFagGoO0JHGWzHv8b04ojoO4s98D4q6Bniz1pzf Cyul2IKUi+bYH6mK+zKrT9wX18uzXl5+A+ncvStcNeG13sCIgs+ZJ+wm2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBET/I5MO2j1bXmPLL2PNnfjFC9MB8GA1UdIwQY MBaAFO+kdyRjzb4StzsWrQ0lFvB9Y4MNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZSM0pHUE52aEszT3hhdERTVVc4SDFqZ3cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wNjZkYTktOTk1ZS00OGYyLWI5ZjEt ODAxY2FiNzIwZWRiLzEvNzZSM0pHUE52aEszT3hhdERTVVc4SDFqZ3cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8wNjZkYTktOTk1ZS00OGYyLWI5ZjEtODAxY2FiNzIwZWRi LzEvNzZSM0pHUE52aEszT3hhdERTVVc4SDFqZ3cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgevx3NXD gDNNO/WLV3eZQ89AaIInCFE08BGvyKpQahJT1CK5GTBtMw70OL16JsUUSMb1/kk3 /tLE5gH+0I7Ww7nB49ctPBwzGxh/B3XghgGgm2vq4r2VrkDsA3xl6FluyxezRPd5 jZOL1EYzzZVyGEEEa0m/1zXVbDALcnKza0skytZMftOTtULQ9e1HTH2PjvhMxnY0 VKHPYe9OIO7q8smvjneBidE8SBNKOTWogADNuDyV5fvxmO+6fAfjmJr3te5GD4P7 Hg1ub0+jQD+q0UPQry3ZGonWeAkYipCoxH4t9RrlGsq4x9/kzCPxH2DOe4KYNyMu XT+TsbYwXQlF/Q== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:02 2026 by rpki-client