This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft File: 76vFwTMKPwsDGbsWxENIzRuBnkQ.mft (raw, json) Hash identifier: yHU04ZF+PfZD9guDWDE7oE94mK1/7KAcHdeU5BG9OZ8= Subject key identifier: 1A:32:D3:3F:E6:54:64:A6:59:67:3A:A6:B5:7F:F2:AC:F9:80:5A:ED Authority key identifier: EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44 Certificate issuer: /CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44 Certificate serial: 019AF352D03FE4E324CFBCB2AE58C540590D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft Manifest number: 0456 Signing time: Sat 06 Dec 2025 11:01:21 +0000 Manifest this update: Sat 06 Dec 2025 11:01:21 +0000 Manifest next update: Sun 07 Dec 2025 11:01:21 +0000 Files and hashes: 1: 76vFwTMKPwsDGbsWxENIzRuBnkQ.crl (hash: 48K3w0fR5CSxFlFvSguyWpmFMfo9yYBdF80RzciFEUI=) 2: dBK2n6sqJnACc6nNUBD4YcMJy3M.roa (hash: 6/oNoXCw6JLnpiYitp94ZlHhwO6+BX8OUUoI7ijZoek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:d0:3f:e4:e3:24:cf:bc:b2:ae:58:c5:40:59:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44 Validity Not Before: Dec 6 11:01:21 2025 GMT Not After : Dec 7 11:01:21 2025 GMT Subject: CN=1a32d33fe65464a659673aa6b57ff2acf9805aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:71:9c:e9:59:b8:6f:13:4e:36:f9:aa:03:dc: dd:cf:29:c4:29:54:05:d7:78:1e:04:c9:b9:61:11: ad:2f:8c:d2:1b:44:e2:14:c6:62:37:f6:dc:45:c4: 56:d4:39:d6:a5:d7:0a:d5:2e:43:32:e4:36:df:75: d7:d6:71:df:b1:e2:2b:63:86:a7:25:30:a8:94:df: a7:2f:ac:d0:15:2a:a9:23:5d:d9:69:28:08:78:d5: 06:3a:16:cb:3f:37:fe:bf:20:82:c1:d3:97:ee:71: 95:54:1b:0c:fe:60:98:95:aa:ec:f9:71:f9:0f:29: 90:f1:bb:89:2f:55:53:5e:a5:8a:15:bf:69:1d:fd: 6f:fb:32:1c:98:2a:d7:07:b3:a0:09:3b:d1:f9:f6: f5:d6:c5:b2:a1:e5:11:b5:4c:83:ee:87:4e:a8:47: a8:c1:be:b1:46:e7:dd:c9:a6:b9:11:85:03:ba:54: 42:f1:62:9f:ac:a4:10:38:1e:0e:14:39:a2:7a:34: d9:54:d3:67:fc:97:31:93:c5:3a:2c:7f:e0:9d:8a: e8:5d:a7:3a:4f:24:8b:21:ee:94:25:be:f8:1f:9d: 70:38:f2:27:bb:92:eb:89:d8:dc:3e:b3:2e:7d:c5: 8b:81:4f:37:8a:43:d3:30:c3:28:83:5f:21:f3:6a: 60:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:32:D3:3F:E6:54:64:A6:59:67:3A:A6:B5:7F:F2:AC:F9:80:5A:ED X509v3 Authority Key Identifier: keyid:EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:b2:60:16:98:bb:32:c7:58:1e:f6:8f:7f:83:eb:4c:9f:ac: 16:0d:bf:8a:16:aa:87:b2:e2:45:c7:71:d6:fc:3d:1d:ea:95: bb:6c:04:75:4d:5a:bf:79:50:25:b3:13:ae:69:3b:43:4e:de: 2b:ec:f3:b8:29:5d:69:87:eb:46:77:8a:2b:e6:78:4c:12:4c: fa:fb:7b:dd:26:74:fd:2e:13:cf:5f:c0:3f:d3:df:5d:91:f9: 7f:80:87:05:78:58:dc:ec:0a:17:aa:a7:9f:a9:b9:b5:1c:cb: cb:aa:2b:e8:ef:c2:a1:78:58:85:90:a0:da:c4:c8:3c:b8:70: 28:d3:86:c4:a0:c2:5f:88:77:7b:e8:3e:f2:c0:7e:17:e3:a4: 3e:69:2d:28:d8:8d:af:f8:6c:be:91:25:56:d2:4b:63:30:4d: d1:51:47:ce:91:44:19:75:8b:19:d5:71:54:99:f0:7a:9c:fe: f2:f4:ee:10:8c:ab:8c:e8:e4:c4:68:1f:2d:f8:41:46:9e:2b: 32:23:ef:55:86:e0:a7:12:a5:27:a4:cb:23:0d:76:69:5b:bc: 7c:74:c0:c1:31:10:06:5f:8e:8f:93:f6:ca:03:42:08:f8:0c: 1f:69:b6:28:f7:58:7f:a0:70:97:99:f2:24:47:2b:3f:78:5b: 91:24:48:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUtA/5OMkz7yyrljFQFkNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYWJjNWMxMzMwYTNmMGIwMzE5YmIxNmM0NDM0OGNkMWI4 MTllNDQwHhcNMjUxMjA2MTEwMTIxWhcNMjUxMjA3MTEwMTIxWjAzMTEwLwYDVQQD EygxYTMyZDMzZmU2NTQ2NGE2NTk2NzNhYTZiNTdmZjJhY2Y5ODA1YWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXGc6Vm4bxNONvmqA9zdzynEKVQF 13geBMm5YRGtL4zSG0TiFMZiN/bcRcRW1DnWpdcK1S5DMuQ233XX1nHfseIrY4an JTColN+nL6zQFSqpI13ZaSgIeNUGOhbLPzf+vyCCwdOX7nGVVBsM/mCYlars+XH5 DymQ8buJL1VTXqWKFb9pHf1v+zIcmCrXB7OgCTvR+fb11sWyoeURtUyD7odOqEeo wb6xRufdyaa5EYUDulRC8WKfrKQQOB4OFDmiejTZVNNn/Jcxk8U6LH/gnYroXac6 TySLIe6UJb74H51wOPInu5LridjcPrMufcWLgU83ikPTMMMog18h82pgxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoy0z/mVGSmWWc6prV/8qz5gFrtMB8GA1UdIwQY MBaAFO+rxcEzCj8LAxm7FsRDSM0bgZ5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZ2RndUTUtQd3NER2JzV3hFTkl6UnVCbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9iZTM4ZGMtZGExNS00MDQ4LTg4NTEt ZGUxZGNhMzc5NzM0LzEvNzZ2RndUTUtQd3NER2JzV3hFTkl6UnVCbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9iZTM4ZGMtZGExNS00MDQ4LTg4NTEtZGUxZGNhMzc5NzM0 LzEvNzZ2RndUTUtQd3NER2JzV3hFTkl6UnVCbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrJgFpi7 MsdYHvaPf4PrTJ+sFg2/ihaqh7LiRcdx1vw9HeqVu2wEdU1av3lQJbMTrmk7Q07e K+zzuCldaYfrRneKK+Z4TBJM+vt73SZ0/S4Tz1/AP9PfXZH5f4CHBXhY3OwKF6qn n6m5tRzLy6or6O/CoXhYhZCg2sTIPLhwKNOGxKDCX4h3e+g+8sB+F+OkPmktKNiN r/hsvpElVtJLYzBN0VFHzpFEGXWLGdVxVJnwepz+8vTuEIyrjOjkxGgfLfhBRp4r MiPvVYbgpxKlJ6TLIw12aVu8fHTAwTEQBl+Oj5P2ygNCCPgMH2m2KPdYf6Bwl5ny JEcrP3hbkSRIFg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:47:38 2025 by rpki-client