This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft File: ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft (raw, json) Hash identifier: Qdi4/VBV8v+6cB9SKyCDCUo+r6dqJY9swvoZoVmIlWM= Subject key identifier: 73:BD:BF:AA:B4:C9:5C:85:35:C6:DA:00:6E:E7:4B:8B:32:F4:DF:9A Authority key identifier: 72:20:2E:64:5F:72:CD:70:AA:81:43:B7:3B:CC:0D:DD:93:BF:E9:1A Certificate issuer: /CN=72202e645f72cd70aa8143b73bcc0ddd93bfe91a Certificate serial: 019BAC810205350390A258B033408C5E7E26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft Manifest number: 0511 Signing time: Sun 11 Jan 2026 10:01:34 +0000 Manifest this update: Sun 11 Jan 2026 10:01:34 +0000 Manifest next update: Mon 12 Jan 2026 10:01:34 +0000 Files and hashes: 1: ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl (hash: Ft+97Q5m9Mb+dx7+dg+D6psswv+rWTjtcTWm0Jv/IY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 10:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:81:02:05:35:03:90:a2:58:b0:33:40:8c:5e:7e:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72202e645f72cd70aa8143b73bcc0ddd93bfe91a Validity Not Before: Jan 11 10:01:34 2026 GMT Not After : Jan 12 10:01:34 2026 GMT Subject: CN=73bdbfaab4c95c8535c6da006ee74b8b32f4df9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7b:ac:68:01:b1:90:af:82:24:64:21:1e:b6: d3:c0:f4:50:f1:b6:88:1a:95:ed:b1:b6:12:ea:89: ef:e4:29:aa:e3:be:7b:1e:32:ab:16:ef:48:7d:c5: 41:be:74:fa:df:8d:79:68:2c:8f:bc:70:2c:48:16: ef:9e:05:f5:a2:50:46:9e:e7:92:51:91:cc:5d:cf: 09:95:98:50:a4:82:1c:57:52:8e:f7:b3:3d:fc:f5: 74:27:77:7d:96:9d:c1:08:c0:54:cc:d0:a4:b4:4e: 9f:9e:8e:e8:ce:48:b1:bf:5b:64:cb:68:44:72:5e: 49:4b:d1:77:eb:7f:0f:4f:4c:4e:f2:a4:71:7d:a2: 76:ef:7a:3b:4a:1b:c0:ec:e6:a7:07:b9:9c:86:30: 4f:99:ba:d3:44:f1:35:a0:46:4c:ff:ed:75:84:7b: 9a:1a:40:58:50:20:e3:f5:de:bd:b6:e7:17:b3:9e: d5:65:8c:b8:aa:c3:7d:34:66:41:0f:ea:d2:31:29: 88:0f:cc:56:58:6a:c1:6c:bb:12:e3:d4:3d:f3:0e: 1f:f7:f2:b5:26:07:10:b7:ea:7a:33:f9:d7:b9:de: 4a:d6:3c:99:ce:ba:32:a9:31:48:80:08:47:f5:09: 82:c1:57:11:1c:4b:d5:6f:cc:2b:8c:5c:92:cd:03: f4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:BD:BF:AA:B4:C9:5C:85:35:C6:DA:00:6E:E7:4B:8B:32:F4:DF:9A X509v3 Authority Key Identifier: keyid:72:20:2E:64:5F:72:CD:70:AA:81:43:B7:3B:CC:0D:DD:93:BF:E9:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:66:9e:5b:5d:1b:b7:e0:5c:d9:75:5d:12:25:d9:f7:96:5f: