This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft File: lKTi_J7qzc9bD1CrkyhM07CUIXE.mft (raw, json) Hash identifier: MlhtlUtgYpsjMxJ2R+uwOXONKmPg2ocI3kNHJ6Z6cII= Subject key identifier: B0:B9:CD:33:3B:E6:3E:51:53:5B:F2:DF:AB:73:93:16:CF:45:59:EB Authority key identifier: 94:A4:E2:FC:9E:EA:CD:CF:5B:0F:50:AB:93:28:4C:D3:B0:94:21:71 Certificate issuer: /CN=94a4e2fc9eeacdcf5b0f50ab93284cd3b0942171 Certificate serial: 019B785C3F2C907A999E2B51EED2033FD383 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft Manifest number: 0F66 Signing time: Thu 01 Jan 2026 07:01:09 +0000 Manifest this update: Thu 01 Jan 2026 07:01:09 +0000 Manifest next update: Fri 02 Jan 2026 07:01:09 +0000 Files and hashes: 1: lKTi_J7qzc9bD1CrkyhM07CUIXE.crl (hash: vxekYGm4jzZh5eDTDJpVqYZGAs+c8/7NG4qTl9xuzSM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:5c:3f:2c:90:7a:99:9e:2b:51:ee:d2:03:3f:d3:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94a4e2fc9eeacdcf5b0f50ab93284cd3b0942171 Validity Not Before: Jan 1 07:01:09 2026 GMT Not After : Jan 2 07:01:09 2026 GMT Subject: CN=b0b9cd333be63e51535bf2dfab739316cf4559eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f6:d3:cd:1e:c4:db:cf:0f:ce:bf:f0:19:1a: b8:bf:c3:2a:48:d3:ca:19:24:a6:52:87:0f:ff:f7: 70:a9:2d:ba:f9:8b:a2:55:3b:62:bf:00:78:1a:63: ca:b7:5d:2b:e7:1e:30:46:51:f1:5d:10:52:23:97: 1b:7b:d8:ae:52:25:6e:7d:a8:8f:cb:f5:40:3b:39: 76:bc:23:42:ba:87:f7:f5:b9:ca:a0:4e:3c:fa:eb: 18:06:95:cf:26:23:f3:3b:93:38:1c:46:c8:24:d9: 27:51:33:1f:27:0e:d4:11:ed:9b:fd:29:4e:9b:4b: c0:0d:2d:43:9f:8a:63:7e:07:79:97:e7:7c:78:1a: 3d:99:7e:e8:87:c8:04:50:df:5e:ba:bb:ee:3f:dc: 38:6c:d2:6a:7e:64:0a:34:f3:20:cd:7b:09:e3:4f: 61:8d:a5:6d:70:a2:b1:e7:28:c1:59:aa:b4:a1:7c: d4:1b:fb:bb:af:24:dd:79:df:74:84:0f:d3:91:5f: 76:1d:05:79:d1:23:0d:ab:f3:02:78:bd:00:3d:23: ab:e0:36:34:ea:a6:8e:de:f5:90:d6:09:dd:c1:e1: 72:4d:e4:3d:48:43:3a:d3:fe:8b:42:76:6d:ce:4b: af:6b:4b:ef:00:0f:a2:c7:e6:d2:ff:d8:21:92:5a: da:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B9:CD:33:3B:E6:3E:51:53:5B:F2:DF:AB:73:93:16:CF:45:59:EB X509v3 Authority Key Identifier: keyid:94:A4:E2:FC:9E:EA:CD:CF:5B:0F:50:AB:93:28:4C:D3:B0:94:21:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:4a:9f:7b:6c:6a:f4:a4:6a:c6:ac:a9:65:18:1a:36:71:b7: 40:46:f7:b3:7d:e0:ce:fe:66:3f:19:17:df:28:dd:6d:71:0d: 