This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft File: 74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft (raw, json) Hash identifier: ADtCj5n0haIBxc85MdMGxEkZuX2AwkRXetSjx1iiRzw= Subject key identifier: 2D:5B:44:39:AF:2F:E3:8E:72:6F:38:0B:2D:10:C9:E5:85:3D:53:4C Authority key identifier: EF:86:69:E7:0C:EA:94:97:3A:FD:34:FB:08:EB:59:E9:D8:6B:57:FC Certificate issuer: /CN=ef8669e70cea94973afd34fb08eb59e9d86b57fc Certificate serial: 019AF541091BFF7CF7CB9C693C8A39D1956A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 20:01:11 +0000 Manifest this update: Sat 06 Dec 2025 20:01:11 +0000 Manifest next update: Sun 07 Dec 2025 20:01:11 +0000 Files and hashes: 1: 74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl (hash: KidnfmqscteJFad+dDVPmugN4aMSVhOtqMnT11YP6S8=) 2: lMqQBQxUd3_rITgUX_Xd15bHhcs.roa (hash: xYWVB8Ylsxp8fpKTzhWqmzpng/adcMSNJZDIutd8YK0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:09:1b:ff:7c:f7:cb:9c:69:3c:8a:39:d1:95:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef8669e70cea94973afd34fb08eb59e9d86b57fc Validity Not Before: Dec 6 20:01:11 2025 GMT Not After : Dec 7 20:01:11 2025 GMT Subject: CN=2d5b4439af2fe38e726f380b2d10c9e5853d534c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6e:2b:49:27:3a:58:26:1c:fa:cc:c1:b6:1c: 35:d3:65:b5:07:ec:94:97:3c:e4:72:7b:ea:3d:40: 03:8b:e0:74:20:06:ed:ec:44:a2:db:46:28:36:68: bc:ee:36:c9:12:80:f3:ec:c5:2a:82:81:d9:e6:7a: e2:7f:eb:8a:49:24:5a:12:61:03:3f:a8:40:3a:54: 73:f9:09:86:c3:7d:69:6a:55:18:68:6f:d6:f3:ac: 6f:93:ce:06:ec:9f:e0:b6:ea:62:98:a1:57:58:bd: 5a:6f:12:69:d2:b6:15:6d:6b:21:c3:e1:e8:de:0d: 99:05:f9:34:36:cf:60:19:8b:c0:ba:63:9d:05:32: b6:9f:86:d6:8a:4f:a9:f6:59:78:bf:60:83:be:1e: 91:73:ce:6b:ab:6c:51:88:6b:f0:86:6c:10:40:f0: a9:25:e8:cf:c9:da:a6:65:66:b0:eb:18:35:bd:2a: 77:9f:0a:96:9e:54:b7:c9:27:9e:7c:1c:b8:bd:6c: 2b:7d:ca:80:dd:84:d8:b5:af:78:5e:31:ec:73:1a: 28:fd:25:6e:96:a6:0f:05:f2:e3:a3:17:5e:8e:d9: e2:dd:86:86:48:01:d4:b8:cd:8c:fd:cd:12:01:28: 7b:48:75:d0:85:fd:07:7b:a0:b2:9c:72:b4:6e:29: cb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5B:44:39:AF:2F:E3:8E:72:6F:38:0B:2D:10:C9:E5:85:3D:53:4C X509v3 Authority Key Identifier: keyid:EF:86:69:E7:0C:EA:94:97:3A:FD:34:FB:08:EB:59:E9:D8:6B:57:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:38:c7:70:90:a5:25:8e:87:39:2c:e5:b1:a6:ce:72:25:f0: 