This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft File: nD_Ua11gbBzKtVixc24mIaS8BAM.mft (raw, json) Hash identifier: v2crnxz+/4LXzMA/7Zd6/XjhOWrHBhg/RAztw8ddPAc= Subject key identifier: 09:64:C7:E4:8D:BB:46:7F:D1:6A:BB:A6:9F:87:8F:B9:60:52:A1:73 Authority key identifier: 9C:3F:D4:6B:5D:60:6C:1C:CA:B5:58:B1:73:6E:26:21:A4:BC:04:03 Certificate issuer: /CN=9c3fd46b5d606c1ccab558b1736e2621a4bc0403 Certificate serial: 019B7892D9139EF4C354C6B98EF9EBF7E673 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft Manifest number: 0A34 Signing time: Thu 01 Jan 2026 08:00:48 +0000 Manifest this update: Thu 01 Jan 2026 08:00:48 +0000 Manifest next update: Fri 02 Jan 2026 08:00:48 +0000 Files and hashes: 1: nD_Ua11gbBzKtVixc24mIaS8BAM.crl (hash: Fy2ML1urA9tFw7iU4Fhi0EguZCYZ/GcWShqn1R/mBVU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 08:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:92:d9:13:9e:f4:c3:54:c6:b9:8e:f9:eb:f7:e6:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3fd46b5d606c1ccab558b1736e2621a4bc0403 Validity Not Before: Jan 1 08:00:48 2026 GMT Not After : Jan 2 08:00:48 2026 GMT Subject: CN=0964c7e48dbb467fd16abba69f878fb96052a173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9e:49:9a:6c:30:a4:95:1d:7a:75:65:ff:16: 5b:58:d3:49:f7:6a:f0:6c:8b:e1:be:1c:c0:19:12: e7:14:f8:0a:d8:36:40:9c:49:07:cf:b4:4a:b0:19: 43:b7:3f:90:0b:c0:c5:4e:c6:92:a4:26:26:6f:48: 98:6d:13:34:c8:99:d0:8f:8f:34:df:10:aa:71:ca: 5c:22:81:47:ef:32:0c:73:1d:de:b0:4f:85:7b:e3: 1b:9f:c1:50:b5:08:12:c2:10:52:bf:cd:da:86:9a: 71:91:4d:fe:80:a1:a4:3d:44:43:51:3c:d0:f8:3e: 1d:bf:64:f4:51:b6:09:7c:87:8c:b8:2d:69:f6:57: b0:d3:8e:d1:ee:e4:70:eb:61:80:ae:ba:2c:62:cf: 48:c2:45:42:bf:d9:11:04:59:a1:dc:4a:e8:7c:b8: 5e:0b:dc:3a:38:87:35:af:8e:bd:28:99:7d:32:5e: b8:d7:4d:4c:ad:9c:d5:93:84:f2:9c:be:64:5c:55: 96:c5:3d:ee:62:11:8b:8e:c5:ed:ad:2e:79:ee:a3: c1:b7:0b:a2:ad:a9:6e:ea:fb:a4:7d:e7:b6:9e:04: e0:9b:cb:66:71:23:33:cb:25:bc:34:c7:3d:4a:47: f5:7e:21:c2:b1:8b:13:13:9d:68:81:20:21:8c:cf: e9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:64:C7:E4:8D:BB:46:7F:D1:6A:BB:A6:9F:87:8F:B9:60:52:A1:73 X509v3 Authority Key Identifier: keyid:9C:3F:D4:6B:5D:60:6C:1C:CA:B5:58:B1:73:6E:26:21:A4:BC:04:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:33:76:f0:d6:18:4b:d8:84:6c:0f:e9:3f:29:85:bd:6b:5b: 02:75:7d:f1:ec:f7:11:28:47:8f:61:45:ae:3d:18:50:0a:a5: 