This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft File: 9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft (raw, json) Hash identifier: gDn6gqBrQOIX/xeEEGB7COuPnblLyuYXTpPeWyUMKdc= Subject key identifier: 57:C7:B5:55:17:63:6D:8A:09:E4:41:28:13:E2:FA:F1:BC:90:3E:BC Authority key identifier: F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4 Certificate issuer: /CN=f6413486886b56231dec573fad4f8ab32cbf92a4 Certificate serial: 019B7835AF78040C2F28AE0C5A043471A5F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft Manifest number: 12FC Signing time: Thu 01 Jan 2026 06:19:02 +0000 Manifest this update: Thu 01 Jan 2026 06:19:02 +0000 Manifest next update: Fri 02 Jan 2026 06:19:02 +0000 Files and hashes: 1: 9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl (hash: fSvV3eiHQngq1QNqxCrWkLd72l+CcGKH8cestFvEwws=) 2: F5y9ZOsLF94osiTAvUu_ZpYquTw.roa (hash: XwqPFonWgi2NEgeq0iK4xwmr9JNoIB6OncnPE0wX2yA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 06:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:af:78:04:0c:2f:28:ae:0c:5a:04:34:71:a5:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6413486886b56231dec573fad4f8ab32cbf92a4 Validity Not Before: Jan 1 06:19:02 2026 GMT Not After : Jan 2 06:19:02 2026 GMT Subject: CN=57c7b55517636d8a09e4412813e2faf1bc903ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:63:ba:b8:7b:5f:2f:60:93:8a:5f:a3:5b:a6: 92:02:54:13:8f:5a:19:28:72:d3:55:fd:bc:3c:b7: 93:35:97:3a:37:8a:50:a7:ca:15:ef:13:22:de:23: 0d:4b:1f:a0:d7:2b:88:62:40:1e:28:96:0a:0d:b6: 46:8c:ef:53:b4:37:87:c3:15:b2:89:1d:16:04:1e: 6a:a1:a7:d2:a5:09:d7:dc:9f:10:a2:ad:ad:84:a8: 99:3c:05:02:dc:64:b1:30:f5:ad:25:71:42:65:22: 39:78:90:9b:60:ad:1e:e1:ba:62:2e:a1:ef:d1:3d: ba:15:92:ef:20:c9:01:26:c2:8f:64:86:3b:9a:94: c4:83:b9:57:be:d8:41:5d:5a:f8:2e:a0:49:d1:bb: 81:81:52:f6:c0:fc:ab:a9:bb:85:01:7e:25:04:0f: e9:17:9f:6b:60:f1:db:45:96:98:6d:a0:12:aa:bc: 6f:f6:9b:b2:2a:51:6c:4f:ce:25:f7:a3:88:72:c7: d5:4c:0d:38:47:54:be:0f:18:13:ed:52:19:e7:fb: 67:ce:53:8f:34:20:4e:12:e0:0c:7d:ae:4e:38:f7: 2b:01:3b:7e:ca:cf:81:46:49:e8:51:d2:1c:2d:46: 37:39:e3:81:35:e4:d3:da:07:8e:ff:7a:f4:3f:18: 69:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C7:B5:55:17:63:6D:8A:09:E4:41:28:13:E2:FA:F1:BC:90:3E:BC X509v3 Authority Key Identifier: keyid:F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:35:cb:f4:b6:8d:b2:68:51:49:3e:e3:ff:c9:e9:07:e2:85: