This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft File: 75S8y9TC4P-PeqsEXhSjEfOy-f4.mft (raw, json) Hash identifier: 4JOeuRWsNon4OEb08lOnG3QeprQX2r1zx13VUVfQYeU= Subject key identifier: B3:8A:17:D6:BC:39:64:CC:25:4F:83:D0:C3:85:3F:8D:7F:EE:46:06 Authority key identifier: EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE Certificate issuer: /CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe Certificate serial: 019BDF24AEEF9D922FB83A79854CCBF758B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft Manifest number: 03CF Signing time: Wed 21 Jan 2026 06:01:21 +0000 Manifest this update: Wed 21 Jan 2026 06:01:21 +0000 Manifest next update: Thu 22 Jan 2026 06:01:21 +0000 Files and hashes: 1: 75S8y9TC4P-PeqsEXhSjEfOy-f4.crl (hash: ZwcdE2m36iInqVQzCkel9bq1BC2NgpKD51v8lPLiZ+o=) 2: T402uwWdle2-wACzD9ONw9UX7Q0.roa (hash: qH2p5m4fwAtgkEGn5eHmdKfPUlYPjTmqTH+gzJaccXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:24:ae:ef:9d:92:2f:b8:3a:79:85:4c:cb:f7:58:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe Validity Not Before: Jan 21 06:01:21 2026 GMT Not After : Jan 22 06:01:21 2026 GMT Subject: CN=b38a17d6bc3964cc254f83d0c3853f8d7fee4606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:59:c3:c6:8b:bf:0c:bd:12:06:1f:a0:e3:7c: 9e:51:b1:0f:11:db:44:f2:43:46:a1:44:49:63:b2: 59:85:39:f9:ff:db:b7:fd:c1:14:49:3a:39:49:a3: 6f:cd:fa:31:35:5d:d1:82:65:d4:fc:b1:29:c2:f8: 7f:c0:5a:df:fc:39:3b:c2:2d:bc:ad:69:8d:25:b1: ce:27:d2:b9:c4:b0:cb:04:42:5d:d9:95:b5:d8:59: 8c:a3:f1:92:93:95:ff:2b:a3:27:da:c1:b5:d8:6f: d7:95:63:12:60:46:14:a2:f7:4b:7c:a4:5b:f4:2f: 68:23:ba:d0:e6:5d:da:a1:74:3a:d5:ed:e4:9d:2b: 24:7e:92:a9:e1:13:23:f2:f4:2e:eb:30:b2:e9:58: 2d:7c:a8:93:39:fe:df:9f:fc:10:af:d5:7f:28:cc: e2:25:42:e9:19:98:1e:55:37:4a:6b:7a:78:ea:b3: bf:02:7d:31:80:1e:f9:56:4a:eb:8d:7f:07:72:d3: 08:b1:b7:c3:48:dc:f2:c5:34:47:2b:a9:a7:1f:83: d4:ca:35:54:74:1e:47:e4:22:e4:f2:2b:3e:a9:af: 3c:48:aa:1d:d6:1f:bb:9f:5b:02:3d:9f:8d:80:87: 91:19:34:74:b4:f6:5f:4e:0a:db:da:03:aa:62:d2: c0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8A:17:D6:BC:39:64:CC:25:4F:83:D0:C3:85:3F:8D:7F:EE:46:06 X509v3 Authority Key Identifier: keyid:EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:aa:6c:c9:78:fd:b0:f1:d1:6d:eb:7b:2a:b3:f0:01:e6:e1: cc:51:b1:87:0c:5e:ac:34:c0:d5:52:0f:40:e5:dc:bf:a4:96: b4:bd:55:ca:99:34:3a:89:f3:18:d8:93:ed:a6:ca:c7:a2:8e: a3:89:52:0e:17:5c:f0:60:62:7a:a2:8f:70:e3:e6:24:df:e9: 5d:82:19:32:4d:17:5e:88:ba:b4:a3:de:24:31:cd:71:7e:c2: 7c:4b:39:d0:de:f1:df:53:49:95:8e:af:c5:84:54:65:bb:55: 01:00:65:00:d4:c9:9e:c3:40:9b:e6:23:02:6f:0c:b5:2e:1f: cf:d5:31:74:0b:0b:e6:c5:8f:8e:dc:97:ef:6e:05:5d:ae:d5: 6c:a1:a2:2c:35:80:70:7d:e6:49:a1:7d:c9:67:c9:35:05:6f: ce:a2:65:17:95:e3:90:8c:f8:9e:ec:f4:4a:ae:d1:ee:62:31: 21:97:30:e7:57:a1:31:23:9b:ad:39:8e:e4:cb:cf:97:5a:af: 09:42:e1:23:e9:7b:fc:c8:82:82:06:bb:d3:7e:5f:35:5c:ca: 0e:26:2e:74:63:a1:9f:6d:d7:2f:39:83:cc:e4:01:33:8a:7d: cb:18:48:14:69:17:6a:e0:ff:d7:63:8c:70:43:f6:b2:81:a8: a6:b4:2a:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvfJK7vnZIvuDp5hUzL91i4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmOTRiY2NiZDRjMmUwZmY4ZjdhYWIwNDVlMTRhMzExZjNi MmY5ZmUwHhcNMjYwMTIxMDYwMTIxWhcNMjYwMTIyMDYwMTIxWjAzMTEwLwYDVQQD EyhiMzhhMTdkNmJjMzk2NGNjMjU0ZjgzZDBjMzg1M2Y4ZDdmZWU0NjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1nDxou/DL0SBh+g43yeUbEPEdtE 8kNGoURJY7JZhTn5/9u3/cEUSTo5SaNvzfoxNV3RgmXU/LEpwvh/wFrf/Dk7wi28 rWmNJbHOJ9K5xLDLBEJd2ZW12FmMo/GSk5X/K6Mn2sG12G/XlWMSYEYUovdLfKRb 9C9oI7rQ5l3aoXQ61e3knSskfpKp4RMj8vQu6zCy6VgtfKiTOf7fn/wQr9V/KMzi JULpGZgeVTdKa3p46rO/An0xgB75VkrrjX8HctMIsbfDSNzyxTRHK6mnH4PUyjVU dB5H5CLk8is+qa88SKod1h+7n1sCPZ+NgIeRGTR0tPZfTgrb2gOqYtLAVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOKF9a8OWTMJU+D0MOFP41/7kYGMB8GA1UdIwQY MBaAFO+UvMvUwuD/j3qrBF4UoxHzsvn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzVTOHk5VEM0UC1QZXFzRVhoU2pFZk95LWY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iZWMyNTMtOWMyOS00NzhjLTk3MTEt Y2I2M2Q2ZmJiZmM3LzEvNzVTOHk5VEM0UC1QZXFzRVhoU2pFZk95LWY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iZWMyNTMtOWMyOS00NzhjLTk3MTEtY2I2M2Q2ZmJiZmM3 LzEvNzVTOHk5VEM0UC1QZXFzRVhoU2pFZk95LWY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6psyXj9 sPHRbet7KrPwAebhzFGxhwxerDTA1VIPQOXcv6SWtL1Vypk0OonzGNiT7abKx6KO o4lSDhdc8GBieqKPcOPmJN/pXYIZMk0XXoi6tKPeJDHNcX7CfEs50N7x31NJlY6v xYRUZbtVAQBlANTJnsNAm+YjAm8MtS4fz9UxdAsL5sWPjtyX724FXa7VbKGiLDWA cH3mSaF9yWfJNQVvzqJlF5XjkIz4nuz0Sq7R7mIxIZcw51ehMSObrTmO5MvPl1qv CULhI+l7/MiCgga7035fNVzKDiYudGOhn23XLzmDzOQBM4p9yxhIFGkXauD/12OM cEP2soGoprQqgg== -----END CERTIFICATE-----Generated at Wed Jan 21 13:36:11 2026 by rpki-client