1b:fe:30:ff:3a:1c:f4:b7:64:64:91:b2:b9:e8:b9:53:e5:b2: 98:aa:89:0d:62:57:80:75:1b:87:7d:2d:0f:e1:f1:e1:2a:24: b8:ad:0b:cc:b9:b3:16:2b:9d:0a:0c:bf:e5:52:52:ca:d2:c0: 06:0d:e2:96:0f:98:99:c6:d5:89:11:69:e8:3b:7c:da:32:03: a4:f7:4a:d5:61:fc:78:1e:b8:15:91:82:37:c8:48:0c:a6:d8: f2:d0:6f:36:d7:c8:e9:35:8b:78:7c:90:ea:be:90:d8:f4:62: 50:40:8d:56:37:84:2f:9f:7f:6e:7c:18:e3:ca:da:4b:43:a6: 4c:e6:9d:66:50:2a:fb:fe:e8:44:1e:b6:79:2b:a2:7c:55:03: 3e:52:ff:cd:cc:12:6f:91:77:df:f7:15:b9:61:b9:25:e9:a9: ce:b5:16:6a:2d:65:24:56:50:b1:65:ae:47:48:a5:b9:48:d4: 5c:fa:3b:92:88:c0:2d:03:de:78:0a:b8:62:3b:5e:a2:31:22: 89:c5:0a:69:63:a8:c4:f7:d1:94:56:b5:2c:84:f0:39:11:9e: c0:90:05:91:8b:68:b3:c0:5b:3f:aa:bc:e3:a9:46:94:a7:37: 47:57:f8:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QQkb/3z3y5xpPIo50ZVqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmODY2OWU3MGNlYTk0OTczYWZkMzRmYjA4ZWI1OWU5ZDg2 YjU3ZmMwHhcNMjUxMjA2MjAwMTExWhcNMjUxMjA3MjAwMTExWjAzMTEwLwYDVQQD EygyZDViNDQzOWFmMmZlMzhlNzI2ZjM4MGIyZDEwYzllNTg1M2Q1MzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm4rSSc6WCYc+szBthw102W1B+yU lzzkcnvqPUADi+B0IAbt7ESi20YoNmi87jbJEoDz7MUqgoHZ5nrif+uKSSRaEmED P6hAOlRz+QmGw31palUYaG/W86xvk84G7J/gtupimKFXWL1abxJp0rYVbWshw+Ho 3g2ZBfk0Ns9gGYvAumOdBTK2n4bWik+p9ll4v2CDvh6Rc85rq2xRiGvwhmwQQPCp JejPydqmZWaw6xg1vSp3nwqWnlS3ySeefBy4vWwrfcqA3YTYta94XjHscxoo/SVu lqYPBfLjoxdejtni3YaGSAHUuM2M/c0SASh7SHXQhf0He6CynHK0binLhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1bRDmvL+OOcm84Cy0QyeWFPVNMMB8GA1UdIwQY MBaAFO+GaecM6pSXOv00+wjrWenYa1f8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzRacDV3enFsSmM2X1RUN0NPdFo2ZGhyVl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zOTdjMWUtNTFhNy00MTZmLWE0NWMt MmEwMjEzMTc5YzA3LzEvNzRacDV3enFsSmM2X1RUN0NPdFo2ZGhyVl93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zOTdjMWUtNTFhNy00MTZmLWE0NWMtMmEwMjEzMTc5YzA3 LzEvNzRacDV3enFsSmM2X1RUN0NPdFo2ZGhyVl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzjHcJCl JY6HOSzlsabOciXwG/4w/zoc9LdkZJGyuei5U+WymKqJDWJXgHUbh30tD+Hx4Sok uK0LzLmzFiudCgy/5VJSytLABg3ilg+YmcbViRFp6Dt82jIDpPdK1WH8eB64FZGC N8hIDKbY8tBvNtfI6TWLeHyQ6r6Q2PRiUECNVjeEL59/bnwY48raS0OmTOadZlAq +/7oRB62eSuifFUDPlL/zcwSb5F33/cVuWG5JempzrUWai1lJFZQsWWuR0iluUjU XPo7kojALQPeeAq4YjteojEiicUKaWOoxPfRlFa1LITwORGewJAFkYtos8BbP6q8 46lGlKc3R1f4Lg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:21:16 2025 by rpki-client