This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft File: 77RcySOXjBokve6WzHs683OG0qg.mft (raw, json) Hash identifier: cE0V41LT86lK7j859Xdr3QPrldGwmjjKkLOU/W8k8I0= Subject key identifier: EA:71:35:9A:A0:F6:A1:E2:F1:23:3F:27:65:4E:00:FE:7F:BE:61:A8 Authority key identifier: EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8 Certificate issuer: /CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8 Certificate serial: 019AF19B44C4A1929B926F8F8950F4A2D9CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft Manifest number: 0F03 Signing time: Sat 06 Dec 2025 03:01:15 +0000 Manifest this update: Sat 06 Dec 2025 03:01:15 +0000 Manifest next update: Sun 07 Dec 2025 03:01:15 +0000 Files and hashes: 1: 77RcySOXjBokve6WzHs683OG0qg.crl (hash: Eckq6W8mXQqMogXh+aZu2ipn3Xy7CPN8Cssj/pm5e5Q=) 2: ONW_HHb2ZjsySF4n5zNLufP_Ugo.roa (hash: Fs9suOzCDzlX3MVkt67omPbuhLWfHekY4xcrsMfgW7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:44:c4:a1:92:9b:92:6f:8f:89:50:f4:a2:d9:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8 Validity Not Before: Dec 6 03:01:15 2025 GMT Not After : Dec 7 03:01:15 2025 GMT Subject: CN=ea71359aa0f6a1e2f1233f27654e00fe7fbe61a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ae:d8:08:3d:92:0b:32:91:5b:a2:0b:18:bf: 45:f9:0d:44:fd:4a:1c:d1:4e:bc:a4:ae:f1:6a:71: 91:05:22:2b:46:3e:db:18:e2:18:d1:b7:65:0a:63: bf:8f:28:b0:95:b8:78:0e:2b:6d:78:a8:d8:a4:5b: e7:4b:c8:dc:54:a9:bb:db:b1:fa:a7:62:d1:ec:19: 5f:3d:7d:97:0c:49:ca:7e:34:02:28:dc:0c:20:e9: 2e:67:fa:09:3e:3e:d5:da:06:a6:42:73:27:63:9b: 09:fb:af:69:0c:22:ef:b1:e6:fe:d3:e9:38:53:85: 8d:15:07:e0:52:b3:fc:84:16:b3:0b:b1:44:0d:66: 16:80:1d:8e:00:ab:53:75:a6:4a:37:2a:e6:89:75: 74:42:c7:2d:31:2a:35:0d:8f:f5:f7:9e:0b:d3:6e: ee:06:33:1a:03:f4:39:28:2c:a1:86:0c:81:ae:5a: dd:d4:ce:a3:db:65:b4:b4:b4:57:5b:c5:44:71:b2: 8e:8e:81:29:15:04:7a:57:5e:01:87:4d:2e:5b:87: 8f:21:a8:1f:10:3b:24:7d:50:c3:5e:4a:df:df:5c: 48:27:a5:44:0b:03:16:73:f0:a0:49:31:2c:f5:b4: c8:7a:5c:f5:55:81:8f:f9:89:bc:12:44:d3:c5:20: 7b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:71:35:9A:A0:F6:A1:E2:F1:23:3F:27:65:4E:00:FE:7F:BE:61:A8 X509v3 Authority Key Identifier: keyid:EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:0e:8e:fe:1a:f8:cc:00:c6:1a:dd:3d:e8:0e:d5:f1:fc:9b: 44:4a:7c:bc:11:ad:2e:61:eb:d6:4c:7d:74:16:90:d5:39:07: 