This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft File: p0FyV8tjZv81cjOybSXdWIfaifs.mft (raw, json) Hash identifier: lo/N40DpksncsW0jUsjESv5IIjTFTxzxU1IkQeKArpc= Subject key identifier: 1B:99:9B:67:12:1D:FB:ED:6C:89:7F:95:4B:A8:10:73:99:AB:C4:14 Authority key identifier: A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB Certificate issuer: /CN=a7417257cb6366ff357233b26d25dd5887da89fb Certificate serial: 019B785BAC257EFC93A978DA1E1E0320ECE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft Manifest number: 17A5 Signing time: Thu 01 Jan 2026 07:00:32 +0000 Manifest this update: Thu 01 Jan 2026 07:00:32 +0000 Manifest next update: Fri 02 Jan 2026 07:00:32 +0000 Files and hashes: 1: p0FyV8tjZv81cjOybSXdWIfaifs.crl (hash: FNWvkvpipVzYq0C9SfKn7MwZe923ZRdQOkMAXKfoPvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:5b:ac:25:7e:fc:93:a9:78:da:1e:1e:03:20:ec:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7417257cb6366ff357233b26d25dd5887da89fb Validity Not Before: Jan 1 07:00:32 2026 GMT Not After : Jan 2 07:00:32 2026 GMT Subject: CN=1b999b67121dfbed6c897f954ba8107399abc414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:20:18:7a:0b:00:9c:fc:06:40:57:38:13:f3: fd:49:91:65:75:75:8a:cd:c5:a8:8a:d7:7b:80:a2: b9:ff:09:9b:7f:10:5d:85:ab:4b:8e:f5:b1:60:63: a5:75:a4:84:47:d0:09:03:38:d9:ca:ab:a9:4f:60: 7b:04:bd:b4:4a:02:fb:60:a6:51:67:97:a9:3d:5e: 0d:68:19:22:59:59:74:f6:42:53:d9:c1:8e:d4:6b: b5:c7:bf:9f:44:92:c5:ac:d6:9e:87:6d:4f:e6:cb: 82:91:a9:ed:f0:b8:04:83:75:70:ab:9c:dc:c9:66: 74:26:cd:77:36:ca:bc:ea:67:3a:39:e7:b7:65:81: 33:cf:05:f4:10:61:45:0a:2d:c3:44:d9:cf:a6:80: 91:9d:2c:a9:e5:50:66:73:8c:fa:12:75:84:75:ca: c7:46:90:26:12:ee:e7:75:92:1b:4a:ba:54:de:33: 0d:db:bd:2f:97:7e:25:d7:50:d1:3a:d1:b6:3c:9f: af:72:e0:c1:97:1f:1d:47:85:9a:40:82:2b:c6:bc: 06:53:f1:a6:ec:66:1d:72:72:74:03:c1:45:f7:f1: ba:6d:ed:77:c2:19:fd:a4:18:5f:7c:c5:7c:d5:65: 15:5e:6e:83:5e:3f:3a:cc:b9:72:f3:b1:62:7a:b5: 04:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:99:9B:67:12:1D:FB:ED:6C:89:7F:95:4B:A8:10:73:99:AB:C4:14 X509v3 Authority Key Identifier: keyid:A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:12:4e:11:22:99:0f:2c:70:0e:cd:de:0a:cd:1a:47:bf:1e: 00:84:6d:8b:d4:41:bb:45:25:53:1a:b8:ab:a2:69:ee:92:30: dc:49:52:5a:6d:f4:58:6f:e3:20:83:9b:43:27:12:39:5a:b2: 