This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft File: 76vFwTMKPwsDGbsWxENIzRuBnkQ.mft (raw, json) Hash identifier: laYYMGaagPPjEripWnsn2r0OJPz9L35zOxUxF8prvZM= Subject key identifier: A5:22:EE:6D:7E:BF:A4:D1:1B:FE:BE:51:AA:97:0D:0C:2D:BD:E7:84 Authority key identifier: EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44 Certificate issuer: /CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44 Certificate serial: 019B3CB517506B8665CC48593B6CA89B4FAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft Manifest number: 047C Signing time: Sat 20 Dec 2025 17:00:59 +0000 Manifest this update: Sat 20 Dec 2025 17:00:59 +0000 Manifest next update: Sun 21 Dec 2025 17:00:59 +0000 Files and hashes: 1: 76vFwTMKPwsDGbsWxENIzRuBnkQ.crl (hash: dPKFkoid4RRSAPLnAgwRALZVGLKHrsYDoW2cYCaYIjQ=) 2: dBK2n6sqJnACc6nNUBD4YcMJy3M.roa (hash: 6/oNoXCw6JLnpiYitp94ZlHhwO6+BX8OUUoI7ijZoek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:17:50:6b:86:65:cc:48:59:3b:6c:a8:9b:4f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44 Validity Not Before: Dec 20 17:00:59 2025 GMT Not After : Dec 21 17:00:59 2025 GMT Subject: CN=a522ee6d7ebfa4d11bfebe51aa970d0c2dbde784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bf:24:73:8f:da:1c:dd:86:3d:a7:43:2a:43: 35:1e:a1:08:b4:f4:3b:68:db:31:33:ca:90:3a:c4: 25:b1:18:96:0d:b4:c0:35:92:b0:72:af:2b:fc:4d: bf:a9:17:da:76:07:71:02:6b:01:78:f7:10:8f:d9: ed:57:76:9e:d2:57:f6:d6:a1:4f:fb:05:0b:17:69: 0a:b8:a1:12:69:25:a0:14:c1:01:17:b0:92:8f:b9: 4f:1f:2d:5c:94:5a:0c:8c:07:47:aa:ea:f1:3a:92: 46:89:b5:4f:73:32:1d:15:88:40:fe:1f:6a:9f:e3: dc:c6:24:d4:6f:77:13:75:70:13:49:a9:e6:0e:6d: 05:5a:a9:0c:24:ca:83:ae:b2:ca:79:b9:be:5b:02: 6f:da:e0:6f:4c:76:54:dd:01:b0:63:14:4f:11:cc: 58:2d:05:2a:fe:37:51:77:83:58:82:a8:38:4c:29: 87:76:ce:6e:f8:04:d1:9c:2a:ed:dc:57:43:ce:db: 02:9d:a3:e8:c0:7f:60:e5:7a:f4:e7:82:4a:1a:ec: 6b:1b:dc:1a:8c:b0:ba:4d:96:71:b3:2d:a5:3a:ff: 0d:6f:e6:6b:0a:f5:20:4c:5b:1a:27:5c:05:00:7d: b4:14:3d:1a:78:de:91:e9:9b:39:90:bf:27:16:e0: 0e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:22:EE:6D:7E:BF:A4:D1:1B:FE:BE:51:AA:97:0D:0C:2D:BD:E7:84 X509v3 Authority Key Identifier: keyid:EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:54:6a:91:70:a8:5b:07:e0:9b:83:fd:7b:71:e4:01:9a:6d: da:af:1e:e5:ba:e1:70:9a:bc:d0:76:12:08:fc:e5:a2:2c:02: 