This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft File: 76vFwTMKPwsDGbsWxENIzRuBnkQ.mft (raw, json) Hash identifier: X9DaqNDDvhe/8J4JMZPe2Xczi4ax5duhrp+EMxHXJmo= Subject key identifier: D8:E7:1A:65:27:C6:0A:71:E3:26:FA:79:87:D3:64:AC:A7:37:C5:FF Authority key identifier: EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44 Certificate issuer: /CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44 Certificate serial: 019BFD65AFFCBD0FE9D3AF2E130F04EDBF1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft Manifest number: 04E0 Signing time: Tue 27 Jan 2026 03:00:58 +0000 Manifest this update: Tue 27 Jan 2026 03:00:58 +0000 Manifest next update: Wed 28 Jan 2026 03:00:58 +0000 Files and hashes: 1: 76vFwTMKPwsDGbsWxENIzRuBnkQ.crl (hash: cfQwWp8AVDvpMSLDnRUInXqMTZp8g/hHLhVnH5XDDwo=) 2: GAUUFbrMaCi8twL5FhYDaZpEPLs.roa (hash: +xCgImVqcUMnpmtGGiJK28GMNwusbZ27Pk5kQ0ngYBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 03:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:af:fc:bd:0f:e9:d3:af:2e:13:0f:04:ed:bf:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44 Validity Not Before: Jan 27 03:00:58 2026 GMT Not After : Jan 28 03:00:58 2026 GMT Subject: CN=d8e71a6527c60a71e326fa7987d364aca737c5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b5:d5:70:5e:f6:35:12:03:d0:d1:50:7b:cc: 5c:41:3e:bd:2a:0b:e1:50:3e:2b:6e:56:ed:43:6b: 86:ce:d8:b1:09:a5:1e:3c:74:ef:18:55:df:4e:76: 45:2d:0a:39:cf:50:c0:a7:2f:61:03:72:dd:c4:7e: 40:73:7e:fe:5f:57:78:2d:00:4e:84:96:6b:93:fb: 99:75:04:cd:65:bb:b8:fd:7d:41:f3:8c:bd:ee:de: b4:ba:51:c4:30:01:d2:42:a3:b2:e7:d2:e8:fd:04: 4b:99:f2:64:d0:da:49:58:9c:7b:7b:da:44:c2:72: 19:5e:f5:55:c1:b7:0b:25:94:da:ad:ba:b5:97:fd: 1a:15:8b:e4:35:ad:dd:24:2b:39:06:a2:f7:d1:1e: 1b:4c:0d:f0:a7:03:bf:3e:12:3f:44:bf:ed:9f:d0: 2e:49:0d:e9:47:d0:b1:0e:ea:21:77:bf:f0:59:bb: f8:42:47:7b:14:32:8a:51:94:55:85:ae:51:1b:a1: 4b:04:72:24:34:e9:0b:9a:f4:36:11:87:2e:e6:29: a2:d3:af:39:f5:ea:63:17:13:51:bf:80:c4:19:5a: f4:b4:c2:16:55:17:90:ce:05:44:11:35:4e:fd:5a: b9:e1:4e:b3:db:e8:0f:36:c0:09:bc:e2:76:38:c2: 0c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E7:1A:65:27:C6:0A:71:E3:26:FA:79:87:D3:64:AC:A7:37:C5:FF X509v3 Authority Key Identifier: keyid:EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ea:62:97:c5:1f:90:b2:a9:38:fe:85:a0:4c:f1:2c:cb:6c: f7:ab:66:35:3b:d7:c5:04:a5:af:32:12:bb:35:b7:01:7e:d5: e3:0d:34:3b:fb:ee:da:08:dc:81:ea:56:00:9d:85:6f:a6:84: 25:18:22:cd:8e:9a:f1:47:da:f9:19:db:5d:bb:9c:58:cc:0f: 5d:20:56:99:b4:ef:b5:e9:d8:4c:f9:bd:44:1a:31:47:3d:e7: b8:e6:6a:0d:6c:41:69:09:87:b1:0b:a8:36:d9:cf:6b:dd:85: 63:01:4d:99:2e:01:0b:66:13:5e:39:65:a0:04:4a:41:0a:bb: 44:7a:e8:ce:cd:8f:1e:97:54:1f:d2:52:e6:1a:13:c8:07:56: c4:06:65:04:08:d0:46:c9:50:ee:f6:a1:8d:1e:9d:62:73:ee: 35:9f:71:56:94:18:f4:3d:09:b5:2d:ea:12:64:1d:2c:c0:dd: bc:cc:45:61:2b:d5:15:24:8f:5f:b3:1b:20:49:78:80:09:8d: b3:81:01:f3:3c:2a:aa:87:e0:78:1d:fb:d2:c9:bb:4b:a8:be: 55:39:a1:82:40:ad:c8:d7:09:16:2b:ee:87:98:ea:65:e2:7a: bb:ff:0f:bc:dd:f2:96:57:44:2e:a9:6c:71:73:db:08:0b:2b: 01:fd:f9:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9Za/8vQ/p068uEw8E7b8fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYWJjNWMxMzMwYTNmMGIwMzE5YmIxNmM0NDM0OGNkMWI4 MTllNDQwHhcNMjYwMTI3MDMwMDU4WhcNMjYwMTI4MDMwMDU4WjAzMTEwLwYDVQQD EyhkOGU3MWE2NTI3YzYwYTcxZTMyNmZhNzk4N2QzNjRhY2E3MzdjNWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbXVcF72NRID0NFQe8xcQT69Kgvh UD4rblbtQ2uGztixCaUePHTvGFXfTnZFLQo5z1DApy9hA3LdxH5Ac37+X1d4LQBO hJZrk/uZdQTNZbu4/X1B84y97t60ulHEMAHSQqOy59Lo/QRLmfJk0NpJWJx7e9pE wnIZXvVVwbcLJZTarbq1l/0aFYvkNa3dJCs5BqL30R4bTA3wpwO/PhI/RL/tn9Au SQ3pR9CxDuohd7/wWbv4Qkd7FDKKUZRVha5RG6FLBHIkNOkLmvQ2EYcu5imi0685 9epjFxNRv4DEGVr0tMIWVReQzgVEETVO/Vq54U6z2+gPNsAJvOJ2OMIMhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjnGmUnxgpx4yb6eYfTZKynN8X/MB8GA1UdIwQY MBaAFO+rxcEzCj8LAxm7FsRDSM0bgZ5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZ2RndUTUtQd3NER2JzV3hFTkl6UnVCbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9iZTM4ZGMtZGExNS00MDQ4LTg4NTEt ZGUxZGNhMzc5NzM0LzEvNzZ2RndUTUtQd3NER2JzV3hFTkl6UnVCbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9iZTM4ZGMtZGExNS00MDQ4LTg4NTEtZGUxZGNhMzc5NzM0 LzEvNzZ2RndUTUtQd3NER2JzV3hFTkl6UnVCbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+pil8Uf kLKpOP6FoEzxLMts96tmNTvXxQSlrzISuzW3AX7V4w00O/vu2gjcgepWAJ2Fb6aE JRgizY6a8Ufa+RnbXbucWMwPXSBWmbTvtenYTPm9RBoxRz3nuOZqDWxBaQmHsQuo NtnPa92FYwFNmS4BC2YTXjlloARKQQq7RHrozs2PHpdUH9JS5hoTyAdWxAZlBAjQ RslQ7vahjR6dYnPuNZ9xVpQY9D0JtS3qEmQdLMDdvMxFYSvVFSSPX7MbIEl4gAmN s4EB8zwqqofgeB370sm7S6i+VTmhgkCtyNcJFivuh5jqZeJ6u/8PvN3ylldELqls cXPbCAsrAf35eA== -----END CERTIFICATE-----Generated at Tue Jan 27 11:52:47 2026 by rpki-client