This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft File: CiINqbbilYVbYn_qYQ4cthZGiUs.mft (raw, json) Hash identifier: CZMGsF00kThlbuCYXQiW5JHoGd8HtRuPICoDWrZvmv0= Subject key identifier: 1C:25:07:16:17:2A:98:BF:0C:81:F0:A4:52:64:0E:5F:CB:6A:A1:7E Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B Certificate issuer: /CN=0a220da9b6e295855b627fea610e1cb61646894b Certificate serial: 019BAE014A7E30359A43A4CAF4B0FD0F09AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft Manifest number: 1343 Signing time: Sun 11 Jan 2026 17:01:18 +0000 Manifest this update: Sun 11 Jan 2026 17:01:18 +0000 Manifest next update: Mon 12 Jan 2026 17:01:18 +0000 Files and hashes: 1: CiINqbbilYVbYn_qYQ4cthZGiUs.crl (hash: 5J11jRlSrWM2C2Y+SogMYFZdA1T3Z0GAqGh3NxNzEg8=) 2: rXLqqCZ5hf5h4ak7-J87ANzm0Nk.roa (hash: mVE+xG0sJPMu7e4f75e+8AtJaA+JDEMEjzG8yFMRLQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 17:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:01:4a:7e:30:35:9a:43:a4:ca:f4:b0:fd:0f:09:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b Validity Not Before: Jan 11 17:01:18 2026 GMT Not After : Jan 12 17:01:18 2026 GMT Subject: CN=1c250716172a98bf0c81f0a452640e5fcb6aa17e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:db:cb:f6:38:d1:17:8f:4f:05:16:eb:b2:6e: 98:36:d9:ed:fa:1f:20:74:08:5c:a5:33:9f:79:ea: da:7f:17:9d:db:24:02:4f:69:88:20:02:c6:62:a4: 29:cf:84:ad:5b:45:ee:44:7e:fb:25:ee:98:ce:bf: 61:43:1b:57:ce:01:8a:f6:a5:e1:fd:0a:72:06:5c: e6:2e:fa:73:90:0d:58:6e:00:2d:3d:9f:1c:7e:60: 3c:b2:3e:64:bf:32:03:e9:2a:33:c6:0f:0c:d0:5a: 95:87:65:4b:ee:76:46:a9:77:07:e4:1c:a1:dc:71: 8a:b9:c8:cc:f5:c5:26:24:4f:d8:a6:ff:2e:32:cd: 1e:26:0e:1c:1b:cd:26:d5:11:b2:39:85:d7:8c:46: 15:d7:d6:d7:b3:96:62:94:d0:50:e0:bd:b6:bf:9d: c9:c3:3e:70:29:99:d0:f5:75:95:c6:cb:6c:5f:4e: f5:d1:b7:89:f5:fc:b1:5c:fe:85:23:d1:04:ff:43: e7:6c:46:93:f8:6c:b3:bc:9f:65:1c:29:29:4e:93: 78:40:67:3d:81:6a:66:00:8b:3a:bd:69:3a:1d:47: 49:eb:9d:e4:79:53:80:ee:17:a2:bb:3c:d4:da:e2: 73:3c:aa:d8:9b:f5:ec:d9:41:4c:48:c8:78:24:60: ec:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:25:07:16:17:2A:98:BF:0C:81:F0:A4:52:64:0E:5F:CB:6A:A1:7E X509v3 Authority Key Identifier: keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:22:77:e3:16:ae:c2:e8:3d:18:39:d0:89:2c:eb:92:bd:ed: 31:13:be:2a:dc:cd:70:47:12:4c:78:09:ac:77:d8:b2:81:f5: ff:3b:a2:a5:28:9f:ee:df:e2:0c:66:d1:46:59:87:9e:fa:dc: 93:da:2a:18:94:62:6f:66:28:6f:de:85:82:68:5b:85:20:31: e5:7e:eb:bc:a9:b1:74:33:54:2a:24:49:22:f9:cd:84:d2:5b: 20:bc:cd:cb:a6:94:6a:c4:77:8b:b5:ea:3b:62:2d:da:be:ac: 77:ee:8a:0c:ed:5e:66:4d:f3:99:a3:7a:c8:e3:1c:5c:cf:7a: 79:18:1a:89:5b:6a:ae:13:9d:12:2a:9f:59:11:28:c7:f7:ab: 5f:a6:cd:c1:20:58:43:ab:f6:59:a0:29:a0:66:f1:79:6d:06: 56:f9:d2:35:81:29:84:5f:69:e3:26:cd:db:2a:94:3b:87:6d: d5:79:a6:53:68:51:53:3f:53:ab:30:85:e3:10:19:98:cd:9f: 78:c0:04:5e:ee:3e:6e:a1:93:13:b0:76:00:12:14:05:0d:19: 99:7b:76:b4:bf:25:9a:2f:9c:b9:26:5d:34:35:43:a6:2a:c3: 1d:d8:17:6f:98:16:97:b2:88:27:b0:47:31:bc:cd:1a:0c:cf: b3:70:d3:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuuAUp+MDWaQ6TK9LD9DwmvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMjIwZGE5YjZlMjk1ODU1YjYyN2ZlYTYxMGUxY2I2MTY0 Njg5NGIwHhcNMjYwMTExMTcwMTE4WhcNMjYwMTEyMTcwMTE4WjAzMTEwLwYDVQQD EygxYzI1MDcxNjE3MmE5OGJmMGM4MWYwYTQ1MjY0MGU1ZmNiNmFhMTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9vL9jjRF49PBRbrsm6YNtnt+h8g dAhcpTOfeerafxed2yQCT2mIIALGYqQpz4StW0XuRH77Je6Yzr9hQxtXzgGK9qXh /QpyBlzmLvpzkA1YbgAtPZ8cfmA8sj5kvzID6Sozxg8M0FqVh2VL7nZGqXcH5Byh 3HGKucjM9cUmJE/Ypv8uMs0eJg4cG80m1RGyOYXXjEYV19bXs5ZilNBQ4L22v53J wz5wKZnQ9XWVxstsX0710beJ9fyxXP6FI9EE/0PnbEaT+GyzvJ9lHCkpTpN4QGc9 gWpmAIs6vWk6HUdJ653keVOA7heiuzzU2uJzPKrYm/Xs2UFMSMh4JGDsxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwlBxYXKpi/DIHwpFJkDl/LaqF+MB8GA1UdIwQY MBaAFAoiDam24pWFW2J/6mEOHLYWRolLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85ODE4MzktOWRmYS00MmQzLWFjYjEt NjIxODgyOGVkODk2LzEvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS85ODE4MzktOWRmYS00MmQzLWFjYjEtNjIxODgyOGVkODk2 LzEvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1CJ34xau wug9GDnQiSzrkr3tMRO+KtzNcEcSTHgJrHfYsoH1/zuipSif7t/iDGbRRlmHnvrc k9oqGJRib2Yob96FgmhbhSAx5X7rvKmxdDNUKiRJIvnNhNJbILzNy6aUasR3i7Xq O2It2r6sd+6KDO1eZk3zmaN6yOMcXM96eRgaiVtqrhOdEiqfWREox/erX6bNwSBY Q6v2WaApoGbxeW0GVvnSNYEphF9p4ybN2yqUO4dt1XmmU2hRUz9TqzCF4xAZmM2f eMAEXu4+bqGTE7B2ABIUBQ0ZmXt2tL8lmi+cuSZdNDVDpirDHdgXb5gWl7KIJ7BH MbzNGgzPs3DTrQ== -----END CERTIFICATE-----Generated at Mon Jan 12 02:56:40 2026 by rpki-client