This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft File: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft (raw, json) Hash identifier: SnOgsTFeT/T8rox3kFebwzk23RVqkxI+Uq5K08sHdTE= Subject key identifier: EE:7E:50:A5:FB:17:68:3D:29:CC:5E:5D:E9:60:95:D0:68:AF:A0:EA Authority key identifier: B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36 Certificate issuer: /CN=b7d296d69059457be39c3c82466aceed02766836 Certificate serial: 019B78CA7934A03E54FB1F91797CB3CDB427 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft Manifest number: 0899 Signing time: Thu 01 Jan 2026 09:01:33 +0000 Manifest this update: Thu 01 Jan 2026 09:01:33 +0000 Manifest next update: Fri 02 Jan 2026 09:01:33 +0000 Files and hashes: 1: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl (hash: NL+2wNPyDGQw0zrh4c9uGiCHrFEY4zBj22FYdv4/8yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:ca:79:34:a0:3e:54:fb:1f:91:79:7c:b3:cd:b4:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7d296d69059457be39c3c82466aceed02766836 Validity Not Before: Jan 1 09:01:33 2026 GMT Not After : Jan 2 09:01:33 2026 GMT Subject: CN=ee7e50a5fb17683d29cc5e5de96095d068afa0ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ba:2a:20:20:80:d0:9c:6c:1a:7b:f1:c4:ad: 98:97:aa:e2:4c:d5:70:c6:24:11:bb:40:9a:21:75: 76:83:eb:4c:40:c7:bd:a0:5d:98:6d:aa:07:ed:a1: 7f:c0:58:23:54:e9:84:ac:30:53:c5:3e:f0:6d:c3: 7a:31:d7:0f:de:be:f8:ae:9e:2f:00:17:3f:90:3f: 03:44:57:27:d3:04:9f:b5:e0:21:11:7c:23:36:44: f7:eb:af:1a:57:29:7d:c9:00:5e:49:fc:85:43:59: 93:50:44:92:11:ce:d0:8e:ae:5b:a7:d4:74:61:55: d9:f8:cb:d6:2e:48:b3:d9:60:61:d9:9a:cf:62:59: 13:97:5e:0a:fb:0a:4d:a5:8f:13:fe:cb:d2:25:41: cb:62:21:0d:ad:42:45:c8:a8:28:d8:1c:8d:03:77: e8:28:e7:a6:7c:fc:53:5f:ea:ea:74:eb:d1:a0:6c: 9c:2b:28:bc:2d:28:f7:08:e9:b9:43:0e:e9:01:b8: ae:2b:79:1d:b0:8e:9a:fc:8d:31:ec:7f:bd:23:48: 73:34:4e:0e:60:c3:e2:3f:fe:52:b5:f6:2d:78:fb: f2:43:1f:5d:06:0d:b0:f4:9a:ae:09:21:08:ee:b2: cd:78:73:73:37:b4:96:f8:4d:d2:31:6c:4e:48:0e: a3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7E:50:A5:FB:17:68:3D:29:CC:5E:5D:E9:60:95:D0:68:AF:A0:EA X509v3 Authority Key Identifier: keyid:B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:7b:82:5c:26:55:b2:5b:14:a7:b4:67:18:38:d8:9f:ac:46: ee:e1:5e:4c:34:c8:ea:e9:74:0a:84:df:22:32:8b:dc:0a:3d: 