This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft File: cMySQTZlvWsN3lGpprVl5ywyHlI.mft (raw, json) Hash identifier: W+Xs318b8NHdD6Myr1dH4AigLOzookYrA8qE/kCTWbw= Subject key identifier: 51:6D:F9:38:B0:34:4C:1B:17:BC:A6:0D:FB:41:D6:AF:85:D1:CA:03 Authority key identifier: 70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52 Certificate issuer: /CN=70cc92413665bd6b0dde51a9a6b565e72c321e52 Certificate serial: 019BAC818FBD09C7FAE1B7F46119744C8338 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft Manifest number: 089E Signing time: Sun 11 Jan 2026 10:02:10 +0000 Manifest this update: Sun 11 Jan 2026 10:02:10 +0000 Manifest next update: Mon 12 Jan 2026 10:02:10 +0000 Files and hashes: 1: cMySQTZlvWsN3lGpprVl5ywyHlI.crl (hash: zPQFcNc65lbmMUtMeUb7LmoSrHSLI7Rxt8fNop/qsYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:81:8f:bd:09:c7:fa:e1:b7:f4:61:19:74:4c:83:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cc92413665bd6b0dde51a9a6b565e72c321e52 Validity Not Before: Jan 11 10:02:10 2026 GMT Not After : Jan 12 10:02:10 2026 GMT Subject: CN=516df938b0344c1b17bca60dfb41d6af85d1ca03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:cf:ef:29:98:03:48:d2:d8:cd:10:f7:aa:19: 5e:7f:30:1b:15:ff:01:1f:ba:36:14:67:80:7b:3e: 42:c4:0f:cc:19:97:4a:22:c7:e9:b0:1e:b4:6e:25: 6f:b0:08:1f:86:1f:13:53:82:8b:bb:ed:10:46:f8: a3:3d:37:a9:18:2c:ef:31:b7:be:0d:c4:3a:ed:70: 0a:70:4b:e1:55:5f:26:fe:c6:84:e2:55:78:d9:58: d7:f7:73:2f:a1:36:5a:23:e1:a0:1b:f6:61:8b:a0: 92:b6:71:c8:78:4e:5e:2c:89:b3:84:7d:e8:0d:e4: fd:8e:8c:f4:61:cf:88:a6:13:9a:ee:ca:5e:e6:44: da:38:a2:c2:80:7a:62:0a:7f:65:1e:49:48:cc:55: 9a:ff:86:ef:19:28:5d:69:79:6a:ed:25:d3:ab:78: 75:64:c8:b1:3d:80:1b:af:f7:50:23:a2:2f:c9:41: fb:0c:d6:6d:00:f9:2e:c4:a9:66:23:c0:f5:b7:0c: c9:49:2f:36:2d:0b:10:32:30:7f:48:6b:88:30:34: 9a:eb:c9:7a:70:a0:46:bb:e2:ca:6f:ed:73:5a:4e: fa:a2:69:93:ee:db:06:44:e7:c4:37:07:ec:93:3c: 49:4e:95:44:3d:5f:f9:61:67:23:19:a1:e7:da:e3: b7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:6D:F9:38:B0:34:4C:1B:17:BC:A6:0D:FB:41:D6:AF:85:D1:CA:03 X509v3 Authority Key Identifier: keyid:70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:c1:0a:15:ac:2a:ed:85:a3:4a:f4:95:3f:37:03:52:41:67: aa:94:a2:e1:b6:bd:da:90:e7:b5:e4:3c:1d:17:8a:39:fd:5b: d2:57:a0:a7:3e:84:3b:4f:48:72:70:ed:3b:4b:ab:8d:f7:02: 