3a:2a:30:f7:e5:41:e3:f6:dc:a7:f5:42:c9:40:88:41:56:77: 3d:3c:40:2c:01:eb:24:89:11:2e:e9:50:d2:5a:c4:7d:3c:24: c5:bf:b3:d9:5c:4f:5c:5d:88:44:68:e0:ec:17:63:51:57:0d: a4:30:11:c3:65:69:1b:b8:6a:9f:34:e9:58:cb:b5:2e:52:f3: 9d:ad:16:00:41:6e:ee:c8:5f:44:55:28:d1:c1:e1:bc:b8:cf: 07:b6:9e:5d:37:f6:3c:b9:cd:6e:bc:c1:e0:60:2d:fd:4c:70: 12:16:e2:a3:48:29:65:f6:05:4c:78:de:33:c5:e9:83:03:cc: e6:67:67:fc:19:6d:84:39:9f:1c:e8:c9:18:7b:7c:05:56:a9: 75:22:73:b7:2d:39:19:18:e7:28:3f:6f:bb:65:55:34:c4:a4: 63:75:f4:92:6f:19:2a:0e:28:54:07:2f:b6:13:d0:e8:82:e7: 46:e7:7a:34:51:37:20:73:fb:bf:68:41:e9:1a:38:18:d4:35: dc:99:ba:5b:e5:89:e2:6e:34:78:40:01:94:40:d4:a7:2d:d5: 4c:9e:60:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4ktkTnvTDVMa5jvnr9+ZzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljM2ZkNDZiNWQ2MDZjMWNjYWI1NThiMTczNmUyNjIxYTRi YzA0MDMwHhcNMjYwMTAxMDgwMDQ4WhcNMjYwMTAyMDgwMDQ4WjAzMTEwLwYDVQQD EygwOTY0YzdlNDhkYmI0NjdmZDE2YWJiYTY5Zjg3OGZiOTYwNTJhMTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv55JmmwwpJUdenVl/xZbWNNJ92rw bIvhvhzAGRLnFPgK2DZAnEkHz7RKsBlDtz+QC8DFTsaSpCYmb0iYbRM0yJnQj480 3xCqccpcIoFH7zIMcx3esE+Fe+Mbn8FQtQgSwhBSv83ahppxkU3+gKGkPURDUTzQ +D4dv2T0UbYJfIeMuC1p9lew047R7uRw62GArrosYs9IwkVCv9kRBFmh3ErofLhe C9w6OIc1r469KJl9Ml64101MrZzVk4TynL5kXFWWxT3uYhGLjsXtrS557qPBtwui ralu6vukfee2ngTgm8tmcSMzyyW8NMc9Skf1fiHCsYsTE51ogSAhjM/pQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAlkx+SNu0Z/0Wq7pp+Hj7lgUqFzMB8GA1UdIwQY MBaAFJw/1GtdYGwcyrVYsXNuJiGkvAQDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkRfVWExMWdiQnpLdFZpeGMyNG1JYVM4QkFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81Y2VkMjUtOTA5Ni00NzUwLTgyMTkt MGIzMWMzMzJkNTBkLzEvbkRfVWExMWdiQnpLdFZpeGMyNG1JYVM4QkFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi81Y2VkMjUtOTA5Ni00NzUwLTgyMTktMGIzMWMzMzJkNTBk LzEvbkRfVWExMWdiQnpLdFZpeGMyNG1JYVM4QkFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqzN28NYY S9iEbA/pPymFvWtbAnV98ez3EShHj2FFrj0YUAqlOiow9+VB4/bcp/VCyUCIQVZ3 PTxALAHrJIkRLulQ0lrEfTwkxb+z2VxPXF2IRGjg7BdjUVcNpDARw2VpG7hqnzTp WMu1LlLzna0WAEFu7shfRFUo0cHhvLjPB7aeXTf2PLnNbrzB4GAt/UxwEhbio0gp ZfYFTHjeM8XpgwPM5mdn/BlthDmfHOjJGHt8BVapdSJzty05GRjnKD9vu2VVNMSk Y3X0km8ZKg4oVAcvthPQ6ILnRud6NFE3IHP7v2hB6Ro4GNQ13Jm6W+WJ4m40eEAB lEDUpy3VTJ5gJQ== -----END CERTIFICATE-----Generated at Thu Jan 1 12:32:13 2026 by rpki-client