32:54:97:7c:c1:02:25:15:94:36:03:41:63:dc:6b:96:cf:d2: a3:eb:45:ad:84:4c:7a:d5:b1:ce:9c:08:65:10:95:42:74:bc: 2b:51:15:d9:5c:69:82:a0:2f:44:c4:d5:2f:19:26:68:91:b8: 29:da:35:65:38:26:fe:59:35:3b:ce:22:a1:ee:41:2d:e2:9f: 87:e7:70:16:37:43:ce:62:5d:f0:78:8c:37:6f:e4:45:2d:ba: cc:60:0b:c3:c8:4e:47:9b:f2:f0:3b:eb:d5:0f:3c:02:d7:dc: ce:14:45:9c:0d:af:05:ba:e8:8c:23:0a:73:f1:cd:0f:44:7b: 50:09:8d:d9:d2:b0:f5:28:f4:0d:ec:b8:99:7e:0c:ac:73:71: 73:04:fa:31:4a:ef:e6:57:75:97:ac:d9:63:65:48:4a:ce:b5: a7:2e:37:c6:9f:35:44:d4:95:e9:b9:6b:95:cc:45:2c:b3:09: 98:64:cf:e0:b4:1c:13:74:d2:50:97:52:ba:14:59:71:d2:64: e3:d3:b8:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4W6wlfvyTqXjaHh4DIOzmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NDE3MjU3Y2I2MzY2ZmYzNTcyMzNiMjZkMjVkZDU4ODdk YTg5ZmIwHhcNMjYwMTAxMDcwMDMyWhcNMjYwMTAyMDcwMDMyWjAzMTEwLwYDVQQD EygxYjk5OWI2NzEyMWRmYmVkNmM4OTdmOTU0YmE4MTA3Mzk5YWJjNDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCAYegsAnPwGQFc4E/P9SZFldXWK zcWoitd7gKK5/wmbfxBdhatLjvWxYGOldaSER9AJAzjZyqupT2B7BL20SgL7YKZR Z5epPV4NaBkiWVl09kJT2cGO1Gu1x7+fRJLFrNaeh21P5suCkant8LgEg3Vwq5zc yWZ0Js13Nsq86mc6Oee3ZYEzzwX0EGFFCi3DRNnPpoCRnSyp5VBmc4z6EnWEdcrH RpAmEu7ndZIbSrpU3jMN270vl34l11DROtG2PJ+vcuDBlx8dR4WaQIIrxrwGU/Gm 7GYdcnJ0A8FF9/G6be13whn9pBhffMV81WUVXm6DXj86zLly87FierUE3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBuZm2cSHfvtbIl/lUuoEHOZq8QUMB8GA1UdIwQY MBaAFKdBclfLY2b/NXIzsm0l3ViH2on7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDBGeVY4dGpadjgxY2pPeWJTWGRXSWZhaWZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lMmFkZmYtZDEwNi00YWI4LWE5OTQt ZmY4ZmUyNTUyNmM2LzEvcDBGeVY4dGpadjgxY2pPeWJTWGRXSWZhaWZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9lMmFkZmYtZDEwNi00YWI4LWE5OTQtZmY4ZmUyNTUyNmM2 LzEvcDBGeVY4dGpadjgxY2pPeWJTWGRXSWZhaWZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuxJOESKZ DyxwDs3eCs0aR78eAIRti9RBu0UlUxq4q6Jp7pIw3ElSWm30WG/jIIObQycSOVqy MlSXfMECJRWUNgNBY9xrls/So+tFrYRMetWxzpwIZRCVQnS8K1EV2VxpgqAvRMTV LxkmaJG4Kdo1ZTgm/lk1O84ioe5BLeKfh+dwFjdDzmJd8HiMN2/kRS26zGALw8hO R5vy8Dvr1Q88AtfczhRFnA2vBbrojCMKc/HND0R7UAmN2dKw9Sj0Dey4mX4MrHNx cwT6MUrv5ld1l6zZY2VISs61py43xp81RNSV6blrlcxFLLMJmGTP4LQcE3TSUJdS uhRZcdJk49O4+A== -----END CERTIFICATE-----Generated at Thu Jan 1 08:46:11 2026 by rpki-client