This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft File: 76W2I0ehtkzqSaKrOrSYPDSGH7I.mft (raw, json) Hash identifier: bus09MPeV5sYFzRFzc71Q7q40XOpOB9VD3RtTgIyyQE= Subject key identifier: EC:4D:68:1D:9F:17:A4:6F:4F:9E:C3:ED:76:63:DD:4B:D2:34:FC:63 Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Certificate serial: 019B4212257E539BCC11D4E0358BAB01D080 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft Manifest number: 01C2 Signing time: Sun 21 Dec 2025 18:00:43 +0000 Manifest this update: Sun 21 Dec 2025 18:00:43 +0000 Manifest next update: Mon 22 Dec 2025 18:00:43 +0000 Files and hashes: 1: 76W2I0ehtkzqSaKrOrSYPDSGH7I.crl (hash: 14ZUdsKyyzoAuusHUBoEl3wNA9330J/l4aTPlaDgDUQ=) 2: TdWCA3jMG4RcSGjTx6h7-OFQkJ0.roa (hash: i6Jk7HaD1mr34rVBZKHoNKT8LfsYuiueMYQP9x4CSCY=) 3: Wfa0ovyRJ_pd_dEUKmQa9LUPn7s.roa (hash: URIulXseWmtHdVMSkEKr6LgwVbHHo5nHTKefaj4mCqk=) 4: WnOPQ0ufHKuGIGeJgpa97dMJzZI.roa (hash: HZdjF63aWYiWvWoR/raQkcNq/IJsdTGCUZAkFXHzLn8=) 5: ZwlhiYyWQkRGz3NJHJFyM_Rg7Cg.roa (hash: 5by/fhrdm7/3f06Vze3ay8vgCnkJXF3Gh0BeggMxG98=) 6: _AP3FQaLWZZ4b07Vm6k0fkmrpNg.roa (hash: zZmmWUxFdkDgjpPPw8BHUSJ0nwj7XDsNJM3Ea4LtplY=) 7: kT-GBRdn5I-2tlMb_7_9SciQN9g.roa (hash: QjeGQjKJ8nc3raWH+8rzpohQUijqNjXsVOlYQC2T4vE=) 8: y3M_S9Lkx0bRvURYEJ1jFXn0IDE.roa (hash: J+owsHeEjZMxVahX59fSdFJZuQMT7sogFPyy4332cl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 18:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:12:25:7e:53:9b:cc:11:d4:e0:35:8b:ab:01:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Validity Not Before: Dec 21 18:00:43 2025 GMT Not After : Dec 22 18:00:43 2025 GMT Subject: CN=ec4d681d9f17a46f4f9ec3ed7663dd4bd234fc63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:54:87:f5:76:1d:32:59:5d:c0:95:e2:25:52: e8:28:11:b6:8f:8c:8d:c9:3f:e5:eb:17:04:3f:89: 2d:45:5e:ef:e9:a0:14:c0:07:d1:8d:7c:ee:cf:fe: ea:9a:f6:1d:d1:7d:fb:60:54:4e:a8:1e:2f:26:04: 7e:56:1b:6c:47:11:9e:df:d2:a6:d0:98:54:b3:e7: 2f:da:82:58:bf:d9:39:60:5b:ff:d8:e1:03:86:c6: d1:b6:1b:ba:60:d8:5a:69:87:51:1f:fb:b0:70:10: 06:b4:60:45:10:d4:58:6d:d8:19:4b:8b:03:59:20: f5:3a:cc:f4:20:ca:18:90:7f:c9:ba:8f:ca:9b:f9: 7a:a4:32:15:30:91:de:39:0e:ab:1e:49:b1:30:ee: 02:03:a3:b5:ba:7a:64:69:1e:68:64:44:6e:01:45: c5:47:36:ca:01:24:f9:67:b3:91:61:ef:01:a1:23: 2e:75:b4:e8:75:6c:53:7f:01:75:fd:69:20:c0:e1: 1f:aa:47:a4:14:6e:96:04:f3:ac:70:58:58:2a:c2: 53:72:67:9a:fd:f0:7b:fd:3f:df:fa:6c:fa:75:b3: 77:8e:c6:af:1c:da:e7:71:b1:37:74:b1:e7:68:9a: c5:04:ef:18:1d:e6:c7:f2:07:00:88:da:b7:75:0f: 88:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4D:68:1D:9F:17:A4:6F:4F:9E:C3:ED:76:63:DD:4B:D2:34:FC:63 X509v3 Authority Key Identifier: keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:18:b9:6d:e5:eb:0c:9f:68:32:e4:64:ed:3e:62:08:98:72: 54:72:35:0c:8a:d5:39:bf:88:c7:23:df:1d:ac:ef:03:43:1a: 36:b7:e0:9f:ef:ec:e6:b5:0b:2c:af:46:bc:28:f5:61:af:e1: 3e:fc:51:83:70:44:25:a1:2b:a8:30:72:70:1d:eb:40:6e:f0: 58:b6:69:37:05:96:64:63:34:7b:4d:ab:04:e7:b7:2d:c1:b9: a7:86:50:b2:5b:68:1c:8e:e5:5f:43:39:ee:be:09:95:ed:ae: e3:ea:3a:39:86:55:66:8b:f4:88:00:37:3a:76:b4:4d:0d:33: e4:f8:7c:f5:5c:7b:93:ee:c2:34:29:8d:11:b8:96:8e:bf:af: 1d:49:68:bc:75:af:47:71:a8:08:39:8b:fc:10:a9:09:75:91: 8c:aa:8f:e6:e9:76:38:3b:a4:3a:f3:29:57:8c:39:5b:4d:bc: ea:50:e2:ac:d9:8b:f2:e1:64:1b:c4:bf:88:b1:1c:ed:28:9d: 9b:ef:eb:51:c0:a5:09:4f:78:58:7b:95:3e:38:1a:f1:44:40: 45:ea:a4:7b:98:26:6e:ba:d7:cd:74:20:69:f4:d4:36:ac:27: 78:a2:10:86:c7:5f:86:64:bd:6a:9a:f3:eb:c9:e7:61:57:32: e9:ef:fd:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCEiV+U5vMEdTgNYurAdCAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYTViNjIzNDdhMWI2NGNlYTQ5YTJhYjNhYjQ5ODNjMzQ4 NjFmYjIwHhcNMjUxMjIxMTgwMDQzWhcNMjUxMjIyMTgwMDQzWjAzMTEwLwYDVQQD EyhlYzRkNjgxZDlmMTdhNDZmNGY5ZWMzZWQ3NjYzZGQ0YmQyMzRmYzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lSH9XYdMlldwJXiJVLoKBG2j4yN yT/l6xcEP4ktRV7v6aAUwAfRjXzuz/7qmvYd0X37YFROqB4vJgR+VhtsRxGe39Km 0JhUs+cv2oJYv9k5YFv/2OEDhsbRthu6YNhaaYdRH/uwcBAGtGBFENRYbdgZS4sD WSD1Osz0IMoYkH/Juo/Km/l6pDIVMJHeOQ6rHkmxMO4CA6O1unpkaR5oZERuAUXF RzbKAST5Z7ORYe8BoSMudbTodWxTfwF1/WkgwOEfqkekFG6WBPOscFhYKsJTcmea /fB7/T/f+mz6dbN3jsavHNrncbE3dLHnaJrFBO8YHebH8gcAiNq3dQ+IiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxNaB2fF6RvT57D7XZj3UvSNPxjMB8GA1UdIwQY MBaAFO+ltiNHobZM6kmiqzq0mDw0hh+yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQt MDEzZDJhMTFjMGE1LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQtMDEzZDJhMTFjMGE1 LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBi5beXr DJ9oMuRk7T5iCJhyVHI1DIrVOb+IxyPfHazvA0MaNrfgn+/s5rULLK9GvCj1Ya/h PvxRg3BEJaErqDBycB3rQG7wWLZpNwWWZGM0e02rBOe3LcG5p4ZQsltoHI7lX0M5 7r4Jle2u4+o6OYZVZov0iAA3Ona0TQ0z5Ph89Vx7k+7CNCmNEbiWjr+vHUlovHWv R3GoCDmL/BCpCXWRjKqP5ul2ODukOvMpV4w5W0286lDirNmL8uFkG8S/iLEc7Sid m+/rUcClCU94WHuVPjga8URAReqke5gmbrrXzXQgafTUNqwneKIQhsdfhmS9aprz 68nnYVcy6e/9Vw== -----END CERTIFICATE-----Generated at Mon Dec 22 02:05:08 2025 by rpki-client