This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft File: do75wQS-IihL97J1bSqBc5RqOG4.mft (raw, json) Hash identifier: gyngd9IqGiipqnXRxD1ljLg+YZsxywgN0BpIFsoAmzo= Subject key identifier: 9B:08:1F:93:04:1D:10:02:07:91:67:B1:75:A3:24:B5:73:E3:91:4C Authority key identifier: 76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E Certificate issuer: /CN=768ef9c104be22284bf7b2756d2a8173946a386e Certificate serial: 019AF24014352E723A0F70A6C858E7163EB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:01:16 +0000 Manifest this update: Sat 06 Dec 2025 06:01:16 +0000 Manifest next update: Sun 07 Dec 2025 06:01:16 +0000 Files and hashes: 1: EJkcDznOKKWRmaypi-0UVjmIciU.roa (hash: 0CzgDka1v9BOwLuN51gJ8uTArmQf+fKvMJ7KbWRZMSo=) 2: do75wQS-IihL97J1bSqBc5RqOG4.crl (hash: qrSYaqp/WU1R+99NQliYXuVwHWIvKSwAb/5jVFAw6NM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:14:35:2e:72:3a:0f:70:a6:c8:58:e7:16:3e:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=768ef9c104be22284bf7b2756d2a8173946a386e Validity Not Before: Dec 6 06:01:16 2025 GMT Not After : Dec 7 06:01:16 2025 GMT Subject: CN=9b081f93041d1002079167b175a324b573e3914c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9f:4b:cb:c4:93:60:d2:46:61:e7:50:b6:77: 42:7d:ec:87:da:d5:92:13:90:06:c1:f4:28:f8:70: 47:ba:b9:3d:b0:50:e9:36:e3:a6:9b:3f:f5:c2:9f: 43:c8:ee:e4:63:a0:c9:bc:46:dc:66:11:d9:39:5c: 69:93:a3:b4:fc:9a:d6:54:06:b4:57:94:82:41:f0: 13:31:05:2d:6f:bd:8b:d1:f5:2d:d8:3a:d7:dd:5e: 76:a8:1b:7c:92:55:9b:58:46:19:55:a6:61:d4:2c: 08:9e:41:a1:fe:a4:66:5a:22:a1:d6:03:ea:9b:35: b0:07:e8:9e:b8:45:27:d6:ba:48:99:38:06:a1:21: 85:9b:43:57:ec:9e:00:fb:ff:e4:b2:90:b4:90:7f: 7b:d2:8d:38:6a:ba:d5:ec:e5:2d:74:9f:4a:81:c3: 4a:49:39:2c:39:49:4c:e9:35:db:95:2b:48:be:39: 2f:d0:a5:3d:1d:df:d8:38:97:ad:8f:db:09:de:30: e4:bc:08:bb:b9:16:4f:23:6a:a6:96:ad:48:1d:56: a9:bb:4a:a8:63:7e:7b:70:6d:ed:91:e2:ed:9b:8a: ae:26:21:d4:cd:c9:db:ee:d0:66:0f:7f:ce:12:21: 43:4d:0e:2e:4f:5f:aa:a2:67:8e:8d:62:8a:fc:0d: 0e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:08:1F:93:04:1D:10:02:07:91:67:B1:75:A3:24:B5:73:E3:91:4C X509v3 Authority Key Identifier: keyid:76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c3:8d:c0:e5:74:ee:e0:c7:4a:43:bd:88:3a:0a:37:02:d0: b3:51:13:c1:2e:5d:92:ba:07:3b:4c:7d:9b:17:c2:4a:e0:5f: cf:30:8f:28:f9:e0:bd:ea:27:84:e5:01:af:3f:eb:74:66:c2: 7d:2c:46:d1:33:7d:5a:54:7a:22:63:ae:61:33:f9:5d:25:15: 8f:0d:97:a0:5f:36:9b:bb:f2:55:11:21:bf:cf:24:6b:b8:8b: fd:95:f6:9f:30:47:02:68:61:6a:3f:17:59:d2:4e:c2:c5:1b: ed:8f:ec:e3:ed:ac:da:94:60:c1:1f:67:5a:61:95:fd:31:7c: 7c:c6:f2:36:f0:18:21:c8:48:d8:4a:7b:bd:d6:88:ea:00:1a: 00:a4:eb:31:6b:2b:a7:d6:96:45:a3:03:19:af:ae:ce:f5:5e: 9d:60:96:71:b7:bc:5f:08:34:2d:2e:93:0a:12:ff:10:2b:5c: fd:aa:0a:5d:1a:4d:7e:22:62:9d:e2:57:37:79:0c:e5:6e:44: e3:d9:6e:89:50:97:88:35:5d:66:78:e1:2f:31:c4:64:c3:cb: 16:8c:ae:a6:46:bf:53:4a:08:17:f8:2d:c5:4c:91:85:67:85: 72:e5:fe:a7:b8:23:78:f4:76:23:26:6c:c0:3f:cf:52:9a:1e: f6:1d:71:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBQ1LnI6D3CmyFjnFj63MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OGVmOWMxMDRiZTIyMjg0YmY3YjI3NTZkMmE4MTczOTQ2 YTM4NmUwHhcNMjUxMjA2MDYwMTE2WhcNMjUxMjA3MDYwMTE2WjAzMTEwLwYDVQQD Eyg5YjA4MWY5MzA0MWQxMDAyMDc5MTY3YjE3NWEzMjRiNTczZTM5MTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo59Ly8STYNJGYedQtndCfeyH2tWS E5AGwfQo+HBHurk9sFDpNuOmmz/1wp9DyO7kY6DJvEbcZhHZOVxpk6O0/JrWVAa0 V5SCQfATMQUtb72L0fUt2DrX3V52qBt8klWbWEYZVaZh1CwInkGh/qRmWiKh1gPq mzWwB+ieuEUn1rpImTgGoSGFm0NX7J4A+//kspC0kH970o04arrV7OUtdJ9KgcNK STksOUlM6TXblStIvjkv0KU9Hd/YOJetj9sJ3jDkvAi7uRZPI2qmlq1IHVapu0qo Y357cG3tkeLtm4quJiHUzcnb7tBmD3/OEiFDTQ4uT1+qomeOjWKK/A0OtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsIH5MEHRACB5FnsXWjJLVz45FMMB8GA1UdIwQY MBaAFHaO+cEEviIoS/eydW0qgXOUajhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG83NXdRUy1JaWhMOTdKMWJTcUJjNVJxT0c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84NmI0MDItZTQzYi00YjdlLTk4ZWUt YjZiNzRjYjI5OWIwLzEvZG83NXdRUy1JaWhMOTdKMWJTcUJjNVJxT0c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84NmI0MDItZTQzYi00YjdlLTk4ZWUtYjZiNzRjYjI5OWIw LzEvZG83NXdRUy1JaWhMOTdKMWJTcUJjNVJxT0c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWsONwOV0 7uDHSkO9iDoKNwLQs1ETwS5dkroHO0x9mxfCSuBfzzCPKPngveonhOUBrz/rdGbC fSxG0TN9WlR6ImOuYTP5XSUVjw2XoF82m7vyVREhv88ka7iL/ZX2nzBHAmhhaj8X WdJOwsUb7Y/s4+2s2pRgwR9nWmGV/TF8fMbyNvAYIchI2Ep7vdaI6gAaAKTrMWsr p9aWRaMDGa+uzvVenWCWcbe8Xwg0LS6TChL/ECtc/aoKXRpNfiJineJXN3kM5W5E 49luiVCXiDVdZnjhLzHEZMPLFoyupka/U0oIF/gtxUyRhWeFcuX+p7gjePR2IyZs wD/PUpoe9h1xNg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:41 2025 by rpki-client