This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.mft File: V-L2mlyy1YBNIamwRboxSusaqh8.mft (raw, json) Hash identifier: HhnRh9k6SCFKAnD6ee8lFCIXXVAuUT8wC5vqHOHaoUw= Subject key identifier: F1:CE:88:79:BF:56:FF:BE:D0:6C:18:B7:8B:E3:A7:07:28:FF:B5:DA Authority key identifier: 57:E2:F6:9A:5C:B2:D5:80:4D:21:A9:B0:45:BA:31:4A:EB:1A:AA:1F Certificate issuer: /CN=57e2f69a5cb2d5804d21a9b045ba314aeb1aaa1f Certificate serial: 019BB0CC00E4AE498F83C0DEEEC2EAFF2194 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-L2mlyy1YBNIamwRboxSusaqh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.mft Manifest number: 17C1 Signing time: Mon 12 Jan 2026 06:01:58 +0000 Manifest this update: Mon 12 Jan 2026 06:01:58 +0000 Manifest next update: Tue 13 Jan 2026 06:01:58 +0000 Files and hashes: 1: V-L2mlyy1YBNIamwRboxSusaqh8.crl (hash: LI7NlauPzEv0u0svl8cNeHTTICS+4XbfRRUrv6SqcGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.crl rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.mft rsync://rpki.ripe.net/repository/DEFAULT/V-L2mlyy1YBNIamwRboxSusaqh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 06:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:cc:00:e4:ae:49:8f:83:c0:de:ee:c2:ea:ff:21:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57e2f69a5cb2d5804d21a9b045ba314aeb1aaa1f Validity Not Before: Jan 12 06:01:58 2026 GMT Not After : Jan 13 06:01:58 2026 GMT Subject: CN=f1ce8879bf56ffbed06c18b78be3a70728ffb5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:39:53:fb:c5:c8:7f:95:69:b9:8d:a2:76:ab: b3:d9:de:5b:de:30:be:43:9e:f2:ae:12:8d:3b:47: b5:9b:41:ca:98:38:25:a0:94:81:85:fa:26:1b:fa: 2b:1f:33:6c:c3:17:6d:0f:06:42:78:e1:93:64:c3: 87:27:3a:10:69:be:39:81:f4:68:c2:87:ca:86:95: 76:66:ce:59:da:7c:00:6b:ef:2f:99:69:13:14:86: 99:f0:19:6e:8a:c0:81:3c:09:71:97:af:01:da:9a: 87:91:57:2e:03:8f:5b:94:2e:e4:b3:1c:8e:2b:8f: 1d:8b:5b:df:46:85:06:0c:07:33:f4:01:cc:dc:ab: 31:aa:48:6c:7c:8f:e2:de:e6:a1:18:54:ee:7d:e0: d2:48:6f:c7:c0:45:ef:df:1a:66:45:41:cd:8e:45: 9f:93:85:71:bc:02:75:d8:90:23:af:9c:b4:63:1c: 67:b2:ff:5a:70:9d:48:dc:b0:de:f6:22:59:d4:40: b0:6a:fd:78:72:76:74:3d:4a:33:be:13:14:c6:d3: 00:a7:e6:42:2f:76:3d:21:b2:75:67:38:f7:05:e2: 43:98:59:b9:5a:9c:fd:00:a0:13:a1:8c:10:c8:68: a4:59:1e:14:e8:16:98:01:f3:05:37:c6:36:29:66: 90:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CE:88:79:BF:56:FF:BE:D0:6C:18:B7:8B:E3:A7:07:28:FF:B5:DA X509v3 Authority Key Identifier: keyid:57:E2:F6:9A:5C:B2:D5:80:4D:21:A9:B0:45:BA:31:4A:EB:1A:AA:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-L2mlyy1YBNIamwRboxSusaqh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:31:fc:ec:13:e8:e5:73:f5:02:70:91:e6:da:78:98:32:3d: 6f:21:6e:d3:e6:ec:eb:fc:88:76:a2:e3:ee:50:72:9b:ee:4f: 98:a5:fe:60:ba:10:b4:e8:a3:bf:de:c3:b6:53:98:6f:4b:39: 71:6f:91:f5:14:d3:b7:70:eb:3c:0d:47:ae:64:e2:65:c2:36: 5c:57:3f:43:cb:31:fe:82:9c:df:a5:80:92:56:9c:12:d6:29: b4:9f:22:22:32:cc:ef:cd:31:52:80:05:77:f5:89:99:88:28: 20:d1:86:df:b5:09:82:94:6f:8e:83:65:85:db:88:81:e4:d3: e4:a2:4e:81:d5:9a:31:32:07:9e:90:5a:73:b6:88:a4:6e:8e: 75:7b:78:c0:1e:5f:9a:43:bf:87:b3:85:96:22:44:8c:de:8d: aa:ea:bc:7c:90:fd:70:4b:83:dd:31:7f:ac:6c:6d:33:ec:c7: c8:1a:dc:a5:96:97:ab:92:a1:0e:c1:52:a4:68:ad:26:59:e0: e8:db:d1:fa:69:2f:ac:f2:ef:b1:fe:b9:0f:cd:cf:6e:4d:52: 6b:ad:db:d9:5e:a9:51:54:2f:e7:13:a1:4d:b2:ae:b4:eb:fd: 24:33:a8:e5:ca:f5:34:af:a9:73:6a:8e:53:09:56:35:c3:b4: 2b:1b:5f:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwzADkrkmPg8De7sLq/yGUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3ZTJmNjlhNWNiMmQ1ODA0ZDIxYTliMDQ1YmEzMTRhZWIx YWFhMWYwHhcNMjYwMTEyMDYwMTU4WhcNMjYwMTEzMDYwMTU4WjAzMTEwLwYDVQQD EyhmMWNlODg3OWJmNTZmZmJlZDA2YzE4Yjc4YmUzYTcwNzI4ZmZiNWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTlT+8XIf5VpuY2idquz2d5b3jC+ Q57yrhKNO0e1m0HKmDgloJSBhfomG/orHzNswxdtDwZCeOGTZMOHJzoQab45gfRo wofKhpV2Zs5Z2nwAa+8vmWkTFIaZ8BluisCBPAlxl68B2pqHkVcuA49blC7ksxyO K48di1vfRoUGDAcz9AHM3KsxqkhsfI/i3uahGFTufeDSSG/HwEXv3xpmRUHNjkWf k4VxvAJ12JAjr5y0Yxxnsv9acJ1I3LDe9iJZ1ECwav14cnZ0PUozvhMUxtMAp+ZC L3Y9IbJ1Zzj3BeJDmFm5Wpz9AKAToYwQyGikWR4U6BaYAfMFN8Y2KWaQoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHOiHm/Vv++0GwYt4vjpwco/7XaMB8GA1UdIwQY MBaAFFfi9ppcstWATSGpsEW6MUrrGqofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVi1MMm1seXkxWUJOSWFtd1Jib3hTdXNhcWg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81Mzk3NzEtMDQ2YS00MzY5LWJkMjYt NjZlMDAwOTQyMmZiLzEvVi1MMm1seXkxWUJOSWFtd1Jib3hTdXNhcWg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC81Mzk3NzEtMDQ2YS00MzY5LWJkMjYtNjZlMDAwOTQyMmZi LzEvVi1MMm1seXkxWUJOSWFtd1Jib3hTdXNhcWg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzH87BPo 5XP1AnCR5tp4mDI9byFu0+bs6/yIdqLj7lBym+5PmKX+YLoQtOijv97DtlOYb0s5 cW+R9RTTt3DrPA1HrmTiZcI2XFc/Q8sx/oKc36WAklacEtYptJ8iIjLM780xUoAF d/WJmYgoINGG37UJgpRvjoNlhduIgeTT5KJOgdWaMTIHnpBac7aIpG6OdXt4wB5f mkO/h7OFliJEjN6Nquq8fJD9cEuD3TF/rGxtM+zHyBrcpZaXq5KhDsFSpGitJlng 6NvR+mkvrPLvsf65D83Pbk1Sa63b2V6pUVQv5xOhTbKutOv9JDOo5cr1NK+pc2qO UwlWNcO0Kxtfhg== -----END CERTIFICATE-----Generated at Mon Jan 12 14:31:02 2026 by rpki-client