e7:7b:65:db:ee:e1:b9:64:db:86:75:9a:19:bc:ad:b6:17:ac: 63:38:09:2c:00:8f:ce:d1:de:ea:00:f3:03:62:23:60:21:7d: 55:49:91:52:8a:c9:f7:14:0e:3c:de:dd:1f:45:3a:c4:90:da: 84:74:70:2c:28:5a:48:e7:98:e6:b0:d5:1d:e6:ed:2b:96:cb: 14:03:39:4b:78:58:86:49:53:67:f0:f8:24:bc:e9:0b:e3:52: f9:fd:23:c6:fc:22:94:1f:f1:77:1a:7a:ee:c9:3d:c2:ef:81: 54:46:3f:9a:9d:f2:3a:03:93:59:a9:22:bf:3a:50:0e:8c:65: bd:53:e5:35:22:8c:b1:fb:0f:d9:b4:43:97:d8:52:9d:99:59: b0:bd:ec:9a:fd:96:bd:7b:6c:bc:b7:82:cf:82:15:79:71:58: d3:2f:20:e6:d0:a7:2f:89:20:6f:ac:ed:21:f8:c7:4f:84:fe: 22:27:29:b5:02:45:1b:c0:91:b8:cf:ad:40:36:5c:db:aa:09: 13:2d:97:83:8f:07:54:bf:19:ee:ec:89:f2:e2:6f:7f:06:f2: a4:8a:00:7a:2a:dc:2a:45:9c:ab:8d:82:3e:61:c9:1f:69:80: d8:ff:a8:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4Na94BAwvKK4MWgQ0caX0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NDEzNDg2ODg2YjU2MjMxZGVjNTczZmFkNGY4YWIzMmNi ZjkyYTQwHhcNMjYwMTAxMDYxOTAyWhcNMjYwMTAyMDYxOTAyWjAzMTEwLwYDVQQD Eyg1N2M3YjU1NTE3NjM2ZDhhMDllNDQxMjgxM2UyZmFmMWJjOTAzZWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGO6uHtfL2CTil+jW6aSAlQTj1oZ KHLTVf28PLeTNZc6N4pQp8oV7xMi3iMNSx+g1yuIYkAeKJYKDbZGjO9TtDeHwxWy iR0WBB5qoafSpQnX3J8Qoq2thKiZPAUC3GSxMPWtJXFCZSI5eJCbYK0e4bpiLqHv 0T26FZLvIMkBJsKPZIY7mpTEg7lXvthBXVr4LqBJ0buBgVL2wPyrqbuFAX4lBA/p F59rYPHbRZaYbaASqrxv9puyKlFsT84l96OIcsfVTA04R1S+DxgT7VIZ5/tnzlOP NCBOEuAMfa5OOPcrATt+ys+BRknoUdIcLUY3OeOBNeTT2geO/3r0PxhpiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfHtVUXY22KCeRBKBPi+vG8kD68MB8GA1UdIwQY MBaAFPZBNIaIa1YjHexXP61PirMsv5KkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWtFMGhvaHJWaU1kN0ZjX3JVLUtzeXlfa3FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8yYjU4N2YtMzVlNC00YmJjLWJjZDAt OTllZWY2OTA1ZDgzLzEvOWtFMGhvaHJWaU1kN0ZjX3JVLUtzeXlfa3FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8yYjU4N2YtMzVlNC00YmJjLWJjZDAtOTllZWY2OTA1ZDgz LzEvOWtFMGhvaHJWaU1kN0ZjX3JVLUtzeXlfa3FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjXL9LaN smhRST7j/8npB+KF53tl2+7huWTbhnWaGbytthesYzgJLACPztHe6gDzA2IjYCF9 VUmRUorJ9xQOPN7dH0U6xJDahHRwLChaSOeY5rDVHebtK5bLFAM5S3hYhklTZ/D4 JLzpC+NS+f0jxvwilB/xdxp67sk9wu+BVEY/mp3yOgOTWakivzpQDoxlvVPlNSKM sfsP2bRDl9hSnZlZsL3smv2WvXtsvLeCz4IVeXFY0y8g5tCnL4kgb6ztIfjHT4T+ IicptQJFG8CRuM+tQDZc26oJEy2Xg48HVL8Z7uyJ8uJvfwbypIoAeircKkWcq42C PmHJH2mA2P+oMg== -----END CERTIFICATE-----Generated at Thu Jan 1 11:04:05 2026 by rpki-client