This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft File: mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft (raw, json) Hash identifier: M3hSIgS4yEYDghZcASu8KHbyoNS4ds//UiISfTIfp8s= Subject key identifier: 97:38:18:B8:D7:F8:BE:C1:1A:E1:87:D7:2C:8B:4F:55:2E:EB:C4:BF Authority key identifier: 99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4 Certificate issuer: /CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4 Certificate serial: 019B785D2A4F7337B2F42CA0EB2A68DEB049 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft Manifest number: 04D6 Signing time: Thu 01 Jan 2026 07:02:10 +0000 Manifest this update: Thu 01 Jan 2026 07:02:10 +0000 Manifest next update: Fri 02 Jan 2026 07:02:10 +0000 Files and hashes: 1: mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl (hash: T81G3BMozQ9IJxEb4+aDS78+fKr4nJw6Geyk+GHoZ9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:5d:2a:4f:73:37:b2:f4:2c:a0:eb:2a:68:de:b0:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4 Validity Not Before: Jan 1 07:02:10 2026 GMT Not After : Jan 2 07:02:10 2026 GMT Subject: CN=973818b8d7f8bec11ae187d72c8b4f552eebc4bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:af:39:bd:0a:06:f7:23:a8:03:84:1b:a2:5b: 27:64:b6:cc:dc:cc:4c:29:83:40:67:71:eb:e9:80: b4:4b:d7:15:8d:88:a6:00:ef:8d:fc:07:03:14:26: cd:8a:ec:f0:66:b3:02:49:69:ac:72:1e:cc:36:ab: 4c:55:1f:57:ba:c1:a4:1d:f0:1c:de:84:05:08:27: a9:ab:5a:ea:d4:11:70:53:4a:cf:d1:92:93:43:bc: cb:c2:58:5b:17:74:91:6b:a3:2a:dd:25:12:1b:bf: 20:8b:43:16:a5:9d:a9:d9:6b:5c:18:9c:43:c1:9c: 09:49:7c:9e:0b:d8:56:26:c5:40:87:6c:c5:ff:f8: b7:a0:fd:f8:6f:e9:e9:12:b7:01:d0:2a:03:2a:79: c7:75:cb:49:9b:fd:28:f3:9f:e9:3b:10:ce:af:40: be:1c:aa:6c:5f:c4:db:ff:bc:9e:1c:dc:e5:7c:9d: 3b:fc:dd:8f:8a:5d:68:98:17:73:09:61:d4:d9:0f: fc:46:55:07:76:b1:36:3b:c4:c5:2c:c0:32:a7:19: 9e:ad:92:05:86:0d:e2:3f:1c:09:cd:af:88:bf:46: f6:70:8f:95:e7:b2:08:31:8c:b6:be:90:27:50:98: 0d:59:c6:5b:e6:a2:4a:90:67:ab:e2:77:2a:ea:68: b4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:38:18:B8:D7:F8:BE:C1:1A:E1:87:D7:2C:8B:4F:55:2E:EB:C4:BF X509v3 Authority Key Identifier: keyid:99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:25:69:bf:23:9d:87:c8:08:ed:c3:37:83:2b:73:74:43:7c: 15:cb:e7:d4:f3:60:47:28:1e:16:58:18:7c:5e:8b:20:75:5d: b6:25:4f:24:b8:c8:7e:47:c1:84:e4:0e:e4:e3:c5:68:8b:af: cd:c8:cc:46:2f:dc:12:d1:b3:a5:f3:3a:0b:b4:8b:dc:86:d4: 78:31:e0:86:e5:be:7e:fc:af:a3:5f:3d:ff:3d:8f:d4:f1:a1: 09:18:0f:b5:83:6e:81:3a:5d:69:8a:9f:e8:ab:cc:d4:6b:2e: a6:92:a5:22:bb:fe:91:8d:60:72:1e:e0:27:7d:8c:86:bf:35: 6a:09:e9:1f:34:03:29:79:f5:37:fc:91:5b:a5:8b:4c:5d:22: 40:09:bb:4b:67:14:2b:4a:52:8a:9f:eb:a5:ac:6f:68:fc:ce: 00:1b:6f:e1:15:ad:78:9e:ae:d0:ba:ad:8b:61:e2:2f:21:10: bb:6d:aa:9f:bb:e2:b9:68:9f:f8:36:e6:d0:29:ff:0e:f4:71: 8a:a9:9c:59:d0:48:fa:d8:85:80:62:9f:f5:35:97:38:9a:d9: bf:e2:92:d1:37:ae:b8:15:95:d0:6b:f0:9f:2a:d0:ff:2e:91: 2c:df:12:63:90:9d:4b:bc:4f:1f:92:de:dc:1f:f4:a0:07:79: f6:a3:92:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4XSpPczey9Cyg6ypo3rBJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MDZjZTJiMWE5ODBmYmQxZWY5OWMzZjU2NTM2OGFkNjIx YmM0ZjQwHhcNMjYwMTAxMDcwMjEwWhcNMjYwMTAyMDcwMjEwWjAzMTEwLwYDVQQD Eyg5NzM4MThiOGQ3ZjhiZWMxMWFlMTg3ZDcyYzhiNGY1NTJlZWJjNGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy685vQoG9yOoA4QbolsnZLbM3MxM KYNAZ3Hr6YC0S9cVjYimAO+N/AcDFCbNiuzwZrMCSWmsch7MNqtMVR9XusGkHfAc 3oQFCCepq1rq1BFwU0rP0ZKTQ7zLwlhbF3SRa6Mq3SUSG78gi0MWpZ2p2WtcGJxD wZwJSXyeC9hWJsVAh2zF//i3oP34b+npErcB0CoDKnnHdctJm/0o85/pOxDOr0C+ HKpsX8Tb/7yeHNzlfJ07/N2Pil1omBdzCWHU2Q/8RlUHdrE2O8TFLMAypxmerZIF hg3iPxwJza+Iv0b2cI+V57IIMYy2vpAnUJgNWcZb5qJKkGer4ncq6mi0rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJc4GLjX+L7BGuGH1yyLT1Uu68S/MB8GA1UdIwQY MBaAFJkGzisamA+9HvmcP1ZTaK1iG8T0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVFiT0t4cVlENzBlLVp3X1ZsTm9yV0lieFBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9mOTZkY2UtM2E0OS00NTcxLWI5NjIt YTJmZTQ5OTFhMDM3LzEvbVFiT0t4cVlENzBlLVp3X1ZsTm9yV0lieFBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9mOTZkY2UtM2E0OS00NTcxLWI5NjItYTJmZTQ5OTFhMDM3 LzEvbVFiT0t4cVlENzBlLVp3X1ZsTm9yV0lieFBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSVpvyOd h8gI7cM3gytzdEN8Fcvn1PNgRygeFlgYfF6LIHVdtiVPJLjIfkfBhOQO5OPFaIuv zcjMRi/cEtGzpfM6C7SL3IbUeDHghuW+fvyvo189/z2P1PGhCRgPtYNugTpdaYqf 6KvM1GsuppKlIrv+kY1gch7gJ32Mhr81agnpHzQDKXn1N/yRW6WLTF0iQAm7S2cU K0pSip/rpaxvaPzOABtv4RWteJ6u0Lqti2HiLyEQu22qn7viuWif+Dbm0Cn/DvRx iqmcWdBI+tiFgGKf9TWXOJrZv+KS0TeuuBWV0GvwnyrQ/y6RLN8SY5CdS7xPH5Le 3B/0oAd59qOS5A== -----END CERTIFICATE-----Generated at Thu Jan 1 08:45:20 2026 by rpki-client