This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft File: 6Md5F2XIhNCFX-0_-MPycJmpoBo.mft (raw, json) Hash identifier: qGvFUvsLqYIDQNoo83afpTI5Ptc7UaHIY8jM+zpKUp4= Subject key identifier: 0B:76:6F:B1:A3:F3:E9:93:23:3F:36:1C:2B:4A:C7:A4:4D:D5:A1:9C Authority key identifier: E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A Certificate issuer: /CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a Certificate serial: 019B8083155510C5BACF420EB11ACD043122 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft Manifest number: 17A8 Signing time: Fri 02 Jan 2026 21:00:32 +0000 Manifest this update: Fri 02 Jan 2026 21:00:32 +0000 Manifest next update: Sat 03 Jan 2026 21:00:32 +0000 Files and hashes: 1: 6Md5F2XIhNCFX-0_-MPycJmpoBo.crl (hash: KitN4uSoh2nWgDLCyMe34Busyy45N1gfExvUUCEyZDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.crl rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:83:15:55:10:c5:ba:cf:42:0e:b1:1a:cd:04:31:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a Validity Not Before: Jan 2 21:00:32 2026 GMT Not After : Jan 3 21:00:32 2026 GMT Subject: CN=0b766fb1a3f3e993233f361c2b4ac7a44dd5a19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4f:62:60:f1:99:e2:49:0d:e6:5d:22:2a:20: f7:05:ad:a4:01:0f:d0:e6:2d:83:e8:c6:5c:66:5f: c2:33:d7:ef:c6:88:d0:ff:b0:3b:09:8a:a6:21:40: 1f:5d:81:bd:d8:84:9a:24:69:dd:dd:97:80:e1:d3: c2:63:fd:74:a6:d3:53:a7:79:b8:18:60:54:44:8f: c7:aa:71:69:31:e9:04:61:2a:cf:86:5b:e8:44:99: 67:53:59:72:ae:86:58:a3:f6:f7:88:09:ef:69:d9: 16:ce:cd:7f:66:6e:6d:44:17:86:e1:ff:3b:3c:aa: df:19:ce:bb:7c:bb:52:fc:b3:39:43:8d:92:20:6c: d8:77:12:5b:f5:58:96:7b:af:e7:9b:b3:cc:90:fb: 77:21:02:51:f6:f2:1b:49:71:70:32:2c:4c:c5:3f: 48:5e:d7:d6:b2:f7:04:20:38:8d:71:e1:56:cf:a1: 85:38:ab:d2:25:87:98:7b:eb:36:c2:40:83:fd:f3: ab:7e:a7:fc:f5:13:5c:f1:b8:43:2e:d2:35:e2:bc: a5:0c:02:de:28:32:bb:9c:12:4c:2f:bc:4e:78:a2: 27:56:4b:7a:3e:9d:0d:fd:e2:55:e9:fc:64:33:28: 55:15:9b:b0:0c:c5:b1:11:29:af:f5:37:7c:c9:49: c7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:76:6F:B1:A3:F3:E9:93:23:3F:36:1C:2B:4A:C7:A4:4D:D5:A1:9C X509v3 Authority Key Identifier: keyid:E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:2f:ec:89:aa:69:9a:6d:27:34:72:ee:0a:b0:a6:2a:17:7c: 1f:ca:47:0d:8f:3b:e6:e2:3e:0f:cc:10:a5:52:b9:98:09:56: b8:ee:8e:1f:5b:48:f8:27:a4:65:8f:3e:1a:cc:7f:46:4c:9a: b2:4c:5c:32:d5:58:70:39:d2:ba:3d:20:92:5e:fe:22:f2:de: 9b:67:7d:d6:73:e9:c2:be:2b:04:4d:d4:91:23:d8:d4:06:d0: 90:ff:93:38:e2:67:bd:36:b8:02:bd:35:7b:9c:19:26:7a:a6: 41:b6:da:e0:2d:3b:78:cd:cf:58:1f:91:87:b2:64:fe:b0:d1: 09:24:98:97:8f:1f:67:bd:1f:c3:60:52:e4:13:53:6c:93:4a: bf:dc:6c:e6:f1:e5:4d:29:14:b5:3c:43:94:02:27:bf:61:8b: 7c:4a:e4:a9:e7:57:b3:c3:69:2a:fe:24:62:38:5b:78:73:c5: 73:6a:e9:fb:da:8e:d0:3a:8f:ff:e7:a7:5a:e1:15:e7:93:46: c8:9b:a0:2c:0d:ab:4e:27:27:75:ed:d3:1a:e2:8c:6f:40:d1: 40:80:96:7b:06:0e:41:75:b3:ff:59:ab:b5:cb:06:d6:5a:04: c4:35:cb:d5:7f:e8:e1:d4:01:9a:a3:14:d9:e0:91:2e:d6:1f: f9:e5:b9:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuAgxVVEMW6z0IOsRrNBDEiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4Yzc3OTE3NjVjODg0ZDA4NTVmZWQzZmY4YzNmMjcwOTlh OWEwMWEwHhcNMjYwMTAyMjEwMDMyWhcNMjYwMTAzMjEwMDMyWjAzMTEwLwYDVQQD EygwYjc2NmZiMWEzZjNlOTkzMjMzZjM2MWMyYjRhYzdhNDRkZDVhMTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3k9iYPGZ4kkN5l0iKiD3Ba2kAQ/Q 5i2D6MZcZl/CM9fvxojQ/7A7CYqmIUAfXYG92ISaJGnd3ZeA4dPCY/10ptNTp3m4 GGBURI/HqnFpMekEYSrPhlvoRJlnU1lyroZYo/b3iAnvadkWzs1/Zm5tRBeG4f87 PKrfGc67fLtS/LM5Q42SIGzYdxJb9ViWe6/nm7PMkPt3IQJR9vIbSXFwMixMxT9I XtfWsvcEIDiNceFWz6GFOKvSJYeYe+s2wkCD/fOrfqf89RNc8bhDLtI14rylDALe KDK7nBJML7xOeKInVkt6Pp0N/eJV6fxkMyhVFZuwDMWxESmv9Td8yUnHaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAt2b7Gj8+mTIz82HCtKx6RN1aGcMB8GA1UdIwQY MBaAFOjHeRdlyITQhV/tP/jD8nCZqaAaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk1kNUYyWEloTkNGWC0wXy1NUHljSm1wb0JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80YmRmY2ItNDM4NS00N2NjLWIwODEt OTViMWQ3MWJjYzg5LzEvNk1kNUYyWEloTkNGWC0wXy1NUHljSm1wb0JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi80YmRmY2ItNDM4NS00N2NjLWIwODEtOTViMWQ3MWJjYzg5 LzEvNk1kNUYyWEloTkNGWC0wXy1NUHljSm1wb0JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIC/siapp mm0nNHLuCrCmKhd8H8pHDY875uI+D8wQpVK5mAlWuO6OH1tI+CekZY8+Gsx/Rkya skxcMtVYcDnSuj0gkl7+IvLem2d91nPpwr4rBE3UkSPY1AbQkP+TOOJnvTa4Ar01 e5wZJnqmQbba4C07eM3PWB+Rh7Jk/rDRCSSYl48fZ70fw2BS5BNTbJNKv9xs5vHl TSkUtTxDlAInv2GLfErkqedXs8NpKv4kYjhbeHPFc2rp+9qO0DqP/+enWuEV55NG yJugLA2rTicnde3TGuKMb0DRQICWewYOQXWz/1mrtcsG1loExDXL1X/o4dQBmqMU 2eCRLtYf+eW53g== -----END CERTIFICATE-----Generated at Fri Jan 2 23:22:54 2026 by rpki-client