This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json) Hash identifier: Ma6jrvMNlRZvZoauaJL/ASTTo/5Bq2QlzEGXaR8ABWw= Subject key identifier: 91:D2:0C:3E:03:64:79:FA:5E:16:FF:8F:0D:A7:53:A6:D8:10:41:1A Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a Certificate serial: 019B815EF08D817F575B78E45FF13DB71D24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft Manifest number: 17A9 Signing time: Sat 03 Jan 2026 01:00:41 +0000 Manifest this update: Sat 03 Jan 2026 01:00:41 +0000 Manifest next update: Sun 04 Jan 2026 01:00:41 +0000 Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: 8u4iNdcgcTo1sfDHDXfy2ONP5uwij5Akjkk8TgluDBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:81:5e:f0:8d:81:7f:57:5b:78:e4:5f:f1:3d:b7:1d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a Validity Not Before: Jan 3 01:00:41 2026 GMT Not After : Jan 4 01:00:41 2026 GMT Subject: CN=91d20c3e036479fa5e16ff8f0da753a6d810411a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:47:13:bc:ed:e9:e6:fe:8d:a7:99:5b:5a:d1: ff:8c:08:91:fe:02:54:a1:9d:9f:15:0b:08:e9:09: f1:44:e8:b0:2e:a4:6f:9e:6d:61:f6:ed:00:3f:b5: 88:f3:22:3c:92:4b:13:80:8c:7e:31:52:8e:b0:7c: 68:92:1c:bc:dc:1b:f1:ad:ab:9f:a2:85:4a:16:af: 71:73:95:0a:ed:75:42:2a:b4:33:75:8c:7c:71:dc: 42:f0:07:95:06:e1:2b:e5:b3:4a:17:1b:71:5f:1d: 35:86:6c:5a:df:63:cc:17:a2:25:d4:a7:5e:39:81: 58:5c:c4:35:bf:3c:61:b4:17:a0:ab:8f:e0:03:eb: 68:23:f4:ee:37:95:b2:26:0c:8d:81:a9:81:7f:6a: f1:38:28:9a:b4:7d:ff:07:bd:1c:26:cf:c3:e4:f2: ce:23:9b:d9:b2:48:9c:af:b6:88:84:e9:1f:aa:a2: 28:54:2d:f2:04:00:25:87:5e:37:50:b7:cd:55:7b: c7:a7:df:2b:8d:1c:bc:12:c3:ac:9b:9c:87:8b:6b: 36:8c:b7:d3:9a:78:19:53:e8:13:53:6e:b6:5f:16: c5:ad:1d:ea:3e:04:1f:66:90:cd:4c:0c:d3:0c:ce: 93:62:23:12:b5:da:e0:35:5c:48:d7:53:45:8f:b9: 11:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D2:0C:3E:03:64:79:FA:5E:16:FF:8F:0D:A7:53:A6:D8:10:41:1A X509v3 Authority Key Identifier: keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3a:35:62:a3:46:c8:8e:06:93:0f:e8:a3:c4:04:62:11:4f: 8b:f6:07:4e:e1:eb:3d:88:cb:5e:bb:a3:ca:1e:2b:d5:d7:7c: 7c:f2:05:33:83:e7:e0:b9:7b:2b:7f:42:48:08:25:c3:1b:b5: c8:cd:1a:6e:e8:46:f2:7c:39:03:fd:8a:7e:19:11:b9:8e:91: db:46:40:43:5e:20:ca:d0:df:bf:9e:d1:e7:17:2e:a0:25:e4: 29:62:d8:17:6a:2e:08:ff:eb:71:8c:48:08:24:24:d3:b9:84: 6d:0a:df:d0:d8:5f:fc:cc:a4:b7:ca:17:d4:2b:fd:e2:70:27: a5:70:43:b1:99:35:c5:aa:97:76:9e:bb:c6:b8:83:8b:f8:1f: 26:ac:07:31:ba:b5:0e:07:a9:f6:2d:cf:02:b7:59:8d:8a:61: 77:8e:8a:3d:ed:54:90:9b:74:60:c7:fd:cb:3f:f8:6f:c5:d5: d8:2f:cf:2d:27:75:e6:65:e9:5b:b6:0e:92:bf:63:b5:80:fe: e7:4c:b8:cb:38:22:ba:16:71:65:8a:22:9b:f8:c4:5c:82:c3: 87:3a:cb:6e:c3:d4:54:66:d0:df:89:8d:18:67:61:41:62:9e: 5e:3d:9e:cc:23:00:af:dd:98:3e:4e:cc:d1:d0:1a:c9:f4:b1: 1f:4b:33:21 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZuBXvCNgX9XW3jkX/E9tx0kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMWEwOGRiNDYyOTViNGRlOGFmMmI5ZjkwZDZmZmM3NmNj YTMxOWEwHhcNMjYwMTAzMDEwMDQxWhcNMjYwMTA0MDEwMDQxWjAzMTEwLwYDVQQD Eyg5MWQyMGMzZTAzNjQ3OWZhNWUxNmZmOGYwZGE3NTNhNmQ4MTA0MTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUcTvO3p5v6Np5lbWtH/jAiR/gJU oZ2fFQsI6QnxROiwLqRvnm1h9u0AP7WI8yI8kksTgIx+MVKOsHxokhy83Bvxrauf ooVKFq9xc5UK7XVCKrQzdYx8cdxC8AeVBuEr5bNKFxtxXx01hmxa32PMF6Il1Kde OYFYXMQ1vzxhtBegq4/gA+toI/TuN5WyJgyNgamBf2rxOCiatH3/B70cJs/D5PLO I5vZskicr7aIhOkfqqIoVC3yBAAlh143ULfNVXvHp98rjRy8EsOsm5yHi2s2jLfT mngZU+gTU262XxbFrR3qPgQfZpDNTAzTDM6TYiMStdrgNVxI11NFj7kRgQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJHSDD4DZHn6Xhb/jw2nU6bYEEEaMB8GA1UdIwQY MBaAFPsaCNtGKVtN6K8rn5DW/8dsyjGaMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS14b0kyMFlwVzAzb3J5dWZrTmJfeDJ6S01aby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvYjhkY2YxLWJjOTMtNDU2ZC1hZDE2 LWI4ODk4ZTY2YjNlMy8xLzEteG9JMjBZcFcwM29yeXVma05iX3gyektNWm8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzMyL2I4ZGNmMS1iYzkzLTQ1NmQtYWQxNi1iODg5OGU2NmIz ZTMvMS8xLXhvSTIwWXBXMDNvcnl1ZmtOYl94MnpLTVpvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejo1 YqNGyI4Gkw/oo8QEYhFPi/YHTuHrPYjLXrujyh4r1dd8fPIFM4Pn4Ll7K39CSAgl wxu1yM0abuhG8nw5A/2KfhkRuY6R20ZAQ14gytDfv57R5xcuoCXkKWLYF2ouCP/r cYxICCQk07mEbQrf0Nhf/Mykt8oX1Cv94nAnpXBDsZk1xaqXdp67xriDi/gfJqwH Mbq1Dgep9i3PArdZjYphd46KPe1UkJt0YMf9yz/4b8XV2C/PLSd15mXpW7YOkr9j tYD+50y4yzgiuhZxZYoim/jEXILDhzrLbsPUVGbQ34mNGGdhQWKeXj2ezCMAr92Y Pk7M0dAayfSxH0szIQ== -----END CERTIFICATE-----Generated at Sat Jan 3 04:18:09 2026 by rpki-client