This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft File: k7yN24Ay4YTJK_4gbjKPLAXXjks.mft (raw, json) Hash identifier: J0UY4+gRrBvkG4Q0gaLY8pz/6dfir4B3yFdugkRm8UU= Subject key identifier: 13:F8:0C:57:7D:4C:12:5A:73:59:C2:DF:DF:06:1C:F6:45:45:5B:73 Authority key identifier: 93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B Certificate issuer: /CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b Certificate serial: 019B7937793CEEF25AB5FF23F4ACC80FE0FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft Manifest number: 156E Signing time: Thu 01 Jan 2026 11:00:37 +0000 Manifest this update: Thu 01 Jan 2026 11:00:37 +0000 Manifest next update: Fri 02 Jan 2026 11:00:37 +0000 Files and hashes: 1: UIy9gUZXV88enoE-3KFhIHspXtA.roa (hash: 8X5vRqd+KBox7ge2TIXCQWKZfqoX627wmgj0tLtcDE8=) 2: k7yN24Ay4YTJK_4gbjKPLAXXjks.crl (hash: vc39fDKdTHkGSQToQTN7gNFkHxpggyRAwJoqTmdIRkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:37:79:3c:ee:f2:5a:b5:ff:23:f4:ac:c8:0f:e0:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b Validity Not Before: Jan 1 11:00:37 2026 GMT Not After : Jan 2 11:00:37 2026 GMT Subject: CN=13f80c577d4c125a7359c2dfdf061cf645455b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:75:2a:7f:5f:9e:7f:c0:0f:27:e1:b5:cb:cf: 11:21:63:09:ba:1e:0f:a0:87:78:be:37:a5:1f:a3: 71:d1:5a:d5:64:e9:79:9c:c8:21:d8:60:33:d6:24: ab:b4:7e:cd:b2:4a:0b:2d:80:6c:18:d7:f3:b6:25: f8:8a:03:a2:6c:ce:41:2e:78:a7:b6:b9:41:7d:89: 73:d9:7c:86:05:60:0f:72:21:cc:c2:5a:e2:57:04: f1:9b:a9:3b:1c:57:5d:45:41:aa:09:47:f5:17:24: f1:69:f6:ef:51:37:5f:be:96:5e:d2:e4:d8:9f:63: 54:62:0a:50:43:0f:71:69:35:4c:9d:5a:73:cc:00: fe:7c:0d:51:14:18:e8:45:50:26:3e:33:ea:32:08: 9f:d3:06:93:50:c7:82:16:01:29:9b:fe:d3:d9:6e: 4d:8b:f8:50:95:b2:0b:90:70:24:f0:97:7c:fe:59: 29:fa:12:b3:59:44:ba:8a:4c:9d:f1:27:43:39:57: f0:09:5d:28:ac:e6:f0:64:e9:d8:e8:60:84:a2:ce: 5c:db:e9:5d:f1:e2:74:01:53:f2:7b:1f:1d:1b:08: 79:82:4a:75:eb:59:ce:0c:5a:a7:18:ab:d9:90:97: b1:c8:02:35:fe:30:ac:05:94:aa:2b:82:98:1b:ee: 6f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F8:0C:57:7D:4C:12:5A:73:59:C2:DF:DF:06:1C:F6:45:45:5B:73 X509v3 Authority Key Identifier: keyid:93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:24:37:ef:b5:dc:b9:1e:8e:0b:ec:95:55:ac:9e:65:e9:01: e8:d8:a3:c8:c8:a3:2e:d6:fe:47:a2:64:56:8c:f9:f3:f1:56: fc:20:35:6a:16:64:18:25:c1:9f:5a:69:28:3f:cd:2f:f0:49: 0a:fa:a9:3d:7b:48:b4:dc:35:03:21:40:ac:39:8f:f0:3f:86: e5:c5:12:57:b5:b6:62:36:f5:9d:b8:14:63:85:5a:3b:8f:e3: 98:4d:7e:f4:27:51:b8:08:50:fe:87:1e:4c:1c:a6:07:17:ac: b7:ba:36:7a:83:09:09:65:00:81:0b:46:51:06:25:d5:6a:30: 52:1f:82:5e:ec:94:9e:fd:df:71:95:7d:68:bd:5d:18:46:d6: 4e:ef:dc:e7:cc:f2:9a:e6:fe:a5:de:bc:f8:f1:5d:8a:b1:c3: 84:77:bb:24:5e:11:b2:57:be:a9:1a:b4:f1:12:17:dd:27:39: 29:1d:9e:bb:44:72:77:de:ec:06:ce:55:25:6a:44:d8:9a:6c: 05:80:40:80:0a:ed:10:50:47:71:f9:71:b5:81:0e:2a:ac:ab: a3:8d:d2:51:03:51:35:ca:dd:3f:22:75:90:c6:17:c0:a4:85: 7b:cf:d3:86:3f:13:f0:6f:59:d8:04:7f:32:bc:02:37:ce:70: a0:aa:02:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5N3k87vJatf8j9KzID+D7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYmM4ZGRiODAzMmUxODRjOTJiZmUyMDZlMzI4ZjJjMDVk NzhlNGIwHhcNMjYwMTAxMTEwMDM3WhcNMjYwMTAyMTEwMDM3WjAzMTEwLwYDVQQD EygxM2Y4MGM1NzdkNGMxMjVhNzM1OWMyZGZkZjA2MWNmNjQ1NDU1YjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXUqf1+ef8APJ+G1y88RIWMJuh4P oId4vjelH6Nx0VrVZOl5nMgh2GAz1iSrtH7NskoLLYBsGNfztiX4igOibM5BLnin trlBfYlz2XyGBWAPciHMwlriVwTxm6k7HFddRUGqCUf1FyTxafbvUTdfvpZe0uTY n2NUYgpQQw9xaTVMnVpzzAD+fA1RFBjoRVAmPjPqMgif0waTUMeCFgEpm/7T2W5N i/hQlbILkHAk8Jd8/lkp+hKzWUS6ikyd8SdDOVfwCV0orObwZOnY6GCEos5c2+ld 8eJ0AVPyex8dGwh5gkp161nODFqnGKvZkJexyAI1/jCsBZSqK4KYG+5vywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBP4DFd9TBJac1nC398GHPZFRVtzMB8GA1UdIwQY MBaAFJO8jduAMuGEySv+IG4yjywF145LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazd5TjI0QXk0WVRKS180Z2JqS1BMQVhYamtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mODEzY2YtMGQ2YS00Nzk4LTk4ZjEt YjkxNjc3NDhhOGEzLzEvazd5TjI0QXk0WVRKS180Z2JqS1BMQVhYamtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9mODEzY2YtMGQ2YS00Nzk4LTk4ZjEtYjkxNjc3NDhhOGEz LzEvazd5TjI0QXk0WVRKS180Z2JqS1BMQVhYamtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvSQ377Xc uR6OC+yVVayeZekB6NijyMijLtb+R6JkVoz58/FW/CA1ahZkGCXBn1ppKD/NL/BJ CvqpPXtItNw1AyFArDmP8D+G5cUSV7W2Yjb1nbgUY4VaO4/jmE1+9CdRuAhQ/oce TBymBxest7o2eoMJCWUAgQtGUQYl1WowUh+CXuyUnv3fcZV9aL1dGEbWTu/c58zy mub+pd68+PFdirHDhHe7JF4Rsle+qRq08RIX3Sc5KR2eu0Ryd97sBs5VJWpE2Jps BYBAgArtEFBHcflxtYEOKqyro43SUQNRNcrdPyJ1kMYXwKSFe8/Thj8T8G9Z2AR/ MrwCN85woKoCYQ== -----END CERTIFICATE-----Generated at Thu Jan 1 18:03:15 2026 by rpki-client