This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.mft File: V3M6_ezSmOg9Af9O0hxiwaCuq90.mft (raw, json) Hash identifier: YZcAvQudbClqmaOR/UWpJzOhylqONYYCCuPrTXE4USQ= Subject key identifier: 9D:79:3A:FA:6D:03:33:F8:F4:62:23:30:C7:61:00:7C:59:09:CF:DE Authority key identifier: 57:73:3A:FD:EC:D2:98:E8:3D:01:FF:4E:D2:1C:62:C1:A0:AE:AB:DD Certificate issuer: /CN=57733afdecd298e83d01ff4ed21c62c1a0aeabdd Certificate serial: 019BB0CB3A370D33C96EB8FFB4123EE77E71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3M6_ezSmOg9Af9O0hxiwaCuq90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.mft Manifest number: 17C2 Signing time: Mon 12 Jan 2026 06:01:07 +0000 Manifest this update: Mon 12 Jan 2026 06:01:07 +0000 Manifest next update: Tue 13 Jan 2026 06:01:07 +0000 Files and hashes: 1: V3M6_ezSmOg9Af9O0hxiwaCuq90.crl (hash: Ww2PefzGvBitB9nI4FTrH92CcpT06xdsRXJniWaA93Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.crl rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.mft rsync://rpki.ripe.net/repository/DEFAULT/V3M6_ezSmOg9Af9O0hxiwaCuq90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 06:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:cb:3a:37:0d:33:c9:6e:b8:ff:b4:12:3e:e7:7e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57733afdecd298e83d01ff4ed21c62c1a0aeabdd Validity Not Before: Jan 12 06:01:07 2026 GMT Not After : Jan 13 06:01:07 2026 GMT Subject: CN=9d793afa6d0333f8f4622330c761007c5909cfde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:30:64:d7:4b:59:12:46:43:93:ba:71:cd:df: a2:f1:d2:77:cd:d3:e2:e5:ac:17:81:53:e5:e7:26: d5:0f:9f:8d:ab:c4:40:ce:2c:50:02:49:bb:30:82: 74:bd:a5:29:28:98:b4:41:e7:cb:46:6d:4e:76:a3: a8:1e:de:39:49:ab:3d:54:b0:14:97:85:be:30:b2: d3:4c:1d:5d:ba:81:11:67:ed:b3:30:6a:37:f9:f9: 2e:0d:5f:85:2c:74:d4:b2:e3:b1:08:23:2d:f3:8f: 78:4b:44:10:d6:74:91:78:2d:72:11:42:fd:0a:a1: 89:66:08:ef:80:f3:40:6e:fc:aa:1e:7a:5c:47:3d: b5:ed:71:15:98:f4:32:c2:3a:41:d8:57:00:26:95: 7b:80:e4:64:25:0f:e0:7b:1c:b6:c9:f0:72:1a:50: 52:8d:70:54:69:5e:01:6f:90:ae:e8:40:25:c3:1d: 52:b4:3b:a6:eb:80:ac:e8:be:bc:c1:3f:3a:ad:28: 20:ba:49:38:3e:e4:1f:53:ea:12:2a:9e:6c:78:4f: e3:2b:57:02:5c:ce:30:09:e5:37:71:06:93:ce:92: 77:e6:53:5d:11:74:3e:39:10:6d:3a:e8:ed:47:64: b0:16:c5:37:7d:c9:9d:87:f7:d2:3f:eb:1d:d3:f0: 5a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:79:3A:FA:6D:03:33:F8:F4:62:23:30:C7:61:00:7C:59:09:CF:DE X509v3 Authority Key Identifier: