This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft File: 77RcySOXjBokve6WzHs683OG0qg.mft (raw, json) Hash identifier: g4h1aOq5v7VKRjPNuMZbxy23oMbAwJs027VjAV65ceI= Subject key identifier: BA:BC:6E:90:B9:7F:AE:EC:17:89:26:3A:5D:E5:D4:04:8A:69:01:AC Authority key identifier: EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8 Certificate issuer: /CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8 Certificate serial: 019B40C86319176D3AFF8231AFE05A539312 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft Manifest number: 0F2C Signing time: Sun 21 Dec 2025 12:00:32 +0000 Manifest this update: Sun 21 Dec 2025 12:00:32 +0000 Manifest next update: Mon 22 Dec 2025 12:00:32 +0000 Files and hashes: 1: 77RcySOXjBokve6WzHs683OG0qg.crl (hash: asj/M8k9L/lBq9Gh+3yOJJrgUHade7Gou7jc4Y4IqCQ=) 2: ONW_HHb2ZjsySF4n5zNLufP_Ugo.roa (hash: Fs9suOzCDzlX3MVkt67omPbuhLWfHekY4xcrsMfgW7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:63:19:17:6d:3a:ff:82:31:af:e0:5a:53:93:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8 Validity Not Before: Dec 21 12:00:32 2025 GMT Not After : Dec 22 12:00:32 2025 GMT Subject: CN=babc6e90b97faeec1789263a5de5d4048a6901ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:c0:1f:da:fc:f1:51:2e:61:09:f2:b7:e5:0a: 75:dc:87:7e:1b:03:40:aa:49:06:3a:72:57:e1:00: a3:78:f7:83:22:eb:f4:b6:bd:9c:8b:3d:25:48:38: 8f:68:97:c4:40:f8:d1:7b:68:3c:f6:d6:fa:e5:30: 8d:97:2b:cd:4d:07:1d:1b:8d:f2:cc:b7:18:e0:b7: 11:c5:7b:8f:ad:a4:fb:47:75:13:13:fc:6c:70:ce: 23:97:e7:69:ec:c3:18:7d:74:bd:09:49:59:81:29: 86:25:39:a4:f5:1e:a8:40:6e:e0:36:d9:01:8b:df: e6:0a:5a:b9:79:88:ce:a6:a0:6e:72:75:e0:ab:ad: a9:4f:0e:b1:25:0c:0b:8c:2b:fb:ba:b4:e8:19:e4: 73:a0:b0:f0:be:b7:50:89:fd:2a:c5:d2:7c:d2:80: 7f:cc:87:59:4f:e3:69:b8:ea:34:9c:7e:3e:6e:5c: ab:d4:ea:99:53:b3:53:a5:46:8c:85:e0:59:18:a1: ed:9a:30:0f:35:15:3a:41:a6:75:21:5e:7e:74:d5: 18:c4:1c:cf:de:b8:11:81:16:d3:c5:41:9b:3d:5a: 7a:11:aa:3e:a9:de:01:94:95:a7:10:8a:0a:74:68: 1f:af:72:05:df:c0:f0:fa:3b:28:b1:06:d8:20:9b: 60:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BC:6E:90:B9:7F:AE:EC:17:89:26:3A:5D:E5:D4:04:8A:69:01:AC X509v3 Authority Key Identifier: keyid:EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:20:c3:45:28:8e:6c:7b:5d:22:99:69:9c:b4:e5:7c:99:12: 19:e2:a8:4d:35:e7:f3:52:a4:55:0e:bd:f0:4e:59:d9:f4:85: ab:45:e6:6a:33:12:43:ce:98:f6:07:63:55:eb:42:cb:f7:29: c8:62:02:d8:8b:2e:5d:4d:39:a0:4e:e8:0e:c3:98:32:cc:3c: 41:eb:47:1a:f5:3c:f8:0c:a9:92:c8:5f:15:db:77:8f:20:72: 89:bb:cf:00:32:4a:cc:7e:a3:2a:75:54:8f:e9:9e:15:84:e2: d5:25:1e:40:ac:82:f1:c2:a3:95:a0:7d:22:65:ce:73:d1:7a: 29:da:d3:56:68:db:17:00:69:c8:75:81:f7:60:69:cf:57:f8: 39:1b:b7:f9:a8:1e:b0:70:d1:c6:f9:4b:98:b4:a0:ac:3a:71: 95:30:8b:76:74:30:c8:84:17:71:10:d8:a5:bc:d3:51:04:99: 1c:5a:6b:0f:8c:7b:72:aa:5c:a8:28:3e:b3:80:33:68:a1:34: a3:13:2b:e3:dc:19:69:48:ca:37:b1:5a:8e:09:e8:71:b3:c5: 00:49:96:9c:c7:07:8b:2a:32:8a:e4:60:65:e1:27:98:30:5d: d6:b6:69:f0:3b:36:76:a2:a7:4f:fa:0e:1b:9d:64:79:41:42: 53:4a:bb:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyGMZF206/4Ixr+BaU5MSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYjQ1Y2M5MjM5NzhjMWEyNGJkZWU5NmNjN2IzYWYzNzM4 NmQyYTgwHhcNMjUxMjIxMTIwMDMyWhcNMjUxMjIyMTIwMDMyWjAzMTEwLwYDVQQD EyhiYWJjNmU5MGI5N2ZhZWVjMTc4OTI2M2E1ZGU1ZDQwNDhhNjkwMWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+sAf2vzxUS5hCfK35Qp13Id+GwNA qkkGOnJX4QCjePeDIuv0tr2ciz0lSDiPaJfEQPjRe2g89tb65TCNlyvNTQcdG43y zLcY4LcRxXuPraT7R3UTE/xscM4jl+dp7MMYfXS9CUlZgSmGJTmk9R6oQG7gNtkB i9/mClq5eYjOpqBucnXgq62pTw6xJQwLjCv7urToGeRzoLDwvrdQif0qxdJ80oB/ zIdZT+NpuOo0nH4+blyr1OqZU7NTpUaMheBZGKHtmjAPNRU6QaZ1IV5+dNUYxBzP 3rgRgRbTxUGbPVp6Eao+qd4BlJWnEIoKdGgfr3IF38Dw+jsosQbYIJtgsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLq8bpC5f67sF4kmOl3l1ASKaQGsMB8GA1UdIwQY MBaAFO+0XMkjl4waJL3ulsx7OvNzhtKoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzdSY3lTT1hqQm9rdmU2V3pIczY4M09HMHFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hYWMwMTAtNWVmMC00ODQ0LWIyMzMt NDQ1N2ViZWE1YTQ1LzEvNzdSY3lTT1hqQm9rdmU2V3pIczY4M09HMHFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9hYWMwMTAtNWVmMC00ODQ0LWIyMzMtNDQ1N2ViZWE1YTQ1 LzEvNzdSY3lTT1hqQm9rdmU2V3pIczY4M09HMHFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApiDDRSiO bHtdIplpnLTlfJkSGeKoTTXn81KkVQ698E5Z2fSFq0XmajMSQ86Y9gdjVetCy/cp yGIC2IsuXU05oE7oDsOYMsw8QetHGvU8+AypkshfFdt3jyByibvPADJKzH6jKnVU j+meFYTi1SUeQKyC8cKjlaB9ImXOc9F6KdrTVmjbFwBpyHWB92Bpz1f4ORu3+age sHDRxvlLmLSgrDpxlTCLdnQwyIQXcRDYpbzTUQSZHFprD4x7cqpcqCg+s4AzaKE0 oxMr49wZaUjKN7FajgnocbPFAEmWnMcHiyoyiuRgZeEnmDBd1rZp8Ds2dqKnT/oO G51keUFCU0q7Rw== -----END CERTIFICATE-----Generated at Sun Dec 21 15:47:01 2025 by rpki-client