7c:26:82:b5:ab:51:bf:cd:77:1c:19:97:84:29:29:38:c0:56: bd:f4:c7:55:1d:cf:7f:07:d0:16:11:de:24:f1:8a:c8:99:f6: 76:97:48:0b:b9:ec:93:9b:f8:d6:68:31:97:11:c2:74:cd:b2: 32:eb:78:fc:bb:c5:18:bf:c8:03:a4:8b:a3:57:60:2b:f0:4d: 4e:ba:32:e3:c5:4b:68:ed:c8:32:c6:5b:9a:9f:9c:ff:04:3e: f5:06:ba:e1:48:fb:5b:0b:86:ad:41:2a:c2:f1:5d:bf:5f:56: 40:39:1d:e2:f3:fe:1c:fe:44:b3:4f:92:fb:e7:3a:18:ea:95: 4a:c4:9c:92:d1:16:fc:13:48:3f:16:fe:6f:93:c4:5a:ea:6f: 5b:81:ee:bf:c7:0e:99:41:89:00:34:43:e3:c6:1a:4b:ca:34: 01:09:db:94:53:32:93:53:bb:cf:09:d5:d4:f6:07:ad:ba:32: 8f:fd:1a:8a:c9:c9:e0:62:56:76:27:c2:03:97:42:48:13:11: 70:cc:f2:44:9e:31:a0:af:35:9a:a1:3e:41:69:6a:00:8e:5a: 0a:9a:3b:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0TEoZKbkm+PiVD0otnOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYjQ1Y2M5MjM5NzhjMWEyNGJkZWU5NmNjN2IzYWYzNzM4 NmQyYTgwHhcNMjUxMjA2MDMwMTE1WhcNMjUxMjA3MDMwMTE1WjAzMTEwLwYDVQQD EyhlYTcxMzU5YWEwZjZhMWUyZjEyMzNmMjc2NTRlMDBmZTdmYmU2MWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA767YCD2SCzKRW6ILGL9F+Q1E/Uoc 0U68pK7xanGRBSIrRj7bGOIY0bdlCmO/jyiwlbh4DitteKjYpFvnS8jcVKm727H6 p2LR7BlfPX2XDEnKfjQCKNwMIOkuZ/oJPj7V2gamQnMnY5sJ+69pDCLvseb+0+k4 U4WNFQfgUrP8hBazC7FEDWYWgB2OAKtTdaZKNyrmiXV0QsctMSo1DY/1954L027u BjMaA/Q5KCyhhgyBrlrd1M6j22W0tLRXW8VEcbKOjoEpFQR6V14Bh00uW4ePIagf EDskfVDDXkrf31xIJ6VECwMWc/CgSTEs9bTIelz1VYGP+Ym8EkTTxSB73QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpxNZqg9qHi8SM/J2VOAP5/vmGoMB8GA1UdIwQY MBaAFO+0XMkjl4waJL3ulsx7OvNzhtKoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzdSY3lTT1hqQm9rdmU2V3pIczY4M09HMHFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hYWMwMTAtNWVmMC00ODQ0LWIyMzMt NDQ1N2ViZWE1YTQ1LzEvNzdSY3lTT1hqQm9rdmU2V3pIczY4M09HMHFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9hYWMwMTAtNWVmMC00ODQ0LWIyMzMtNDQ1N2ViZWE1YTQ1 LzEvNzdSY3lTT1hqQm9rdmU2V3pIczY4M09HMHFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfw6O/hr4 zADGGt096A7V8fybREp8vBGtLmHr1kx9dBaQ1TkHfCaCtatRv813HBmXhCkpOMBW vfTHVR3PfwfQFhHeJPGKyJn2dpdIC7nsk5v41mgxlxHCdM2yMut4/LvFGL/IA6SL o1dgK/BNTroy48VLaO3IMsZbmp+c/wQ+9Qa64Uj7WwuGrUEqwvFdv19WQDkd4vP+ HP5Es0+S++c6GOqVSsScktEW/BNIPxb+b5PEWupvW4Huv8cOmUGJADRD48YaS8o0 AQnblFMyk1O7zwnV1PYHrboyj/0aisnJ4GJWdifCA5dCSBMRcMzyRJ4xoK81mqE+ QWlqAI5aCpo7aA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:18:58 2025 by rpki-client