69:0e:66:ea:18:33:57:a6:7b:85:39:fa:79:fc:2d:6c:e8:96: e4:de:4d:9f:bb:b6:8d:9e:30:1b:93:fe:05:10:2b:f4:8f:e1: d1:bc:04:fb:63:32:d3:b3:88:7e:3b:a1:03:76:a0:50:82:27: 7d:b0:76:a5:af:4f:f6:93:f2:4b:89:8d:e7:6a:8b:b2:59:51: f7:a4:53:b5:3f:ef:0a:d7:a4:5a:9c:20:71:90:4f:2e:3b:f6: c0:82:c4:c5:ed:16:ed:58:4f:d9:b4:dc:ae:45:5c:7c:2c:ee: 8a:12:f8:b8:f0:91:44:09:48:60:b1:37:13:de:0c:e8:e1:7f: da:14:63:97:40:6b:61:0b:a3:b5:35:5e:c3:b3:57:41:d9:ab: 6f:80:c4:77:75:93:2e:f0:f1:b5:96:2c:4c:6c:c2:98:df:a5: 01:42:a1:3f:77:ef:ad:d4:13:cf:7a:a1:35:d8:3b:6b:5a:26: 62:9c:8e:6c:90:6a:21:c0:44:1f:87:68:0c:24:3f:b0:c2:4a: a6:e2:88:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZusgY+9Ccf64bf0YRl0TIM4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwY2M5MjQxMzY2NWJkNmIwZGRlNTFhOWE2YjU2NWU3MmMz MjFlNTIwHhcNMjYwMTExMTAwMjEwWhcNMjYwMTEyMTAwMjEwWjAzMTEwLwYDVQQD Eyg1MTZkZjkzOGIwMzQ0YzFiMTdiY2E2MGRmYjQxZDZhZjg1ZDFjYTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4M/vKZgDSNLYzRD3qhlefzAbFf8B H7o2FGeAez5CxA/MGZdKIsfpsB60biVvsAgfhh8TU4KLu+0QRvijPTepGCzvMbe+ DcQ67XAKcEvhVV8m/saE4lV42VjX93MvoTZaI+GgG/Zhi6CStnHIeE5eLImzhH3o DeT9joz0Yc+IphOa7spe5kTaOKLCgHpiCn9lHklIzFWa/4bvGShdaXlq7SXTq3h1 ZMixPYAbr/dQI6IvyUH7DNZtAPkuxKlmI8D1twzJSS82LQsQMjB/SGuIMDSa68l6 cKBGu+LKb+1zWk76ommT7tsGROfENwfskzxJTpVEPV/5YWcjGaHn2uO3mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFt+TiwNEwbF7ymDftB1q+F0coDMB8GA1UdIwQY MBaAFHDMkkE2Zb1rDd5Rqaa1ZecsMh5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY015U1FUWmx2V3NOM2xHcHByVmw1eXd5SGxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82ZWY4MzItZDRhMy00NjE0LTgzZWIt YmExNzdjMTk3OTY1LzEvY015U1FUWmx2V3NOM2xHcHByVmw1eXd5SGxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC82ZWY4MzItZDRhMy00NjE0LTgzZWItYmExNzdjMTk3OTY1 LzEvY015U1FUWmx2V3NOM2xHcHByVmw1eXd5SGxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8EKFawq 7YWjSvSVPzcDUkFnqpSi4ba92pDnteQ8HReKOf1b0legpz6EO09IcnDtO0urjfcC aQ5m6hgzV6Z7hTn6efwtbOiW5N5Nn7u2jZ4wG5P+BRAr9I/h0bwE+2My07OIfjuh A3agUIInfbB2pa9P9pPyS4mN52qLsllR96RTtT/vCtekWpwgcZBPLjv2wILExe0W 7VhP2bTcrkVcfCzuihL4uPCRRAlIYLE3E94M6OF/2hRjl0BrYQujtTVew7NXQdmr b4DEd3WTLvDxtZYsTGzCmN+lAUKhP3fvrdQTz3qhNdg7a1omYpyObJBqIcBEH4do DCQ/sMJKpuKIyA== -----END CERTIFICATE-----Generated at Sun Jan 11 19:06:17 2026 by rpki-client