This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft File: k0UD3V9q0KYOe0A6WmQq3kYZljw.mft (raw, json) Hash identifier: ZQKyHTP7OpfcKfU4cJdDu7tVU0SDuHldDHlW7eLgRZc= Subject key identifier: 5D:DE:BC:55:E8:CD:25:DB:AD:6B:BA:5D:00:27:DE:92:CE:7A:E1:A5 Authority key identifier: 93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C Certificate issuer: /CN=934503dd5f6ad0a60e7b403a5a642ade4619963c Certificate serial: 019B7F70CC5FEBB8A7E483FCF34D62D11768 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft Manifest number: 12A9 Signing time: Fri 02 Jan 2026 16:00:57 +0000 Manifest this update: Fri 02 Jan 2026 16:00:57 +0000 Manifest next update: Sat 03 Jan 2026 16:00:57 +0000 Files and hashes: 1: k0UD3V9q0KYOe0A6WmQq3kYZljw.crl (hash: n0VKBTRKfAY23s/tYC2eFFbszrKtKyWYfCiA/VZxQAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:70:cc:5f:eb:b8:a7:e4:83:fc:f3:4d:62:d1:17:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934503dd5f6ad0a60e7b403a5a642ade4619963c Validity Not Before: Jan 2 16:00:57 2026 GMT Not After : Jan 3 16:00:57 2026 GMT Subject: CN=5ddebc55e8cd25dbad6bba5d0027de92ce7ae1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:02:60:94:99:58:75:03:b1:58:ec:ce:d4:77: e2:4b:2a:2e:2e:da:a8:14:c9:b4:35:03:b2:93:f9: ae:08:62:8a:73:2a:e3:de:eb:7c:90:c0:27:fd:ef: 3c:3f:17:39:1e:fb:2f:f4:6a:96:00:41:90:27:02: 47:8d:b0:be:7a:d0:c7:9b:f0:de:83:bb:2b:fc:bc: 63:be:b8:52:34:bc:9c:13:5a:5a:75:3d:85:98:d3: e8:23:47:52:27:12:f8:d4:9d:54:7e:8f:76:07:b2: fc:54:9e:d5:50:8c:af:b6:1e:61:7f:b5:01:9c:d9: af:e6:85:bb:34:ea:e0:51:56:42:b4:01:8a:b7:7f: d3:8d:a4:6f:b4:32:3b:a4:70:8a:6f:ab:9f:65:87: 20:a9:7a:cc:48:08:96:61:d4:e5:7a:86:95:41:d5: 06:8c:30:d8:ff:6c:7c:27:07:05:61:c8:bb:cc:aa: 39:0f:cf:59:7b:61:28:3c:07:0b:24:6c:f2:48:37: c0:87:c8:a3:95:3a:02:f0:f8:e9:d3:7d:b3:95:86: 29:f0:bd:7a:13:f5:6b:6e:bc:b8:a1:55:fb:d7:3e: 45:24:6a:7a:44:ba:bc:41:3b:dd:22:f9:c0:37:08: fb:e7:6f:e0:c4:f8:34:e7:40:e8:1a:23:2c:91:37: 88:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DE:BC:55:E8:CD:25:DB:AD:6B:BA:5D:00:27:DE:92:CE:7A:E1:A5 X509v3 Authority Key Identifier: keyid:93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8f:e6:6e:e8:b1:56:18:6a:be:75:c1:7c:d4:1a:1e:7b:23: a7:d9:73:1d:45:be:13:5f:c5:09:fb:98:a0:dd:26:41:7b:fa: 45:db:45:9e:ad:55:9b:ff:6e:cd:98:c4:e2:a0:e7:af:9a:a9: 