This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft File: G7Qd9-pn1O3-D60S99XOzYPhjZo.mft (raw, json) Hash identifier: HHbiyj4Rvca8PO2THYMIl0NU6eaLXuLb2WMDUiyPQIs= Subject key identifier: DD:5C:A9:CE:4E:D3:CD:68:94:A8:4F:E3:F2:2B:FB:4A:87:55:C8:FE Authority key identifier: 1B:B4:1D:F7:EA:67:D4:ED:FE:0F:AD:12:F7:D5:CE:CD:83:E1:8D:9A Certificate issuer: /CN=1bb41df7ea67d4edfe0fad12f7d5cecd83e18d9a Certificate serial: 019B9779899231885B5D0C362F9721871A8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7Qd9-pn1O3-D60S99XOzYPhjZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft Manifest number: 0594 Signing time: Wed 07 Jan 2026 08:01:23 +0000 Manifest this update: Wed 07 Jan 2026 08:01:23 +0000 Manifest next update: Thu 08 Jan 2026 08:01:23 +0000 Files and hashes: 1: G7Qd9-pn1O3-D60S99XOzYPhjZo.crl (hash: sZziKVw+6f5I5j2GjweTsz5c5hysc9kb3PwxppICuyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft rsync://rpki.ripe.net/repository/DEFAULT/G7Qd9-pn1O3-D60S99XOzYPhjZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 07:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:79:89:92:31:88:5b:5d:0c:36:2f:97:21:87:1a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bb41df7ea67d4edfe0fad12f7d5cecd83e18d9a Validity Not Before: Jan 7 08:01:23 2026 GMT Not After : Jan 8 08:01:23 2026 GMT Subject: CN=dd5ca9ce4ed3cd6894a84fe3f22bfb4a8755c8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:08:b1:80:3d:eb:e8:3e:87:4a:71:0a:da:bd: 58:9a:1f:8e:0f:3e:df:95:ec:e6:da:16:55:5c:c4: 66:dd:69:60:65:dd:73:ea:96:ba:5d:6e:38:c7:28: 5d:75:e3:ec:ad:0b:83:92:2d:39:05:0b:0c:d8:82: 3c:b4:43:8f:8c:17:c2:98:91:5a:89:50:80:43:eb: 23:65:a8:c4:fd:55:df:c7:32:58:78:f6:8a:a5:08: 41:7f:c4:61:fc:f7:23:68:89:bd:68:9b:f5:6d:2f: 32:fd:fc:54:19:6f:6b:a6:2e:0d:9b:38:d2:ea:14: 96:3e:e9:c6:0c:c0:90:cc:dd:3f:32:a8:e0:dd:35: 72:f1:34:d6:eb:8f:d9:ea:5e:e9:b0:fb:6b:b9:61: 69:7b:33:c2:23:00:1f:2e:53:61:3e:d0:78:79:db: 0b:3d:62:41:6d:96:50:b4:43:22:31:65:ad:47:bd: b8:46:eb:a0:93:e2:90:40:b8:2f:e0:b7:64:7b:2c: c4:23:c9:3e:f4:22:3e:98:f0:38:88:d1:06:8c:e2: df:e2:3c:71:88:72:be:02:43:31:00:ac:97:fb:a7: c8:ba:8c:8a:3f:00:20:2e:e1:3e:7c:46:f5:d5:a0: fd:b1:a1:73:90:11:bd:8f:75:3c:41:77:75:bd:42: cd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5C:A9:CE:4E:D3:CD:68:94:A8:4F:E3:F2:2B:FB:4A:87:55:C8:FE X509v3 Authority Key Identifier: keyid:1B:B4:1D:F7:EA:67:D4:ED:FE:0F:AD:12:F7:D5:CE:CD:83:E1:8D:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7Qd9-pn1O3-D60S99XOzYPhjZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:db:02:d7:d0:b4:72:39:be:88:03:50:c8:3c:eb:b0:4a:06: 