b1:26:51:47:26:d9:84:3a:9f:fd:71:c3:af:87:dd:2e:7a:a1: 4b:63:b6:23:93:d3:e6:a5:ef:3e:c8:ae:5b:3c:f6:32:59:4a: 46:a4:af:54:91:5b:dd:e4:35:f9:0c:e8:4a:ca:65:dd:47:90: e4:dc:83:b1:0b:a3:a2:1a:b8:22:1e:74:2e:c0:77:86:a0:bc: 66:ed:43:aa:4b:1b:e1:d3:72:ea:84:70:53:97:87:50:d7:94: 5f:e2:a8:6b:69:a5:f9:24:32:f3:39:38:e5:2f:d5:13:9a:ee: 23:18:6c:d7:6b:5f:6b:a3:f0:58:0d:54:70:48:a1:54:d8:92: 94:a3:87:21:03:c4:3b:0b:ea:af:44:3f:2d:35:13:a2:34:ea: c7:29:fa:c5:f7:31:7c:f3:68:a4:00:13:26:04:7a:c4:01:2e: 0e:13:03:0d:5a:14:7f:0d:bc:54:46:72:67:75:38:f3:b0:33: fc:65:32:b0:96:51:50:58:ed:b7:43:1d:87:13:5e:d1:5c:08: 82:de:3f:48:ba:af:cf:ee:d0:0d:3d:1b:d9:bb:6e:1b:13:32: 5c:e8:a6:fc:39:68:d8:4d:d4:17:33:e0:af:20:57:60:c3:e4: 4d:22:76:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZusgQIFNQOQoliwM0CMXn4mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMjAyZTY0NWY3MmNkNzBhYTgxNDNiNzNiY2MwZGRkOTNi ZmU5MWEwHhcNMjYwMTExMTAwMTM0WhcNMjYwMTEyMTAwMTM0WjAzMTEwLwYDVQQD Eyg3M2JkYmZhYWI0Yzk1Yzg1MzVjNmRhMDA2ZWU3NGI4YjMyZjRkZjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3usaAGxkK+CJGQhHrbTwPRQ8baI GpXtsbYS6onv5Cmq4757HjKrFu9IfcVBvnT63415aCyPvHAsSBbvngX1olBGnueS UZHMXc8JlZhQpIIcV1KO97M9/PV0J3d9lp3BCMBUzNCktE6fno7ozkixv1tky2hE cl5JS9F3638PT0xO8qRxfaJ273o7ShvA7OanB7mchjBPmbrTRPE1oEZM/+11hHua GkBYUCDj9d69tucXs57VZYy4qsN9NGZBD+rSMSmID8xWWGrBbLsS49Q98w4f9/K1 JgcQt+p6M/nXud5K1jyZzroyqTFIgAhH9QmCwVcRHEvVb8wrjFySzQP0UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHO9v6q0yVyFNcbaAG7nS4sy9N+aMB8GA1UdIwQY MBaAFHIgLmRfcs1wqoFDtzvMDd2Tv+kaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lBdVpGOXl6WENxZ1VPM084d04zWk9fNlJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lZTExMjctZjk5Yy00YWVhLWIyZmEt NDBjYzE2ZjJhZmE0LzEvY2lBdVpGOXl6WENxZ1VPM084d04zWk9fNlJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lZTExMjctZjk5Yy00YWVhLWIyZmEtNDBjYzE2ZjJhZmE0 LzEvY2lBdVpGOXl6WENxZ1VPM084d04zWk9fNlJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2aeW10b t+Bc2XVdEiXZ95ZfsSZRRybZhDqf/XHDr4fdLnqhS2O2I5PT5qXvPsiuWzz2MllK RqSvVJFb3eQ1+QzoSspl3UeQ5NyDsQujohq4Ih50LsB3hqC8Zu1Dqksb4dNy6oRw U5eHUNeUX+Koa2ml+SQy8zk45S/VE5ruIxhs12tfa6PwWA1UcEihVNiSlKOHIQPE Owvqr0Q/LTUTojTqxyn6xfcxfPNopAATJgR6xAEuDhMDDVoUfw28VEZyZ3U487Az /GUysJZRUFjtt0MdhxNe0VwIgt4/SLqvz+7QDT0b2btuGxMyXOim/Dlo2E3UFzPg ryBXYMPkTSJ2KA== -----END CERTIFICATE-----Generated at Sun Jan 11 21:06:21 2026 by rpki-client