39:f7:da:a6:6d:0e:21:f1:8f:21:9f:e9:e4:08:fd:4c:21:26: 4f:ef:d7:d9:93:86:8b:2d:39:71:c9:f3:55:c1:cd:53:83:90: b7:88:58:df:ee:4f:d6:77:a0:f9:0b:e8:cd:f3:8e:32:81:9b: 8a:98:b1:f9:52:dd:fa:a2:36:ed:63:68:58:8f:55:56:7b:7e: 0f:f9:07:b6:5a:e7:ce:41:a7:3f:b0:c2:ea:15:d1:39:fc:c5: 4e:2d:9c:27:0e:9f:4c:33:ee:27:e6:e8:63:a6:21:83:2c:95: 6c:12:ad:55:1a:b3:96:23:24:bc:2c:67:c3:0d:4b:0c:18:e3: 1a:d2:df:5c:38:e0:5a:2a:41:7d:3d:0f:c0:e8:c0:78:8d:5f: 1a:37:59:7f:4c:32:df:0b:82:a8:23:ba:14:5c:b5:16:0a:a0: eb:44:f6:87:67:1b:fd:13:7d:17:01:2b:c6:b3:8b:c2:36:fa: 35:fd:df:ca:e0:03:9e:79:88:d8:6a:54:e8:fb:a7:a2:7c:fa: aa:74:d1:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/cMxf67in5IP8801i0RdoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNDUwM2RkNWY2YWQwYTYwZTdiNDAzYTVhNjQyYWRlNDYx OTk2M2MwHhcNMjYwMTAyMTYwMDU3WhcNMjYwMTAzMTYwMDU3WjAzMTEwLwYDVQQD Eyg1ZGRlYmM1NWU4Y2QyNWRiYWQ2YmJhNWQwMDI3ZGU5MmNlN2FlMWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+AJglJlYdQOxWOzO1HfiSyouLtqo FMm0NQOyk/muCGKKcyrj3ut8kMAn/e88Pxc5Hvsv9GqWAEGQJwJHjbC+etDHm/De g7sr/LxjvrhSNLycE1padT2FmNPoI0dSJxL41J1Ufo92B7L8VJ7VUIyvth5hf7UB nNmv5oW7NOrgUVZCtAGKt3/TjaRvtDI7pHCKb6ufZYcgqXrMSAiWYdTleoaVQdUG jDDY/2x8JwcFYci7zKo5D89Ze2EoPAcLJGzySDfAh8ijlToC8Pjp032zlYYp8L16 E/Vrbry4oVX71z5FJGp6RLq8QTvdIvnANwj752/gxPg050DoGiMskTeINwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3evFXozSXbrWu6XQAn3pLOeuGlMB8GA1UdIwQY MBaAFJNFA91fatCmDntAOlpkKt5GGZY8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazBVRDNWOXEwS1lPZTBBNldtUXEza1labGp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xMTc0MmEtOGNkMC00MjM3LWIyNmQt YzZlYTA4ODc1NzM3LzEvazBVRDNWOXEwS1lPZTBBNldtUXEza1labGp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xMTc0MmEtOGNkMC00MjM3LWIyNmQtYzZlYTA4ODc1NzM3 LzEvazBVRDNWOXEwS1lPZTBBNldtUXEza1labGp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPI/mbuix VhhqvnXBfNQaHnsjp9lzHUW+E1/FCfuYoN0mQXv6RdtFnq1Vm/9uzZjE4qDnr5qp Offapm0OIfGPIZ/p5Aj9TCEmT+/X2ZOGiy05ccnzVcHNU4OQt4hY3+5P1neg+Qvo zfOOMoGbipix+VLd+qI27WNoWI9VVnt+D/kHtlrnzkGnP7DC6hXROfzFTi2cJw6f TDPuJ+boY6YhgyyVbBKtVRqzliMkvCxnww1LDBjjGtLfXDjgWipBfT0PwOjAeI1f GjdZf0wy3wuCqCO6FFy1Fgqg60T2h2cb/RN9FwErxrOLwjb6Nf3fyuADnnmI2GpU 6Punonz6qnTR/w== -----END CERTIFICATE-----Generated at Fri Jan 2 18:37:43 2026 by rpki-client