This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft File: 76CXauJceI-r_CqFN4HV3_DKVg8.mft (raw, json) Hash identifier: yLTz7iCVU9XI+Vy833NgBgEbT2mI4PNg46MNm3jgvhw= Subject key identifier: EF:8B:B9:39:8D:68:B1:B3:CF:05:71:11:2B:3B:3D:6B:E1:98:A1:DF Authority key identifier: EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F Certificate issuer: /CN=efa0976ae25c788fabfc2a853781d5dff0ca560f Certificate serial: 019B2D0C71C7EBA612DB0EDA568DCC12EDB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft Manifest number: 0DD2 Signing time: Wed 17 Dec 2025 16:02:28 +0000 Manifest this update: Wed 17 Dec 2025 16:02:28 +0000 Manifest next update: Thu 18 Dec 2025 16:02:28 +0000 Files and hashes: 1: 76CXauJceI-r_CqFN4HV3_DKVg8.crl (hash: 6E8EdWiX4KFYRJCrwPJMDXe+rEtzJZkAVOPMLys8mug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:71:c7:eb:a6:12:db:0e:da:56:8d:cc:12:ed:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efa0976ae25c788fabfc2a853781d5dff0ca560f Validity Not Before: Dec 17 16:02:28 2025 GMT Not After : Dec 18 16:02:28 2025 GMT Subject: CN=ef8bb9398d68b1b3cf0571112b3b3d6be198a1df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:28:92:4b:0c:62:2f:6d:db:9c:f3:5a:c2:c8: 85:d7:55:0c:b2:6d:82:32:9e:69:10:29:90:e4:c3: 7d:4a:7b:d8:89:53:10:af:13:9d:d1:2b:42:db:1d: 7a:2a:ca:2b:6c:07:00:bb:dc:e7:f0:82:8a:80:72: 96:f9:cc:99:f2:f0:6b:95:d2:7b:84:68:96:86:50: e2:d6:36:b0:0d:66:6e:68:4a:28:98:18:55:7d:9b: b0:98:4a:47:f6:7e:d6:fb:ee:8c:14:2e:7a:4b:20: 53:b1:f3:9c:e4:70:cb:18:e3:80:bd:58:31:cc:25: 70:8d:c2:48:41:92:b9:5e:1d:e9:e7:4b:7a:0e:ce: 3a:e0:62:aa:73:81:cb:d6:f1:1a:b2:25:b7:a8:f2: 87:ec:63:60:cd:f5:c2:40:74:61:c3:ad:eb:88:e1: d3:fb:04:8c:34:b3:50:d3:31:e1:f4:fc:61:fc:4a: ba:60:07:97:e5:48:db:ef:af:b0:04:4a:5d:1f:2d: d3:51:d5:92:66:91:46:7a:41:b7:6c:2f:b4:73:75: 7c:81:fa:7e:4e:94:72:30:da:62:d8:89:3d:a7:f4: 9d:b2:af:d8:a4:5a:1e:ce:c6:e3:65:34:d2:31:a1: 30:7d:06:62:a4:c7:aa:9d:4b:c3:68:a0:6b:14:56: 83:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8B:B9:39:8D:68:B1:B3:CF:05:71:11:2B:3B:3D:6B:E1:98:A1:DF X509v3 Authority Key Identifier: keyid:EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:7b:c3:08:52:33:83:d0:9b:9d:95:2c:40:48:42:f0:c8:eb: 1f:d0:b6:5c:92:bf:9a:19:b2:ea:c1:9b:d9:47:b3:9e:4d:7e: fe:8d:ba:05:1c:f3:9b:6d:85:9f:1c:2e:ca:72:43:ca:4b:c2: 