This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft File: 0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft (raw, json) Hash identifier: YQauwWam5DOygRK3lBpZRTxe6OUCGqjvoJGeUpgPJDg= Subject key identifier: 7C:85:B4:BD:5F:1A:1E:CC:55:84:BC:D2:D1:F4:0E:DA:1F:E8:23:D6 Authority key identifier: D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06 Certificate issuer: /CN=d2b57f59782f941b5d2eb3d4286d5911b179e006 Certificate serial: 019BB139BC22604A16C26A9FF26A30FBA9ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft Manifest number: 17C2 Signing time: Mon 12 Jan 2026 08:01:49 +0000 Manifest this update: Mon 12 Jan 2026 08:01:49 +0000 Manifest next update: Tue 13 Jan 2026 08:01:49 +0000 Files and hashes: 1: 0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl (hash: CqoOn8fCxK8bQkUovhPeKXIigu4RF1UyC8g8Hh27w0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:39:bc:22:60:4a:16:c2:6a:9f:f2:6a:30:fb:a9:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2b57f59782f941b5d2eb3d4286d5911b179e006 Validity Not Before: Jan 12 08:01:49 2026 GMT Not After : Jan 13 08:01:49 2026 GMT Subject: CN=7c85b4bd5f1a1ecc5584bcd2d1f40eda1fe823d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6d:e1:2b:0f:1a:1a:0a:3f:d5:20:40:57:f6: fe:92:0b:01:8c:d9:18:b8:de:4c:c8:35:50:57:87: e6:91:3d:4b:3b:57:fc:b4:f7:20:28:91:40:43:f3: 0f:79:95:bb:25:dc:06:86:eb:31:dc:af:02:e9:44: bc:a5:ab:db:10:dc:a1:3b:b2:f3:a2:e7:f6:d9:ff: 6b:a2:26:ce:35:ed:c0:fc:98:08:6b:89:59:91:1d: 19:4a:89:a8:98:be:1d:07:6b:ac:49:f6:5f:b5:e2: c4:4e:78:bb:66:26:38:69:41:c6:0c:a7:7c:d0:46: 2e:9d:c9:86:6c:18:27:7e:cd:88:90:8d:08:aa:3b: 54:9d:76:af:81:af:b6:bd:61:5a:66:f2:a0:72:ae: 57:74:f8:10:7e:56:92:13:5e:d6:38:1f:a2:ad:14: 6b:e2:b2:12:9e:ad:55:38:71:28:02:e1:0f:43:a3: f0:7f:fc:f7:b5:24:da:b1:de:00:21:7c:7c:32:f5: ee:66:61:82:a7:14:5a:9e:2f:a5:55:ba:6a:52:60: 96:2e:48:d1:02:74:c9:fc:10:62:55:eb:13:56:38: 47:30:e3:ac:c5:94:41:8f:ba:cf:e7:99:d2:73:60: 2a:e7:61:d4:41:e0:31:9f:3a:f6:a5:18:6b:51:db: 6c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:85:B4:BD:5F:1A:1E:CC:55:84:BC:D2:D1:F4:0E:DA:1F:E8:23:D6 X509v3 Authority Key Identifier: keyid:D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:41:02:2a:6a:db:03:65:32:ba:f3:f1:35:78:77:a0:74:b8: 3c:25:e5:99:d7:cc:ac:bc:4a:3c:e1:7e:f9:08:42:38:87:ec: 69:37:2c:76:40:21:ef:99:0d:ed:43:3f:85:d4:cd:f7:b4:f9: b5:97:d8:93:8c:08:24:d7:85:11:70:5d:0d:b6:b2:b1:36:50: 86:c2:88:f7:44:7d:cb:96:52:b3:f2:b0:94:33:e5:ae:72:b9: 5a:0e:4e:19:d5:d9:07:05:12:c9:35:c3:0d:78:28:a8:8e:ae: b1:ac:b1:a6:93:cb:47:e9:cf:6a:2a:6b:31:2f:48:8b:ec:1e: d6:a4:a6:6f:68:32:31:16:41:30:f1:de:ad:f3:86:a5:e2:13: 93:71:bc:67:c5:c8:64:54:d5:ab:91:a9:3b:41:eb:76:cc:e7: d0:4d:41:b3:5e:1c:1b:cc:d4:ab:5e:06:70:ef:6f:b6:99:f3: 82:e2:32:28:03:b6:7f:31:f4:6b:5c:53:dd:08:01:f4:c7:d2: 71:9e:c7:bb:55:c5:60:9e:3a:38:56:8e:20:28:e4:6a:ea:b5: e0:ed:a8:f3:87:03:ac:4e:42:ff:2e:4c:77:50:2e:ab:97:6c: c0:4d:5c:b4:1e:ed:2b:b3:6f:8a:68:db:ea:ca:3a:85:53:22: e7:93:f3:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuxObwiYEoWwmqf8mow+6ntMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYjU3ZjU5NzgyZjk0MWI1ZDJlYjNkNDI4NmQ1OTExYjE3 OWUwMDYwHhcNMjYwMTEyMDgwMTQ5WhcNMjYwMTEzMDgwMTQ5WjAzMTEwLwYDVQQD Eyg3Yzg1YjRiZDVmMWExZWNjNTU4NGJjZDJkMWY0MGVkYTFmZTgyM2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW3hKw8aGgo/1SBAV/b+kgsBjNkY uN5MyDVQV4fmkT1LO1f8tPcgKJFAQ/MPeZW7JdwGhusx3K8C6US8pavbENyhO7Lz ouf22f9roibONe3A/JgIa4lZkR0ZSomomL4dB2usSfZfteLETni7ZiY4aUHGDKd8 0EYuncmGbBgnfs2IkI0IqjtUnXavga+2vWFaZvKgcq5XdPgQflaSE17WOB+irRRr 4rISnq1VOHEoAuEPQ6Pwf/z3tSTasd4AIXx8MvXuZmGCpxRani+lVbpqUmCWLkjR AnTJ/BBiVesTVjhHMOOsxZRBj7rP55nSc2Aq52HUQeAxnzr2pRhrUdtsqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHyFtL1fGh7MVYS80tH0Dtof6CPWMB8GA1UdIwQY MBaAFNK1f1l4L5QbXS6z1ChtWRGxeeAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NTVlMzUtODdjYy00NDhlLWI3Yjct MDdjYjIyYmY0MjRkLzEvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi84NTVlMzUtODdjYy00NDhlLWI3YjctMDdjYjIyYmY0MjRk LzEvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApkECKmrb A2UyuvPxNXh3oHS4PCXlmdfMrLxKPOF++QhCOIfsaTcsdkAh75kN7UM/hdTN97T5 tZfYk4wIJNeFEXBdDbaysTZQhsKI90R9y5ZSs/KwlDPlrnK5Wg5OGdXZBwUSyTXD DXgoqI6usayxppPLR+nPaiprMS9Ii+we1qSmb2gyMRZBMPHerfOGpeITk3G8Z8XI ZFTVq5GpO0Hrdszn0E1Bs14cG8zUq14GcO9vtpnzguIyKAO2fzH0a1xT3QgB9MfS cZ7Hu1XFYJ46OFaOICjkauq14O2o84cDrE5C/y5Md1Auq5dswE1ctB7tK7Nvimjb 6so6hVMi55Pzmg== -----END CERTIFICATE-----Generated at Mon Jan 12 10:18:57 2026 by rpki-client