90:3b:48:8c:e6:93:58:b0:63:28:cb:25:7e:93:59:89:e4:86: a1:0b:db:6a:69:e7:61:32:9b:1a:cb:97:fe:af:53:6c:ca:26: 0f:f9:7d:01:56:d4:22:fb:56:df:67:26:7f:c1:5d:08:cb:c8: 9f:d2:ff:41:f9:b4:ce:9f:a9:8a:ff:b8:fd:6e:0f:07:f0:3d: a5:8b:db:b9:61:ee:0a:9b:d5:4e:34:7d:e3:05:da:fe:69:53: c3:7e:64:f7:49:48:71:e9:47:35:b3:c1:92:db:44:94:39:0f: 7a:7f:c6:56:c3:0f:56:c4:d4:d6:4b:2f:ea:e9:07:cb:26:f4: bf:65:5d:96:16:2e:10:45:3b:2f:a8:23:09:1c:bb:49:9b:9f: c6:44:c6:49:e0:83:f0:fa:a6:f1:5f:26:dd:b1:db:dc:92:b0: 38:58:44:43:3b:e0:e0:08:a9:68:fa:d2:03:2b:55:45:59:27: 9b:32:2c:f0:7a:e8:b6:be:9e:04:3d:99:50:30:cd:64:ea:54: 31:05:13:2c:33:8b:d3:56:4f:ce:00:e9:66:94:7d:24:c3:8d: 23:94:78:90:30:df:21:bd:1c:14:4b:13:eb:27:f8:71:dd:af: 9a:00:93:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuXeYmSMYhbXQw2L5chhxqMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYjQxZGY3ZWE2N2Q0ZWRmZTBmYWQxMmY3ZDVjZWNkODNl MThkOWEwHhcNMjYwMTA3MDgwMTIzWhcNMjYwMTA4MDgwMTIzWjAzMTEwLwYDVQQD EyhkZDVjYTljZTRlZDNjZDY4OTRhODRmZTNmMjJiZmI0YTg3NTVjOGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQixgD3r6D6HSnEK2r1Ymh+ODz7f lezm2hZVXMRm3WlgZd1z6pa6XW44xyhddePsrQuDki05BQsM2II8tEOPjBfCmJFa iVCAQ+sjZajE/VXfxzJYePaKpQhBf8Rh/PcjaIm9aJv1bS8y/fxUGW9rpi4NmzjS 6hSWPunGDMCQzN0/Mqjg3TVy8TTW64/Z6l7psPtruWFpezPCIwAfLlNhPtB4edsL PWJBbZZQtEMiMWWtR724Ruugk+KQQLgv4LdkeyzEI8k+9CI+mPA4iNEGjOLf4jxx iHK+AkMxAKyX+6fIuoyKPwAgLuE+fEb11aD9saFzkBG9j3U8QXd1vULNgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1cqc5O081olKhP4/Ir+0qHVcj+MB8GA1UdIwQY MBaAFBu0HffqZ9Tt/g+tEvfVzs2D4Y2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzdRZDktcG4xTzMtRDYwUzk5WE96WVBoalpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80NTkzOTYtZGU5MC00Y2M4LWE1NDIt M2U2ZTdjZGVmNzNlLzEvRzdRZDktcG4xTzMtRDYwUzk5WE96WVBoalpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy80NTkzOTYtZGU5MC00Y2M4LWE1NDItM2U2ZTdjZGVmNzNl LzEvRzdRZDktcG4xTzMtRDYwUzk5WE96WVBoalpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtsC19C0 cjm+iANQyDzrsEoGkDtIjOaTWLBjKMslfpNZieSGoQvbamnnYTKbGsuX/q9TbMom D/l9AVbUIvtW32cmf8FdCMvIn9L/Qfm0zp+piv+4/W4PB/A9pYvbuWHuCpvVTjR9 4wXa/mlTw35k90lIcelHNbPBkttElDkPen/GVsMPVsTU1ksv6ukHyyb0v2VdlhYu EEU7L6gjCRy7SZufxkTGSeCD8Pqm8V8m3bHb3JKwOFhEQzvg4AipaPrSAytVRVkn mzIs8Hrotr6eBD2ZUDDNZOpUMQUTLDOL01ZPzgDpZpR9JMONI5R4kDDfIb0cFEsT 6yf4cd2vmgCT9w== -----END CERTIFICATE-----Generated at Wed Jan 7 10:24:54 2026 by rpki-client