This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft File: 76psy3hXNGAC5rvEmPiLnobfGAY.mft (raw, json) Hash identifier: Wt5n9WTpumTBmYAEBeWm6muBhrqgshKGKFCZ4KDIWcI= Subject key identifier: 50:38:77:80:ED:5D:53:2A:E7:45:D1:9A:02:6C:AF:12:E5:74:39:B7 Authority key identifier: EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06 Certificate issuer: /CN=efaa6ccb7857346002e6bbc498f88b9e86df1806 Certificate serial: 019B59ACEE9782B2993D779E2B8631D39B1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft Manifest number: 0559 Signing time: Fri 26 Dec 2025 08:01:04 +0000 Manifest this update: Fri 26 Dec 2025 08:01:04 +0000 Manifest next update: Sat 27 Dec 2025 08:01:04 +0000 Files and hashes: 1: 76psy3hXNGAC5rvEmPiLnobfGAY.crl (hash: Ins/3HZs3vVnpSmU4K0Tl3BmFLaRtRSBDhemQUS7TeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:ee:97:82:b2:99:3d:77:9e:2b:86:31:d3:9b:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efaa6ccb7857346002e6bbc498f88b9e86df1806 Validity Not Before: Dec 26 08:01:04 2025 GMT Not After : Dec 27 08:01:04 2025 GMT Subject: CN=50387780ed5d532ae745d19a026caf12e57439b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ed:d9:3b:a1:c9:cb:4d:51:f5:65:5d:49:42: 0b:7d:0a:13:d3:18:22:77:55:e3:49:ab:6d:b2:b1: 08:60:be:dd:01:5e:d8:6d:7b:1c:df:7a:ad:fd:68: 88:43:a1:1a:1b:83:c6:37:1a:d5:2f:9e:f2:10:43: 4f:ab:41:24:2d:9a:ec:6b:ec:4f:d0:c4:28:b6:f2: 5c:23:7d:c0:99:70:75:13:cf:c2:89:e2:18:2b:4b: c7:1c:af:6a:6f:8c:b9:96:34:cb:39:86:99:95:86: 0e:dd:b9:09:dd:ed:ec:b8:e3:8d:3e:d2:2d:6d:ad: bf:17:64:3e:fc:db:62:73:5e:d5:6a:73:bb:2e:46: c2:59:0a:58:a8:f4:02:ce:fb:56:62:3f:74:a9:59: f5:48:cf:e1:70:11:05:1f:b0:dc:49:2b:3c:88:71: 27:f2:3c:c8:f0:19:6b:9c:c7:8e:aa:66:3f:5e:7f: ca:f6:dc:1b:68:be:45:ad:8f:fc:4b:9e:92:68:39: d9:14:bc:75:66:70:73:5c:27:55:65:e7:77:46:29: 8c:30:87:2c:a6:e4:8a:03:6f:e8:fa:d8:26:71:13: c1:03:bc:f3:84:de:6c:8b:59:4f:ca:fe:62:a0:71: b6:2c:e7:50:0a:80:84:eb:08:fe:fc:6e:91:ce:fc: 79:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:38:77:80:ED:5D:53:2A:E7:45:D1:9A:02:6C:AF:12:E5:74:39:B7 X509v3 Authority Key Identifier: keyid:EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:9a:b2:83:8b:f9:77:ac:ee:05:c1:ea:60:96:20:a5:bb:d6: 49:1a:33:c5:8b:ae:45:ce:05:66:25:eb:24:ab:58:d6:ba:ac: 8e:79:56:51:36:66:93:8a:dd:1c:1b:34:ca:f1:b6:8a:ee:54: e2:1c:6f:05:64:c5:f2:ef:e7:95:e3:76:fc:2a:08:09:99:4c: fc:dd:cf:42:d9:da:ff:28:3c:64:2e:be:3f:b1:52:e4:cb:04: 98:cb:d8:26:df:4d:38:84:89:c1:81:da:21:f3:6f:bf:24:d6: 3c:76:7b:f5:ad:47:16:0f:11:1c:b0:c6:b1:55:f3:3c:ac:3d: 29:80:75:31:5a:f9:de:fa:50:fc:66:47:65:b6:42:72:03:fc: e4:60:a6:9f:fc:10:8b:f6:6a:1c:b4:be:72:c4:99:42:4c:08: 43:79:52:5e:90:be:dd:e0:b0:f4:d8:88:e2:cb:ab:4b:d0:90: f6:c2:45:ae:34:eb:82:63:a6:e5:4a:50:aa:6f:e0:e0:fd:c4: e6:ca:f4:36:9b:06:3d:90:9b:7e:53:04:d0:ea:94:2b:04:e7: ed:83:2d:03:b1:2e:43:cd:25:12:4f:e2:d5:28:73:c1:eb:bb: fd:c7:dd:05:d0:ab:79:88:70:61:84:01:61:36:8d:52:28:a8: 05:55:0a:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrO6XgrKZPXeeK4Yx05saMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYWE2Y2NiNzg1NzM0NjAwMmU2YmJjNDk4Zjg4YjllODZk ZjE4MDYwHhcNMjUxMjI2MDgwMTA0WhcNMjUxMjI3MDgwMTA0WjAzMTEwLwYDVQQD Eyg1MDM4Nzc4MGVkNWQ1MzJhZTc0NWQxOWEwMjZjYWYxMmU1NzQzOWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+3ZO6HJy01R9WVdSUILfQoT0xgi d1XjSattsrEIYL7dAV7YbXsc33qt/WiIQ6EaG4PGNxrVL57yEENPq0EkLZrsa+xP 0MQotvJcI33AmXB1E8/CieIYK0vHHK9qb4y5ljTLOYaZlYYO3bkJ3e3suOONPtIt ba2/F2Q+/Ntic17VanO7LkbCWQpYqPQCzvtWYj90qVn1SM/hcBEFH7DcSSs8iHEn 8jzI8BlrnMeOqmY/Xn/K9twbaL5FrY/8S56SaDnZFLx1ZnBzXCdVZed3RimMMIcs puSKA2/o+tgmcRPBA7zzhN5si1lPyv5ioHG2LOdQCoCE6wj+/G6Rzvx54QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFA4d4DtXVMq50XRmgJsrxLldDm3MB8GA1UdIwQY MBaAFO+qbMt4VzRgAua7xJj4i56G3xgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZwc3kzaFhOR0FDNXJ2RW1QaUxub2JmR0FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hYTk2MTQtZjZkNy00YzMzLWI5NGIt ZDgyMGY2NWNlZDgxLzEvNzZwc3kzaFhOR0FDNXJ2RW1QaUxub2JmR0FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9hYTk2MTQtZjZkNy00YzMzLWI5NGItZDgyMGY2NWNlZDgx LzEvNzZwc3kzaFhOR0FDNXJ2RW1QaUxub2JmR0FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpqyg4v5 d6zuBcHqYJYgpbvWSRozxYuuRc4FZiXrJKtY1rqsjnlWUTZmk4rdHBs0yvG2iu5U 4hxvBWTF8u/nleN2/CoICZlM/N3PQtna/yg8ZC6+P7FS5MsEmMvYJt9NOISJwYHa IfNvvyTWPHZ79a1HFg8RHLDGsVXzPKw9KYB1MVr53vpQ/GZHZbZCcgP85GCmn/wQ i/ZqHLS+csSZQkwIQ3lSXpC+3eCw9NiI4surS9CQ9sJFrjTrgmOm5UpQqm/g4P3E 5sr0NpsGPZCbflME0OqUKwTn7YMtA7EuQ80lEk/i1Shzweu7/cfdBdCreYhwYYQB YTaNUiioBVUK5Q== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:44 2025 by rpki-client