keyid:57:73:3A:FD:EC:D2:98:E8:3D:01:FF:4E:D2:1C:62:C1:A0:AE:AB:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3M6_ezSmOg9Af9O0hxiwaCuq90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3eba7d-fc82-4b0a-ac3f-2c49e15ef64b/1/V3M6_ezSmOg9Af9O0hxiwaCuq90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:81:0d:df:54:85:2d:e5:c1:cb:e0:b4:36:4f:ec:ed:08:16: d8:be:d2:a0:29:4c:8b:3f:dc:e6:d1:14:0c:dd:4d:8d:7e:f3: 75:cd:af:9e:ec:5f:65:ca:fe:87:81:a9:eb:fc:ba:37:d1:87: 3e:1b:b4:73:6a:7e:7c:a3:97:35:21:c0:db:86:17:d3:88:e7: 56:02:ef:72:b7:a1:da:2a:2c:1e:e9:d4:da:c2:d7:95:96:90: d4:48:11:e4:d5:a8:e8:54:af:ca:78:58:f2:72:e6:57:bd:88: ad:31:c7:ff:60:19:8e:4f:00:50:db:ab:21:2b:a3:7a:ac:8c: 4b:44:88:d2:d1:6e:0b:1f:a5:e3:66:f0:bb:e9:6a:61:41:98: 4e:bb:69:db:e1:b3:72:34:11:4c:3c:e2:1a:89:65:37:e9:82: 1e:fe:80:2a:88:9e:ae:4e:9c:a6:80:ac:b0:77:00:07:df:bb: b4:f2:cf:8d:2e:02:d1:53:7b:78:38:2f:36:c6:4f:bf:e6:37: 93:0d:a0:f2:94:b5:82:14:6d:b0:bc:df:5e:6f:4d:fc:a1:f2: b5:53:ae:ef:b4:d6:c7:84:dc:f9:57:7d:82:d0:41:e6:46:f4: c0:92:93:48:f2:b3:a2:bc:ca:e4:18:e4:74:35:96:e3:4a:dd: b6:49:0b:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwyzo3DTPJbrj/tBI+535xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NzMzYWZkZWNkMjk4ZTgzZDAxZmY0ZWQyMWM2MmMxYTBh ZWFiZGQwHhcNMjYwMTEyMDYwMTA3WhcNMjYwMTEzMDYwMTA3WjAzMTEwLwYDVQQD Eyg5ZDc5M2FmYTZkMDMzM2Y4ZjQ2MjIzMzBjNzYxMDA3YzU5MDljZmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjBk10tZEkZDk7pxzd+i8dJ3zdPi 5awXgVPl5ybVD5+Nq8RAzixQAkm7MIJ0vaUpKJi0QefLRm1OdqOoHt45Sas9VLAU l4W+MLLTTB1duoERZ+2zMGo3+fkuDV+FLHTUsuOxCCMt8494S0QQ1nSReC1yEUL9 CqGJZgjvgPNAbvyqHnpcRz217XEVmPQywjpB2FcAJpV7gORkJQ/gexy2yfByGlBS jXBUaV4Bb5Cu6EAlwx1StDum64Cs6L68wT86rSggukk4PuQfU+oSKp5seE/jK1cC XM4wCeU3cQaTzpJ35lNdEXQ+ORBtOujtR2SwFsU3fcmdh/fSP+sd0/BabQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ15OvptAzP49GIjMMdhAHxZCc/eMB8GA1UdIwQY MBaAFFdzOv3s0pjoPQH/TtIcYsGgrqvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjNNNl9lelNtT2c5QWY5TzBoeGl3YUN1cTkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8zZWJhN2QtZmM4Mi00YjBhLWFjM2Yt MmM0OWUxNWVmNjRiLzEvVjNNNl9lelNtT2c5QWY5TzBoeGl3YUN1cTkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8zZWJhN2QtZmM4Mi00YjBhLWFjM2YtMmM0OWUxNWVmNjRi LzEvVjNNNl9lelNtT2c5QWY5TzBoeGl3YUN1cTkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIEN31SF LeXBy+C0Nk/s7QgW2L7SoClMiz/c5tEUDN1NjX7zdc2vnuxfZcr+h4Gp6/y6N9GH Phu0c2p+fKOXNSHA24YX04jnVgLvcreh2iosHunU2sLXlZaQ1EgR5NWo6FSvynhY 8nLmV72IrTHH/2AZjk8AUNurISujeqyMS0SI0tFuCx+l42bwu+lqYUGYTrtp2+Gz cjQRTDziGollN+mCHv6AKoierk6cpoCssHcAB9+7tPLPjS4C0VN7eDgvNsZPv+Y3 kw2g8pS1ghRtsLzfXm9N/KHytVOu77TWx4Tc+Vd9gtBB5kb0wJKTSPKzorzK5Bjk dDWW40rdtkkLKA== -----END CERTIFICATE-----Generated at Mon Jan 12 15:47:36 2026 by rpki-client