46:bd:00:07:03:68:c1:63:8d:d5:17:67:78:4f:f1:fc:90:50: 2a:b5:0b:f1:88:e6:aa:61:98:6c:c9:24:e1:33:29:d9:b5:7b: b3:23:e3:7f:89:29:9b:b3:ee:4b:79:1c:33:f4:88:8e:1b:89: 48:9b:0e:25:85:9c:bc:78:29:db:d0:4c:5c:ad:5c:ee:1c:a8: 3c:78:61:19:1d:03:c8:35:6f:af:e1:29:49:e6:6d:31:7c:3b: 19:ed:a2:6e:a6:ce:c5:97:fd:08:f5:4c:59:75:93:41:04:b3: cc:f2:8c:1e:e0:8c:70:1c:30:c6:33:17:62:0b:87:80:9a:15: e3:87:10:a4:89:03:13:ae:84:b5:70:a9:63:62:24:94:14:2e: 01:d1:f6:99:c5:03:1d:8f:ee:19:8e:e1:ee:22:1f:35:c3:79: f4:7d:c6:47:75:4c:cd:45:a5:8d:3c:81:8a:d6:c7:e9:06:e0: 3f:af:10:de:b2:45:b6:42:f8:55:7d:ce:1b:2a:eb:44:db:18: c6:64:a6:16:bd:9c:cf:a4:5e:3d:08:30:32:11:f1:8d:2c:e5: 9d:5f:2f:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tRdQa4ZlzEhZO2yom0+vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYWJjNWMxMzMwYTNmMGIwMzE5YmIxNmM0NDM0OGNkMWI4 MTllNDQwHhcNMjUxMjIwMTcwMDU5WhcNMjUxMjIxMTcwMDU5WjAzMTEwLwYDVQQD EyhhNTIyZWU2ZDdlYmZhNGQxMWJmZWJlNTFhYTk3MGQwYzJkYmRlNzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b8kc4/aHN2GPadDKkM1HqEItPQ7 aNsxM8qQOsQlsRiWDbTANZKwcq8r/E2/qRfadgdxAmsBePcQj9ntV3ae0lf21qFP +wULF2kKuKESaSWgFMEBF7CSj7lPHy1clFoMjAdHqurxOpJGibVPczIdFYhA/h9q n+PcxiTUb3cTdXATSanmDm0FWqkMJMqDrrLKebm+WwJv2uBvTHZU3QGwYxRPEcxY LQUq/jdRd4NYgqg4TCmHds5u+ATRnCrt3FdDztsCnaPowH9g5Xr054JKGuxrG9wa jLC6TZZxsy2lOv8Nb+ZrCvUgTFsaJ1wFAH20FD0aeN6R6Zs5kL8nFuAOtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUi7m1+v6TRG/6+UaqXDQwtveeEMB8GA1UdIwQY MBaAFO+rxcEzCj8LAxm7FsRDSM0bgZ5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZ2RndUTUtQd3NER2JzV3hFTkl6UnVCbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9iZTM4ZGMtZGExNS00MDQ4LTg4NTEt ZGUxZGNhMzc5NzM0LzEvNzZ2RndUTUtQd3NER2JzV3hFTkl6UnVCbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9iZTM4ZGMtZGExNS00MDQ4LTg4NTEtZGUxZGNhMzc5NzM0 LzEvNzZ2RndUTUtQd3NER2JzV3hFTkl6UnVCbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnVRqkXCo Wwfgm4P9e3HkAZpt2q8e5brhcJq80HYSCPzloiwCRr0ABwNowWON1RdneE/x/JBQ KrUL8YjmqmGYbMkk4TMp2bV7syPjf4kpm7PuS3kcM/SIjhuJSJsOJYWcvHgp29BM XK1c7hyoPHhhGR0DyDVvr+EpSeZtMXw7Ge2ibqbOxZf9CPVMWXWTQQSzzPKMHuCM cBwwxjMXYguHgJoV44cQpIkDE66EtXCpY2IklBQuAdH2mcUDHY/uGY7h7iIfNcN5 9H3GR3VMzUWljTyBitbH6QbgP68Q3rJFtkL4VX3OGyrrRNsYxmSmFr2cz6RePQgw MhHxjSzlnV8v6A== -----END CERTIFICATE-----Generated at Sat Dec 20 20:30:21 2025 by rpki-client