94:c1:37:be:da:e4:1f:35:19:9f:08:82:db:9b:2e:86:f7:59: 31:52:b7:63:f9:46:8e:d2:27:e3:b4:58:6c:7b:d6:70:70:46: c9:07:22:6d:f2:ff:67:8b:8b:27:ac:f0:c9:c0:d6:85:cb:2a: 12:99:c2:ee:80:d1:bf:41:5b:42:38:1c:0c:97:59:3b:b0:4d: c8:d7:0f:98:a9:ce:ed:d5:42:25:24:19:83:dd:fb:e8:70:6d: 47:64:74:b8:73:d8:45:ce:bc:28:b0:80:f8:c3:88:7d:d8:13: 7c:83:64:45:36:fd:df:ec:08:8b:ff:0c:32:c2:4a:5d:b3:33: 5b:03:8f:eb:2b:8c:6d:87:ff:31:ef:44:f9:a8:ae:27:13:9e: 6f:37:3b:27:61:6b:d0:ad:0e:52:01:ba:ac:cb:5f:4c:e6:62: 9e:7c:54:8a:26:de:23:90:f1:e3:3b:0a:cb:61:09:7c:83:29: 9c:5d:5d:27:1f:11:b6:a0:ba:89:a2:bd:13:c6:8b:92:14:d1: 55:1a:5c:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDHHH66YS2w7aVo3MEu20MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYTA5NzZhZTI1Yzc4OGZhYmZjMmE4NTM3ODFkNWRmZjBj YTU2MGYwHhcNMjUxMjE3MTYwMjI4WhcNMjUxMjE4MTYwMjI4WjAzMTEwLwYDVQQD EyhlZjhiYjkzOThkNjhiMWIzY2YwNTcxMTEyYjNiM2Q2YmUxOThhMWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yiSSwxiL23bnPNawsiF11UMsm2C Mp5pECmQ5MN9SnvYiVMQrxOd0StC2x16KsorbAcAu9zn8IKKgHKW+cyZ8vBrldJ7 hGiWhlDi1jawDWZuaEoomBhVfZuwmEpH9n7W++6MFC56SyBTsfOc5HDLGOOAvVgx zCVwjcJIQZK5Xh3p50t6Ds464GKqc4HL1vEasiW3qPKH7GNgzfXCQHRhw63riOHT +wSMNLNQ0zHh9Pxh/Eq6YAeX5Ujb76+wBEpdHy3TUdWSZpFGekG3bC+0c3V8gfp+ TpRyMNpi2Ik9p/Sdsq/YpFoezsbjZTTSMaEwfQZipMeqnUvDaKBrFFaDXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+LuTmNaLGzzwVxESs7PWvhmKHfMB8GA1UdIwQY MBaAFO+gl2riXHiPq/wqhTeB1d/wylYPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZDWGF1SmNlSS1yX0NxRk40SFYzX0RLVmc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iMDQ2N2ItZDE2Ni00ZTdiLWFmNWMt ZDE2NTQ5NzVjM2JjLzEvNzZDWGF1SmNlSS1yX0NxRk40SFYzX0RLVmc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9iMDQ2N2ItZDE2Ni00ZTdiLWFmNWMtZDE2NTQ5NzVjM2Jj LzEvNzZDWGF1SmNlSS1yX0NxRk40SFYzX0RLVmc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHvDCFIz g9CbnZUsQEhC8MjrH9C2XJK/mhmy6sGb2Ueznk1+/o26BRzzm22FnxwuynJDykvC lME3vtrkHzUZnwiC25suhvdZMVK3Y/lGjtIn47RYbHvWcHBGyQcibfL/Z4uLJ6zw ycDWhcsqEpnC7oDRv0FbQjgcDJdZO7BNyNcPmKnO7dVCJSQZg9376HBtR2R0uHPY Rc68KLCA+MOIfdgTfINkRTb93+wIi/8MMsJKXbMzWwOP6yuMbYf/Me9E+aiuJxOe bzc7J2Fr0K0OUgG6rMtfTOZinnxUiibeI5Dx4zsKy2EJfIMpnF1dJx8RtqC6iaK9 E8aLkhTRVRpcqA== -----END CERTIFICATE-----Generated at Wed Dec 17 19:01:43 2025 by rpki-client