6d:2d:35:8d:d9:29:65:c0:01:ad:6b:7d:0b:8f:1f:a5:2a:75: ec:f4:ec:55:af:c1:40:ba:a6:f0:36:75:f4:6a:d8:d4:c3:64: 9f:4b:d7:ce:fd:29:f3:b5:8d:4a:84:e1:2d:01:03:98:e4:1c: aa:85:62:b8:6b:d9:26:4d:71:a7:61:40:8f:78:29:82:7a:65: 5d:58:55:c2:f3:e3:87:ef:4e:0f:4c:b5:70:0a:91:72:ed:a2: 01:74:20:aa:bf:1d:6b:5e:d8:84:7d:a3:93:69:e0:bd:24:ac: 24:93:cd:d6:4d:8d:c5:1e:b2:b8:f7:7d:f5:e3:98:bb:18:d9: 57:56:70:04:83:55:8a:5a:b9:66:88:55:0f:9c:15:ed:67:10: 56:ce:24:b1:20:bf:c2:b1:5d:c4:eb:80:03:78:f1:dc:bb:c0: 13:67:5b:25:99:5c:c6:fa:5b:41:6d:55:4e:a3:8d:a2:32:f5: d3:18:29:8d:87:d7:94:55:1c:e0:89:1f:48:40:7a:92:45:96: 50:ba:1c:6c:8b:8a:1f:24:5e:0f:2a:3c:f8:a2:b7:28:96:22: 45:26:04:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4ynk0oD5U+x+ReXyzzbQnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ZDI5NmQ2OTA1OTQ1N2JlMzljM2M4MjQ2NmFjZWVkMDI3 NjY4MzYwHhcNMjYwMTAxMDkwMTMzWhcNMjYwMTAyMDkwMTMzWjAzMTEwLwYDVQQD EyhlZTdlNTBhNWZiMTc2ODNkMjljYzVlNWRlOTYwOTVkMDY4YWZhMGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApboqICCA0JxsGnvxxK2Yl6riTNVw xiQRu0CaIXV2g+tMQMe9oF2YbaoH7aF/wFgjVOmErDBTxT7wbcN6MdcP3r74rp4v ABc/kD8DRFcn0wSfteAhEXwjNkT3668aVyl9yQBeSfyFQ1mTUESSEc7Qjq5bp9R0 YVXZ+MvWLkiz2WBh2ZrPYlkTl14K+wpNpY8T/svSJUHLYiENrUJFyKgo2ByNA3fo KOemfPxTX+rqdOvRoGycKyi8LSj3COm5Qw7pAbiuK3kdsI6a/I0x7H+9I0hzNE4O YMPiP/5StfYtePvyQx9dBg2w9JquCSEI7rLNeHNzN7SW+E3SMWxOSA6jTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5+UKX7F2g9KcxeXelgldBor6DqMB8GA1UdIwQY MBaAFLfSltaQWUV745w8gkZqzu0Cdmg2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDlLVzFwQlpSWHZqbkR5Q1Jtck83UUoyYURZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zNzQ5NDctM2UyYy00MDI2LTgzMjQt MTU5MjlkMDJmZDBjLzEvdDlLVzFwQlpSWHZqbkR5Q1Jtck83UUoyYURZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8zNzQ5NDctM2UyYy00MDI2LTgzMjQtMTU5MjlkMDJmZDBj LzEvdDlLVzFwQlpSWHZqbkR5Q1Jtck83UUoyYURZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXuCXCZV slsUp7RnGDjYn6xG7uFeTDTI6ul0CoTfIjKL3Ao9bS01jdkpZcABrWt9C48fpSp1 7PTsVa/BQLqm8DZ19GrY1MNkn0vXzv0p87WNSoThLQEDmOQcqoViuGvZJk1xp2FA j3gpgnplXVhVwvPjh+9OD0y1cAqRcu2iAXQgqr8da17YhH2jk2ngvSSsJJPN1k2N xR6yuPd99eOYuxjZV1ZwBINVilq5ZohVD5wV7WcQVs4ksSC/wrFdxOuAA3jx3LvA E2dbJZlcxvpbQW1VTqONojL10xgpjYfXlFUc4IkfSEB6kkWWULocbIuKHyReDyo8 +KK3KJYiRSYEqw== -----END CERTIFICATE-----Generated at Thu Jan 1 11:05:10 2026 by rpki-client