92:4a:f7:e5:68:54:92:4b:4b:dd:c8:cc:b2:d3:7f:e8:41:8d: a1:b2:6e:9a:86:4b:f0:ef:04:6d:ed:51:08:a0:99:d0:df:04: 61:65:6b:e5:28:1c:0e:78:a8:de:ea:e3:63:f8:14:4f:67:c5: 35:8b:f1:6f:60:f8:6e:ed:4f:54:ab:78:36:93:a5:d0:a2:42: 15:77:68:da:a8:32:6f:1b:c3:7b:52:69:97:55:a4:b9:8c:de: 6a:b9:81:56:0d:bb:e6:8c:a0:0f:f3:63:3e:85:d3:f8:bd:d2: 0e:18:90:0b:18:a8:47:c8:5f:f9:10:48:1a:20:5a:40:67:49: 74:51:ca:1a:2f:3b:cf:ce:94:26:5f:b3:e3:eb:49:e5:53:04: ed:9d:5f:a1:01:30:48:93:b4:9c:5a:0c:9e:ce:bd:8b:e5:7b: 71:d2:5e:1b:5b:dc:e6:24:c6:22:97:30:23:d5:f5:45:f9:0c: 18:77:60:82:9d:59:36:67:3d:88:4b:fa:50:96:e7:a9:48:d7: cd:c2:67:45:1b:2f:76:2c:7e:56:ba:fe:cf:84:b0:65:3a:7a: 9d:5c:c8:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4XD8skHqZnitR7tIDP9ODMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0YTRlMmZjOWVlYWNkY2Y1YjBmNTBhYjkzMjg0Y2QzYjA5 NDIxNzEwHhcNMjYwMTAxMDcwMTA5WhcNMjYwMTAyMDcwMTA5WjAzMTEwLwYDVQQD EyhiMGI5Y2QzMzNiZTYzZTUxNTM1YmYyZGZhYjczOTMxNmNmNDU1OWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfbTzR7E288Pzr/wGRq4v8MqSNPK GSSmUocP//dwqS26+YuiVTtivwB4GmPKt10r5x4wRlHxXRBSI5cbe9iuUiVufaiP y/VAOzl2vCNCuof39bnKoE48+usYBpXPJiPzO5M4HEbIJNknUTMfJw7UEe2b/SlO m0vADS1Dn4pjfgd5l+d8eBo9mX7oh8gEUN9eurvuP9w4bNJqfmQKNPMgzXsJ409h jaVtcKKx5yjBWaq0oXzUG/u7ryTded90hA/TkV92HQV50SMNq/MCeL0APSOr4DY0 6qaO3vWQ1gndweFyTeQ9SEM60/6LQnZtzkuva0vvAA+ix+bS/9ghklraRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLC5zTM75j5RU1vy36tzkxbPRVnrMB8GA1UdIwQY MBaAFJSk4vye6s3PWw9Qq5MoTNOwlCFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEtUaV9KN3F6YzliRDFDcmt5aE0wN0NVSVhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZmY3YTctMjdjYi00MDcyLWIzM2It MDI0OGQ2YWZkNjNmLzEvbEtUaV9KN3F6YzliRDFDcmt5aE0wN0NVSVhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZmY3YTctMjdjYi00MDcyLWIzM2ItMDI0OGQ2YWZkNjNm LzEvbEtUaV9KN3F6YzliRDFDcmt5aE0wN0NVSVhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHEqfe2xq 9KRqxqypZRgaNnG3QEb3s33gzv5mPxkX3yjdbXENkkr35WhUkktL3cjMstN/6EGN obJumoZL8O8Ebe1RCKCZ0N8EYWVr5SgcDnio3urjY/gUT2fFNYvxb2D4bu1PVKt4 NpOl0KJCFXdo2qgybxvDe1Jpl1WkuYzearmBVg275oygD/NjPoXT+L3SDhiQCxio R8hf+RBIGiBaQGdJdFHKGi87z86UJl+z4+tJ5VME7Z1foQEwSJO0nFoMns69i+V7 cdJeG1vc5iTGIpcwI9X1RfkMGHdggp1ZNmc9iEv6UJbnqUjXzcJnRRsvdix+Vrr+ z4SwZTp6nVzIEg== -----END CERTIFICATE-----Generated at Thu Jan 1 08:46:18 2026 by rpki-client